last executing test programs: 11m17.408376065s ago: executing program 32 (id=393): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x8, 0xff, 0x0, 0x0, 0x2, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10832, 0x2, 0x2, 0x5, 0xfffffefffdf7bbfe, 0x1, 0x5, 0x0, 0xfffffffe, 0x0, 0x7c00}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@abort}]}, 0xf7, 0x491, &(0x7f00000005c0)="$eJzs3MtvVNUfAPDvnba8of3xQxQEHUUj8dHSgsrChRpNXGhiogtc1rYgMlBDayKk0WoMLg2Je+PSxL/AnRsjLoyJW01cGhKijQnFVc190WE6A21pO7bz+STTOec+5pzvvffMPfee3gmgY1XTP0nEjoj4NSJ68+ytC1Tzt9mZqZEbM1MjSczNvfFnki13fWZqpFy0XG97kTlciah8msTzycJyJy5cPDNcq42dz3JXtkScfW9g4sLFp06fHT41dmrs3NDx48eODj77zNDTKxJnGtf1/R+OH9j3yluXXxs5cfntK9+k1dp7MJ9fH8cd3WgSUBPVdKv9NZdpnPfoEuq+HuysSyfdbawIS9IVEenu6snaf290xfzO642XP2lr5YBVlZ6bNreePT0HbGBJtLsGQHuUJ/r0+rd8rVHX4z/h2gsRm4r07MzUyOzN+LujUkzvWcXyqxFxYvqfL9NXLPU+BADAMmR9myeb9f8qsTd7z8c6dhVjKH0R8b+I2B0R/4+IPRFxT0S27L0RcV++8lzvIsuvNuQX9n8qV5vWeYWk/b/n6vp+s3XxF299XUVuZxZ/T3LydG3sSLFNDkfP5jQ/eJsyvnvpl89bzavv/6WvtPyyL1hU4Gp3ww260eHJ4ZXaCNc+jtjf3Sz+5OZIQHoE7IuI/Uv76F1l4vTjXx9otdCd428uOypXYJxp7quIx/L9Px0N8deXNTDZcnxyYEvUxo4MlEfFQj/+fOn1VuUvN/6Vku7/bbce/w1L9P6d5OO1PVGrjZ2fWHoZl377rOU1zXKP/03Jm9mY9U/v5NM+GJ6cPD8YsSl5NcuX13TZ9KH5dct8uXwa/+FDzdv/7mKdNP77IyI9iA9GxAMR8WBR94ci4uGIOHSb+H948ZF3bxN/Ekm1rft/tOn3383jvy+pH69fRqLrzPffthoxX9z+PxbT2XdtLvv+u4PFVvAuNx8AAACsC5WI2BFJpT9PV3dEpdLfn/8P/57YVqmNT0w+cXL8/XOj+TMCfdFTKe909dbdDx1MpotPzPNDxb3icv7R4r7xF11bs3z/yHhttM2xQ6fbfmv7j7L9p/7oanftgFXneS3oXI3tv9KmegBrbzHnf9cCsDE1af9b21EPYO25/ofO1az9f9SQ1/+HjWlh+/+9yU/WARuR/j90riW3f3cHYcNw/oeOdDfP9S8/UT4ssPzP2bLoJ/w7JVH+4sVqlrU15qdEpe0hd1AibTFrW+j8b6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsZ/8GAAD//3GU5zM=") r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x100, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x5}, 0x0, 0x80000002, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f00000002c0)={0x1, 0x3, 0xfffffffffffffffc}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000008c0)="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", 0xfc) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8004, 0x4, 'lblcr\x00', 0x0, 0x2, 0x71}, 0x2c) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f0000000100)={0xffffffffffff8000, 0x1}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x4}], 0x1, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r8) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000030000000000000000400024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2, 0x12, 0x7, 0x9, 0x2, 0x0, 0x70bd2d, 0x25dfdbfb}, 0x10}}, 0x30004000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x4840) 10m29.25597555s ago: executing program 33 (id=632): io_setup(0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_read_part_table(0x1059, &(0x7f0000001080)="$eJzsz7ENwjAQBdCLIchSitAwBR0FTEJNT8kEaaiZgZa1WAMpyJGBCRBCeq/w2SfbXxf8VJPjeJgt6mmIbqq5qY1lWVJcTt22jSaijzT1x/5Rb6Q2Itf9/P3t7rpZl3ovEZ+0IXKcVzG+3u5v35wNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7FMwAA//8JWQoz") bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b}, 0x6}], 0x1, 0x1822b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x80, 0x0, 0x0) io_setup(0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) syz_read_part_table(0x1059, &(0x7f0000001080)="$eJzsz7ENwjAQBdCLIchSitAwBR0FTEJNT8kEaaiZgZa1WAMpyJGBCRBCeq/w2SfbXxf8VJPjeJgt6mmIbqq5qY1lWVJcTt22jSaijzT1x/5Rb6Q2Itf9/P3t7rpZl3ovEZ+0IXKcVzG+3u5v35wNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7FMwAA//8JWQoz") (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) (async) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/59, 0x3b}, 0x6}], 0x1, 0x1822b, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x8, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x80, 0x0, 0x0) (async) 9m40.958147447s ago: executing program 34 (id=740): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0xdd) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd32da48d9e25ddd7aeb0008000100", @ANYRES32=r1, @ANYBLOB="44c02ec3f934832aa88e1d0066b51d124b9b32ade37b11dc9fbb89cf77e5c620d6ca1edd1811684bd4a6b248e81ba6375d1a11f5a9e7b6d9e4cf752f4e248dc1246be2a139e6fdb5152267e2225174c0c77534755bbde2c893bd59b2b55ced4c2b7c8670a2b0b1b77a159853bda27b9e4ddaab328a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmmsg(r4, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}], 0x1, 0x23, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)='5', 0x1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) fallocate(r5, 0x0, 0xa, 0x8ffff) open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) 8m55.722091617s ago: executing program 35 (id=938): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x8000, &(0x7f0000000500)="9ca3a0dc6c9938ebc4d9855fcae9b9210b39005c6c6655ce790fb25022c77fc9bf8674030dc68da4c2caad4d249ac9973a30be11624c08c044430d7bdb54e210d84b8ca5c41f94156d5fad2dca96d276d85b5540cfbb14de9d5dc3bfbf1d371df590da79ec704a0871d476bf63e79d648946d1e4674ce75df44d3eeba19945189232f90707bc833ca9e2f59786a7fbd366e2d49a568d6f9abe15ff318abd0fefd9dffb498e9ec2d603d6f5ab6357dd253ef9592376144d40d2072eda48c82d948ec9beb0a252756ac51e219ce772", 0xce, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="64b6f1a2170a35b91c7cb5be6d054b02d9f213f52579bad9c9f2fbf6a31585249d9871cf692a18c1ab5004583aea26eb7d80f37efe2f0ce5c861ad") shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae002000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@commit={'commit', 0x3d, 0x80000000}}]}, 0x0, 0x44d, &(0x7f0000000900)="$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") 7m55.600067649s ago: executing program 36 (id=1311): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="76f290dd654941ec0d5fb5d957b9a573c6842c188d4adf64c9ec327cdb79980a38bb5b3e397fcdf14c3ed8f2996049f0992891fb51086bb9e5675e564d0fe8d9c01a14f6fc83dd79d8ab7d8841e8e41fbf581c798daa23754e0c2c7f76f35a782b43a3fc30a16273be721a233e9362b63ed4813b88fe40e1a59d8fbc261afbb894d1fdd5c9b2d2d8ff5cc796066bddd7323e8a2fc408d46f4a6ffda7a76dd55736730f1abe3efc12b79732acbfb4cc730745e17c10bccbc185cccdc8273f817feeed5dede72445b83705cbd441016ac2290042088a1a3be538faed239131"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="100000000200000000b5b0b2374eff0000009c0000000000", @ANYBLOB="516acadaca8b3f21ca6c6e8d4f6023429e48d3a60db83cb5a4b34eb804e6482361142d293c5173ac68bc6f94101b8c351cbb23a08791750c31cbfa9fd3573d1c82f163aa3433bd3229ec112764880be07300f31d8c381588b42209ecca43f0fdd4b2396bbf8ed5b05b17a974f7575a5fb20b88e7dd810859ac2c79ddc7b11d64d39edde524a363c9a082c333512a1e9976d86113756b18e45d800ef62a45b865af2c104bd5d27374bad4700853c753237dc256afcf2c49bf93ae1637b80abf2a36975ed81b91bb2bed0ea925", @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x48000) socket$tipc(0x1e, 0x5, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) timer_create(0x0, 0x0, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x10}, 0xc) sendto$inet(r3, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000140)=ANY=[@ANYBLOB="e43f0201000f83000000000000000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', r5}, 0x94) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000b40)={&(0x7f0000000200), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/236, 0xec}, {&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/111, 0x6f}, {&(0x7f0000000800)=""/193, 0xc1}, {&(0x7f0000000900)=""/85, 0x55}], 0x5, &(0x7f0000000b00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x2102) io_setup(0x20, &(0x7f0000001140)=0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x7}, 0x8) io_submit(r8, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="fc", 0x7}]) open_by_handle_at(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r1], 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 7m1.679203992s ago: executing program 37 (id=1704): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000002c00000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000080000000000000000000000000000000000000000000000000000000010000000000000000000000003210000008"], 0x12c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 3m56.883758995s ago: executing program 38 (id=2973): r0 = socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14ce0, 0x0, 0x5, 0x3, 0x800000, 0x43, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2f, 0x0, @broadcast=0xac14140a, @local}}}}}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbff, {0x7}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000640), 0xc}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_read_part_table(0x637, &(0x7f0000000000)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$watch_queue(&(0x7f0000000680), 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFNL_MSG_ACCT_NEW(r2, 0x0, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8841}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) bind$unix(r0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(&(0x7f0000000240), 0xd8, 0x880c2) 3m5.52591549s ago: executing program 3 (id=3334): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") r4 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x48801}, 0x44800) shmctl$IPC_RMID(r4, 0x0) 3m0.6411222s ago: executing program 3 (id=3352): io_pgetevents(0x0, 0x0, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)={0x77359400}, 0x0) clock_settime(0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x10000, &(0x7f0000000140)=0x0) io_getevents(r0, 0x7fff, 0x3, &(0x7f0000000180)=[{}, {}, {}], 0x0) r1 = epoll_create(0x7) epoll_pwait(r1, &(0x7f0000000200)=[{}, {}], 0x2, 0x9, &(0x7f0000000240)={[0x8df]}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000540)=""/9, 0x9, 0x0, &(0x7f0000000580)=""/33, 0x21}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000840), 0x18100, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x1, 0x8}, 0xc) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000340)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000003c0)='syzkaller\x00', 0x1200000, 0xfe, &(0x7f0000000400)=""/254, 0x41100, 0x31, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0x0, &(0x7f00000008c0)=[r4, 0xffffffffffffffff, r5, r6, r7, r8, 0x1], 0x0, 0x10, 0x3}, 0x94) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f00000009c0)={0x65, 0xcfd1, 0x5, 0xc, 0x1, 0x81}) io_pgetevents(r0, 0x1, 0x6, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={[0x2]}, 0x8}) r10 = openat2(r5, &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x101000, 0x25, 0x28}, 0x18) fsconfig$FSCONFIG_SET_PATH_EMPTY(r10, 0x4, &(0x7f0000000bc0)='/\x00', &(0x7f0000000c00)='./file0\x00', r7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000c40)) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, &(0x7f0000000c80)) nanosleep(&(0x7f0000000cc0)={0x0, 0x3938700}, &(0x7f0000000d00)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000d80)={0x2, 0x80, 0x10, 0xb, 0x10, 0x6, 0x0, 0x10000, 0x8000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000d40), 0x6}, 0x121, 0x3, 0x6, 0x6, 0x6, 0x6a4b, 0x1, 0x0, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r4}, &(0x7f0000000e00), &(0x7f0000000e40)=r9}, 0x20) connect$l2tp6(r10, &(0x7f0000000ec0)={0xa, 0x0, 0x5, @empty, 0x8000, 0x1}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000f00)=r7, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r10, &(0x7f0000000f40)="79555ce9165572676103e06f646aad340b47e172842217393a24a6adc47e94e2576d4f4ec4606d2ca13774637fcb112e97f056afc02bbb0290b3e67466bf351952e5506fc36048d8d420d34a2002de834c1e1f4b5440ed6eb13487572c363829b61e75b6dbfe155d7bcc34e7e4fcfd6d5f5c976555726e7cdd88a1e9a0d47cf7d4d414c7922cbc311bc007b8636ca8167432b38e53c4d730b63fc479d3c27531860b2e90e8dc79e15cd3516d0e07bd3577bffd29ad9530eec46682a4ee82d8188b38b6a3cfe1a861dc909bb2d824392752176173ecdc7e354d7288aee494ebe97615bff703b9062b4cd774b2a8bed02d", &(0x7f0000001040)=""/191}, 0x20) rt_sigpending(&(0x7f0000001140), 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0406618, &(0x7f0000001180)={@desc={0x1, 0x0, @desc1}}) 2m56.424509544s ago: executing program 3 (id=3359): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000900)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@data_err_ignore}, {@dax_always, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@noauto_da_alloc}], [], 0x2c}, 0x85, 0x4e8, &(0x7f00000001c0)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0x2}) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000088) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xe1, &(0x7f00000004c0)={0x20, 0x3, 0x16, 0x2}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) dup3(r3, r1, 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) 2m56.239377098s ago: executing program 3 (id=3363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") creat(&(0x7f0000000040)='./file2\x00', 0x8) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000010472ad4e06331c392eaff0000000000", @ANYRES32=0x0, @ANYBLOB="d070040040000000240012800c0001006d6163766c616e001400028008000900000000000800010002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x8000) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) r4 = getpid() r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x2, 0x0, 0xe094, 0xb7d375beb1f4ba0d}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$setsig(0x4203, r4, 0xb, &(0x7f00000000c0)={0x12, 0x6, 0x1f}) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, 0x0, &(0x7f0000000080)) kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 2m54.635126314s ago: executing program 3 (id=3369): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x20, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) dup2(r7, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001400070010000800130008000300080012"], 0x44}}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000006b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc702000008000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m52.936610911s ago: executing program 3 (id=3378): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x201c448, &(0x7f0000000340)=ANY=[@ANYBLOB="6d61703d61636f726e2c757466382c73657373696f6e3d3078303030303030303030303030303030342c73657373696f6e3d3078303030303030303030303030303035362c6d61703d6e6f726d616c2c73657373696f6e3d3078303030303030303030303030303033642c756e686964652c6e6f726f636b2c626c6f636b3d30783030303030d7bdb083586e864130303030303030303430302c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303030312c7569643d", @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x0, 0xa80, &(0x7f0000002380)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0x1, 0x9, 0xb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=local:5-c']) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000640)='\xe2\xa5\xa09\xcck\tbS\x84\xc1\x80\xe4}\xa2q\xfb\xb0\b8K\x19\'\xd9\xf5\xe1\x90u\x92\xf3T\xca^\xc5!\x904h\xab\xb3C\xbbB\x87\xfd\x921`\x85\xff\xf0\x96\x17\xc67\xcd\x90\xbe\v\xa6\v\x1d\x9d\xb8\xfe\xff\xa0X\\\xe1A](\xab\\$\xe8?\xdb\x15\v\xe4\xcd\xac\x881\xaf\xf8\xba$)\xda\x18A\x83\xfb$7\xdbj\xa90xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1feff, 0x1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='mpol=local:5-c']) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000480)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000640)='\xe2\xa5\xa09\xcck\tbS\x84\xc1\x80\xe4}\xa2q\xfb\xb0\b8K\x19\'\xd9\xf5\xe1\x90u\x92\xf3T\xca^\xc5!\x904h\xab\xb3C\xbbB\x87\xfd\x921`\x85\xff\xf0\x96\x17\xc67\xcd\x90\xbe\v\xa6\v\x1d\x9d\xb8\xfe\xff\xa0X\\\xe1A](\xab\\$\xe8?\xdb\x15\v\xe4\xcd\xac\x881\xaf\xf8\xba$)\xda\x18A\x83\xfb$7\xdbj\xa90xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$eJzs3M1vG0UbAPDHmzj9fuO3lI+WFgIFUQlImvSDHrgUgcQBJCQ4tOJk0rQqdRvUBIlWFQQO5YgqcUfc+Qu4UC4IOCFxhTtCqlAvFE5Ga+8mTmI7cewkbfz7SdvOeMeZeXZ37PHM2gH0rZH0n0LE7oj4LSKG69nFBUbq/927e2Pyn7s3JgtRrb79V6FW7u+7NybzovnzdtUz1YE29d58N6JcqUxdzfJjs5c/GJu5dv3Fi5fLF6YuTF2ZOHXq+LFDQycnTnQdYxIRe9K2Hvh4+uD+18/eenPyzK33fvombe/urExjHL0yUj+6TT3b68o22Z7GzNzmtYPOpH10MCKKtf4/HAOxY37fcLz22aY2DlhX1WpS3dZ691wV2MLS0TzQj/I3+vTzb75t0NDjvnDndMzPY9zLtvqewdq8QWSfjdbLSEScmfv3q3SLdZqHAABodPt0RLzQbPyXxCMN5f6XrQ2VIuL/EbE3Ih6KiH0R8XBEreyjEfFYh/UvXSFZPv6pDq8psFVKx38vZ2tbi8d/+egvSgMNa0ilKBbOX6xMHc2OyZEobkvz423q+P7VX79ota9x/Jduaf35WDBrx5+DSybozpWL5W5ibnTn03orlsdfqK0LRLautz8iDnT4t7M1oaRdmZXjb2OwwwY1Uf064rn6+Z+LJfHnCi3XJ8dfOjlxYmx7VKaOjuVXxXI//3LzrVb1dxV/D9y5XY2dTa//+fhLhe0RM9euX6qt1850XsfN3z9v+Zlmbdf/bHmo8E4tPZQ99lF5dvbqeMRQ4Y3lj08sPDfP5+XT6//I4eb9f28sHInHI+JgRByKiCci4sms7U9FxNMRcbhN/D++8sz7ncffZla+h9L4z7U4/9kCfimNf+H8d54YuPTDt53Hn0vP//Fa6kj2SHr+V4prtQ3s8vABAADAAyGp3QNfSEbn00kyOlq/h39f7Ewq0zOzz5+f/vDKufq98qUoJvlM13DDfOh4Njec5yeW5I9l88ZfDuyo5UcnpyudzhUDvbWrRf9P/dHuCzzA1tCDdTTgAaX/Q//S/6F/6f/Qv/R/6F/N+v8nLUtvzI3JwMZY4f1/x0a1A9h4xv/Qv/R/6F/6P/Sllt+NT7r6yr/EJiW+G+rutxrSRGlVhSO5T0LeMoliNN01uOofs1hjYtvZ7MVg0a5NfmECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokf8CAAD//9OM3iE=") r4 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(0xffffffffffffffff, 0x5) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x48801}, 0x44800) shmctl$IPC_RMID(r4, 0x0) 2m18.901088001s ago: executing program 1 (id=3481): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4051) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x98, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xf1, 0x9a8e, 0xc9, 0x2, 0x5, 0x1, 0x4}}, {0xc, 0x2, [0x6, 0xc, 0x100, 0xcc3]}}, {{0x1c, 0x1, {0x81, 0x1, 0xdc, 0x10000, 0x2, 0x10000, 0x2, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x5, 0x40, 0x6, 0x1, 0x0, 0x84, 0x8, 0x1}}, {0x6, 0x2, [0xea26]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8441}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syslog(0x4, &(0x7f0000000840)=""/159, 0x9f) r1 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x4000010) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@private=0xa010100, @in=@multicast2, 0x4e21, 0x1, 0x4e23, 0xff00, 0xa, 0x80, 0x80}, {0x401, 0x5, 0x581e, 0x3, 0x2b12, 0x6, 0x8000000000000000, 0x1}, {0x3, 0x7, 0x5, 0x3}, 0x10000, 0x6e6bb4, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0xff}, 0xa, @in=@local, 0x0, 0x4, 0x1, 0x7, 0xd8, 0x8, 0x4}}, 0xe8) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500010000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e17c5ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 2m17.090853122s ago: executing program 1 (id=3492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x8, 0x1}, 0x40, 0x35, 0x6, 0x9, 0x9, 0x806, 0x400, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1, 0xffffffffffffffff, 0x4) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0xc, &(0x7f0000000540)=@ccm_128={{0x303}, "f340cceb37bafac8", "22968ddfe15c9a1b88d78d123f5c48e7", "c1a33d18", "271d734267d49519"}, 0x28) read$nci(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x70d8000, 0x2003) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$unix(0x1, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m14.937715499s ago: executing program 1 (id=3496): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x46b, &(0x7f0000001340)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, 0x0, 0x0) lseek(r0, 0x6, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r1], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="89fe3a06af02ffff", @ANYRES16=r4, @ANYBLOB="00012cbd700100800000340000000800b80000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x6008010}, 0x20000000) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xffffffffffffffe0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa3086dd6000000900383a00fe880000000000000000000000000101ff02000000000000000000000000000102009078000005dc608cb02b00092fff00000000000000000000000000000001fe8000000000000000000000000000aa2a6266"], 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x497, &(0x7f0000000d00)="$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") chdir(&(0x7f0000000140)='./file0\x00') link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m14.619345546s ago: executing program 1 (id=3503): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000019200)={'ip6tnl0\x00', {0x2, 0x0, @multicast2}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x963, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = io_uring_setup(0x18e5, 0x0) syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x9, 0x4c032, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000180)) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e28, 0x0, @mcast1}, 0x1, {[0x198e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) 2m13.284687296s ago: executing program 1 (id=3507): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40083, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8805, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0xc3, 0x0, 0x10bfe, 0xc08209d7a90684a1, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000e, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000300)) syz_usb_connect$uac3(0x0, 0x80, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b68090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e80418a7005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 2m13.276172616s ago: executing program 40 (id=3507): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40083, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8805, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0xc3, 0x0, 0x10bfe, 0xc08209d7a90684a1, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000e, 0xc3072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000300)) syz_usb_connect$uac3(0x0, 0x80, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x804) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 2m7.861623937s ago: executing program 0 (id=3533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x12}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000600)=0x5, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd700000dcfd250400000014000600766574683100"/34], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x2400c850) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000013c0)="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", 0x13c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="a0002883781ecc0ea91e039102b98cd84801a28fae667e93face963781ae0cf4cf6f378b7d8779e77cef49b6d31447ffe6d56e67b74396005e059b772222c152a6c3ae52843d1c7bab7d9109c0e7a8a4", 0x50}], 0x1}}], 0x1, 0x0) 2m6.951525107s ago: executing program 0 (id=3541): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000077911b800000000001801000020646c2500000000002020207b18f8ff0000000079a100000000000007010000f8ffffffb702000008000000b703000007000000850000002ffdff009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x59) 2m6.457053528s ago: executing program 0 (id=3542): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c00000000ffffff8000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa00000000"], 0xfc}}, 0x0) 2m6.426968669s ago: executing program 0 (id=3545): r0 = socket$nl_route(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1b0, 0x1b0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0xff], [0xff000000], 'macsec0\x00', 'wg0\x00', {}, {0xff}, 0x133, 0x0, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x5}, {0xffffffffffffffff, 0x4, 0x4}, {0x0, 0x4, 0x4}, 0x5, 0x3c1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async, rerun: 32) r2 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) (rerun: 32) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000100)=0x10) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00') sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fcdbdf2700000000", @ANYRES32=0x0, @ANYBLOB="fa0a05f70108000e7f000000703665727300160002000000040012000600180001000000000000000000000000006d4ec0f800b56fdc6e9886727fee227c6c75f069cbc56d5ebbe57694fc0cd11da2158212"], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x804) 2m6.004473639s ago: executing program 0 (id=3548): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") r0 = creat(&(0x7f0000000040)='./file2\x00', 0x8) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "9f2b"}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x72, 0x2, {0x800, 0x42b, 0x4, 0x10000}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x440, 0xa4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x0) 2m5.396329643s ago: executing program 0 (id=3551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") r4 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(r6, 0x5) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x48801}, 0x44800) shmctl$IPC_RMID(r4, 0x0) 2m5.329780794s ago: executing program 41 (id=3551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") r4 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f00000000c0)={0x1f, @none}, 0x8) listen(r6, 0x5) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_newvlan={0x18, 0x70, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0x48801}, 0x44800) shmctl$IPC_RMID(r4, 0x0) 1m55.052511853s ago: executing program 5 (id=3574): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000033000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1m54.680704461s ago: executing program 5 (id=3575): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x678a, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x6000000) 1m54.541485834s ago: executing program 5 (id=3576): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000300)="d2ff03076003008c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) capset(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000009c0)={0x0}, 0x1, 0x0, 0x0, 0x200444c1}, 0x200000c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f000085d000/0x2000)=nil, 0x2000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x200080c5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0xd00) 1m53.82462853s ago: executing program 5 (id=3578): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000080)='./file0/../file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0/file0\x00') perf_event_open(0x0, r1, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x497, &(0x7f0000000d00)="$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") chdir(&(0x7f0000000140)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a17d50100000000000000020000000900020073797a32000000000900010073797a30000000000c000340000000000000000220000000080a9fcb090e20aadf290000020000000900010073797a300000000014000000110001"], 0x80}}, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m53.726252072s ago: executing program 5 (id=3579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x8, 0x1}, 0x40, 0x35, 0x6, 0x9, 0x9, 0x806, 0x400, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1, 0xffffffffffffffff, 0x4) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x7, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0xc, &(0x7f0000000540)=@ccm_128={{0x303}, "f340cceb37bafac8", "22968ddfe15c9a1b88d78d123f5c48e7", "c1a33d18", "271d734267d49519"}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x70d8000, 0x2003) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$unix(0x1, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m51.244750818s ago: executing program 5 (id=3592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r2, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRES64=r0, @ANYRESHEX=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x2, 0x294, [0x2000000002c0, 0x0, 0x0, 0x2000000002f0, 0x200000000320], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x1, 0x888e, 'ipvlan0\x00', 'veth0_to_batadv\x00', 'gretap0\x00', 'veth1_virt_wifi\x00', @random="1d069b633070", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff], 0x9e, 0xee, 0x126, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x19eb, 0x1}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x9, {0x40}}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x5, 0x29, 0x10, 'dummy0\x00', 'ip6tnl0\x00', 'pim6reg0\x00', 'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff, 0xff], @multicast, [0x5e756eeed39b8064, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}]}, 0x30c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0004}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1000, 0x53}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "061847e2bca090cd1d3aca96ecb74b41"}, @NL80211_ATTR_PMKID={0x14, 0x55, "982e8cef832a8e55f5dea5953d239a64"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004880}, 0x20044040) 1m51.076943402s ago: executing program 42 (id=3592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r2, 0x917, 0x70bd28, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRES64=r0, @ANYRESHEX=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r3, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x2, 0x294, [0x2000000002c0, 0x0, 0x0, 0x2000000002f0, 0x200000000320], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x3, 0x1, 0x888e, 'ipvlan0\x00', 'veth0_to_batadv\x00', 'gretap0\x00', 'veth1_virt_wifi\x00', @random="1d069b633070", [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff], 0x9e, 0xee, 0x126, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x19eb, 0x1}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x9, {0x40}}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0x5, 0x29, 0x10, 'dummy0\x00', 'ip6tnl0\x00', 'pim6reg0\x00', 'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff, 0xff], @multicast, [0x5e756eeed39b8064, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}]}, 0x30c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0004}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1000, 0x53}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "061847e2bca090cd1d3aca96ecb74b41"}, @NL80211_ATTR_PMKID={0x14, 0x55, "982e8cef832a8e55f5dea5953d239a64"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004880}, 0x20044040) 51.164068079s ago: executing program 6 (id=4014): unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd600000000000069300000c00018008000100", @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002a0000000e0001006e657464657673696d0000000f0002006e5b7464657673696d3000009b7c62d7cf3869c198026d46dd676c6a21e001f7851000757046cd0362b876858b81c74b8e313221"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r5, &(0x7f0000000700), &(0x7f0000000080)=@udp=r6, 0x1}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x7, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, {0x12, 0x0, 0x0, @multicast2=0xe0000001}}}}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) 50.931374174s ago: executing program 6 (id=4018): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000400)={[{@block_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x569, &(0x7f0000000940)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x107ff, r1}, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff80000000, 0x1000}, 0x100009, 0x0, 0x983, 0x7, 0xbe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff80000000, 0x1000}, 0x100009, 0x0, 0x983, 0x7, 0xbe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', r2, 0x10, 0x10, 0x6, 0x1e, {{0x10, 0x4, 0x1, 0x2, 0x40, 0x67, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0x10, "738197f5d845e4cac0cc6215399e"}, @lsrr={0x83, 0x17, 0x14, [@multicast1, @multicast1, @local, @local, @loopback]}, @timestamp={0x44, 0x4, 0x33, 0x0, 0x2}]}}}}}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mq_unlink(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x43, 0x65) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) (async) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r5 = socket(0x23, 0x80805, 0x0) mlock2(&(0x7f0000751000/0x3000)=nil, 0x3000, 0x0) munlockall() (async) munlockall() listen(r5, 0x0) (async) listen(r5, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r6, 0x0, 0x0, 0x841) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xfffffffffffffffd, 0x1000) (async) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xfffffffffffffffd, 0x1000) sendmsg$kcm(r0, 0x0, 0x0) 50.051118883s ago: executing program 6 (id=4024): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0xaa, 0x100000000}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x4, 0x0, 0x80000001, 0x6a024, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200, 0x200000000001ff}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000300), 0x0, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001040)={r0, 0x20, &(0x7f0000001000)={&(0x7f0000000f00)=""/82, 0x52, 0x0, &(0x7f0000000f80)=""/122, 0x7a}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x80}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x5, 0x1a, 0x0, 0x0, 0xa8a, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x3, 0x1, 0x54, 0x7}, 0x10, r1, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001080)=[{0x4, 0x4, 0x8, 0x2}, {0x3, 0x4, 0xe, 0x5}], 0x10, 0xe5d}, 0x94) fallocate(0xffffffffffffffff, 0x11, 0x100000007fc, 0x8000a000) lremovexattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='user.incfs.id\x00') syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2e6, &(0x7f0000000780)="$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") openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x39, &(0x7f0000000500)=""/57, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000480)) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000000000000791028000000000069003600000010009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 49.279736731s ago: executing program 6 (id=4031): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@sysvgroups}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@block_validity}]}, 0x1, 0x5d4, &(0x7f00000015c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='3', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) openat$incfs(r5, &(0x7f0000000240)='.log\x00', 0x2100, 0x3) stat(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r6, &(0x7f0000000180)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x100) setreuid(0xee01, 0xee01) fcntl$setlease(r7, 0x400, 0x2) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) statx(0xffffffffffffffff, 0x0, 0x100, 0x100, 0x0) socket$packet(0x11, 0x3, 0x300) 48.478243128s ago: executing program 6 (id=4040): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000008700)=ANY=[], 0x3, 0x5b2, &(0x7f0000008d40)="$eJzs3U9vG8cZx/HfKlQks4BbtIURGLIzsVtALhRmScUy1Jy2y6E0CckldleJdQqMmAoEU2lgtUCtS+tL2gLti8i1916L3nvt2wiaU9Ebi12SEiX+sy3ZlI3vh7B3NPvszOyS4KMVubMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADywqrvlz3VXXPnvpksrMZRY7RaBalX6LtzajGlX8nL/ml5We/0qt756cnqa9l/t7TS+2lFy9liWUc/uPajj35SWBhsP2XAr8Thk6NHDzqd9uN5D2ROtmzTJZFrBFvWuCQym1ckbdcSU3N1m+wmqW2YMLZBGsVmNbxjypub68aWdqOd5lY1qNtB5b33K76/YT4utWwQJ1Hzg49LSbjt6nXX3MpjstVZzL3shfiJS01qg4Yxe/ud9vqsQWZB5WcJqswKqviVSrlcqZQ37m7evef7hZEK/4Qn3/c1EjH/Fy3m64LfwYEXt9DP/6rLFQaVZswjVFWxIjXGrh3J/z//wE7tdzj/51m+q5Xs94But9uVdF15/r/ZC745Kf9PGMuUx+Kk/Xuux9uDNg71REd6pAfqqKO2Hp/ErF1IT5f8sSWrppwSRXJqKMhrTL/GaFMb2pCvz7WtmhIZ1eRUl1WiXSVKZfNXVKhYSwqUKlIso1WFuiOjsrpLm1qXkVVJu4q0o6a2VFWQt7Kn/fy4r08ZYxa0lAWVpwR9NnhhVqYEPVf+zw1v8i/yP8j/uEy6g/x/1lvzGA0AAAAAAHgZvPyv79n5/6JuSIueaq5u/XkPCwAAAAAAXKD8k/+VbJF/M+6GPM7/AQAAAAB403j5NXaepKLe7ZUG11T1/wjQ/eG8xwgAAAAAAM4n//z/ZrYoZqV35Z09/wcAAAAAAK+7P02aY/+fUrc/LeCS94//KI4Xvaet+z/zDoKsLjjoTxA4Mk9gWrvuXe03ki82Cv2fQrvi9We/PJ4E87v+Ym/WXP9eNoArks4xAP1F7/Vi3nvYWz4crOn1Uqy5ui2FUf2jsoLg6kJq76e//Wr/d8p3/8/NxlXv+739Trv0xa87D/OD8TRr5elB/0iNzKM4ZSy/0Y1ezI3xe7yYX4jR77foKevXH34CFnqbL0zsUzrb5ze61Yu5VTwOH97/5azPcmnS3vdGsSTpXHv+jW73Ym6v3u4tTj8Ly7XBPk0ZRbsyfPxnHosXGYWr2/Vpx2Jpv9NeP+coAGBe9qZnodxbpxP/C7zLPVt2P+evFypotRezej1/Yy1cH/OO7s/Ibv0cezq7LR93XxiMovv7CaP428g9kI6yVsbk2Kzfvx73W877/Tbb4NuJWTWpVzwtf/3fbvfga107fHL0/v7Bgy/bX7a/qlTWN/wPff9uRYv5bvQX5B4AwBiz77EzM8L7cMZZ9Y+Pv1JQ0hfS/7rdh1rLrzbIv3EwttVivs33+dcQ1s6etRbPnLUft1/W2oyzupPYynPErr+CZwIAgFfn1ow8PDn/e4O7+HlrM867i0NfKVwbPjt+OytMzuUAAODlsPF3XjH9oxfHrvV5eXOzHKTb1sRR+ImJXXXLGtdMbRxuB80ta1pxlEZhVM8Kn7qqTUyy02pFcWpqUWxaUeLu53d+N/1bvye2ETRTFyatug0Sa8KomQZhaqouCU1r51d1l2zbON84adnQ1VwYpC5qmiTaiUNbMiaxdijQVW0zdTWXFZumFbtGEO+aT6P6TsOaqk3C2LXSqNfgoC/XrEVxI2+2NO+DDQDAJXH45OjRg06n/fhQC1Kn0/YKxzUXVZj3PgIAgNPI0gAAAAAAAAAAAAAAAAAAAAAAXH4XdpHfG1VYehktf6bztfOLX45bdUXS9M3/XZSGa7rdZ+104TI8F6cKg0mnp8T8fcwqSX+Y/+Bfr8K4d4uR+agBvMb+HwAA//9nZFB8") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}], 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f0000000407000003000000040200000002000000020000f5ffffff030000000000000061"], &(0x7f0000001f80)=""/4110, 0x45, 0x100e, 0x9, 0x3}, 0x28) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000000c0)={r4}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x8, 0xa4580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7, 0xb}, 0x10ece9, 0x401, 0x0, 0x5, 0x6, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000021020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f00000001c0)=""/73, &(0x7f0000000280)=0x49) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) 48.062095488s ago: executing program 6 (id=4041): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e64000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="12030000000004000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}}, 0x884) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 48.056991448s ago: executing program 43 (id=4041): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x5}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc080) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x4, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x400}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x488c5}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e64000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r5, @ANYBLOB="12030000000004000a000100aaaaaaaaaabb0000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}}, 0x884) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 4.848230472s ago: executing program 4 (id=4346): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4051) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newqdisc={0x98, 0x24, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xc}, {0x5}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0xf1, 0x9a8e, 0xc9, 0x2, 0x5, 0x1, 0x4}}, {0xc, 0x2, [0x6, 0xc, 0x100, 0xcc3]}}, {{0x1c, 0x1, {0x81, 0x1, 0xdc, 0x10000, 0x2, 0x10000, 0x2, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x5, 0x40, 0x6, 0x1, 0x0, 0x84, 0x8, 0x1}}, {0x6, 0x2, [0xea26]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8441}, 0x840) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syslog(0x4, &(0x7f0000000840)=""/159, 0x9f) r0 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x4000010) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@private=0xa010100, @in=@multicast2, 0x4e21, 0x1, 0x4e23, 0xff00, 0xa, 0x80, 0x80}, {0x401, 0x5, 0x581e, 0x3, 0x2b12, 0x6, 0x8000000000000000, 0x1}, {0x3, 0x7, 0x5, 0x3}, 0x10000, 0x6e6bb4, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0xff}, 0xa, @in=@local, 0x0, 0x4, 0x1, 0x7, 0xd8, 0x8, 0x4}}, 0xe8) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000240)={0x5, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 4.812751283s ago: executing program 4 (id=4347): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201e, 0xc0000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x14, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404003000ffffffd404000040000000b7040000100000206a07f0ff00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5f18b10cce8de3369300000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) 4.778270964s ago: executing program 4 (id=4348): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_setup(0x7416, &(0x7f0000000780)={0x0, 0x3b3, 0x800, 0x3, 0x131}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x94, 0x0, 0x0, 0x40000000}, {0x0, 0x0, 0x0, 0xffffffe4}, {0x3, 0x7}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) 4.664613256s ago: executing program 4 (id=4349): syz_clone3(&(0x7f0000001e80)={0x1e6102400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x4e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xbb, 0x6, 0x40, @loopback, @private2, 0x1, 0x10, 0x7}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x0, 0x4, 0xb, 0x9, 0x10, 0x10}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0xbc}, @generic={0x0, 0xc, 0x2, 0x7, 0x9}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xce, &(0x7f0000000280)=""/206, 0x41100, 0x4, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000480)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[r6], &(0x7f00000005c0)=[{0x3, 0x3, 0x3, 0x9}, {0x3, 0x3, 0x10, 0x1}, {0x4, 0x4, 0x7, 0x5}, {0x0, 0x5, 0x0, 0x4}, {0x1, 0x3, 0x10, 0x2}, {0x3, 0x5, 0xf, 0xc}, {0x0, 0x2, 0x5, 0xc}, {0x3, 0x1, 0x8, 0xa}, {0x3, 0x3, 0xe}], 0x10, 0x4}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x78, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r7, 0x1, 0x10}, 0xc) 4.298899734s ago: executing program 4 (id=4353): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000019200)={'ip6tnl0\x00', {0x2, 0x0, @multicast2}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x963, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = io_uring_setup(0x18e5, 0x0) syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x800000, 0x9, 0x4c032, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r8, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000180)) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e28, 0x0, @mcast1}, 0x1, {[0x198e000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) 3.698102037s ago: executing program 8 (id=4356): epoll_create(0x200) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000040)={r0, 0x3, 0x1000, 0x2, 0xa876}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000180)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000240)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r2, 0x102, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4800) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r9, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x98}, 0x20040010) clock_adjtime(0x2, &(0x7f0000000540)={0x3, 0x5, 0x8, 0x714, 0x8, 0xffffffffffffffff, 0x3, 0x5, 0xffffffffffff8000, 0x3, 0x4, 0xfffffffffffffffd, 0x5, 0x8, 0x23, 0x2, 0xfff, 0x4, 0x9, 0x8, 0x1, 0x4d, 0x100000000000000, 0x9, 0x8000, 0x6}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x40) r12 = openat(r0, &(0x7f0000000780)='./file0\x00', 0x80800, 0x50) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x78, r13, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:ifconfig_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dmesg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}]}, 0x78}, 0x1, 0x0, 0x0, 0x4050}, 0x1) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000980), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r14, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44881}, 0x0) ioctl$FS_IOC_FIEMAP(r12, 0xc020660b, &(0x7f0000000ac0)={0x5, 0x6, 0x2, 0x8000, 0x3, 0x0, [{0x5, 0xfff, 0xb, '\x00', 0x1802}, {0x2, 0x10000, 0x53b}, {0x4, 0x4, 0x3ff, '\x00', 0x2205}]}) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), r15) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r16, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x48050) 3.272519837s ago: executing program 9 (id=4358): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4051) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syslog(0x4, &(0x7f0000000840)=""/159, 0x9f) r1 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x4000010) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@private=0xa010100, @in=@multicast2, 0x4e21, 0x1, 0x4e23, 0xff00, 0xa, 0x80, 0x80}, {0x401, 0x5, 0x581e, 0x3, 0x2b12, 0x6, 0x8000000000000000, 0x1}, {0x3, 0x7, 0x5, 0x3}, 0x10000, 0x6e6bb4, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0xff}, 0xa, @in=@local, 0x0, 0x4, 0x1, 0x7, 0xd8, 0x8, 0x4}}, 0xe8) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000240)={0x5, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 3.272202247s ago: executing program 8 (id=4359): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42402) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1340}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b14c272be0d18cc5027479fb98ca900000007007e91ee519a732a8707f00be495b8959f39a50e8b794452eeafd2039228f606528b5d17b528e832cccca7d1855f8f47e3ce5a1ed28458be9e7f9000e660c308b99ee431d119931688a1ff014d4ba664c46a0c1e07e7f92cae4539f8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/167}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000400)={{r1}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%ps \x00'}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24040044) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020040090900010073797a30000000001400000002020000000000000000000000000005140000001100010000000000000000000700000a"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x2000c084}, 0x48090) r3 = io_uring_setup(0x520, &(0x7f0000000040)={0x0, 0x5889, 0x800, 0x1000a, 0x34e}) io_uring_enter(r3, 0x221c, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff0000000085000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4a295f9", @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffff9c, 0x0, 0xc00, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r5, 0x89e0, &(0x7f0000000200)={'wlan1\x00', 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) socket$packet(0x11, 0x2, 0x300) 3.14981103s ago: executing program 9 (id=4362): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000000000000000000000000000000000000000000ff80000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 3.092533661s ago: executing program 8 (id=4363): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x29081e, &(0x7f0000000100), 0x0, 0x500, &(0x7f0000000ac0)="$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") r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000340)='./file0\x00', 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2e, 0x10, 0xfe, 0x0, 0x0, 0x7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f00000003c0), 0x3}, 0x10ecc8, 0x1222, 0x99c5, 0x3, 0x4000000000008, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'veth1\x00', 0x800}) r1 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='batadv0\x00') socket(0x15, 0x5, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x20400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000300)=0x3, 0x4) fcntl$setlease(r0, 0x400, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x628, 0x488, 0x290, 0x488, 0x0, 0x0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x168, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x400, 0x5}}, @common=@srh1={{0x90}, {0x6, 0x81, 0x3, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, [0xffffff, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffff00, 0xff, 0xffffff00], 0x800, 0x2041}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0xa, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r5 = semget$private(0x0, 0x5, 0x0) semop(r5, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = dup2(r7, r6) connect$inet(r8, &(0x7f0000000000)={0x27, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x4) semop(r5, &(0x7f00000000c0)=[{0x0, 0x8}], 0x1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x7fff, 0x2, 0x3, 0x7, 0x0, 0x6, 0x20000001002, 0xf67, 0xfffffffe}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20080, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 3.055745322s ago: executing program 9 (id=4364): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1b, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 3.018197653s ago: executing program 2 (id=4365): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@nobarrier}, {@dioread_lock}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@nolazytime}, {@sysvgroups}, {@lazytime}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x9642}}, {@bh}, {@init_itable_val={'init_itable', 0x3d, 0x81}}]}, 0xfc, 0x585, &(0x7f0000001e00)="$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") bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300021100000027bd7000000000000200080008000000a30000000000000005000600000000000a0000fdff000000fc020000000000000000000000000000000000000000000002000100000004d4070003000000004005000500003000000a00000000000000fe80000000000000000000000009000000000000000000000100"], 0x88}, 0x1, 0x7}, 0x0) 2.932722275s ago: executing program 2 (id=4366): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d0000000000050001000400"], 0x4c}}, 0x0) (fail_nth: 10) 2.932332465s ago: executing program 9 (id=4367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x12}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000600)=0x5, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd700000dcfd250400000014000600766574683100"/34], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x2400c850) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000001500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:power_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x20, &(0x7f00000013c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d4240000000000000029000000050000003e51dc07d2acfb9bbe8d7be07f71a22a260e35b77a9df91db1ff463b6e99f2c7545a7f353ebb1bd1a60f99572d7c23d1fed59f743d27c4609f0b76a7c06eb2ce83e455d2f52b5a794ccc13cea9694fd3df6348bae506cbe4f2fdead7582f4c4114f73ee8999a472a42d954b66b0ba0caf9d43b4101e19e84f80ac1942e2a30afc1f6f8e815f4f151e033cc10785184fdb1b328be55c7ad94b5c1af538a51f86022475416d7b78d2685c6a483338ab571833a9d7df1c46fa2d2c0a9459835ca8258a3a68585f3d02fec298617a469cb5b8bd7474b90658baa4f92a751a16bd232e25676bb104d0b75fc5c72f554a8f5878f8c0bec57f6d07082181326bf39aed95752d910224b2d5d1b244e06", 0x13c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000040)="a0002883781ecc0ea91e039102b98cd84801a28fae667e93face963781ae0cf4cf6f378b7d8779e77cef49b6d31447ffe6d56e67b74396005e059b772222c152a6c3ae52843d1c7bab7d9109c0e7a8a4", 0x50}], 0x1}}], 0x1, 0x0) 2.901706865s ago: executing program 2 (id=4368): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000060000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa00000000"], 0xfc}}, 0x0) 2.880099466s ago: executing program 2 (id=4369): bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}, 0xffffffff}}, 0x10) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.816497947s ago: executing program 2 (id=4370): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xbe107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xc}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) r3 = socket(0x2b, 0x1, 0x1) listen(r3, 0x5) accept4$vsock_stream(r3, 0x0, 0x0, 0x80800) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socketpair(0x28, 0x3, 0x28, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={0x0, 0x0, 0x4}, 0x18) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f000000fcfffffffcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22e000000200000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 2.810094517s ago: executing program 8 (id=4371): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x20008800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61153c0000000000611334000000b0ffbfa000000000000007000000ee0016055e03010000000000250500000000000069163e0000000000bf07000000000000260507000fff07206706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7166c23d28c0a7101b8b09736ecd34aa9dc1b498"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.67056563s ago: executing program 7 (id=4372): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4051) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syslog(0x4, &(0x7f0000000840)=""/159, 0x9f) r1 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x4000010) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@private=0xa010100, @in=@multicast2, 0x4e21, 0x1, 0x4e23, 0xff00, 0xa, 0x80, 0x80}, {0x401, 0x5, 0x581e, 0x3, 0x2b12, 0x6, 0x8000000000000000, 0x1}, {0x3, 0x7, 0x5, 0x3}, 0x10000, 0x6e6bb4, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0xff}, 0xa, @in=@local, 0x0, 0x4, 0x1, 0x7, 0xd8, 0x8, 0x4}}, 0xe8) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000240)={0x5, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) 2.552378693s ago: executing program 7 (id=4373): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x64010101, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x20, @multicast1}}]}, 0x80}}, 0x0) 2.520789144s ago: executing program 7 (id=4374): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000000000000791028000000000069182200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 2.436423396s ago: executing program 7 (id=4375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x8, 0x1}, 0x40, 0x35, 0x6, 0x9, 0x9, 0x806, 0x400, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1, 0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r1, 0x0, 0x0, 0x20000020) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0'}, 0xb) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0xc, &(0x7f0000000540)=@ccm_128={{0x303}, "f340cceb37bafac8", "22968ddfe15c9a1b88d78d123f5c48e7", "c1a33d18", "271d734267d49519"}, 0x28) read$nci(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47) r2 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x70d8000, 0x2003) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) socket$unix(0x1, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.435597356s ago: executing program 8 (id=4376): setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010005000000000004000400000000f5bccae90b3112a10020"], 0x24, 0x2) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xd}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000c80), r1) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xd) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRESDEC], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) (async) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e34, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000000029fff500070000001c000000000000000000000008000000", @ANYRES32=r2], 0x30}}], 0x1, 0xc0) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r3, 0x46f9, 0xbf9a, 0x3e, 0x0, 0x0) 2.389680276s ago: executing program 7 (id=4377): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x8a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2f3, 0x0, 0xcfb5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x4000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) timer_create(0x9, 0x0, 0x0) syslog(0x2, &(0x7f0000000000)=""/10, 0xa) syslog(0x1, 0x0, 0x0) syslog(0x9, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x1b, 0x0, 0x0, {0x1, 0x0, 0x2000}}], {0x14}}, 0xb0}}, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x95ff, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.319667578s ago: executing program 8 (id=4378): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") creat(&(0x7f0000000040)='./file2\x00', 0x8) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x440, 0xa4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000003000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 2.102209993s ago: executing program 7 (id=4379): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) io_setup(0x239f, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) (async) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() (async) r4 = getpid() syz_open_dev$usbmon(&(0x7f0000000000), 0x5dbf, 0x4a580) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5dbf, 0x4a580) r6 = syz_open_dev$usbmon(&(0x7f0000000380), 0xffffffffffffdffb, 0x101000) dup3(r6, r5, 0x0) (async) dup3(r6, r5, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.101869823s ago: executing program 9 (id=4380): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000779117600000000001801000020646c2500000000002020207b18f8ff0000000079a100000000000007010000f8ffffffb702000008000000b703000007003e00850000002f0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc, &(0x7f000000cf3d)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x59) 2.094983903s ago: executing program 4 (id=4381): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2b, 0x80801, 0x1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x8, 0x2}, 0x800, 0x2, 0x0, 0x8, 0x0, 0x0, 0x21}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x9) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket(0x11, 0x2, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xa6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0x2000000, 0x3, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3a}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.008641045s ago: executing program 9 (id=4382): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0), 0xfd, 0x461, &(0x7f0000001840)="$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") r4 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) shmctl$IPC_RMID(r4, 0x0) 0s ago: executing program 2 (id=4383): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4051) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x1000, 0x0) syslog(0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syslog(0x4, &(0x7f0000000840)=""/159, 0x9f) r1 = io_uring_setup(0x4bbe, &(0x7f0000000000)={0x0, 0x3, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c}}], 0x20}}], 0x2, 0x4000010) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@private=0xa010100, @in=@multicast2, 0x4e21, 0x1, 0x4e23, 0xff00, 0xa, 0x80, 0x80}, {0x401, 0x5, 0x581e, 0x3, 0x2b12, 0x6, 0x8000000000000000, 0x1}, {0x3, 0x7, 0x5, 0x3}, 0x10000, 0x6e6bb4, 0x1, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d4, 0xff}, 0xa, @in=@local, 0x0, 0x4, 0x1, 0x7, 0xd8, 0x8, 0x4}}, 0xe8) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000240)={0x5, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): W filter on device team0 [ 717.204115][ T3579] lo speed is unknown, defaulting to 1000 [ 717.210413][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.217527][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.278706][ T4537] tipc: Left network mode [ 717.278961][ T4538] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.327604][ T4537] IPVS: stopping master sync thread 14185 ... [ 717.332705][ T4538] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.388108][ T4538] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.451361][ T4538] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.488270][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.495492][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.609119][T19223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 717.630359][T19223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.699631][ T4537] hsr_slave_0: left promiscuous mode [ 717.715063][ T4537] hsr_slave_1: left promiscuous mode [ 717.733372][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.760001][ T4537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.771126][ T4537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.780988][ T4537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.838789][ T4537] veth1_macvtap: left promiscuous mode [ 717.844516][ T4537] veth0_macvtap: left promiscuous mode [ 717.851618][ T4537] veth1_vlan: left promiscuous mode [ 717.862757][ T4537] veth0_vlan: left promiscuous mode [ 717.967166][ T4537] team0 (unregistering): Port device batadv2 removed [ 717.977128][ T4537] team0 (unregistering): Port device batadv1 removed [ 718.251649][ T4537] team0 (unregistering): Port device team_slave_1 removed [ 718.348972][ T4537] team0 (unregistering): Port device team_slave_0 removed [ 718.584370][T19512] tmpfs: Bad value for 'mpol' [ 719.900456][T19511] lo speed is unknown, defaulting to 1000 [ 719.925396][T19516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19516 comm=syz.6.3835 [ 719.963666][T19524] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3836'. [ 720.061396][T19516] loop6: detected capacity change from 0 to 128 [ 720.169906][T19541] loop4: detected capacity change from 0 to 256 [ 720.181723][T19223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.193472][T19533] loop7: detected capacity change from 0 to 1024 [ 720.203124][T19541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3839'. [ 720.224744][T19533] EXT4-fs: Ignoring removed orlov option [ 720.230463][T19533] EXT4-fs: Ignoring removed orlov option [ 720.236239][T19533] EXT4-fs: inline encryption not supported [ 720.286460][T19533] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 720.288816][ T3579] Process accounting resumed [ 720.415142][T19533] Cannot find add_set index 0 as target [ 720.446227][ T4537] IPVS: stop unused estimator thread 0... [ 720.525744][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'. [ 720.549602][T19578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'. [ 720.574455][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3843'. [ 720.593535][T19586] loop4: detected capacity change from 0 to 1024 [ 720.602300][T19578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'. [ 720.631051][T19586] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 720.650448][T19223] veth0_vlan: entered promiscuous mode [ 720.672068][T19223] veth1_vlan: entered promiscuous mode [ 720.689670][T19586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.716738][T19223] veth0_macvtap: entered promiscuous mode [ 720.727919][T19533] infiniband syz1: set active [ 720.735337][T19223] veth1_macvtap: entered promiscuous mode [ 720.744363][T19533] infiniband syz1: added bond0 [ 720.749328][T19223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 720.758440][T19223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 720.772894][T19565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19565 comm=syz.4.3841 [ 720.796028][ T4540] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.804812][ T4540] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.813626][ T4540] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.822407][ T4540] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.827772][T19533] RDS/IB: syz1: added [ 720.844617][T19533] smc: adding ib device syz1 with port count 1 [ 720.853358][T19533] smc: ib device syz1 port 1 has no pnetid [ 720.868299][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 720.868365][ T28] audit: type=1400 audit(2000000624.925:20839): avc: denied { write } for pid=19564 comm="syz.4.3841" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 720.896347][ T28] audit: type=1400 audit(2000000624.925:20840): avc: denied { write } for pid=19564 comm="syz.4.3841" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 720.925929][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 720.952864][T15838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.970782][T19605] geneve2: entered allmulticast mode [ 721.119649][T19622] loop6: detected capacity change from 0 to 256 [ 721.135554][T19620] netlink: 'syz.2.3848': attribute type 3 has an invalid length. [ 721.407563][T19633] netlink: 'syz.8.3853': attribute type 5 has an invalid length. [ 721.506942][T19640] loop8: detected capacity change from 0 to 512 [ 721.537998][T19640] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3855: inode has both inline data and extents flags [ 721.621303][T19640] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 721.623981][T19640] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3855: couldn't read orphan inode 15 (err -117) [ 721.644965][T19640] loop8: lost filesystem error report for type 5 error -117 [ 721.649572][T19640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 721.679550][ T28] audit: type=1400 audit(2000000625.746:20841): avc: denied { write } for pid=19637 comm="syz.8.3855" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 721.734769][T19456] IPVS: starting estimator thread 0... [ 721.958347][T19648] IPVS: using max 1584 ests per chain, 79200 per kthread [ 722.120209][T19654] loop4: detected capacity change from 0 to 512 [ 722.185629][T19654] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 722.218224][T19654] EXT4-fs (loop4): 1 orphan inode deleted [ 722.224602][T19654] EXT4-fs (loop4): 1 truncate cleaned up [ 722.236192][T19654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.342911][ T28] audit: type=1400 audit(2000000626.406:20842): avc: denied { write } for pid=19653 comm="syz.4.3859" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 722.373137][T19658] Invalid logical block size (50331648) [ 722.387327][ T28] audit: type=1400 audit(2000000626.436:20843): avc: denied { read append } for pid=19653 comm="syz.4.3859" path="/149/file0/cpuacct.stat" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 722.495491][ T28] audit: type=1400 audit(2000000626.476:20844): avc: denied { write } for pid=18085 comm="syz-executor" name="47" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 722.524537][ T28] audit: type=1400 audit(2000000626.476:20845): avc: denied { remove_name } for pid=18085 comm="syz-executor" name="file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 722.551857][ T28] audit: type=1400 audit(2000000626.476:20846): avc: denied { unlink } for pid=18085 comm="syz-executor" name="file0" dev="tmpfs" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 722.575942][T15838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.585519][ T28] audit: type=1400 audit(2000000626.476:20847): avc: denied { write } for pid=18085 comm="syz-executor" name="47" dev="tmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 722.646332][ T28] audit: type=1400 audit(2000000626.476:20848): avc: denied { unlink } for pid=18085 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 722.684793][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.741969][T19681] xt_hashlimit: size too large, truncated to 1048576 [ 723.583304][T19736] netlink: 'syz.4.3871': attribute type 1 has an invalid length. [ 723.604220][T19736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 723.687685][T19644] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 723.742146][T19764] loop6: detected capacity change from 0 to 256 [ 723.785736][T19773] FAULT_INJECTION: forcing a failure. [ 723.785736][T19773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.830048][T19773] CPU: 1 UID: 0 PID: 19773 Comm: syz.8.3876 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 723.830084][T19773] Tainted: [W]=WARN [ 723.830092][T19773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 723.830105][T19773] Call Trace: [ 723.830113][T19773] [ 723.830123][T19773] __dump_stack+0x1d/0x30 [ 723.830214][T19773] dump_stack_lvl+0x95/0xd0 [ 723.830236][T19773] dump_stack+0x15/0x1b [ 723.830258][T19773] should_fail_ex+0x25e/0x270 [ 723.830308][T19773] should_fail+0xb/0x20 [ 723.830334][T19773] should_fail_usercopy+0x1a/0x20 [ 723.830445][T19773] _copy_from_user+0x1c/0xb0 [ 723.830472][T19773] mptcp_getsockopt+0x810/0x1830 [ 723.830527][T19773] ? lockref_put_return+0xf7/0x130 [ 723.830616][T19773] ? __rcu_read_unlock+0x4e/0x70 [ 723.830651][T19773] ? __rcu_read_unlock+0x4e/0x70 [ 723.830686][T19773] ? terminate_walk+0x1d5/0x200 [ 723.830727][T19773] ? __rcu_read_unlock+0x4e/0x70 [ 723.830776][T19773] ? avc_has_perm_noaudit+0xa3/0x120 [ 723.830862][T19773] ? avc_has_perm+0x101/0x190 [ 723.830886][T19773] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 723.830971][T19773] sock_common_getsockopt+0x60/0x70 [ 723.831052][T19773] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 723.831165][T19773] do_sock_getsockopt+0x2f5/0x570 [ 723.831279][T19773] ? vfs_write+0x848/0x990 [ 723.831303][T19773] __x64_sys_getsockopt+0x11d/0x1a0 [ 723.831341][T19773] x64_sys_call+0x2dcf/0x3020 [ 723.831447][T19773] do_syscall_64+0x136/0x3c0 [ 723.831541][T19773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.831565][T19773] RIP: 0033:0x7f98ca0ade99 [ 723.831588][T19773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.831614][T19773] RSP: 002b:00007f98c8b07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 723.831665][T19773] RAX: ffffffffffffffda RBX: 00007f98ca335fa0 RCX: 00007f98ca0ade99 [ 723.831681][T19773] RDX: 0000000000000004 RSI: 000000000000011c RDI: 0000000000000003 [ 723.831770][T19773] RBP: 00007f98c8b07090 R08: 0000200000000000 R09: 0000000000000000 [ 723.831844][T19773] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000001 [ 723.831861][T19773] R13: 00007f98ca336038 R14: 00007f98ca335fa0 R15: 00007ffc265ae608 [ 723.831888][T19773] [ 724.095418][T19785] __nla_validate_parse: 5 callbacks suppressed [ 724.095477][T19785] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3877'. [ 724.115020][T19785] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3877'. [ 724.349260][ T4530] Bluetooth: hci0: Frame reassembly failed (-84) [ 724.381414][T19812] netlink: 'syz.6.3885': attribute type 21 has an invalid length. [ 724.390841][T19812] IPv6: NLM_F_CREATE should be specified when creating new route [ 724.402820][T19812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.410163][T19812] IPv6: NLM_F_CREATE should be set when creating new route [ 724.417434][T19812] IPv6: NLM_F_CREATE should be set when creating new route [ 724.424676][T19812] IPv6: NLM_F_CREATE should be set when creating new route [ 724.461060][T19816] loop6: detected capacity change from 0 to 512 [ 724.887959][ T4638] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 724.964245][T19832] loop4: detected capacity change from 0 to 1024 [ 724.971537][T19832] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 725.036628][T19832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.141436][T19831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19831 comm=syz.4.3891 [ 725.189596][T19834] lo speed is unknown, defaulting to 1000 [ 725.237183][T15838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.283790][T19843] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19843 comm=syz.4.3893 [ 725.535690][T19853] loop4: detected capacity change from 0 to 512 [ 725.649761][T19855] loop4: detected capacity change from 0 to 1024 [ 725.658917][T19858] netlink: 'syz.6.3899': attribute type 3 has an invalid length. [ 725.666987][T19855] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 725.688720][T19855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3898'. [ 725.703437][T19855] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3898'. [ 725.713699][T19855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.724894][T19855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.743593][T19865] loop6: detected capacity change from 0 to 256 [ 725.750436][T19865] vfat: Unknown parameter 'nonumtai4¨0' [ 725.835953][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3902'. [ 726.119241][T19884] loop6: detected capacity change from 0 to 512 [ 726.405924][ T4638] Bluetooth: hci0: command 0x1003 tx timeout [ 726.429421][T19890] loop4: detected capacity change from 0 to 128 [ 726.436171][ T4027] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 726.456054][T19890] EXT4-fs: Invalid want_extra_isize 2129 [ 726.471666][T19807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 726.534421][T19890] loop4: detected capacity change from 0 to 1024 [ 726.541613][T19890] EXT4-fs: Ignoring removed bh option [ 726.567530][T19890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 726.618469][T19890] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 726.642463][T19891] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3911: bg 0: block 112: padding at end of block bitmap is not set [ 726.680781][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 726.680802][ T28] audit: type=1400 audit(2000000630.708:20876): avc: denied { write } for pid=19889 comm="syz.4.3911" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 726.770398][T19890] tipc: Enabling of bearer rejected, failed to enable media [ 726.823821][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3920'. [ 726.859610][T19913] loop7: detected capacity change from 0 to 256 [ 726.922098][T15838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 726.946163][ T4538] Bluetooth: hci0: Frame reassembly failed (-84) [ 726.967977][T19923] FAULT_INJECTION: forcing a failure. [ 726.967977][T19923] name failslab, interval 1, probability 0, space 0, times 0 [ 726.968988][T19913] loop7: detected capacity change from 0 to 512 [ 726.980702][T19923] CPU: 0 UID: 0 PID: 19923 Comm: syz.2.3924 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 726.980742][T19923] Tainted: [W]=WARN [ 726.980752][T19923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 726.980769][T19923] Call Trace: [ 726.980779][T19923] [ 726.980790][T19923] __dump_stack+0x1d/0x30 [ 726.980887][T19923] dump_stack_lvl+0x95/0xd0 [ 726.980916][T19923] dump_stack+0x15/0x1b [ 726.980943][T19923] should_fail_ex+0x25e/0x270 [ 726.980984][T19923] should_failslab+0x8c/0xb0 [ 726.981058][T19923] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 726.981090][T19923] ? __alloc_skb+0x2db/0x6f0 [ 726.981171][T19923] ? __alloc_skb+0x2db/0x6f0 [ 726.981210][T19923] __alloc_skb+0x2db/0x6f0 [ 726.981248][T19923] ? __alloc_skb+0x205/0x6f0 [ 726.981285][T19923] netlink_alloc_large_skb+0xbf/0xf0 [ 726.981366][T19923] netlink_sendmsg+0x40c/0x6f0 [ 726.981402][T19923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.981438][T19923] ____sys_sendmsg+0x532/0x580 [ 726.981512][T19923] ___sys_sendmsg+0x195/0x1e0 [ 726.981572][T19923] __x64_sys_sendmsg+0xd4/0x160 [ 726.981616][T19923] x64_sys_call+0x194c/0x3020 [ 726.981641][T19923] do_syscall_64+0x136/0x3c0 [ 726.981674][T19923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.981705][T19923] RIP: 0033:0x7f855979de99 [ 726.981728][T19923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.981846][T19923] RSP: 002b:00007f85581f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.981927][T19923] RAX: ffffffffffffffda RBX: 00007f8559a25fa0 RCX: 00007f855979de99 [ 726.981979][T19923] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 726.982041][T19923] RBP: 00007f85581f7090 R08: 0000000000000000 R09: 0000000000000000 [ 726.982084][T19923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.982136][T19923] R13: 00007f8559a26038 R14: 00007f8559a25fa0 R15: 00007ffe1b75b718 [ 726.982210][T19923] [ 727.296345][T19938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3928'. [ 727.309003][T19936] loop4: detected capacity change from 0 to 512 [ 727.424059][T19913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.446472][T19913] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.538890][T19936] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.551892][T19936] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.675754][ T28] audit: type=1400 audit(2000000631.729:20877): avc: denied { create } for pid=19943 comm="syz.2.3930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 727.753413][T15838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.804156][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.949729][T19953] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3932'. [ 727.990619][T19952] netlink: 'syz.4.3931': attribute type 5 has an invalid length. [ 727.999460][T19952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3931'. [ 728.193027][T19960] loop7: detected capacity change from 0 to 1024 [ 728.210178][T19960] EXT4-fs: Ignoring removed bh option [ 728.221423][T19960] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 728.318172][T19960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.383332][ T28] audit: type=1400 audit(2000000632.439:20878): avc: denied { write } for pid=19958 comm="syz.7.3934" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 728.682550][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.966114][ T4638] Bluetooth: hci0: command 0x1003 tx timeout [ 728.972337][ T4027] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 728.981434][T19921] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 729.321164][T19993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3948'. [ 730.123471][T19996] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 730.299596][T19996] EXT4-fs (loop7): 1 truncate cleaned up [ 730.336075][T19996] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.387493][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.452530][ T28] audit: type=1400 audit(2000000634.510:20879): avc: denied { mounton } for pid=20002 comm="syz.6.3949" path="/file1" dev="autofs" ino=58609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 730.502896][T20021] netlink: 'syz.8.3955': attribute type 2 has an invalid length. [ 730.534915][T20005] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.3949: corrupted inode contents [ 730.553526][T20018] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3954'. [ 730.566436][T20005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.566653][T20005] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #16: comm syz.6.3949: mark_inode_dirty error [ 730.595170][T20024] set_capacity_and_notify: 2 callbacks suppressed [ 730.595189][T20024] loop7: detected capacity change from 0 to 512 [ 730.601866][T20005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.608323][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 730.608365][ C1] EXT4-fs (loop6): initial error at time 2000000634: ext4_do_update_inode:5742: inode 16 [ 730.608403][ C1] EXT4-fs (loop6): last error at time 2000000634: ext4_do_update_inode:5742: inode 16 [ 730.654077][T20024] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 730.663627][T20024] EXT4-fs (loop7): 1 truncate cleaned up [ 730.702965][T20024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.746405][T20005] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.3949: corrupted inode contents [ 730.758473][T20005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.758713][T20005] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #16: comm syz.6.3949: mark_inode_dirty error [ 730.779974][T20005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.780207][T20005] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.3949: corrupted inode contents [ 730.801661][T20005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.801899][T20005] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 730.820086][T20005] loop6: lost filesystem error report for type 5 error -117 [ 730.826562][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.843476][T20005] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #16: comm syz.6.3949: corrupted inode contents [ 730.856476][T20005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.856688][T20005] EXT4-fs error (device loop6): ext4_truncate:4691: inode #16: comm syz.6.3949: mark_inode_dirty error [ 730.877669][T20005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.877941][T20005] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 730.896938][T20005] loop6: lost filesystem error report for type 5 error -117 [ 730.897301][T20005] EXT4-fs (loop6): 1 truncate cleaned up [ 730.911259][T20005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.935697][T20005] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.963607][ T4538] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 730.975008][ T4538] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:17: Failed to release dquot type 1 [ 730.988679][T20005] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.058938][T20044] FAULT_INJECTION: forcing a failure. [ 731.058938][T20044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.075192][T20044] CPU: 1 UID: 0 PID: 20044 Comm: syz.6.3963 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 731.075232][T20044] Tainted: [W]=WARN [ 731.075240][T20044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.075256][T20044] Call Trace: [ 731.075265][T20044] [ 731.075277][T20044] __dump_stack+0x1d/0x30 [ 731.075304][T20044] dump_stack_lvl+0x95/0xd0 [ 731.075356][T20044] dump_stack+0x15/0x1b [ 731.075382][T20044] should_fail_ex+0x25e/0x270 [ 731.075422][T20044] should_fail+0xb/0x20 [ 731.075449][T20044] should_fail_usercopy+0x1a/0x20 [ 731.075505][T20044] _copy_to_user+0x20/0xa0 [ 731.075526][T20044] simple_read_from_buffer+0xb5/0x130 [ 731.075555][T20044] proc_fail_nth_read+0x10e/0x150 [ 731.075587][T20044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 731.075644][T20044] vfs_read+0x18e/0x7c0 [ 731.075735][T20044] ? __rcu_read_unlock+0x4e/0x70 [ 731.075763][T20044] ? __fget_files+0x184/0x1c0 [ 731.075800][T20044] ? mutex_lock+0x57/0x90 [ 731.075881][T20044] ksys_read+0xdc/0x1a0 [ 731.075911][T20044] __x64_sys_read+0x40/0x50 [ 731.075980][T20044] x64_sys_call+0x2886/0x3020 [ 731.076012][T20044] do_syscall_64+0x136/0x3c0 [ 731.076037][T20044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.076141][T20044] RIP: 0033:0x7fb19595e6ce [ 731.076163][T20044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 731.076188][T20044] RSP: 002b:00007fb1943f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 731.076216][T20044] RAX: ffffffffffffffda RBX: 00007fb1943f76c0 RCX: 00007fb19595e6ce [ 731.076233][T20044] RDX: 000000000000000f RSI: 00007fb1943f70a0 RDI: 0000000000000004 [ 731.076247][T20044] RBP: 00007fb1943f7090 R08: 0000000000000000 R09: 0000000000000000 [ 731.076301][T20044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.076344][T20044] R13: 00007fb195c26038 R14: 00007fb195c25fa0 R15: 00007fffe4eb4618 [ 731.076366][T20044] [ 731.373137][T20052] netlink: 'syz.6.3968': attribute type 10 has an invalid length. [ 731.391909][ T28] audit: type=1400 audit(2000000635.451:20880): avc: denied { prog_load } for pid=20055 comm="syz.2.3964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.444190][T20052] team0 (unregistering): Port device team_slave_0 removed [ 731.457879][T20062] loop8: detected capacity change from 0 to 512 [ 731.469755][T20052] team0 (unregistering): Port device team_slave_1 removed [ 731.491146][ T28] audit: type=1400 audit(2000000635.531:20881): avc: denied { prog_run } for pid=20058 comm="syz.4.3969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.518086][T20062] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 731.530433][T20062] EXT4-fs (loop8): 1 truncate cleaned up [ 731.536688][T20062] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.572955][T20069] syzkaller0: entered promiscuous mode [ 731.643398][ T28] audit: type=1400 audit(2000000635.701:20882): avc: denied { map_create } for pid=20041 comm="syz.7.3962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.759643][ T28] audit: type=1400 audit(2000000635.821:20883): avc: denied { map_read map_write } for pid=20075 comm="syz.6.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 731.881681][T20078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3975'. [ 732.004540][T20069] syzkaller0: entered allmulticast mode [ 732.051502][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.162737][T20100] loop6: detected capacity change from 0 to 1024 [ 732.177980][T20100] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 732.216081][T20100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.234135][ T28] audit: type=1400 audit(2000000636.301:20884): avc: denied { ioctl } for pid=20102 comm="syz.2.3984" path="socket:[58744]" dev="sockfs" ino=58744 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 732.278669][T20110] loop8: detected capacity change from 0 to 512 [ 732.288950][T20086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=20086 comm=syz.6.3980 [ 732.305093][T20110] EXT4-fs: test_dummy_encryption option not supported [ 732.322516][ T28] audit: type=1400 audit(2000000636.371:20885): avc: denied { write } for pid=20109 comm="syz.8.3985" path="socket:[58077]" dev="sockfs" ino=58077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 732.349943][ T28] audit: type=1400 audit(2000000636.371:20886): avc: denied { write } for pid=20085 comm="syz.6.3980" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 732.372170][ T28] audit: type=1400 audit(2000000636.371:20887): avc: denied { write } for pid=20085 comm="syz.6.3980" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 732.374999][T17669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.445185][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3986'. [ 732.509798][T20123] loop6: detected capacity change from 0 to 1024 [ 732.513532][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 732.518532][T20123] EXT4-fs: quotafile must be on filesystem root [ 732.603257][T20129] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3993'. [ 732.689575][T20126] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3992'. [ 732.763395][ T28] audit: type=1400 audit(2000000636.791:20888): avc: denied { node_bind } for pid=20140 comm="syz.8.3999" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 732.799203][T20142] syzkaller0: entered promiscuous mode [ 732.806434][T20142] syzkaller0: entered allmulticast mode [ 733.329520][T20169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4007'. [ 733.711699][T20187] lo speed is unknown, defaulting to 1000 [ 733.795350][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4016'. [ 733.949597][T20198] loop6: detected capacity change from 0 to 1024 [ 733.956795][T20198] EXT4-fs: Ignoring removed orlov option [ 734.022874][T20198] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 734.299534][ T28] audit: type=1400 audit(2000000638.352:20889): avc: denied { write } for pid=20197 comm="syz.6.4018" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 734.324463][ T28] audit: type=1400 audit(2000000638.352:20890): avc: denied { ioctl } for pid=20197 comm="syz.6.4018" path="/86/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 734.663820][T20206] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4019'. [ 734.744028][T20214] loop4: detected capacity change from 0 to 512 [ 734.751075][T20215] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 734.781323][T20215] gretap1: entered allmulticast mode [ 734.795039][T17669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.897270][T20223] loop6: detected capacity change from 0 to 1024 [ 734.913710][T20223] EXT4-fs: Ignoring removed bh option [ 734.979563][T20223] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 735.002821][T20232] FAULT_INJECTION: forcing a failure. [ 735.002821][T20232] name failslab, interval 1, probability 0, space 0, times 0 [ 735.019869][T20232] CPU: 0 UID: 0 PID: 20232 Comm: syz.8.4028 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 735.019985][T20232] Tainted: [W]=WARN [ 735.019994][T20232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.020009][T20232] Call Trace: [ 735.020019][T20232] [ 735.020039][T20232] __dump_stack+0x1d/0x30 [ 735.020073][T20232] dump_stack_lvl+0x95/0xd0 [ 735.020102][T20232] dump_stack+0x15/0x1b [ 735.020216][T20232] should_fail_ex+0x25e/0x270 [ 735.020307][T20232] should_failslab+0x8c/0xb0 [ 735.020379][T20232] __kmalloc_noprof+0xd4/0x4a0 [ 735.020411][T20232] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 735.020476][T20232] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 735.020569][T20232] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 735.020644][T20232] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 735.020689][T20232] ? selinux_capable+0x31/0x40 [ 735.020726][T20232] ? security_capable+0x7b/0x90 [ 735.020761][T20232] ? ns_capable+0x80/0xb0 [ 735.020797][T20232] genl_rcv_msg+0x42f/0x470 [ 735.020841][T20232] ? __pfx_devlink_nl_pre_doit+0x10/0x10 [ 735.020905][T20232] ? __pfx_devlink_nl_trap_group_set_doit+0x10/0x10 [ 735.020956][T20232] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 735.021087][T20232] netlink_rcv_skb+0x11e/0x220 [ 735.021118][T20232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 735.021157][T20232] genl_rcv+0x28/0x40 [ 735.021255][T20232] netlink_unicast+0x5a7/0x680 [ 735.021279][T20232] netlink_sendmsg+0x5be/0x6f0 [ 735.021369][T20232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.021404][T20232] ____sys_sendmsg+0x532/0x580 [ 735.021451][T20232] ___sys_sendmsg+0x195/0x1e0 [ 735.021499][T20232] __x64_sys_sendmsg+0xd4/0x160 [ 735.021621][T20232] x64_sys_call+0x194c/0x3020 [ 735.021647][T20232] do_syscall_64+0x136/0x3c0 [ 735.021674][T20232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.021705][T20232] RIP: 0033:0x7f98ca0ade99 [ 735.021750][T20232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.021773][T20232] RSP: 002b:00007f98c8b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.021795][T20232] RAX: ffffffffffffffda RBX: 00007f98ca335fa0 RCX: 00007f98ca0ade99 [ 735.021869][T20232] RDX: 0000000020000050 RSI: 0000200000000200 RDI: 0000000000000004 [ 735.021887][T20232] RBP: 00007f98c8b07090 R08: 0000000000000000 R09: 0000000000000000 [ 735.021904][T20232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.021920][T20232] R13: 00007f98ca336038 R14: 00007f98ca335fa0 R15: 00007ffc265ae608 [ 735.021940][T20232] [ 735.362486][T20223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.378161][ T28] audit: type=1400 audit(2000000639.423:20891): avc: denied { write } for pid=20220 comm="syz.6.4024" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 735.482266][T20242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=20242 comm=syz.2.4027 [ 735.584714][T20244] loop8: detected capacity change from 0 to 512 [ 735.594963][T20244] ext4: Unknown parameter 'nouser_xattr' [ 735.729209][T20243] loop8: detected capacity change from 0 to 256 [ 735.736781][T20243] vfat: Bad value for 'codepage' [ 735.749529][T20243] loop8: detected capacity change from 0 to 128 [ 735.798108][T17669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.879701][T20254] loop6: detected capacity change from 0 to 1024 [ 735.894218][T20250] loop7: detected capacity change from 0 to 512 [ 735.968427][T20254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 735.992746][T20254] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 736.001832][T20261] loop8: detected capacity change from 0 to 512 [ 736.033433][T20261] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 736.046062][T20261] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 1024: comm syz.8.4037: invalid block [ 736.057964][T20261] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 736.058348][T20261] EXT4-fs (loop8): 1 truncate cleaned up [ 736.067584][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 736.067608][ C0] EXT4-fs (loop8): initial error at time 2000000640: ext4_get_branch:178: inode 13: block 1024 [ 736.067653][ C0] EXT4-fs (loop8): last error at time 2000000640: ext4_get_branch:178: inode 13: block 1024 [ 736.083836][T20254] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4031: bg 0: block 112: padding at end of block bitmap is not set [ 736.093130][T20261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 736.120365][T20254] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 736.141438][T20254] EXT4-fs (loop6): This should not happen!! Data will be lost [ 736.141438][T20254] [ 736.151127][T20254] EXT4-fs (loop6): Total free blocks count 0 [ 736.157149][T20254] EXT4-fs (loop6): Free/Dirty block details [ 736.163078][T20254] EXT4-fs (loop6): free_blocks=0 [ 736.168054][T20254] EXT4-fs (loop6): dirty_blocks=16 [ 736.173202][T20254] EXT4-fs (loop6): Block reservation details [ 736.179220][T20254] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 736.197325][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.318706][T20276] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.4031: lblock 0 mapped to illegal pblock 0 (length 6) [ 736.333158][T20276] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.4031: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 736.380746][T17669] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /88/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 736.402885][T17669] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /88/file1/los +found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 736.425735][T17669] EXT4-fs error (device loop6): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 736.445604][T17669] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /88/file1/los +found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 736.468595][T17669] EXT4-fs error (device loop6): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 736.488630][T17669] EXT4-fs error (device loop6): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /88/file1/los +found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 736.510563][T17669] EXT4-fs error (device loop6): ext4_empty_dir:3125: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 736.762621][T17669] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 736.772877][T14308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.829529][T14308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.886316][T14308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.993338][T20290] lo speed is unknown, defaulting to 1000 [ 737.027448][T14308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.089278][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811d844c00: rx timeout, send abort [ 737.101123][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811d844c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 737.115608][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888139186400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 737.344063][T20313] netlink: 'syz.2.4048': attribute type 1 has an invalid length. [ 737.426155][T20313] 8021q: adding VLAN 0 to HW filter on device bond9 [ 737.450968][T20318] bond9: (slave geneve3): making interface the new active one [ 737.468059][T20318] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 737.528428][ T4537] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.618820][ T4537] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.629520][ T4537] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.640604][T20290] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.648395][T20290] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.656591][T20290] bridge_slave_0: entered allmulticast mode [ 737.663498][T20290] bridge_slave_0: entered promiscuous mode [ 737.670861][T20290] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.677998][T20290] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.686218][T20290] bridge_slave_1: entered allmulticast mode [ 737.693089][T20290] bridge_slave_1: entered promiscuous mode [ 737.717028][ T4537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.750450][T14308] bridge_slave_1: left allmulticast mode [ 737.758338][T14308] bridge_slave_1: left promiscuous mode [ 737.767036][T14308] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.775482][T14308] bridge_slave_0: left allmulticast mode [ 737.781467][T14308] bridge_slave_0: left promiscuous mode [ 737.787499][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.880229][T14308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.925156][T14308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 738.097967][T14308] bond0 (unregistering): Released all slaves [ 738.129042][T20290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.167508][T20290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.390307][T20290] team0: Port device team_slave_0 added [ 738.464288][T20290] team0: Port device team_slave_1 added [ 738.817149][T20290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.977842][T20290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.062445][T20290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.078646][T14308] hsr_slave_0: left promiscuous mode [ 739.085249][T14308] hsr_slave_1: left promiscuous mode [ 739.100966][T14308] veth1_macvtap: left promiscuous mode [ 739.106672][T14308] veth0_macvtap: left promiscuous mode [ 740.058567][T14308] veth1_vlan: left promiscuous mode [ 740.063958][T14308] veth0_vlan: left promiscuous mode [ 740.224018][T20341] loop4: detected capacity change from 0 to 512 [ 741.013770][T20341] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 741.014281][T20341] EXT4-fs: failed to create workqueue [ 741.031230][T20341] EXT4-fs (loop4): mount failed [ 741.060295][T20351] netlink: 'syz.2.4055': attribute type 13 has an invalid length. [ 741.087565][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 741.087588][ T28] audit: type=1400 audit(2000000645.156:21063): avc: denied { write } for pid=20334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.201669][ T28] audit: type=1400 audit(2000000645.206:21064): avc: denied { create } for pid=20350 comm="syz.2.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 741.254405][ T28] audit: type=1400 audit(2000000645.206:21065): avc: denied { setopt } for pid=20350 comm="syz.2.4055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 741.300428][ T28] audit: type=1400 audit(2000000645.256:21066): avc: denied { write } for pid=20358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.325621][T20290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.333871][T20290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.360620][T20290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.396581][T20290] hsr_slave_0: entered promiscuous mode [ 741.402882][T20290] hsr_slave_1: entered promiscuous mode [ 741.686178][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 741.849471][T20373] loop8: detected capacity change from 0 to 512 [ 741.881005][T20373] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 741.889352][T20373] EXT4-fs (loop8): 1 truncate cleaned up [ 742.030474][T20373] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.152064][T20386] netlink: 'syz.4.4061': attribute type 11 has an invalid length. [ 742.194540][T20386] loop4: detected capacity change from 0 to 8192 [ 742.249912][T20386] Unsupported ieee802154 address type: 0 [ 742.359384][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 742.368176][ T28] audit: type=1400 audit(2000000646.386:21067): avc: denied { write } for pid=20370 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.408800][ T28] audit: type=1400 audit(2000000646.406:21068): avc: denied { write } for pid=20393 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.625534][ T28] audit: type=1400 audit(2000000646.696:21069): avc: denied { write } for pid=20397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.699271][ T28] audit: type=1400 audit(2000000646.776:21070): avc: denied { write } for pid=20412 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.759149][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 742.866334][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.957070][T20424] loop4: detected capacity change from 0 to 512 [ 742.970206][ T28] audit: type=1400 audit(2000000647.016:21071): avc: denied { accept } for pid=20403 comm="syz.4.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 742.998059][T20424] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 743.006523][T20424] EXT4-fs (loop4): 1 truncate cleaned up [ 743.012762][T20424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.615520][ T28] audit: type=1400 audit(2000000647.687:21072): avc: denied { write } for pid=20415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.668922][T20290] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 743.726337][T20290] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 743.806355][T20290] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 743.863973][T20290] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 743.902484][T20290] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 743.975016][T20290] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 744.029566][T20290] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 744.051390][T20290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 744.079915][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 744.150833][T20462] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4072'. [ 744.209349][T20468] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4075'. [ 744.231265][T20290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.255863][T20290] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.284096][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.291249][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.323686][T20472] netlink: 'syz.7.4076': attribute type 3 has an invalid length. [ 744.355542][T20472] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4076'. [ 744.358714][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.371585][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.381021][T20472] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4076'. [ 744.740469][T20492] loop7: detected capacity change from 0 to 512 [ 744.876539][T20492] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4077: invalid indirect mapped block 11 (level 0) [ 744.889901][T20492] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 744.891299][T20492] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.4077: attempt to clear invalid blocks 1024 len 1 [ 744.913588][T20492] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 744.914410][T20492] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 744.938192][T20492] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4077: invalid indirect mapped block 1819239214 (level 0) [ 744.952188][T20492] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 744.952709][T20492] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.4077: invalid indirect mapped block 33554432 (level 2) [ 744.976556][ C0] EXT4-fs (loop7): error count since last fsck: 4 [ 744.976817][ C0] EXT4-fs (loop7): initial error at time 2000000648: ext4_free_branches:1023: inode 13 [ 744.976884][ C0] EXT4-fs (loop7): last error at time 2000000649: ext4_free_branches:1023: inode 13 [ 745.051569][T20492] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 745.076983][T20492] EXT4-fs (loop7): 1 truncate cleaned up [ 745.137834][T20492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.313162][T20379] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 745.381621][T20379] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 745.824021][T20290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.564956][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.583056][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 746.583077][ T28] audit: type=1400 audit(2000000650.658:21078): avc: denied { write } for pid=20518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.758204][T20541] netlink: 'syz.8.4084': attribute type 1 has an invalid length. [ 746.825216][T20541] 8021q: adding VLAN 0 to HW filter on device bond3 [ 746.864152][ T28] audit: type=1400 audit(2000000650.778:21079): avc: denied { write } for pid=20544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.980744][T20548] bond3: (slave geneve2): making interface the new active one [ 747.012133][T20548] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 747.052698][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4087'. [ 747.063192][T20556] netlink: 'syz.2.4086': attribute type 10 has an invalid length. [ 747.079043][T20556] team0: left promiscuous mode [ 747.084787][T20559] netlink: 'syz.7.4087': attribute type 3 has an invalid length. [ 747.099578][T20556] team_slave_0: left promiscuous mode [ 747.113249][T20565] netlink: 'syz.2.4086': attribute type 10 has an invalid length. [ 747.124102][T20556] team_slave_1: left promiscuous mode [ 747.143699][T20556] team0: left allmulticast mode [ 747.149548][T20565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4086'. [ 747.166008][T20556] team_slave_0: left allmulticast mode [ 747.173642][T20556] team_slave_1: left allmulticast mode [ 747.180285][T20556] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.190763][T20556] bond0: (slave team0): Enslaving as an active interface with an up link [ 747.206474][T20565] team0: entered promiscuous mode [ 747.215808][T20565] team_slave_0: entered promiscuous mode [ 747.231654][T20565] team_slave_1: entered promiscuous mode [ 747.244708][T20565] team0: entered allmulticast mode [ 747.250735][T20565] team_slave_0: entered allmulticast mode [ 747.256794][T20565] team_slave_1: entered allmulticast mode [ 747.330323][T20565] bond0: (slave team0): Releasing backup interface [ 747.339823][T20565] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 747.391847][T20290] veth0_vlan: entered promiscuous mode [ 747.408677][T20290] veth1_vlan: entered promiscuous mode [ 747.429986][ T28] audit: type=1400 audit(2000000651.509:21080): avc: denied { write } for pid=20561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.486841][T20290] veth0_macvtap: entered promiscuous mode [ 747.513452][T20290] veth1_macvtap: entered promiscuous mode [ 747.529976][ T28] audit: type=1400 audit(2000000651.599:21081): avc: denied { write } for pid=20584 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.563416][T20290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.587125][T20290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.610591][ T4538] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.633075][ T4538] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.661491][ T4538] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.690643][ T4538] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.850297][ T28] audit: type=1400 audit(2000000651.919:21082): avc: denied { write } for pid=20589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.997223][ T28] audit: type=1400 audit(2000000652.069:21083): avc: denied { write } for pid=20609 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.106598][T20613] loop9: detected capacity change from 0 to 512 [ 748.148864][T20613] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.4043: inode has both inline data and extents flags [ 748.311056][T20613] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 748.312148][T20613] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.4043: couldn't read orphan inode 15 (err -117) [ 748.321405][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 748.321431][ C0] EXT4-fs (loop9): initial error at time 2000000652: ext4_orphan_get:1399: inode 15 [ 748.321462][ C0] EXT4-fs (loop9): last error at time 2000000652: ext4_orphan_get:1399: inode 15 [ 748.526900][T20619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4094'. [ 748.931980][T20613] loop9: lost filesystem error report for type 5 error -117 [ 748.932640][T20613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.954337][ T28] audit: type=1400 audit(2000000654.020:21084): avc: denied { write } for pid=20616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.021025][T20611] netlink: 188 bytes leftover after parsing attributes in process `syz.9.4043'. [ 750.044223][ T28] audit: type=1400 audit(2000000654.050:21085): avc: denied { write } for pid=20610 comm="syz.9.4043" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 750.087905][ T28] audit: type=1400 audit(2000000654.110:21086): avc: denied { write } for pid=20640 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.110199][T19393] IPVS: starting estimator thread 0... [ 750.178875][T20642] netlink: 'syz.8.4098': attribute type 4 has an invalid length. [ 750.187431][T20642] netlink: 128124 bytes leftover after parsing attributes in process `syz.8.4098'. [ 750.206676][T20644] IPVS: using max 2208 ests per chain, 110400 per kthread [ 750.277744][T20654] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4100'. [ 750.350111][ T28] audit: type=1326 audit(2000000654.420:21087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz.2.4101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 750.365759][T20661] lo speed is unknown, defaulting to 1000 [ 750.425936][T20290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.498355][T20671] FAULT_INJECTION: forcing a failure. [ 750.498355][T20671] name failslab, interval 1, probability 0, space 0, times 0 [ 750.528016][T20671] CPU: 1 UID: 0 PID: 20671 Comm: syz.9.4102 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 750.528123][T20671] Tainted: [W]=WARN [ 750.528203][T20671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 750.528270][T20671] Call Trace: [ 750.528278][T20671] [ 750.528287][T20671] __dump_stack+0x1d/0x30 [ 750.528384][T20671] dump_stack_lvl+0x95/0xd0 [ 750.528413][T20671] dump_stack+0x15/0x1b [ 750.528476][T20671] should_fail_ex+0x25e/0x270 [ 750.528515][T20671] should_failslab+0x8c/0xb0 [ 750.528590][T20671] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 750.528622][T20671] ? skb_clone+0x151/0x1f0 [ 750.528783][T20671] ? skb_clone+0x151/0x1f0 [ 750.528828][T20671] skb_clone+0x151/0x1f0 [ 750.528936][T20671] __netlink_deliver_tap+0x2be/0x510 [ 750.528976][T20671] netlink_unicast+0x654/0x680 [ 750.529001][T20671] netlink_sendmsg+0x5be/0x6f0 [ 750.529037][T20671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.529129][T20671] ____sys_sendmsg+0x532/0x580 [ 750.529177][T20671] ___sys_sendmsg+0x195/0x1e0 [ 750.529297][T20671] __x64_sys_sendmsg+0xd4/0x160 [ 750.529383][T20671] x64_sys_call+0x194c/0x3020 [ 750.529409][T20671] do_syscall_64+0x136/0x3c0 [ 750.529433][T20671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.529538][T20671] RIP: 0033:0x7f00625dde99 [ 750.529561][T20671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.529588][T20671] RSP: 002b:00007f0061037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.529628][T20671] RAX: ffffffffffffffda RBX: 00007f0062865fa0 RCX: 00007f00625dde99 [ 750.529650][T20671] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 750.529663][T20671] RBP: 00007f0061037090 R08: 0000000000000000 R09: 0000000000000000 [ 750.529681][T20671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.529697][T20671] R13: 00007f0062866038 R14: 00007f0062865fa0 R15: 00007ffd30c99218 [ 750.529724][T20671] [ 750.646509][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4102'. [ 750.831817][T20682] loop9: detected capacity change from 0 to 128 [ 750.866578][T20682] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 750.941142][T20682] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.004466][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4105'. [ 751.097792][T20682] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 752.798080][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 752.798115][ T28] audit: type=1400 audit(2000000656.871:21163): avc: denied { write } for pid=20712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.886435][ T28] audit: type=1400 audit(2000000656.961:21164): avc: denied { write } for pid=20730 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.369378][T15838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.445707][T20736] loop7: detected capacity change from 0 to 512 [ 753.509704][T20736] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.545896][T20736] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 753.573777][T20736] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 753.589517][ T28] audit: type=1400 audit(2000000657.652:21165): avc: denied { write } for pid=20735 comm="syz.7.4112" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 753.626207][T20740] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 753.643187][T20736] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.4112: corrupted inode contents [ 753.665359][ T28] audit: type=1400 audit(2000000657.692:21166): avc: denied { write } for pid=20733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.697868][T20736] EXT4-fs error (device loop7): ext4_dirty_inode:6639: inode #16: comm syz.7.4112: mark_inode_dirty error [ 753.742535][T20736] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.4112: corrupted inode contents [ 753.760340][ T28] audit: type=1400 audit(2000000657.732:21167): avc: denied { write } for pid=20735 comm="syz.7.4112" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 753.799521][T20736] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.4112: mark_inode_dirty error [ 753.839368][T20736] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.4112: corrupted inode contents [ 753.857685][ T28] audit: type=1400 audit(2000000657.812:21168): avc: denied { write } for pid=20754 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.894892][T20736] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #16: comm syz.7.4112: mark_inode_dirty error [ 753.930892][T20736] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #16: comm syz.7.4112: corrupted inode contents [ 753.958084][T20764] loop9: detected capacity change from 0 to 1024 [ 754.008392][T20764] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 754.038103][T20736] EXT4-fs error (device loop7): ext4_truncate:4691: inode #16: comm syz.7.4112: mark_inode_dirty error [ 754.070012][T20767] loop8: detected capacity change from 0 to 1024 [ 754.108575][T20767] EXT4-fs: Ignoring removed bh option [ 754.168934][T20736] EXT4-fs error (device loop7) in ext4_setattr:6172: Corrupt filesystem [ 754.212027][T20764] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.226259][ T28] audit: type=1400 audit(2000000658.302:21169): avc: denied { write } for pid=20756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 754.571513][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.625168][ T28] audit: type=1400 audit(2000000658.682:21170): avc: denied { write } for pid=20757 comm="syz.9.4117" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.651459][T20767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.690043][ T28] audit: type=1400 audit(2000000658.682:21171): avc: denied { write } for pid=20757 comm="syz.9.4117" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.751453][T20290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.855754][ T28] audit: type=1400 audit(2000000658.892:21172): avc: denied { write } for pid=20737 comm="syz.8.4115" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.985039][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.995419][T20792] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 755.068236][T20798] netlink: 'syz.4.4127': attribute type 4 has an invalid length. [ 755.170192][T20805] netlink: 'syz.4.4128': attribute type 13 has an invalid length. [ 756.200516][T20834] loop8: detected capacity change from 0 to 4096 [ 756.220557][T20834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.305067][T20804] uprobe: syz.4.4128:20804 failed to unregister, leaking uprobe [ 756.445879][T20854] loop4: detected capacity change from 0 to 256 [ 756.453001][T20834] lo speed is unknown, defaulting to 1000 [ 756.494839][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4135'. [ 756.520652][T20860] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4136'. [ 756.558091][T20860] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4136'. [ 756.614437][T20862] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4137'. [ 756.881680][T20868] loop7: detected capacity change from 0 to 8192 [ 756.957409][T20868] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 757.127828][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.430142][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 757.458475][T20868] FAT-fs (loop7): Filesystem has been set read-only [ 757.479644][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 757.733565][T20885] IPVS: length: 89 != 24 [ 757.996882][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.063802][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.078351][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.089114][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.098868][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.109652][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.118645][T20868] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.145206][T20900] loop4: detected capacity change from 0 to 256 [ 758.161236][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4148'. [ 758.196690][ T4538] Bluetooth: hci0: Frame reassembly failed (-84) [ 758.210762][T20904] FAULT_INJECTION: forcing a failure. [ 758.210762][T20904] name failslab, interval 1, probability 0, space 0, times 0 [ 758.242913][T20904] CPU: 0 UID: 0 PID: 20904 Comm: syz.8.4147 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 758.242973][T20904] Tainted: [W]=WARN [ 758.242981][T20904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.242994][T20904] Call Trace: [ 758.243002][T20904] [ 758.243011][T20904] __dump_stack+0x1d/0x30 [ 758.243184][T20904] dump_stack_lvl+0x95/0xd0 [ 758.243213][T20904] dump_stack+0x15/0x1b [ 758.243238][T20904] should_fail_ex+0x25e/0x270 [ 758.243283][T20904] should_failslab+0x8c/0xb0 [ 758.243349][T20904] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 758.243375][T20904] ? __alloc_skb+0x2db/0x6f0 [ 758.243410][T20904] ? __alloc_skb+0x2db/0x6f0 [ 758.243449][T20904] __alloc_skb+0x2db/0x6f0 [ 758.243509][T20904] ? __alloc_skb+0x205/0x6f0 [ 758.243615][T20904] create_monitor_ctrl_open+0x118/0x4a0 [ 758.243651][T20904] hci_sock_ioctl+0x2a9/0x7e0 [ 758.243692][T20904] sock_do_ioctl+0x73/0x230 [ 758.243718][T20904] sock_ioctl+0x439/0x610 [ 758.243742][T20904] ? mutex_lock+0x57/0x90 [ 758.243831][T20904] ? __pfx_sock_ioctl+0x10/0x10 [ 758.243907][T20904] __se_sys_ioctl+0xce/0x140 [ 758.243935][T20904] __x64_sys_ioctl+0x43/0x50 [ 758.243959][T20904] x64_sys_call+0x1563/0x3020 [ 758.243986][T20904] do_syscall_64+0x136/0x3c0 [ 758.244018][T20904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.244139][T20904] RIP: 0033:0x7f98ca0ade99 [ 758.244160][T20904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.244181][T20904] RSP: 002b:00007f98c8ae6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.244202][T20904] RAX: ffffffffffffffda RBX: 00007f98ca336090 RCX: 00007f98ca0ade99 [ 758.244234][T20904] RDX: 0000200000000300 RSI: 00000000400448dd RDI: 0000000000000008 [ 758.244272][T20904] RBP: 00007f98c8ae6090 R08: 0000000000000000 R09: 0000000000000000 [ 758.244290][T20904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.244305][T20904] R13: 00007f98ca336128 R14: 00007f98ca336090 R15: 00007ffc265ae608 [ 758.244349][T20904] [ 758.482524][T20910] loop7: detected capacity change from 0 to 1024 [ 758.491573][T20910] EXT4-fs: Ignoring removed bh option [ 758.525294][T20910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.558367][T14308] Bluetooth: hci1: Frame reassembly failed (-84) [ 758.568382][ T4530] Bluetooth: hci2: Frame reassembly failed (-84) [ 758.590799][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.645993][T20925] loop7: detected capacity change from 0 to 1024 [ 758.653128][T20925] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 758.664039][T20925] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 758.673757][T20925] jbd2_journal_init_inode: Cannot locate journal superblock [ 758.681078][T20925] EXT4-fs (loop7): Could not load journal inode [ 759.742932][T20942] loop7: detected capacity change from 0 to 256 [ 759.755101][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4161'. [ 759.830194][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4164'. [ 760.025840][T20951] mmap: syz.7.4166 (20951): VmData 17580032 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 760.228967][T20921] Bluetooth: hci0: command 0x1003 tx timeout [ 760.230479][ T4027] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 760.352319][T20960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4168'. [ 760.382711][T20962] loop9: detected capacity change from 0 to 512 [ 760.400868][T20962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.414116][T20962] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 760.425954][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 760.425971][ T28] audit: type=1400 audit(2000000664.505:21177): avc: denied { write } for pid=20961 comm="syz.9.4169" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 760.426959][T20962] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 760.468920][T20962] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.4169: corrupted inode contents [ 760.481088][T20962] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #16: comm syz.9.4169: mark_inode_dirty error [ 760.481202][ T28] audit: type=1400 audit(2000000664.565:21178): avc: denied { write } for pid=20961 comm="syz.9.4169" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 760.492773][T20962] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.4169: corrupted inode contents [ 760.492990][T20962] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.4169: mark_inode_dirty error [ 760.493171][T20962] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.4169: corrupted inode contents [ 760.493369][T20962] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.4169: mark_inode_dirty error [ 760.561823][T20962] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.4169: corrupted inode contents [ 760.574488][T20962] EXT4-fs error (device loop9): ext4_truncate:4691: inode #16: comm syz.9.4169: mark_inode_dirty error [ 760.586795][T20962] EXT4-fs error (device loop9) in ext4_setattr:6172: Corrupt filesystem [ 760.608994][T20290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.628830][ T4638] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 760.635066][ T4638] Bluetooth: hci2: command 0x1003 tx timeout [ 760.665990][T19701] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 760.792579][T20975] loop9: detected capacity change from 0 to 256 [ 760.805846][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4172'. [ 760.943146][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4175'. [ 761.132099][T20904] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.138371][T20920] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 761.355821][T21000] loop8: detected capacity change from 0 to 512 [ 761.363583][T21000] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 761.549568][T21004] ip6gre2: entered promiscuous mode [ 761.583623][T21004] ip6gre2: entered allmulticast mode [ 761.621331][ T4538] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 761.656060][ T4538] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 761.664195][T19386] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 761.769327][T19386] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 761.820613][T21009] loop7: detected capacity change from 0 to 256 [ 761.924430][T21009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4183'. [ 762.274161][T21032] ip6erspan1: entered allmulticast mode [ 762.295578][T21030] netlink: 272 bytes leftover after parsing attributes in process `syz.4.4191'. [ 762.332964][T21039] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4195'. [ 763.003875][T21049] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4196'. [ 763.037995][T19458] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 763.046858][ T28] audit: type=1400 audit(2000000666.496:21179): avc: denied { connect } for pid=21044 comm="syz.2.4198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 763.082101][T21052] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 763.102996][T21052] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 763.373166][ T28] audit: type=1400 audit(2000000667.177:21180): avc: denied { relabelto } for pid=21040 comm="syz.4.4196" name="222" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 763.407100][ T28] audit: type=1400 audit(2000000667.177:21181): avc: denied { associate } for pid=21040 comm="syz.4.4196" name="222" dev="tmpfs" ino=1198 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 763.514030][T21066] loop7: detected capacity change from 0 to 512 [ 763.603898][T21072] loop8: detected capacity change from 0 to 512 [ 763.614820][T21072] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4199: invalid indirect mapped block 11 (level 0) [ 763.628164][T21072] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 763.630801][T21072] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4199: attempt to clear invalid blocks 1024 len 1 [ 763.653197][T21072] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 763.653794][T21072] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 763.677453][T21072] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4199: invalid indirect mapped block 1819239214 (level 0) [ 763.691475][T21072] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 763.694835][T21072] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4199: invalid indirect mapped block 33554432 (level 2) [ 763.707624][ C0] EXT4-fs (loop8): error count since last fsck: 4 [ 763.707642][ C0] EXT4-fs (loop8): initial error at time 2000000667: ext4_free_branches:1023: inode 13 [ 763.707667][ C0] EXT4-fs (loop8): last error at time 2000000667: ext4_free_branches:1023: inode 13 [ 763.747045][T21072] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 763.754229][T21072] EXT4-fs (loop8): 1 truncate cleaned up [ 763.769968][T21072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.190028][ T28] audit: type=1400 audit(2000000668.277:21182): avc: denied { write } for pid=21054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.265982][ T28] audit: type=1400 audit(2000000668.347:21183): avc: denied { write } for pid=21088 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.503799][T21066] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 764.554376][T21066] EXT4-fs (loop7): 1 truncate cleaned up [ 764.603066][T21066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.745888][T18085] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.911409][T21104] netlink: 'syz.7.4209': attribute type 1 has an invalid length. [ 764.930734][T21104] bond1: entered promiscuous mode [ 764.935997][T21104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 765.315639][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4209'. [ 765.328201][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.367082][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4209'. [ 765.436346][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 765.956299][T21127] loop7: detected capacity change from 0 to 128 [ 766.103379][T21127] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 766.117676][T21127] FAT-fs (loop7): Filesystem has been set read-only [ 766.136382][T21121] loop9: detected capacity change from 0 to 1024 [ 766.169928][T21121] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 766.182465][T21121] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 766.208729][T21121] jbd2_journal_init_inode: Cannot locate journal superblock [ 766.216918][T21121] EXT4-fs (loop9): Could not load journal inode [ 766.226486][T21130] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 766.334154][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4219'. [ 766.356649][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4219'. [ 766.401516][ T28] audit: type=1400 audit(2000000670.488:21184): avc: denied { write } for pid=21134 comm="syz.7.4219" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 766.815912][T21143] loop8: detected capacity change from 0 to 512 [ 766.962271][T21143] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4220: invalid indirect mapped block 11 (level 0) [ 766.976683][T21143] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 766.983999][T21143] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4220: attempt to clear invalid blocks 1024 len 1 [ 766.993601][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 766.993700][ C1] EXT4-fs (loop8): initial error at time 2000000671: ext4_free_branches:1023: inode 13 [ 766.994081][ C1] EXT4-fs (loop8): last error at time 2000000671: ext4_free_branches:1023: inode 13 [ 767.038064][T21143] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 767.042391][T21143] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 767.068915][T21143] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4220: invalid indirect mapped block 1819239214 (level 0) [ 767.083719][T21143] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 767.089889][T21143] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4220: invalid indirect mapped block 33554432 (level 2) [ 767.114065][T21143] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 767.118943][T21143] EXT4-fs (loop8): 1 truncate cleaned up [ 767.144087][T21143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.189439][T21148] loop7: detected capacity change from 0 to 512 [ 767.205231][T21148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.342790][T21148] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.366696][ T28] audit: type=1400 audit(2000000671.449:21185): avc: denied { write } for pid=21144 comm="syz.7.4221" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 767.877699][T21170] bond0: (slave bond_slave_1): Releasing backup interface [ 768.396261][T21174] netlink: 128 bytes leftover after parsing attributes in process `syz.9.4224'. [ 768.428194][T21174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.448828][ T28] audit: type=1400 audit(2000000672.489:21186): avc: denied { write } for pid=21153 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.473627][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.534038][ T28] audit: type=1400 audit(2000000672.609:21187): avc: denied { write } for pid=21182 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 768.535628][T21177] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.4225'. [ 768.702568][T21195] loop8: detected capacity change from 0 to 1024 [ 768.733692][T21195] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 768.759666][T21195] EXT4-fs (loop8): required journal recovery suppressed and not mounted read-only [ 768.798875][T21195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4229'. [ 769.025717][ T28] audit: type=1400 audit(2000000673.100:21188): avc: denied { write } for pid=21194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 769.889369][T21230] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4235'. [ 769.943274][T21230] netlink: 328 bytes leftover after parsing attributes in process `syz.7.4235'. [ 770.002654][ T28] audit: type=1400 audit(2000000673.340:21189): avc: denied { write } for pid=21219 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.868020][ T28] audit: type=1400 audit(2000000674.950:21190): avc: denied { write } for pid=21227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 770.975653][ T28] audit: type=1400 audit(2000000675.061:21191): avc: denied { write } for pid=21255 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.024269][T21266] loop8: detected capacity change from 0 to 512 [ 771.049317][T21266] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 771.104825][ T4530] Bluetooth: hci0: Frame reassembly failed (-84) [ 771.138483][ T28] audit: type=1326 audit(2000000675.221:21192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 771.289042][ T28] audit: type=1326 audit(2000000675.221:21193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 771.336742][T21150] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.338435][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4253'. [ 771.416790][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 771.416817][ T28] audit: type=1326 audit(2000000675.501:21268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 771.647210][ T28] audit: type=1326 audit(2000000675.531:21269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 771.749996][ T28] audit: type=1326 audit(2000000675.531:21270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f855979dc02 code=0x7ffc0000 [ 771.897197][ T28] audit: type=1326 audit(2000000675.531:21271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f855979dc97 code=0x7ffc0000 [ 771.995123][ T28] audit: type=1326 audit(2000000675.531:21272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f855975ab91 code=0x7ffc0000 [ 772.059847][ T28] audit: type=1326 audit(2000000675.531:21273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f855979ec89 code=0x7ffc0000 [ 772.106015][ T28] audit: type=1326 audit(2000000675.531:21274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f855975abfb code=0x7ffc0000 [ 772.271609][ T28] audit: type=1326 audit(2000000675.531:21275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 772.312156][ T28] audit: type=1326 audit(2000000675.531:21276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 772.588835][ T28] audit: type=1326 audit(2000000675.531:21277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21280 comm="syz.2.4251" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f855975a2ec code=0x7ffc0000 [ 772.709858][T21303] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4258'. [ 772.743644][T21303] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4258'. [ 772.930556][T21310] lo speed is unknown, defaulting to 1000 [ 772.986270][T21307] loop8: detected capacity change from 0 to 1024 [ 773.004240][T21307] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 773.106280][T21307] EXT4-fs (loop8): group descriptors corrupted! [ 773.182416][ T4027] Bluetooth: hci0: command 0x1003 tx timeout [ 773.203138][T19701] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 773.229559][T21273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 773.271239][T21323] loop9: detected capacity change from 0 to 512 [ 773.295604][T21323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 773.308556][T21323] ext4 filesystem being mounted at /35/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.395031][T20290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 773.422340][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 773.467032][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 773.482739][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4268'. [ 773.494004][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 773.503605][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4267'. [ 773.503654][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4268'. [ 773.526575][T21334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4267'. [ 773.556795][T21307] lo speed is unknown, defaulting to 1000 [ 773.600855][T21334] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4267'. [ 773.611542][T14307] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.629017][T14307] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.648383][T21334] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4267'. [ 773.717948][T14307] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.727019][T14307] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.929982][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4272'. [ 773.982174][T21352] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4273'. [ 774.028237][T21353] loop9: detected capacity change from 0 to 512 [ 774.084103][T21351] loop8: detected capacity change from 0 to 512 [ 774.262516][T21351] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4271: invalid indirect mapped block 11 (level 0) [ 774.263206][T21353] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4270: invalid indirect mapped block 11 (level 0) [ 774.275807][T21351] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.276180][T21351] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.4271: attempt to clear invalid blocks 1024 len 1 [ 774.276275][T21351] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.313595][T21353] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.330458][T21351] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, [ 774.340303][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 774.340411][ C1] EXT4-fs (loop9): initial error at time 2000000678: ext4_free_branches:1023: inode 13 [ 774.340623][ C1] EXT4-fs (loop9): last error at time 2000000678: ext4_free_branches:1023: inode 13 [ 774.361963][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 774.367439][T21351] block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 774.376461][ C0] EXT4-fs (loop8): initial error at time 2000000678: ext4_free_branches:1023: inode 13 [ 774.376513][ C0] EXT4-fs (loop8): last error at time 2000000678: ext4_clear_blocks:876: inode 13 [ 774.414828][T21351] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4271: invalid indirect mapped block 1819239214 (level 0) [ 774.429322][T21351] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.440407][T21351] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4271: invalid indirect mapped block 33554432 (level 2) [ 774.464725][T21351] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.481883][T21353] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.4270: attempt to clear invalid blocks 1024 len 1 [ 774.505097][T21353] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.511680][T21353] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 774.538586][T21353] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4270: invalid indirect mapped block 1819239214 (level 0) [ 774.554024][T21353] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.555941][T21351] EXT4-fs (loop8): 1 truncate cleaned up [ 774.577968][T21353] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.4270: invalid indirect mapped block 33554432 (level 2) [ 774.592792][T21353] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 774.599357][T21353] EXT4-fs (loop9): 1 truncate cleaned up [ 774.646553][T21351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.766524][T21353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 774.906720][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.016520][T20290] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.165644][T21383] loop8: detected capacity change from 0 to 4096 [ 775.190222][T21383] EXT4-fs error (device loop8): ext4_init_orphan_info:583: comm syz.8.4284: inode #0: comm syz.8.4284: iget: illegal inode # [ 775.211108][T21383] loop8: lost filesystem error report for type 5 error -117 [ 775.211380][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 775.225206][ C0] EXT4-fs (loop8): initial error at time 2000000679: ext4_init_orphan_info:583 [ 775.234226][ C0] EXT4-fs (loop8): last error at time 2000000679: ext4_init_orphan_info:583 [ 775.244212][T21383] EXT4-fs (loop8): get orphan inode failed [ 775.250245][T21383] EXT4-fs (loop8): mount failed [ 775.498164][T21412] FAULT_INJECTION: forcing a failure. [ 775.498164][T21412] name failslab, interval 1, probability 0, space 0, times 0 [ 775.510949][T21412] CPU: 0 UID: 0 PID: 21412 Comm: syz.8.4293 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 775.510996][T21412] Tainted: [W]=WARN [ 775.511006][T21412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 775.511023][T21412] Call Trace: [ 775.511032][T21412] [ 775.511043][T21412] __dump_stack+0x1d/0x30 [ 775.511117][T21412] dump_stack_lvl+0x95/0xd0 [ 775.511147][T21412] dump_stack+0x15/0x1b [ 775.511172][T21412] should_fail_ex+0x25e/0x270 [ 775.511263][T21412] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 775.511338][T21412] should_failslab+0x8c/0xb0 [ 775.511373][T21412] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 775.511397][T21412] ? debugfs_alloc_inode+0x34/0x40 [ 775.511492][T21412] ? debugfs_alloc_inode+0x34/0x40 [ 775.511542][T21412] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 775.511570][T21412] debugfs_alloc_inode+0x34/0x40 [ 775.511595][T21412] alloc_inode+0x40/0x170 [ 775.511621][T21412] new_inode+0x1d/0xe0 [ 775.511701][T21412] __debugfs_create_file+0x97/0x2b0 [ 775.511732][T21412] debugfs_create_file_full+0x3f/0x60 [ 775.511779][T21412] ? __pfx_bond_setup+0x10/0x10 [ 775.511801][T21412] ref_tracker_dir_debugfs+0x10e/0x220 [ 775.511898][T21412] alloc_netdev_mqs+0x1a9/0xa90 [ 775.511941][T21412] rtnl_create_link+0x239/0x720 [ 775.511985][T21412] rtnl_newlink_create+0x175/0x650 [ 775.512067][T21412] ? security_capable+0x7b/0x90 [ 775.512112][T21412] ? netlink_ns_capable+0x86/0xa0 [ 775.512143][T21412] rtnl_newlink+0x1181/0x1400 [ 775.512180][T21412] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 775.512219][T21412] ? __rcu_read_unlock+0x4e/0x70 [ 775.512249][T21412] ? avc_has_perm_noaudit+0xa3/0x120 [ 775.512378][T21412] ? cred_has_capability+0x224/0x2a0 [ 775.512405][T21412] ? selinux_capable+0x31/0x40 [ 775.512434][T21412] ? security_capable+0x7b/0x90 [ 775.512517][T21412] ? ns_capable+0x80/0xb0 [ 775.512554][T21412] ? __pfx_rtnl_newlink+0x10/0x10 [ 775.512580][T21412] rtnetlink_rcv_msg+0x64b/0x720 [ 775.512610][T21412] netlink_rcv_skb+0x11e/0x220 [ 775.512677][T21412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 775.512709][T21412] rtnetlink_rcv+0x1c/0x30 [ 775.512732][T21412] netlink_unicast+0x5a7/0x680 [ 775.512758][T21412] netlink_sendmsg+0x5be/0x6f0 [ 775.512803][T21412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.512835][T21412] ____sys_sendmsg+0x532/0x580 [ 775.512878][T21412] ___sys_sendmsg+0x195/0x1e0 [ 775.512929][T21412] __x64_sys_sendmsg+0xd4/0x160 [ 775.513010][T21412] x64_sys_call+0x194c/0x3020 [ 775.513038][T21412] do_syscall_64+0x136/0x3c0 [ 775.513064][T21412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.513158][T21412] RIP: 0033:0x7f98ca0ade99 [ 775.513177][T21412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.513198][T21412] RSP: 002b:00007f98c8b07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.513221][T21412] RAX: ffffffffffffffda RBX: 00007f98ca335fa0 RCX: 00007f98ca0ade99 [ 775.513239][T21412] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 775.513331][T21412] RBP: 00007f98c8b07090 R08: 0000000000000000 R09: 0000000000000000 [ 775.513354][T21412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.513368][T21412] R13: 00007f98ca336038 R14: 00007f98ca335fa0 R15: 00007ffc265ae608 [ 775.513392][T21412] [ 775.847655][T21412] debugfs: out of free dentries, can not create file 'netdev@ffff8881282105e0' [ 775.943288][T21428] syzkaller0: entered promiscuous mode [ 775.948889][T21428] syzkaller0: entered allmulticast mode [ 776.547346][T21468] netlink: 'syz.9.4311': attribute type 1 has an invalid length. [ 776.570411][T21468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 776.591753][T21468] bond3: (slave geneve2): making interface the new active one [ 776.601490][T21468] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 776.617354][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 776.617374][ T28] audit: type=1400 audit(2000000680.703:21389): avc: denied { read } for pid=21477 comm="syz.8.4315" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 776.657397][T21479] loop8: detected capacity change from 0 to 2048 [ 776.681885][T21479] loop8: p1 < > p3 [ 776.686020][T21481] loop9: detected capacity change from 0 to 256 [ 776.688072][T21479] loop8: p3 size 134217728 extends beyond EOD, truncated [ 777.838843][T21511] bridge_slave_1: left allmulticast mode [ 777.853762][T21511] bridge_slave_1: left promiscuous mode [ 777.864647][T21511] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.891002][T21511] bridge_slave_0: left allmulticast mode [ 778.006683][T21511] bridge_slave_0: left promiscuous mode [ 778.012547][T21511] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.642232][ T28] audit: type=1326 audit(2000000682.734:21390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 778.914840][ T28] audit: type=1326 audit(2000000682.734:21391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 778.940469][ T28] audit: type=1326 audit(2000000682.734:21392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 778.966064][ T28] audit: type=1326 audit(2000000682.734:21393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 778.991682][ T28] audit: type=1326 audit(2000000682.734:21394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 779.022992][ T28] audit: type=1326 audit(2000000682.734:21395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 779.069872][ T28] audit: type=1326 audit(2000000682.734:21396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 779.107127][T21548] ip6gre1: entered promiscuous mode [ 779.118437][T21548] ip6gre1: entered allmulticast mode [ 779.190479][ T28] audit: type=1326 audit(2000000682.734:21397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 779.213855][T21546] __nla_validate_parse: 17 callbacks suppressed [ 779.213907][T21546] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4338'. [ 779.223843][ T28] audit: type=1326 audit(2000000682.774:21398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21537 comm="syz.2.4336" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f855979de99 code=0x7ffc0000 [ 779.554886][T21558] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4342'. [ 779.638883][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4343'. [ 779.827131][ T4538] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.835049][ T4538] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.849229][ T5340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 779.894828][T21566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4344'. [ 780.139147][T19446] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.196194][T21580] lo speed is unknown, defaulting to 1000 [ 780.362438][T21589] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4351'. [ 780.539402][T19446] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.093472][T21603] netlink: 'syz.2.4355': attribute type 21 has an invalid length. [ 781.219460][T21603] IPv6: NLM_F_CREATE should be specified when creating new route [ 781.336758][T21603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 781.344069][T21603] IPv6: NLM_F_CREATE should be set when creating new route [ 781.351342][T21603] IPv6: NLM_F_CREATE should be set when creating new route [ 781.358583][T21603] IPv6: NLM_F_CREATE should be set when creating new route [ 781.585242][T21620] loop8: detected capacity change from 0 to 256 [ 781.638407][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4359'. [ 781.731902][T21627] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4362'. [ 781.750470][T21630] loop8: detected capacity change from 0 to 512 [ 781.800889][T21630] SET target dimension over the limit! [ 781.900643][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4366'. [ 782.434714][T21663] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4376'. [ 782.480287][T21663] ip6gre1: entered promiscuous mode [ 782.491541][T21663] ip6gre1: entered allmulticast mode [ 782.575804][T21669] loop8: detected capacity change from 0 to 512 [ 782.614343][T21669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.644684][T21669] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.675191][ T28] kauditd_printk_skb: 229 callbacks suppressed [ 782.675212][ T28] audit: type=1400 audit(2000000686.766:21628): avc: denied { write } for pid=21668 comm="syz.8.4378" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 782.709117][T21669] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 782.756665][ T28] audit: type=1400 audit(2000000686.836:21629): avc: denied { write } for pid=21668 comm="syz.8.4378" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 782.783340][T21669] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.4378: corrupted inode contents [ 783.789789][T21669] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #16: comm syz.8.4378: mark_inode_dirty error [ 783.801738][T21669] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.4378: corrupted inode contents [ 783.814429][T21669] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.4378: mark_inode_dirty error [ 783.826336][T21669] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.4378: corrupted inode contents [ 784.137195][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 784.798753][T21669] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.4378: mark_inode_dirty error [ 784.811728][T21669] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.4378: corrupted inode contents [ 785.379773][T21675] syz.7.4379 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 785.394423][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.7.4379 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 785.394469][T21675] Tainted: [W]=WARN [ 785.394480][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.394499][T21675] Call Trace: [ 785.394509][T21675] [ 785.394517][T21675] __dump_stack+0x1d/0x30 [ 785.394543][T21675] dump_stack_lvl+0x95/0xd0 [ 785.394630][T21675] dump_stack+0x15/0x1b [ 785.394716][T21675] dump_header+0x80/0x240 [ 785.394745][T21675] oom_kill_process+0x295/0x350 [ 785.394794][T21675] out_of_memory+0x981/0xbc0 [ 785.394831][T21675] try_charge_memcg+0x621/0xa00 [ 785.394898][T21675] ? __rcu_read_unlock+0x4e/0x70 [ 785.394945][T21675] __memcg_kmem_charge_page+0x199/0x3a0 [ 785.394990][T21675] __alloc_frozen_pages_noprof+0x18a/0x350 [ 785.395035][T21675] alloc_pages_mpol+0xa9/0x1d0 [ 785.395131][T21675] alloc_pages_noprof+0x8f/0x140 [ 785.395171][T21675] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 785.395254][T21675] __kvmalloc_node_noprof+0x3a0/0x590 [ 785.395292][T21675] ? futex_hash_allocate+0x192/0x920 [ 785.395332][T21675] ? futex_hash_allocate+0x192/0x920 [ 785.395363][T21675] ? futex_hash_allocate+0x192/0x920 [ 785.395443][T21675] futex_hash_allocate+0x192/0x920 [ 785.395466][T21675] ? cap_task_prctl+0x13f/0x6b0 [ 785.395654][T21675] futex_hash_prctl+0xd8/0xf0 [ 785.395756][T21675] __se_sys_prctl+0x4f4/0x13b0 [ 785.395795][T21675] __x64_sys_prctl+0x67/0x80 [ 785.395855][T21675] x64_sys_call+0x2533/0x3020 [ 785.395888][T21675] do_syscall_64+0x136/0x3c0 [ 785.395919][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.395957][T21675] RIP: 0033:0x7f643d01de99 [ 785.396014][T21675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.396038][T21675] RSP: 002b:00007f643ba77028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 785.396065][T21675] RAX: ffffffffffffffda RBX: 00007f643d2a5fa0 RCX: 00007f643d01de99 [ 785.396085][T21675] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 785.396103][T21675] RBP: 00007f643d0b3eaf R08: 0000000000000000 R09: 0000000000000000 [ 785.396121][T21675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.396137][T21675] R13: 00007f643d2a6038 R14: 00007f643d2a5fa0 R15: 00007ffedc8f5198 [ 785.396214][T21675] [ 785.396223][T21675] memory: usage 307200kB, limit 307200kB, failcnt 114 [ 785.639896][T21675] memory+swap: usage 386088kB, limit 9007199254740988kB, failcnt 0 [ 785.647912][T21675] kmem: usage 306620kB, limit 9007199254740988kB, failcnt 0 [ 785.655240][T21675] Memory cgroup stats for /syz7: [ 785.655521][T21675] cache 593920 [ 785.663905][T21675] rss 0 [ 785.667336][T21675] shmem 8192 [ 785.670557][T21675] mapped_file 8192 [ 785.674319][T21675] dirty 0 [ 785.677323][T21675] writeback 0 [ 785.680627][T21675] workingset_refault_anon 3848 [ 785.685409][T21675] workingset_refault_file 0 [ 785.689966][T21675] swap 80781312 [ 785.693453][T21675] swapcached 103059456 [ 785.698165][T21675] pgpgin 242646 [ 785.701648][T21675] pgpgout 242501 [ 785.705211][T21675] pgfault 187701 [ 785.708799][T21675] pgmajfault 404 [ 785.712370][T21675] inactive_anon 0 [ 785.716029][T21675] active_anon 0 [ 785.719560][T21675] inactive_file 245760 [ 785.723647][T21675] active_file 270336 [ 785.728313][T21675] unevictable 8192 [ 785.732102][T21675] hierarchical_memory_limit 314572800 [ 785.737569][T21675] hierarchical_memsw_limit 9223372036854771712 [ 785.743747][T21675] total_cache 593920 [ 785.747688][T21675] total_rss 0 [ 785.750997][T21675] total_shmem 8192 [ 785.754816][T21675] total_mapped_file 8192 [ 785.759746][T21675] total_dirty 0 [ 785.763226][T21675] total_writeback 0 [ 785.767083][T21675] total_workingset_refault_anon 3848 [ 785.772417][T21675] total_workingset_refault_file 0 [ 785.777490][T21675] total_swap 80781312 [ 785.831720][T21675] total_swapcached 103059456 [ 785.836441][T21675] total_pgpgin 242646 [ 785.840515][T21675] total_pgpgout 242501 [ 785.844734][T21675] total_pgfault 187701 [ 785.849494][T21675] total_pgmajfault 404 [ 785.853585][T21675] total_inactive_anon 0 [ 785.857839][T21675] total_active_anon 0 [ 785.861893][T21675] total_inactive_file 245760 [ 785.866606][T21675] total_active_file 270336 [ 785.871047][T21675] total_unevictable 8192 [ 785.875312][T21675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3650,pid=18550,uid=0 [ 785.890941][T21675] Memory cgroup out of memory: Killed process 18550 (syz.7.3650) total-vm:94048kB, anon-rss:1240kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 785.909988][T21669] EXT4-fs error (device loop8): ext4_truncate:4691: inode #16: comm syz.8.4378: mark_inode_dirty error [ 786.035318][T21675] syz.7.4379 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 786.049908][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.7.4379 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 786.049941][T21675] Tainted: [W]=WARN [ 786.049948][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 786.049961][T21675] Call Trace: [ 786.049989][T21675] [ 786.050001][T21675] __dump_stack+0x1d/0x30 [ 786.050034][T21675] dump_stack_lvl+0x95/0xd0 [ 786.050065][T21675] dump_stack+0x15/0x1b [ 786.050109][T21675] dump_header+0x80/0x240 [ 786.050150][T21675] oom_kill_process+0x295/0x350 [ 786.050210][T21675] out_of_memory+0x981/0xbc0 [ 786.050256][T21675] try_charge_memcg+0x621/0xa00 [ 786.050283][T21675] ? __rcu_read_unlock+0x4e/0x70 [ 786.050391][T21675] __memcg_kmem_charge_page+0x199/0x3a0 [ 786.050435][T21675] __alloc_frozen_pages_noprof+0x18a/0x350 [ 786.050479][T21675] alloc_pages_mpol+0xa9/0x1d0 [ 786.050539][T21675] alloc_pages_noprof+0x8f/0x140 [ 786.050640][T21675] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 786.050691][T21675] __kvmalloc_node_noprof+0x3a0/0x590 [ 786.050724][T21675] ? futex_hash_allocate+0x192/0x920 [ 786.050795][T21675] ? futex_hash_allocate+0x192/0x920 [ 786.050825][T21675] ? futex_hash_allocate+0x192/0x920 [ 786.050858][T21675] futex_hash_allocate+0x192/0x920 [ 786.050890][T21675] ? cap_task_prctl+0x13f/0x6b0 [ 786.050940][T21675] futex_hash_prctl+0xd8/0xf0 [ 786.050976][T21675] __se_sys_prctl+0x4f4/0x13b0 [ 786.051016][T21675] __x64_sys_prctl+0x67/0x80 [ 786.051091][T21675] x64_sys_call+0x2533/0x3020 [ 786.051194][T21675] do_syscall_64+0x136/0x3c0 [ 786.051228][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.051410][T21675] RIP: 0033:0x7f643d01de99 [ 786.051432][T21675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.051458][T21675] RSP: 002b:00007f643ba77028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 786.051483][T21675] RAX: ffffffffffffffda RBX: 00007f643d2a5fa0 RCX: 00007f643d01de99 [ 786.051498][T21675] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 786.051543][T21675] RBP: 00007f643d0b3eaf R08: 0000000000000000 R09: 0000000000000000 [ 786.051561][T21675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.051605][T21675] R13: 00007f643d2a6038 R14: 00007f643d2a5fa0 R15: 00007ffedc8f5198 [ 786.051625][T21675] [ 786.051633][T21675] memory: usage 307200kB, limit 307200kB, failcnt 168 [ 786.296905][T21675] memory+swap: usage 386088kB, limit 9007199254740988kB, failcnt 0 [ 786.304832][T21675] kmem: usage 306620kB, limit 9007199254740988kB, failcnt 0 [ 786.312180][T21675] Memory cgroup stats for /syz7: [ 786.312465][T21675] cache 593920 [ 786.321553][T21675] rss 0 [ 786.324338][T21675] shmem 8192 [ 786.327613][T21675] mapped_file 8192 [ 786.331388][T21675] dirty 0 [ 786.334397][T21675] writeback 0 [ 786.337782][T21675] workingset_refault_anon 3848 [ 786.342681][T21675] workingset_refault_file 0 [ 786.347941][T21675] swap 80781312 [ 786.351426][T21675] swapcached 103059456 [ 786.355531][T21675] pgpgin 242646 [ 786.359063][T21675] pgpgout 242501 [ 786.362688][T21675] pgfault 187701 [ 786.366302][T21675] pgmajfault 404 [ 786.369884][T21675] inactive_anon 0 [ 786.373541][T21675] active_anon 0 [ 786.377657][T21675] inactive_file 438272 [ 786.381751][T21675] active_file 147456 [ 786.385665][T21675] unevictable 8192 [ 786.389479][T21675] hierarchical_memory_limit 314572800 [ 786.394872][T21675] hierarchical_memsw_limit 9223372036854771712 [ 786.401065][T21675] total_cache 593920 [ 786.405066][T21675] total_rss 0 [ 786.409109][T21675] total_shmem 8192 [ 786.412857][T21675] total_mapped_file 8192 [ 786.417140][T21675] total_dirty 0 [ 786.420618][T21675] total_writeback 0 [ 786.424521][T21675] total_workingset_refault_anon 3848 [ 786.429946][T21675] total_workingset_refault_file 0 [ 786.435093][T21675] total_swap 80781312 [ 786.439819][T21675] total_swapcached 103059456 [ 786.444438][T21675] total_pgpgin 242646 [ 786.448462][T21675] total_pgpgout 242501 [ 786.452615][T21675] total_pgfault 187701 [ 786.456732][T21675] total_pgmajfault 404 [ 786.460831][T21675] total_inactive_anon 0 [ 786.465027][T21675] total_active_anon 0 [ 786.469729][T21675] total_inactive_file 438272 [ 786.474346][T21675] total_active_file 147456 [ 786.478832][T21675] total_unevictable 8192 [ 786.483165][T21675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3877,pid=19786,uid=0 [ 786.498572][T21675] Memory cgroup out of memory: Killed process 19786 (syz.7.3877) total-vm:94048kB, anon-rss:1236kB, file-rss:20484kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 786.969709][T21675] syz.7.4379 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 786.983662][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.7.4379 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 786.983727][T21675] Tainted: [W]=WARN [ 786.983737][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 786.983755][T21675] Call Trace: [ 786.983818][T21675] [ 786.983827][T21675] __dump_stack+0x1d/0x30 [ 786.983856][T21675] dump_stack_lvl+0x95/0xd0 [ 786.983885][T21675] dump_stack+0x15/0x1b [ 786.983912][T21675] dump_header+0x80/0x240 [ 786.983943][T21675] oom_kill_process+0x295/0x350 [ 786.984067][T21675] out_of_memory+0x981/0xbc0 [ 786.984113][T21675] try_charge_memcg+0x621/0xa00 [ 786.984217][T21675] ? __rcu_read_unlock+0x4e/0x70 [ 786.984315][T21675] __memcg_kmem_charge_page+0x199/0x3a0 [ 786.984487][T21675] __alloc_frozen_pages_noprof+0x18a/0x350 [ 786.984556][T21675] alloc_pages_mpol+0xa9/0x1d0 [ 786.984659][T21675] alloc_pages_noprof+0x8f/0x140 [ 786.984691][T21675] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 786.984737][T21675] __kvmalloc_node_noprof+0x3a0/0x590 [ 786.984778][T21675] ? futex_hash_allocate+0x192/0x920 [ 786.984808][T21675] ? futex_hash_allocate+0x192/0x920 [ 786.984880][T21675] ? futex_hash_allocate+0x192/0x920 [ 786.984913][T21675] futex_hash_allocate+0x192/0x920 [ 786.985004][T21675] ? cap_task_prctl+0x13f/0x6b0 [ 786.985054][T21675] futex_hash_prctl+0xd8/0xf0 [ 786.985084][T21675] __se_sys_prctl+0x4f4/0x13b0 [ 786.985162][T21675] __x64_sys_prctl+0x67/0x80 [ 786.985273][T21675] x64_sys_call+0x2533/0x3020 [ 786.985306][T21675] do_syscall_64+0x136/0x3c0 [ 786.985420][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.985452][T21675] RIP: 0033:0x7f643d01de99 [ 786.985478][T21675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.985509][T21675] RSP: 002b:00007f643ba77028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 786.985623][T21675] RAX: ffffffffffffffda RBX: 00007f643d2a5fa0 RCX: 00007f643d01de99 [ 786.985663][T21675] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 786.985681][T21675] RBP: 00007f643d0b3eaf R08: 0000000000000000 R09: 0000000000000000 [ 786.985700][T21675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.985754][T21675] R13: 00007f643d2a6038 R14: 00007f643d2a5fa0 R15: 00007ffedc8f5198 [ 786.985861][T21675] [ 787.217378][T21675] memory: usage 307200kB, limit 307200kB, failcnt 277 [ 787.224172][T21675] memory+swap: usage 385740kB, limit 9007199254740988kB, failcnt 0 [ 787.232198][T21675] kmem: usage 306620kB, limit 9007199254740988kB, failcnt 0 [ 787.239607][T21675] Memory cgroup stats for /syz7: [ 787.240047][T21675] cache 593920 [ 787.249065][T21675] rss 0 [ 787.251854][T21675] shmem 8192 [ 787.255143][T21675] mapped_file 8192 [ 787.258981][T21675] dirty 0 [ 787.261947][T21675] writeback 0 [ 787.265250][T21675] workingset_refault_anon 3848 [ 787.270114][T21675] workingset_refault_file 0 [ 787.274641][T21675] swap 80424960 [ 787.278781][T21675] swapcached 103059456 [ 787.282920][T21675] pgpgin 242646 [ 787.286420][T21675] pgpgout 242501 [ 787.289986][T21675] pgfault 187701 [ 787.293558][T21675] pgmajfault 404 [ 787.297216][T21675] inactive_anon 0 [ 787.300895][T21675] active_anon 0 [ 787.304496][T21675] inactive_file 417792 [ 787.309314][T21675] active_file 106496 [ 787.313267][T21675] unevictable 8192 [ 787.317036][T21675] hierarchical_memory_limit 314572800 [ 787.322434][T21675] hierarchical_memsw_limit 9223372036854771712 [ 787.328633][T21675] total_cache 593920 [ 787.332548][T21675] total_rss 0 [ 787.336637][T21675] total_shmem 8192 [ 787.340381][T21675] total_mapped_file 8192 [ 787.344639][T21675] total_dirty 0 [ 787.348225][T21675] total_writeback 0 [ 787.352051][T21675] total_workingset_refault_anon 3848 [ 787.357446][T21675] total_workingset_refault_file 0 [ 787.362497][T21675] total_swap 80424960 [ 787.367216][T21675] total_swapcached 103059456 [ 787.371829][T21675] total_pgpgin 242646 [ 787.375849][T21675] total_pgpgout 242501 [ 787.380004][T21675] total_pgfault 187701 [ 787.384091][T21675] total_pgmajfault 404 [ 787.388193][T21675] total_inactive_anon 0 [ 787.392370][T21675] total_active_anon 0 [ 787.397113][T21675] total_inactive_file 417792 [ 787.401797][T21675] total_active_file 106496 [ 787.406277][T21675] total_unevictable 8192 [ 787.410589][T21675] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4379,pid=21674,uid=0 [ 787.426067][T21675] Memory cgroup out of memory: Killed process 21674 (syz.7.4379) total-vm:91044kB, anon-rss:1236kB, file-rss:21600kB, shmem-rss:8kB, UID:0 pgtables:144kB oom_score_adj:0 [ 787.515317][T21675] ================================================================== [ 787.523473][T21675] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 787.533335][T21675] [ 787.535684][T21675] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1: [ 787.543783][T21675] tick_do_update_jiffies64+0x113/0x1c0 [ 787.549377][T21675] tick_nohz_handler+0x88/0x380 [ 787.554275][T21675] __hrtimer_run_queues+0x1f8/0x510 [ 787.559529][T21675] hrtimer_interrupt+0x257/0x810 [ 787.564520][T21675] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 787.570456][T21675] sysvec_apic_timer_interrupt+0x6f/0x80 [ 787.576149][T21675] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 787.582163][T21675] __sanitizer_cov_trace_pc+0x8/0x70 [ 787.587508][T21675] shrink_folio_list+0x1e26/0x2780 [ 787.592668][T21675] evict_folios+0x20e2/0x2d80 [ 787.597409][T21675] try_to_shrink_lruvec+0x7c5/0xb10 [ 787.602648][T21675] shrink_lruvec+0x25e/0x1b60 [ 787.607397][T21675] shrink_node+0x69d/0x20f0 [ 787.611950][T21675] do_try_to_free_pages+0x408/0xc90 [ 787.617199][T21675] try_to_free_mem_cgroup_pages+0x201/0x420 [ 787.623141][T21675] try_charge_memcg+0x375/0xa00 [ 787.628032][T21675] __memcg_kmem_charge_page+0x199/0x3a0 [ 787.633641][T21675] __alloc_frozen_pages_noprof+0x18a/0x350 [ 787.639519][T21675] alloc_pages_mpol+0xa9/0x1d0 [ 787.644340][T21675] alloc_pages_noprof+0x8f/0x140 [ 787.649365][T21675] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 787.655349][T21675] __kvmalloc_node_noprof+0x3a0/0x590 [ 787.660784][T21675] futex_hash_allocate+0x192/0x920 [ 787.665937][T21675] futex_hash_prctl+0xd8/0xf0 [ 787.670657][T21675] __se_sys_prctl+0x4f4/0x13b0 [ 787.675460][T21675] __x64_sys_prctl+0x67/0x80 [ 787.680091][T21675] x64_sys_call+0x2533/0x3020 [ 787.684825][T21675] do_syscall_64+0x136/0x3c0 [ 787.689459][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.695389][T21675] [ 787.697739][T21675] read to 0xffffffff86c07a00 of 8 bytes by task 21675 on cpu 0: [ 787.705392][T21675] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 787.711692][T21675] count_shadow_nodes+0x6a/0x250 [ 787.716683][T21675] do_shrink_slab+0x61/0x650 [ 787.721319][T21675] shrink_slab+0x53b/0x8e0 [ 787.725788][T21675] shrink_node+0x6d9/0x20f0 [ 787.730340][T21675] do_try_to_free_pages+0x408/0xc90 [ 787.735587][T21675] try_to_free_mem_cgroup_pages+0x201/0x420 [ 787.741530][T21675] try_charge_memcg+0x375/0xa00 [ 787.746416][T21675] __memcg_kmem_charge_page+0x199/0x3a0 [ 787.752015][T21675] __alloc_frozen_pages_noprof+0x18a/0x350 [ 787.757881][T21675] alloc_pages_mpol+0xa9/0x1d0 [ 787.762682][T21675] alloc_pages_noprof+0x8f/0x140 [ 787.767671][T21675] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 787.773632][T21675] __kvmalloc_node_noprof+0x3a0/0x590 [ 787.779051][T21675] futex_hash_allocate+0x192/0x920 [ 787.784280][T21675] futex_hash_prctl+0xd8/0xf0 [ 787.789003][T21675] __se_sys_prctl+0x4f4/0x13b0 [ 787.793817][T21675] __x64_sys_prctl+0x67/0x80 [ 787.798455][T21675] x64_sys_call+0x2533/0x3020 [ 787.803211][T21675] do_syscall_64+0x136/0x3c0 [ 787.807875][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.813820][T21675] [ 787.816168][T21675] value changed: 0x000000010000be41 -> 0x000000010000be42 [ 787.823302][T21675] [ 787.825649][T21675] Reported by Kernel Concurrency Sanitizer on: [ 787.831825][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.7.4379 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 787.842802][T21675] Tainted: [W]=WARN [ 787.846638][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 787.856725][T21675] ================================================================== [ 787.938024][T21675] syz.7.4379 (21675) used greatest stack depth: 8520 bytes left [ 787.986585][T21669] EXT4-fs error (device loop8) in ext4_setattr:6172: Corrupt filesystem [ 788.047672][T19223] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.414387][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 793.252472][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!