last executing test programs: 2m54.402407608s ago: executing program 3 (id=648): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x2b, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000180)={[{@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@commit={'commit', 0x3d, 0x8000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa}}, {@resgid}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x4a0, &(0x7f0000001880)="$eJzs289rHFUcAPDvTLKb1v5IrPVHa9VoEYJi0qRVe/CiVBCpKOihHmOyLaXbRpoothabingSpKBn8Sj6F3gTQdST4NWTJykU7aWtp8jMzuTHNtnEZptNk88Hdve9mTeZ992Z9/bte5sANq3+7CmJ2B4Rf0REbyO7sEB/4+XGtQtjN69dGEtiZubNv5O83PVrF8bKouVx24rMQBqRfpIUJ1lo8tz5U6P1eu1skR+aOv3u0OS588+8f3r0RO1E7czI4cOHDg4//9zIs22JM4vr+t6PJvbteeXty6+NHbv8zi/fZfXdXuyfH0e79GeB/zOTa973ZLtP1mE78uee/Dnp7nBlWLGuiMguVyVv/73RFXMXrzde/rijlQPuqOyzqWfp3dMzwAaWxEpLVub1GcDdr/ygz77/lo81GHasG1dfbHwByuK+UTwae7ojLcpUZr/ftl9/RByb/ver7BF3aB4CAGC+z8a+PFqNnvjw5revZmOP3tk9aTyQv/6ZP+8s1lD6IuLeiNgVEfdFxO6IuD8iL/tgRDy0yvrcOv5Jr6zyT7aUjf9eKNa2Fo7/ytFf9HUVuR15/JXk+Ml67UDxngxEpSfLD7c4xw9Hfv98qX3zx3/ZIzt/ORYs6nGlu2mCbnx0ajQqq4l6ztVLEXu7F4s/mV0JSCJiT0TsnT1qRQs8O8vEyae+2bdUoeXjb6EN60wzX2fhTWfxT0dT/KVkbn0yuxLN65NDW6JeOzBU3hW3+vW3T9+4dWujpa0q/ja4Wmu8zrv+zUX6kvnrtZPtPf9t3v9pNXkrX2euFmuOH4xOTZ0djqgmR/N8tSibbx+ZO7bMl+Wz+39g/+Ltf1dxTBb/wxGR3cSPRMSjEfFYUffHI+KJiNjfIsafX1o+/kg7dP0vRYwv2v/N3v9N1//c+VNl1zi3pWWi69RP3y91/pVd/0N5aqDYkvd/y1isOt2LVPl23zcAAAC4m6T5b+CTdHA2naaDg43f8O+Oe9L6xOTU08cn3jsz3vitfF9U0nKmq7eYD62frNeGk+niL1aSI1GvjRRzxeV86cFi3viLrq15fnBsoj7e4dhhs9u2RPvP/NXV6doBd9jWRbeOVNe8IkAHNK+jpwuzF18PnQFsVP5fGzavZdp/ulb1ANZei/ZvChA2uMXa/8WmvI4ANibf/2Hz0v5hk0p/7HQNgA7y+Q+b0rL/vN+ZxJb5W6qtC1fXSZ3blliji1KNiP9/VESZSDv+Rq33RCXWRTVuL7FUj7FlbTsoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVfovAAD//5TO1gg=") 2m53.466706119s ago: executing program 3 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4, 0x0, 0x8400}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 2m53.39868396s ago: executing program 3 (id=654): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r1 = socket(0x40000000015, 0x805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6e, 0x9, [0x4, 0x0, 0x7]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}]}, 0x48) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) 2m52.759673097s ago: executing program 3 (id=659): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x59, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xea, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x9, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd}, 0x48) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r5, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = syz_io_uring_setup(0x5b30, &(0x7f0000000940)={0x0, 0x17c21, 0x1000, 0x0, 0x1000001}, &(0x7f0000000c00), &(0x7f0000000040), &(0x7f0000000000)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000380)=r8, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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"/355, @ANYRESOCT, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) sendfile(r9, r9, 0x0, 0x7a680000) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000840)={{{@in=@multicast1, @in6}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000800)=0xe8) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r10, &(0x7f0000000180)='1\x00', 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e001322ca3edd43e95e00040700000000000000", @ANYRES32=0x1, @ANYBLOB="03000000000000001000"/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x20000003}, 0xffffffff}}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000002c0)={0x1, 0x2, 0x1000, 0xef, &(0x7f0000000180)="538c0cb8d1993ba24a35bcd1584224bd2d24cc33c105d4ff48fcd986072f805736592729f6b8803d23549edcb2e938e80529b03f03934c912dee4cfc8274f982bd758cc3f14408abe569bf2d374bbb8e82b7f04f5b3c7eed5691383758cb40561a22ab9e0d9b28935242aef893a6f3bdf3b77d8ff1368fc83d391b4cbb0d79b5310219309d4f1f5de3fcfe9d743b0a31e66871dc79646b0c8fe583e1c9377a3d851510ca81a46590ab9f70101ed6793ebf81b56540526d3a8f97ca486682f6b2cb3fd54139bc9ee26f955d10d8e1ca22ed5e7b9a93b155625fa43e6071d177e132b3237abd7b4a548201689aa28b28", 0x1b, 0x0, &(0x7f0000000280)="5e899a61b847232e49b7a887c6cf15ed2860339cd81624cc4cb722"}) syz_clone(0x41000300, 0x0, 0x0, 0x0, 0x0, 0x0) 2m52.252252183s ago: executing program 3 (id=662): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r1 = socket(0x40000000015, 0x805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6e, 0x9, [0x4, 0x0, 0x7]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}]}, 0x48) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) dup(r5) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) 2m52.066149255s ago: executing program 3 (id=666): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r1, &(0x7f0000000180), 0x0, 0x0, 0x8800) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="83040500000000002800128008000100736974001c00028006000f0001000000060011004e21000008000300ac1414aa"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xe4, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xb4, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x80000000}, @TCA_GRED_MAX_P={0x8, 0x4, 0x40d8}, @TCA_GRED_PARMS={0x38, 0x1, {0x72, 0xb4b, 0x5, 0x9, 0x4, 0x9, 0xb0aa, 0x9a, 0x9, 0x0, 0x13, 0xb, 0x6, 0x0, 0x1, 0x2c27}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xc}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0x6, 0x1, 0x1}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xe8a}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x227c0e49, 0x3b67, 0xe, 0x2, 0x9, 0xff, 0x6, 0x80000000, 0x3ff, 0x12, 0x1a, 0x5, 0x5, 0x3, 0x1ff}}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0xb, 0x1, 0x5}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r6 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) lsetxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x1) renameat2(r5, 0x0, r6, 0x0, 0x2) 2m51.6548299s ago: executing program 32 (id=666): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r1, &(0x7f0000000180), 0x0, 0x0, 0x8800) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="83040500000000002800128008000100736974001c00028006000f0001000000060011004e21000008000300ac1414aa"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xe4, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x6, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xb4, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x80000000}, @TCA_GRED_MAX_P={0x8, 0x4, 0x40d8}, @TCA_GRED_PARMS={0x38, 0x1, {0x72, 0xb4b, 0x5, 0x9, 0x4, 0x9, 0xb0aa, 0x9a, 0x9, 0x0, 0x13, 0xb, 0x6, 0x0, 0x1, 0x2c27}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xc}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0x6, 0x1, 0x1}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xe8a}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x227c0e49, 0x3b67, 0xe, 0x2, 0x9, 0xff, 0x6, 0x80000000, 0x3ff, 0x12, 0x1a, 0x5, 0x5, 0x3, 0x1ff}}, @TCA_GRED_DPS={0x10, 0x3, {0x10, 0xb, 0x1, 0x5}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") r6 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) lsetxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)='system_u:object_r:apt_var_log_t:s0\x00', 0x23, 0x1) renameat2(r5, 0x0, r6, 0x0, 0x2) 1m56.356041971s ago: executing program 5 (id=1050): socket$inet6_sctp(0xa, 0x5, 0x84) utimes(0x0, &(0x7f0000000080)={{0x0, 0xea60}, {0x0, 0x2710}}) socket(0x1, 0x803, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'wg0\x00', {}, 0x81}) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x1b35c2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@loopback, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, 0x0) stat(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r3, 0x0, 0x4000000) 1m56.355455821s ago: executing program 5 (id=1051): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='(\"@]K@{.\"\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20, 0x80, 0x29}, {0x8, 0x10, 0x100000002, 0x0, 0x7ff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x0, 0x2, 0xffffffffffffffff}, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) pipe(&(0x7f0000000380)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x324}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) preadv(r3, &(0x7f0000001400)=[{&(0x7f00000012c0)=""/136, 0x88}], 0x1, 0x5, 0x0) 1m56.193422793s ago: executing program 5 (id=1054): socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f00003fd000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = socket(0x2b, 0xda310c6b68c0fca7, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x3d, 0x40, 0x67, 0x0, 0x7f, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x8, 0x0, 0x1, 0x1, 0x4, 0x1, 0xfffa, 0x7ff, 0x2, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x4, 0xffffffff}}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m55.728038618s ago: executing program 5 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffcd, 0x0, 0x0, 0x42}, 0x90) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x300) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x342}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x20000000, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010004b4ed6bdf048e9463cd504000000", @ANYRES32=0x0, @ANYBLOB="40180000042c0400240012800b00010062726964676500001400028005002b0002000000080004"], 0x44}}, 0x24) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe7d, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x7, 0xfff2}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m53.06645183s ago: executing program 5 (id=1072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x70bd26, 0xfffffffd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4811}, 0x0) 1m51.762074435s ago: executing program 5 (id=1084): socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f00003fd000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r2 = socket(0x2b, 0xda310c6b68c0fca7, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x3d, 0x40, 0x67, 0x0, 0x7f, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x8, 0x0, 0x1, 0x1, 0x4, 0x1, 0xfffa, 0x7ff, 0x2, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x4, 0xffffffff}}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m51.718856446s ago: executing program 33 (id=1084): socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f00003fd000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) r2 = socket(0x2b, 0xda310c6b68c0fca7, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000580)={@local, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x3d, 0x40, 0x67, 0x0, 0x7f, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xb, 0x3, 0x2, 0x8, 0x0, 0x1, 0x1, 0x4, 0x1, 0xfffa, 0x7ff, 0x2, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x4, 0xffffffff}}}}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1m22.573159209s ago: executing program 6 (id=1331): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x4, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1m22.059139845s ago: executing program 6 (id=1333): io_setup(0x0, &(0x7f0000000000)) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="c5d8c0402c0d70984e7ddd4e725489a895a91aadaccd92467f45aa3afdd0600f3773580f0422c35694a882324f7fbca26ba758a2b11999ff71f882d88bf41154ddb211360bcf", 0x46}], 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x23032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x2, 0x1224, 0x40000, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0xffff9b0f, @local}, 0x1c) 1m21.906293096s ago: executing program 6 (id=1335): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r1 = socket(0x40000000015, 0x805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6e, 0x9, [0x4, 0x0, 0x7]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}]}, 0x48) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) dup(r5) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) 1m21.069051276s ago: executing program 6 (id=1341): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs\x00', 0x1ff) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f000061c000/0x1000)=nil, 0x1000, 0xa) r2 = openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x74bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x8, 0xbe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6, 0x3, 0x1, 0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x96c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x4004000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400080, 0x0) getpeername$packet(r2, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'ip6_vti0\x00', r9, 0x0, 0x1, 0xf, 0x0, 0x42, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1, 0x20, 0x1, 0x8, 0xfffffffc}}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000a40)={0x0, 0x1, 0x0, [{0x5, 0x9, 0x100, 0x7, 0x4, 0x81, 0x1, '\x00', 0x4}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x8, 0x3a, 0xff, @empty, @local, {[], @echo_request={0x80, 0x0, 0x0, 0x7ff, 0x7}}}}}}, 0x0) 1m20.985004507s ago: executing program 6 (id=1342): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x6}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000ff1085001300070000009500"/25, @ANYRESDEC=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x7, 0x7, @mcast2, 0x3}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="a600040000000000002356d7d60a2c56a12dcf9f3bf21e74294d7b00eea5bcc0653cb5fe3c0efa9e10000000a099e230c705572637426bf075f42ad002b7eb91973001e16bff08ebdb405a9ad6be86d2d2f1f87e5156311ffbeb839e9b63fbc6e2bd2c9943b808211b210cc29313b6a1eb197ed9b52c6e05a346c97d1f777d717ad911d4a9e71293b3b00736814bb5747b591ea077ac7f9959c141329abe", 0x9e}, {&(0x7f00000001c0)}], 0x2}, 0x20008b88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7c1afa6b76001fe2156a0a7c8e9c7397"}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'erspan0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x80, 0x718, 0xfffffff9, 0xda3a0000, {{0x11, 0x4, 0x0, 0x35, 0x44, 0x64, 0x0, 0x8, 0x2, 0x0, @local, @remote, {[@ssrr={0x89, 0x1f, 0xf, [@rand_addr=0x64010101, @remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp={0x44, 0x10, 0x6c, 0x0, 0x8, [0x8, 0x10000, 0x1]}]}}}}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)}, 0x40080) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000606080200000000000000000000000131000000000900020073797a3200"/44], 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x4008001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x5ae) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x7, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) 1m20.840132729s ago: executing program 6 (id=1344): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x100, 0x2, [0x38, 0x8, 0x13, 0x3b, 0x3c, 0xb, 0x31, 0x36, 0x37, 0x1b, 0x3d, 0x17, 0x12, 0x1e, 0x13, 0x2f], 0x0, 0x1, 0x80}}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x16, 0x1, 0x1}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xc3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x4, 0x2, 0x0, 0x6], 0x5, 0x3}, {0x3, [0x3, 0x0, 0x1, 0x0, 0x2], 0x4, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x1, 0x1}, {0x3, 0x6, 0x2}, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810) 1m18.620102725s ago: executing program 1 (id=1357): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20008840) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x3b, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x5) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000004c0)={0x5, 0x6, 0xffff7fff, 0x7, 0x1, 0x401}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000100)={0xd, 0x3c4e, 0x4f9c, 0x8, 0x8, 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0xfffffffffffffe85, 0x0, 0x0, 0x40, 0xe, 0x0, 0x4, 0x2133, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x300000, 0x2, @perf_bp={&(0x7f0000000180), 0x4}, 0x901, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x8) r4 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000640)=ANY=[@ANYBLOB="6e725fa078af7a8a6f4dbc6123524157b02056cd757fa265733d7ce573697a652f312c001fddee2a6065d3b90cda5ac43a5a5fd51e116e7cd6df7cb2bae02565c321dd78c9d05f43305315e9e662b55bad5cf40ffadcd888e3f9299705e9a59f51129825066ca595931a30621df5ba357b095eb3bcce6b58fea1cc78673f7d69ef37e29cb4f807ccd69de246ab8c65f098230e7216526df3c324cf3ca72620d7fdca921be84615077f7ff77f61b889831665df10c27256dd6331381811b7c695d439630da598defee4962b8b21973937391baa7890e16db126edbc0157bb37bfb08bc468a935ca4b3d0ef89b26894579fe823d1fad2e83d4f655c015d191634cbec6438285f0264363382cacc3d7b80176c84c72a4a0db57323ec0789d61"]) 1m18.465356107s ago: executing program 1 (id=1359): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000200)=0xffffffff, 0x4) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0xc4000000, 0x0, 0x1, 0x1}, 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) r3 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$clear(0x7, r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') socket(0x1d, 0x2, 0x6) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m18.178292471s ago: executing program 1 (id=1362): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r1 = socket(0x40000000015, 0x805, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6e, 0x9, [0x4, 0x0, 0x7]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}]}, 0x48) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) dup(r4) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) 1m18.16459308s ago: executing program 1 (id=1363): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000780)=@random={'security.', '[}]-\x00'}, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) shutdown(r1, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004045) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x201d810, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1, 0x3523, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt/bmd33vjPv7b6Z15kA2tZA+ieJ2BYRv0dEX5a9fYWB7Gl+bmbs5tzMWBILC2//nVTWuzE3M1asWrxva545VIoofZbE8WRpuVMXL50ZLZcnzuf5oemzHw5NXbz03Omzo6cmTk2cGzl27OiR4RdfGHl+TeJM47qx9+PJfXtef/fqm2Mnrr7307dptXbvz5ZXx3FHN+sEVMdAutX+WaioXfZkE3W/F2yvSiedLawITemIiHR3dVX6f190xOLO64vXPm1p5YB1lf42bWm8eHYB2MSSaHUNgNYofujT49/isUFDj/+F6y9HdOfp+bmZsflb8XdGKX+9ax3LH4iIE7P/fpU+otnzEAAAq1AZ2zxbb/xXit2V52yuY0c+h9IfEfdHxM6IeCAidkXEgxGVdR+KiIezNy/0rbD8gZr80vFP6VrdOq+RdPz3UtXYb74q/vypvyPPba/E35WcPF2eOJxvk0PRtSXNDy9Txvev/vZFo2XV47/0kZZfjAXzClzrrDlBNz46PbpWG+H65Yi9nfXiT27NBKQtYE9E7G3uo3cUidNPf7Ov0Up3jn8ZazDPtPB1xFPZ/p+NmvgLyfLzk0M9UZ44PFS0iqV+/vXKW43Kv6v418D1A49kicX9X7NGVUMrlyfOTzVfxpU/Pm94TLPa9t+dvFOZs/7l/ey1C6PT0+eHI7qTNyr54piu8vrI4nsvjE73pvli/bT9HzpYv//vzN+T7v90K6WNeH9EPBoRj+V1fzwiDkTEwWXi//GVJz5YJv4kkmjd/r8cMV73++9W++9PqufrV5HoOPPDd41mzFe2/4/GbOW7NlP5/ruDlVbwLjcfAAAA3BNKEbEtktJglh7YFqXS4GD2P/y74r5SeXJq+pmTkx+dG8+uEeiPrlJxpquv6nzocDKbf2KWH8nPFRfLj+Tnjb/s6K3kB8cmy+Mtjh3a3dbb+38U/T/1V0erawesO9drQfuq7f+lFtUD2Hgr+f13LACb0+39vyf909uqugAby/E/tK96/f+TmrzxP2xOS/v/n3VuWQdsRsb/0L70f2hf+j+0pWYu54/jjRb1REQztwUoLhZY/V0FelZ8hX+7JIo7XqxnWb1x6Ux3/kqUWhRpR5ONbVMk0h6zsYUu3kMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgXvZfAAAA//8hId5P") prlimit64(0x0, 0xe, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 1m17.567723077s ago: executing program 1 (id=1367): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000400)) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff050001000600"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000180)={[{@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@commit={'commit', 0x3d, 0x8000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa}}, {@resgid}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x4a0, &(0x7f0000001880)="$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") 1m17.202473152s ago: executing program 1 (id=1371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000040000000100000008000100020000002c000480050003000200000005000300000000000500030000000000050003000000e2ff04000300060000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) (fail_nth: 6) 1m17.185544862s ago: executing program 34 (id=1371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000040000000100000008000100020000002c000480050003000200000005000300000000000500030000000000050003000000e2ff04000300060000000800020002"], 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) (fail_nth: 6) 1m5.561933839s ago: executing program 35 (id=1344): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x100, 0x2, [0x38, 0x8, 0x13, 0x3b, 0x3c, 0xb, 0x31, 0x36, 0x37, 0x1b, 0x3d, 0x17, 0x12, 0x1e, 0x13, 0x2f], 0x0, 0x1, 0x80}}}, {{@ip={@multicast2, @empty, 0xffffff00, 0xffffff00, 'veth0_vlan\x00', 'ip6erspan0\x00', {0xff}, {}, 0x16, 0x1, 0x1}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0xc3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x4, 0x4, 0x2, 0x0, 0x6], 0x5, 0x3}, {0x3, [0x3, 0x0, 0x1, 0x0, 0x2], 0x4, 0x3}}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x1, 0x1}, {0x3, 0x6, 0x2}, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810) 15.31939435s ago: executing program 7 (id=1926): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.666989108s ago: executing program 7 (id=1928): socket$tipc(0x1e, 0xfffffffffffffffb, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060803b"], 0xb8}}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff1f1, 0x2, @perf_config_ext={0x200fffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x33) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000020300000000"], 0x0, 0x3e}, 0x28) r0 = gettid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x40, 0x0, 0x0, 0x1000000000000ac, 0x28000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_config_ext={0x8, 0x4}, 0x324, 0xd59d, 0x2, 0x0, 0xb, 0x2020045, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000003}, r0, 0xc, 0xffffffffffffffff, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000003940)=""/4065, 0xfe1}, {&(0x7f00000002c0)=""/132, 0x84}, {&(0x7f0000000c00)=""/4109, 0x100d}], 0x3}, 0x0) close(r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 14.125239624s ago: executing program 7 (id=1933): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x7}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000004000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x400800c) 13.990375486s ago: executing program 7 (id=1935): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001e"], 0x5c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r2 = socket$inet(0x2, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x24100, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) 13.885321537s ago: executing program 7 (id=1938): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r3, 0x5459, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x2b, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000180)={[{@nobh}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@commit={'commit', 0x3d, 0x8000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa}}, {@resgid}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x4a0, &(0x7f0000001880)="$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") 12.949852818s ago: executing program 7 (id=1945): set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0x1fffc, 0x8001, 0x5, 0x10}) 2.034800446s ago: executing program 2 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xefffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000921) inotify_add_watch(0xffffffffffffffff, 0x0, 0x84000201) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4000, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4000000190001000000000000000000e0dfff010000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c0015005b07350004000000"], 0xc4}}, 0x2c000010) r6 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15\x11\xf0\xd3\xa0\x99\xef\xe4\xb3\xc5\xc3AK\x7f\xe2\xa6]\x9a\xadyr\xaf <\xd5\xe1\xfa,N\x8a\x03\xe7s\xef\x96\xfc\x8c\xe4\xd2', 0x6e93ebbbcc0884f2, 0x1c6, &(0x7f0000000040)={0x4d3f98f6, 0x2, 0x4, 0x1}) mq_timedreceive(r6, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x3ed7, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000001240)='./file0\x00', 0x80, 0x40) clock_gettime(0x0, &(0x7f0000000400)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000003800ffcf000000000000000003"], 0x18}}, 0x0) 1.796406949s ago: executing program 2 (id=2075): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.624394611s ago: executing program 2 (id=2078): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000040), 0x0, 0x400}]) r1 = socket(0x40000000015, 0x805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6e, 0x9, [0x4, 0x0, 0x7]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}]}, 0x48) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) dup(r5) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) 1.538302742s ago: executing program 2 (id=2080): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) 1.512872462s ago: executing program 2 (id=2081): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x8020, 0x400000, 0x0, 0x5, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyad/4WOddkfE4rkC9NCpu9TeFvvybbR1EcGGJO9PaWzYrQAAoB/5Mf6HI+KT7eP/6RhrH80BAAAAoyR7eyr+lURkAAAAwMhKI2IqkrRSjAWYijStVDpjeD8a19N6o9n69HJje2MpnxdRjlK6vFqvzRRjhctRSvLybDHGdr/82pHyXEQ8FxE/nL7WLlcWG/WlYV/8AAAAgCvixouHz///OZ228wAAAMCIKfcsAAAAAKPCKT8AAACMPuf/AAAAMNK++u67ecr23+O99P7O9lrj/TtLteZaZX17sbLY2NqsrDQaK+1n9q2fVl+90dj8bGxs36u2as1Wtbmze3e9sb3Rurt66BXYAAAAwCV67sUHv0siYu/z19opiucAAhzyx2E3ABiksWE3ABia8WE3ABia0qlL2EPAqEtOmX988E7nWmH8+mLaAwAADN6tjx+//z9RzDv92gDw/8xYHwC4etzdg6urdNYRgDcH3RJgWD7U+Xim1/yeD+/o4/5/5xpDlp2pYQAAwMBMtVOSVorj9KlI00ol4tn2awFKyfJqvTZTnB/8drr0TF6eba+ZnDpmGAAAAAAAAAAAAAAAAAAAAAAAAADoyLIkMgAAAGCkRaR/TtpP84+4Nf3K1OGrA0fe+vXT9358b6HV2pqNmEj+Pp1PmoiI1k+K6a9lXgkAAAAAT4HOeXrxOTvs1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwah4/+mBxP11m3L9+MSLK3eKPx2T7czJKEXH9H0mMH1gviYixAcTfux8RN7vFT+JJlmXlohXd4l+74Pjl9qbpHj+NiBsDiA9X2YN8//NOt+9fGi+1P7t//8aLdF6993/pf/d/Yz32P88eKffy/MNfVHvGvx/x/Hj3/c9+/KQT/1CIvPByn3385jd2d7vOOFBlt/gHY1Vb65vV5s7undX1hZXaSm1jbm72jfk351+fn6kur9Zrxd+uYX7wiV8+Oan/13vELx/u/7Ht/0pfvc/i3w/vPfpIp1DqFv/2y91/f2/2iJ8Wv32fKvL5/Fv7+b1O/qAXfv6bF07q/1KP/k+e0v/bffU/Pvfq1773h65zjm0NAOAyNHd21xbq9drWCZnJPpa55MzbT0czBpiJp6MZw8pk3+38P56vnnOufiyTnWf18RhAMyaOfU/H4qwVJhF7eV19/kMCAAAj5n8H/SfdQQIAAAAAAAAAAAAAAAAAAAAu0hkfSzYZEX0vfDTm3nC6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8EAAD//4kX0Xk=") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x20000, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r2 = syz_io_uring_setup(0x1974, &(0x7f0000000080)={0x0, 0x1003, 0xac3c426f8a8ee185, 0x0, 0x4}, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x97ff, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) memfd_create(0x0, 0x1) 1.241954076s ago: executing program 4 (id=2085): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_bridge\x00', {0x2}}) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) fremovexattr(r1, &(0x7f0000000200)=@random={'btrfs.', '\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x403, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x3}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x7ff}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PROTECT={0x5}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_bridge\x00', {0x2}}) (async) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) (async) fremovexattr(r1, &(0x7f0000000200)=@random={'btrfs.', '\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x403, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x0, 0x55007}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x3}, @IFLA_BRPORT_PROXYARP={0x5, 0xa, 0x1}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x7ff}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x1}, @IFLA_BRPORT_PROTECT={0x5, 0x6, 0x1}, @IFLA_BRPORT_PROTECT={0x5}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.208481386s ago: executing program 8 (id=2086): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_secret(0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000f80), 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB="6d706f6c3d62696e640c36aad74967e73a4e2d", @ANYRESOCT]) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x1, {0x60, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xfffd, 0x5, 0x6, 0xc4f4}, {0x74, 0x1, 0x8, 0x576, 0x8001, 0x2}, 0xa, 0xc0000, 0xb43}}, @TCA_TBF_PTAB={0x0, 0x3, [0x80000000, 0x81, 0x997, 0x0, 0x7, 0x6, 0x6, 0x3, 0xf601eeff, 0x5, 0x5, 0x4, 0xfffffff9, 0x8, 0x7fff, 0x2, 0x5, 0x5, 0xfa1, 0xd0, 0x10001, 0x7, 0x4, 0xf, 0x4, 0x3, 0x7fffffff, 0x7f, 0x0, 0x140e, 0xfd, 0x8, 0xe998, 0x1, 0xa4b, 0x4, 0x6, 0x9, 0x0, 0x8, 0x3ba2, 0xf89, 0x8, 0x7, 0x4, 0x1, 0x7, 0x2, 0x5, 0x2, 0x0, 0x7ff, 0x401, 0x1, 0x9, 0x3, 0x4, 0x9af, 0x59be665a, 0x5, 0x2d, 0x7, 0xd25, 0x80, 0x9348, 0x60000000, 0x9, 0x101, 0x9, 0x8, 0x1, 0x96, 0x8, 0x99, 0x7, 0x0, 0x6, 0x5, 0x400, 0x2, 0xfb6, 0x1, 0xc, 0x7, 0x1, 0x3, 0x498fe38a, 0xf4, 0x9742, 0x8, 0x8c48, 0x9, 0xd, 0xf, 0x3, 0x7, 0x8, 0x4, 0x7a2, 0x4, 0x6, 0x0, 0x80000000, 0x701e, 0x7, 0x0, 0x2, 0x2, 0x2, 0x76da, 0xf94c, 0x4, 0x32ce5349, 0xa, 0x0, 0x5, 0x8cdc, 0x8, 0x3, 0x2, 0x3ff, 0x6, 0x81, 0x1, 0x99, 0x4, 0x101, 0x40, 0x8, 0x5, 0x9, 0x81, 0x8000000, 0x3, 0x4f88, 0x9, 0x98, 0x37, 0x3, 0x8001, 0x31, 0x2, 0x3fd4, 0x5, 0x0, 0x200, 0x6, 0xc, 0xd, 0x5, 0xc55ee, 0x1000, 0xf, 0x400, 0x3, 0x100, 0x2, 0x0, 0xffff, 0x5, 0x9d, 0x80000001, 0xffffff81, 0x6, 0x3ff, 0xffffffff, 0x7, 0xd83, 0x343, 0x9, 0x400, 0x5, 0xfffffff7, 0x0, 0x200, 0xf, 0x8, 0x5, 0x1, 0x9, 0x7, 0x6, 0x7, 0x81, 0x2, 0xff, 0x6a, 0xfff, 0x1, 0x5, 0x9, 0x8000, 0xaf, 0x1, 0x5, 0x7, 0x2, 0x0, 0x7, 0x7, 0x3ff, 0x7, 0x1, 0xa4, 0x3a, 0x9, 0x1, 0x3, 0x6, 0x8000, 0x27, 0x2, 0x3, 0x4, 0xff, 0x1, 0x5, 0x1c000000, 0x7, 0x7, 0x8, 0x4, 0x5, 0xffffffbe, 0x8, 0x5, 0x7ff, 0x9, 0x1ff, 0x413b, 0x5, 0x0, 0x5, 0xd8, 0x1, 0x100, 0x9, 0x2, 0x1ff, 0x2, 0x8, 0xfffffffa, 0x1, 0x4, 0x8, 0x9, 0x1ff, 0x38, 0x2, 0xc, 0x6164, 0x9, 0xec, 0xffffffff, 0x56, 0xfa53]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x67eb6bf12151d490}]}}]}, 0xad}, 0x1, 0x0, 0x0, 0x80}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r5, 0x5452, &(0x7f00000003c0)=0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r0, 0xf, 0x1, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xb4, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x3b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2a000000201b000000000000", @ANYRES32=r8, @ANYRES64=r7], 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000008c0)={r6, r0, 0x34, 0x0, @val=@iter={&(0x7f0000000880)=@cgroup={0x1, r0, 0x7}, 0x10}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0x90, 0x30, 0x4, 0xfffffffe, 0x0, {}, [{0x7c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x0, 0xffffffffffffffff, 0x2000000, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x400c881}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000840)='./cgroup\x00', 0x30) r11 = eventfd2(0x0, 0x0) read$eventfd(r11, &(0x7f0000000000), 0x8) write$eventfd(r11, &(0x7f0000000040)=0x2367, 0x8) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.150070637s ago: executing program 0 (id=2087): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r1 = socket(0x40000000015, 0x805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6e, 0x9, [0x4, 0x0, 0x7]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}]}, 0x48) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) dup(r5) getsockopt(r1, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) 1.115223957s ago: executing program 4 (id=2088): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000340)='./file0\x00', 0x28) (fail_nth: 2) 983.413079ms ago: executing program 2 (id=2089): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0000}]}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x1}, 0x103144, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r3 = epoll_create1(0x80000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000001c0), 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000039}) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f00000002c0)={0x8, 0xb, 0x8001, 0xc, 0x3a, 0x0, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bba412def75500930000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r6, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) 961.498389ms ago: executing program 0 (id=2090): syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffff"], 0x0) io_submit(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x20, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x1, 0x400}]) r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@dstopts={0x0, 0x7, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x6e, 0x9, [0x4, 0x0, 0x7]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @ra={0x5, 0x2, 0x3}]}, 0x48) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x80, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x20, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4, 0x56}]}}}}}}}, 0x0) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) getsockopt(r0, 0x114, 0x271b, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x19000) 817.442621ms ago: executing program 8 (id=2091): syz_open_dev$loop(0x0, 0x7, 0x10c062) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x184) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000000805000000000000000000050000060900010073797a3100000000060002400203000005000300060000000c0004808f4db5d35139cd510800094000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc04c000) 710.041512ms ago: executing program 8 (id=2092): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x5c}}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffcb4, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x120) 603.013173ms ago: executing program 0 (id=2093): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fdffffff000000001e"], 0x5c}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) 597.716643ms ago: executing program 8 (id=2094): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, 0x0, 0x20008000) r2 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xfff3}, {0x10, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x4000080) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f0000000300)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x0, 0x80, 0xb, 0x80000000, {{0x1f, 0x4, 0x2, 0x10, 0x7c, 0x64, 0x0, 0x1, 0x2, 0x0, @local, @empty, {[@end, @timestamp={0x44, 0x0, 0xff, 0x0, 0x6, [0x8, 0x7]}, @timestamp_addr={0x44, 0xc, 0x75, 0x1, 0x7, [{@empty, 0xfffff000}]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x7, [0x8, 0x800, 0x7fff, 0x800, 0xd917, 0x6, 0x6, 0x4]}, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0x10, "d08825b6654e26414245ae99b5b7"}, {0x7, 0xfffffffffffffcba, "3e43c5"}]}, @ssrr={0x89, 0x17, 0xc4, [@multicast1, @private=0xa010100, @multicast1, @rand_addr=0x64010101, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001080)={&(0x7f0000000d40)={0x330, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @enabled={{}, {0x0, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbae5}}, {0x8, 0x6, r11}}}, {0x2ca9, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xc4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{}, {}, {0x0, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}]}, 0x330}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000010) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r13, 0x4) r14 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r14, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x4008000) 508.745534ms ago: executing program 4 (id=2095): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001d00)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv6=@udp={0x9, 0x6, "8ac07f", 0x8, 0x11, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, {[], {0x4e21, 0x4e21, 0x8}}}}}}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0xd, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a40)={r9, &(0x7f00000019c0), 0x0}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800010007000000080002"], 0x50}}, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) io_uring_setup(0x72f6, &(0x7f0000000440)={0x0, 0x7553, 0x1000, 0x2, 0xa5}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="8f4012", 0x3}], 0x1}, 0x20000010) 480.926545ms ago: executing program 0 (id=2096): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000240)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b1b050000000000440012800b0001006970366772650000340002800800", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000600)="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", 0x577}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000000000000070000004404adb3000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="000000000004000000001000"], 0x38}}], 0x1, 0xc0) 369.933256ms ago: executing program 8 (id=2097): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e000014000280060002003000000008"], 0x44}}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000100)='syzkaller1\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000011140100299d700000000000080001000000000008004b001300000008004f"], 0x30}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x40441d0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x5d6, 0x4) sendmmsg$inet(r2, &(0x7f0000000000)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="03692dafe7", 0x5}, {&(0x7f00000002c0)="c2874ea3", 0x4}, {&(0x7f00000001c0)="7e5c26b398", 0x5}, {&(0x7f0000000200)='i)U', 0x3}], 0x4}}], 0x1, 0x4000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00'}) 327.588677ms ago: executing program 0 (id=2098): mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007c0000/0x1000)=nil, 0x1000, 0x17) mremap(&(0x7f0000000000/0x9000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 289.302377ms ago: executing program 4 (id=2099): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x400}, 0x8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcdb, 0x4, 0x6, 0x6, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xfff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x7, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x7, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x9, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x3, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x1, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x9, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x381, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x7, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffefe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x2, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x17fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xb, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xa, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x2, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x5, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x180c850, &(0x7f0000000180)={[{@rodir}, {@numtail}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@fat=@discard}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0x379, &(0x7f0000000600)="$eJzs3U1oHOUbAPBnO/kstMnhD+UvCKM3QUs/8KCnlJJCMReVoepBXGyqko1CFhfTQ7fxIh4FjwqCF/GgBw89i6CINw9erSBV8aC9FVp8ZXdnd2e7mzRF+xH8/Q7Lk2feZ973nZ1kJ7PZNy8txdrZ6Th39eqVmJurxdTSyaW4VovFyKLvYoybmZADAPaGaynFn6lnlyW1OzwkAOAO677+v3Kgknn7653aJ6/+ALDnlb//z+/UZm4sc/327hgAAPeVsfv/D49snhl9q3+q8lcBAMBe9ezzLzx1YiXimTyfi1h/p1W0inhyuP3EuXgtGrEaR2IhbkT0LhQ6D7Xu46nTK8tH8jxvxy+LUUTER60iYr3dKnpXCieybv1sHI2FWCzry6uNlFJ26ouV5aN5V0RcbHf7j/Vaq5iO/WX/P+6P1TgWefxvrD7i9MrysbzcQbHer29HbJX3LQbvbSzE9y/HG9GIs/NnIqX+Zc3K8oWjeX4yrYzUt4rZODs4CuN3QAAAAAAAAAAAAAAAAAAAAAAA4J84XK6dk/cX9itaRaTh+j2HBw3yxdH1cXrNy/WBtnrrA6XZFCn98dZjxbtZjKwPdPP6PK1iKvbdu2kDAAAAAAAAAAAAAAAAAADAfaW5ORP1RmN1o7l5fq0atDeam/siopN5/dvPvpqP8Ta3CKbKPiqb8jJ1fq2esn7jlHXbRCxGpTyLiOnuCM+v1T+9NBhxtYvZwSwmDmN2+02NxoGHfv5gmHkw6+/5r2GbLCZPMLtpGNVg/WBvSIPM9HDK2x6x42Vw7BZH9XJKabv9XHhxvCpqEVO3/8TtHKRO8M2VV/9/vHno8W7my9TzyKMLZy6///Fva/VGp+eOxiczG80baa1efj35ZNs+yCrnT608hrXqmTC1U/nWaKae/fD7cw+8993uek/VzJsT2mS96Xy+0dysld8p3U0zvaCTu6lqvnE6GzsTpuPffHY6wcST7dCHS/VLF376dbf7qfyQsFAHAAAAAAAAAAAAAAAAAADcFZXPipfKD/tO71T1xNNlMHdnRwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd8fw//9Xgq2xzG6C6+0Y3zS7utGMOHivpwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/c3wEAAP//3MRpbg==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x88802, 0x0) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x20040040) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000000)) tkill(0x0, 0x7) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) 234.455237ms ago: executing program 0 (id=2100): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(&(0x7f0000000340)='./file0\x00', 0x28) 231.340628ms ago: executing program 8 (id=2101): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0000}]}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESOCT=r0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") socket$tipc(0x1e, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={0x0, 0x1}, 0x103144, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) dup(0xffffffffffffffff) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r3 = epoll_create1(0x80000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f00000001c0), 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000039}) ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f00000002c0)={0x8, 0xb, 0x8001, 0xc, 0x3a, 0x0, 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000bba412def75500930000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r4, 0x29, 0x16, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r6, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) 98.077319ms ago: executing program 4 (id=2102): syz_open_dev$loop(0x0, 0x7, 0x10c062) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x184) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r1, 0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0xc04c000) 0s ago: executing program 4 (id=2103): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)}, 0x7ffd}, {{&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/34, 0x22}, {&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/153, 0x99}, {&(0x7f0000000400)=""/185, 0xb9}], 0x4, &(0x7f0000000500)=""/37, 0x25}, 0x80}], 0x3, 0x10002, 0x0) kernel console output (not intermixed with test programs): 12 [ 308.623594][ T9302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.683705][ T9298] loop2: detected capacity change from 0 to 512 [ 308.692647][ T9300] loop8: detected capacity change from 0 to 256 [ 308.707409][ T9302] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.717534][ T9308] loop7: detected capacity change from 0 to 128 [ 308.755431][ T9298] EXT4-fs: Ignoring removed nobh option [ 308.771338][ T9312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1542'. [ 308.780478][ T9300] FAT-fs (loop8): codepage cp863 not found [ 308.795429][ T9298] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 308.854878][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.113703][ T9327] syz.7.1543: attempt to access beyond end of device [ 309.113703][ T9327] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 309.184568][ T9329] loop8: detected capacity change from 0 to 512 [ 309.192870][ T9329] EXT4-fs: Ignoring removed nobh option [ 309.570553][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 309.637541][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'. [ 309.715140][ T9329] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 310.205241][ T28] kauditd_printk_skb: 410 callbacks suppressed [ 310.205273][ T28] audit: type=1326 audit(1778092189.815:18040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9307 comm="syz.7.1543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 310.521558][ T28] audit: type=1400 audit(1778092189.925:18041): avc: denied { listen } for pid=9341 comm="syz.4.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.546752][ T9346] geneve2: entered promiscuous mode [ 310.601859][ T9346] geneve2: entered allmulticast mode [ 310.654704][ T28] audit: type=1400 audit(1778092189.945:18042): avc: denied { getopt } for pid=9341 comm="syz.4.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.741272][ T28] audit: type=1400 audit(1778092189.945:18043): avc: denied { accept } for pid=9341 comm="syz.4.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.844284][ T9350] loop8: detected capacity change from 0 to 1024 [ 310.858306][ T28] audit: type=1400 audit(1778092189.995:18044): avc: denied { write } for pid=9341 comm="syz.4.1553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.931523][ T9350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 310.973392][ T28] audit: type=1326 audit(1778092190.215:18045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.8.1555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 311.150301][ T28] audit: type=1326 audit(1778092190.235:18047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.8.1555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 311.656057][ T9357] xt_ecn: cannot match TCP bits for non-tcp packets [ 311.665963][ T9357] loop7: detected capacity change from 0 to 512 [ 311.697471][ T9357] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 311.751902][ T9357] EXT4-fs (loop7): 1 truncate cleaned up [ 311.763738][ T9357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.903478][ T9365] FAULT_INJECTION: forcing a failure. [ 311.903478][ T9365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.964478][ T28] audit: type=1326 audit(1778092190.235:18048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.8.1555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 312.017398][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 312.046491][ T9365] CPU: 1 UID: 0 PID: 9365 Comm: syz.0.1560 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.046554][ T9365] Tainted: [W]=WARN [ 312.046563][ T9365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.046578][ T9365] Call Trace: [ 312.046586][ T9365] [ 312.046595][ T9365] __dump_stack+0x1d/0x30 [ 312.046653][ T9365] dump_stack_lvl+0x95/0xd0 [ 312.046675][ T9365] dump_stack+0x15/0x1b [ 312.046744][ T9365] should_fail_ex+0x263/0x280 [ 312.046776][ T9365] should_fail+0xb/0x20 [ 312.046838][ T9365] should_fail_usercopy+0x1a/0x20 [ 312.046871][ T9365] _copy_to_user+0x20/0xa0 [ 312.046907][ T9365] simple_read_from_buffer+0xb5/0x130 [ 312.046947][ T9365] proc_fail_nth_read+0x10e/0x150 [ 312.046982][ T9365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.047016][ T9365] vfs_read+0x1ab/0x7f0 [ 312.047128][ T9365] ? __rcu_read_unlock+0x4e/0x70 [ 312.047153][ T9365] ? __fget_files+0x184/0x1c0 [ 312.047178][ T9365] ? mutex_lock+0x57/0x90 [ 312.047214][ T9365] ksys_read+0xdc/0x1a0 [ 312.047290][ T9365] __x64_sys_read+0x40/0x50 [ 312.047330][ T9365] x64_sys_call+0x2886/0x3020 [ 312.047360][ T9365] do_syscall_64+0x12c/0x3b0 [ 312.047415][ T9365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.047447][ T9365] RIP: 0033:0x7f0a25c1d60e [ 312.047467][ T9365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.047489][ T9365] RSP: 002b:00007f0a246aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.047516][ T9365] RAX: ffffffffffffffda RBX: 00007f0a246af6c0 RCX: 00007f0a25c1d60e [ 312.047534][ T9365] RDX: 000000000000000f RSI: 00007f0a246af0a0 RDI: 0000000000000005 [ 312.047551][ T9365] RBP: 00007f0a246af090 R08: 0000000000000000 R09: 0000000000000000 [ 312.047639][ T9365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.047655][ T9365] R13: 00007f0a25ed6038 R14: 00007f0a25ed5fa0 R15: 00007ffed2eeedd8 [ 312.047678][ T9365] [ 312.260899][ T28] audit: type=1326 audit(1778092190.215:18046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.8.1555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 312.291457][ T28] audit: type=1326 audit(1778092190.235:18049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9345 comm="syz.8.1555" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 313.191284][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.247180][ T9390] xt_ecn: cannot match TCP bits for non-tcp packets [ 313.265548][ T9390] loop8: detected capacity change from 0 to 512 [ 313.277195][ T9390] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 313.329198][ T9390] EXT4-fs (loop8): 1 truncate cleaned up [ 313.336413][ T9390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.048561][ T9398] loop4: detected capacity change from 0 to 512 [ 314.060152][ T9400] loop2: detected capacity change from 0 to 1024 [ 314.091172][ T9398] EXT4-fs: Ignoring removed nobh option [ 314.163020][ T9398] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 314.255849][ T9400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.489244][ T9413] loop7: detected capacity change from 0 to 512 [ 314.496285][ T9413] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.572997][ T9413] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 314.594937][ T9413] FAT-fs (loop7): error, invalid access to FAT (entry 0x0fffff00) [ 314.659287][ T12] kworker/u8:0: attempt to access beyond end of device [ 314.659287][ T12] loop7: rw=1, sector=17179852714, nr_sectors = 56 limit=512 [ 314.829540][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.026179][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.103030][ T9428] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 315.123874][ T9429] xt_ecn: cannot match TCP bits for non-tcp packets [ 315.138241][ T9429] loop2: detected capacity change from 0 to 512 [ 315.150287][ T9429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 315.166746][ T9429] EXT4-fs (loop2): 1 truncate cleaned up [ 315.173333][ T9429] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.332843][ T9428] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1578'. [ 316.909665][ T9445] xt_ecn: cannot match TCP bits for non-tcp packets [ 316.977831][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.145191][ T28] kauditd_printk_skb: 286 callbacks suppressed [ 317.145209][ T28] audit: type=1400 audit(1778092196.745:18336): avc: denied { write } for pid=9416 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.288178][ T28] audit: type=1400 audit(1778092196.905:18337): avc: denied { write } for pid=9457 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.380972][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1585'. [ 317.766059][ T9476] netlink: 'syz.4.1589': attribute type 5 has an invalid length. [ 317.789732][ T28] audit: type=1326 audit(1778092197.405:18338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 317.820413][ T9478] loop8: detected capacity change from 0 to 128 [ 317.833531][ T9456] loop7: detected capacity change from 0 to 256 [ 317.846250][ T9476] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1589'. [ 317.900213][ T9468] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 317.927583][ T9456] FAT-fs (loop7): codepage cp863 not found [ 318.020840][ T28] audit: type=1326 audit(1778092197.435:18339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 318.097189][ T9480] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 318.114616][ T28] audit: type=1326 audit(1778092197.435:18340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 318.145389][ T28] audit: type=1326 audit(1778092197.435:18341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 318.235135][ T28] audit: type=1326 audit(1778092197.435:18342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 318.311149][ T28] audit: type=1326 audit(1778092197.435:18343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8bd41bcb42 code=0x7ffc0000 [ 318.378763][ T28] audit: type=1326 audit(1778092197.435:18344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8bd417d60e code=0x7ffc0000 [ 318.502256][ T9478] syz.8.1590 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 318.516469][ T28] audit: type=1326 audit(1778092197.435:18345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.8.1590" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 318.583995][ T9478] CPU: 1 UID: 0 PID: 9478 Comm: syz.8.1590 Tainted: G W syzkaller #0 PREEMPT(full) [ 318.584035][ T9478] Tainted: [W]=WARN [ 318.584042][ T9478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.584115][ T9478] Call Trace: [ 318.584124][ T9478] [ 318.584134][ T9478] __dump_stack+0x1d/0x30 [ 318.584166][ T9478] dump_stack_lvl+0x95/0xd0 [ 318.584326][ T9478] dump_stack+0x15/0x1b [ 318.584350][ T9478] dump_header+0x80/0x240 [ 318.584377][ T9478] oom_kill_process+0x295/0x350 [ 318.584418][ T9478] out_of_memory+0x97d/0xb80 [ 318.584456][ T9478] try_charge_memcg+0x62f/0xa10 [ 318.584574][ T9478] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 318.584605][ T9478] __alloc_frozen_pages_noprof+0x18a/0x350 [ 318.584636][ T9478] alloc_pages_mpol+0xb3/0x260 [ 318.584734][ T9478] alloc_pages_noprof+0x8f/0x140 [ 318.584835][ T9478] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 318.584872][ T9478] __kvmalloc_node_noprof+0x3d4/0x640 [ 318.584927][ T9478] ? futex_hash_allocate+0x190/0x9a0 [ 318.584998][ T9478] ? futex_hash_allocate+0x190/0x9a0 [ 318.585039][ T9478] futex_hash_allocate+0x190/0x9a0 [ 318.585077][ T9478] ? __seccomp_filter+0x8ec/0x1350 [ 318.585189][ T9478] ? cap_task_prctl+0x13f/0x6b0 [ 318.585220][ T9478] futex_hash_prctl+0xd8/0xf0 [ 318.585255][ T9478] __se_sys_prctl+0x4f4/0x1400 [ 318.585336][ T9478] __x64_sys_prctl+0x67/0x80 [ 318.585366][ T9478] x64_sys_call+0x2533/0x3020 [ 318.585429][ T9478] do_syscall_64+0x12c/0x3b0 [ 318.585462][ T9478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.585490][ T9478] RIP: 0033:0x7f8bd41bcdd9 [ 318.585554][ T9478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.585577][ T9478] RSP: 002b:00007f8bd2c0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 318.585605][ T9478] RAX: ffffffffffffffda RBX: 00007f8bd4435fa0 RCX: 00007f8bd41bcdd9 [ 318.585624][ T9478] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 318.585641][ T9478] RBP: 00007f8bd4252d69 R08: 0000000000000000 R09: 0000000000000000 [ 318.585657][ T9478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.585706][ T9478] R13: 00007f8bd4436038 R14: 00007f8bd4435fa0 R15: 00007ffda3e52288 [ 318.585730][ T9478] [ 318.843928][ T9478] memory: usage 278336kB, limit 307200kB, failcnt 120 [ 318.890871][ T9478] memory+swap: usage 253844kB, limit 9007199254740988kB, failcnt 0 [ 318.899145][ T9478] kmem: usage 247328kB, limit 9007199254740988kB, failcnt 0 [ 318.906656][ T9478] Memory cgroup stats for /syz8: [ 318.906889][ T9478] cache 0 [ 318.908636][ T9514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1595'. [ 318.911839][ T9478] rss 36864 [ 318.911852][ T9478] shmem 0 [ 318.911859][ T9478] mapped_file 0 [ 318.911868][ T9478] dirty 0 [ 318.911890][ T9478] writeback 0 [ 318.974917][ T9514] ip6gre2: entered promiscuous mode [ 318.984983][ T9478] workingset_refault_anon 11 [ 319.000248][ T9514] ip6gre2: entered allmulticast mode [ 319.007906][ T9478] workingset_refault_file 0 [ 319.062506][ T9478] swap 212992 [ 319.089685][ T9478] swapcached 303104 [ 319.117010][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.117010][ T9520] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 319.172916][ T9478] pgpgin 10352 [ 319.183507][ T9478] pgpgout 10341 [ 319.210292][ T9478] pgfault 14873 [ 319.231635][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.231635][ T9520] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 319.263570][ T9537] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1601'. [ 319.280053][ T9478] pgmajfault 10 [ 319.283562][ T9478] inactive_anon 0 [ 319.287205][ T9478] active_anon 45056 [ 319.291097][ T9478] inactive_file 0 [ 319.294745][ T9478] active_file 0 [ 319.298209][ T9478] unevictable 0 [ 319.301683][ T9478] hierarchical_memory_limit 314572800 [ 319.307063][ T9478] hierarchical_memsw_limit 9223372036854771712 [ 319.313246][ T9478] total_cache 0 [ 319.316743][ T9478] total_rss 36864 [ 319.320382][ T9478] total_shmem 0 [ 319.323842][ T9478] total_mapped_file 0 [ 319.327831][ T9478] total_dirty 0 [ 319.331315][ T9478] total_writeback 0 [ 319.335148][ T9478] total_workingset_refault_anon 11 [ 319.340270][ T9478] total_workingset_refault_file 0 [ 319.345403][ T9478] total_swap 212992 [ 319.349251][ T9478] total_swapcached 303104 [ 319.353619][ T9478] total_pgpgin 10352 [ 319.367199][ T9537] loop7: detected capacity change from 0 to 256 [ 319.373844][ T9537] vfat: Unknown parameter '00000000000000000009' [ 319.435982][ T9520] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 319.445141][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.445141][ T9520] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 319.458988][ T9520] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 319.468926][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1601'. [ 319.492393][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.492393][ T9520] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 319.506772][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.506772][ T9520] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 319.567515][ T9520] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 319.594602][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.594602][ T9520] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 319.673515][ T9478] total_pgpgout 10341 [ 319.675197][ T9520] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 319.721558][ T9478] total_pgfault 14873 [ 319.756389][ T9478] total_pgmajfault 10 [ 319.764810][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.764810][ T9520] loop8: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 319.795970][ T9478] total_inactive_anon 0 [ 319.812356][ T9478] total_active_anon 45056 [ 319.823194][ T9478] total_inactive_file 0 [ 319.829654][ T9520] syz.8.1590: attempt to access beyond end of device [ 319.829654][ T9520] loop8: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 319.857719][ T9478] total_active_file 0 [ 319.874888][ T9478] total_unevictable 0 [ 319.887082][ T9478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1590,pid=9477,uid=0 [ 319.911723][ T9547] loop4: detected capacity change from 0 to 512 [ 319.956859][ T9547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.971040][ T9578] loop2: detected capacity change from 0 to 512 [ 319.977799][ T9520] Buffer I/O error on dev loop8, logical block 95, lost async page write [ 319.988215][ T9547] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.007430][ T9578] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 320.015741][ T9520] syz.8.1590: attempt to access beyond end of device [ 320.015741][ T9520] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 320.047977][ T9478] Memory cgroup out of memory: Killed process 9478 (syz.8.1590) total-vm:100584kB, anon-rss:1384kB, file-rss:26660kB, shmem-rss:8208kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 320.071393][ T9578] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1605: Invalid inode bitmap blk 4 in block_group 0 [ 320.084578][ T9520] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 320.107672][ T9578] loop2: lost filesystem error report for type 5 error -117 [ 320.110822][ T9578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.177757][ T9578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.255451][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.257163][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1610'. [ 320.301276][ T9604] ip6gre2: entered promiscuous mode [ 320.314681][ T9604] ip6gre2: entered allmulticast mode [ 320.340825][ T4581] IPVS: starting estimator thread 0... [ 320.387664][ T9611] gtp0: entered promiscuous mode [ 320.418991][ T9611] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1612'. [ 320.435657][ T9611] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 320.445454][ T9613] IPVS: using max 2544 ests per chain, 127200 per kthread [ 320.520227][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1617'. [ 320.597548][ T9626] loop7: detected capacity change from 0 to 1024 [ 320.622755][ T9626] EXT4-fs: inline encryption not supported [ 320.661489][ T9626] EXT4-fs (loop7): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 320.668656][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1613'. [ 320.708398][ T9618] netlink: 'syz.8.1613': attribute type 4 has an invalid length. [ 320.729777][ T9626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.758734][ T9618] loop8: detected capacity change from 0 to 128 [ 320.765363][ T9618] msdos: Unknown parameter '€' [ 320.879358][ T9635] IPVS: sh: FWM 3 0x00000003 - no destination available [ 320.886434][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 320.953054][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.007845][ T9641] loop7: detected capacity change from 0 to 512 [ 321.018222][ T9642] netlink: 'syz.4.1618': attribute type 7 has an invalid length. [ 321.033275][ T9641] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 321.055199][ T9641] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 321.098465][ T9641] netlink: 'syz.7.1621': attribute type 1 has an invalid length. [ 321.137577][ T9641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.166224][ T9641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2832 sclass=netlink_route_socket pid=9641 comm=syz.7.1621 [ 321.348662][ T9638] loop2: detected capacity change from 0 to 512 [ 321.363631][ T9653] loop8: detected capacity change from 0 to 1024 [ 321.427692][ T9638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.427912][ T9654] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1625'. [ 321.454365][ T9638] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.482315][ T9653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.492944][ T9654] ip6gre1: entered promiscuous mode [ 321.499844][ T9654] ip6gre1: entered allmulticast mode [ 321.508868][ T3303] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 321.519854][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 321.519932][ T3303] Tainted: [W]=WARN [ 321.519939][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 321.519952][ T3303] Call Trace: [ 321.519959][ T3303] [ 321.519967][ T3303] __dump_stack+0x1d/0x30 [ 321.519992][ T3303] dump_stack_lvl+0x95/0xd0 [ 321.520015][ T3303] dump_stack+0x15/0x1b [ 321.520035][ T3303] dump_header+0x80/0x240 [ 321.520056][ T3303] oom_kill_process+0x295/0x350 [ 321.520087][ T3303] out_of_memory+0x97d/0xb80 [ 321.520159][ T3303] try_charge_memcg+0x62f/0xa10 [ 321.520319][ T3303] ? radix_tree_lookup+0xfa/0x140 [ 321.520418][ T3303] charge_memcg+0x6d/0x120 [ 321.520443][ T3303] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 321.520494][ T3303] __swap_cache_prepare_and_add+0x69/0x4a0 [ 321.520549][ T3303] ? alloc_pages_mpol+0x217/0x260 [ 321.520574][ T3303] swap_cache_alloc_folio+0xa2/0x120 [ 321.520599][ T3303] swap_cluster_readahead+0x25f/0x3c0 [ 321.520626][ T3303] swapin_readahead+0xde/0x840 [ 321.520685][ T3303] ? tick_program_event+0x79/0xc0 [ 321.520711][ T3303] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 321.520738][ T3303] ? __rcu_read_unlock+0x4e/0x70 [ 321.520815][ T3303] ? swap_cache_get_folio+0x1e0/0x1f0 [ 321.520907][ T3303] do_swap_page+0x31e/0x2180 [ 321.520930][ T3303] ? __schedule+0x936/0xd20 [ 321.520960][ T3303] ? __rcu_read_lock+0x36/0x50 [ 321.520991][ T3303] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 321.521013][ T3303] handle_mm_fault+0xb2e/0x2e70 [ 321.521039][ T3303] ? vma_start_read+0x1c7/0x2c0 [ 321.521075][ T3303] do_user_addr_fault+0x62f/0x1050 [ 321.521171][ T3303] ? trace_page_fault_user+0x1f/0xa0 [ 321.521201][ T3303] exc_page_fault+0x62/0xa0 [ 321.521220][ T3303] asm_exc_page_fault+0x26/0x30 [ 321.521240][ T3303] RIP: 0033:0x7f0a25c17f57 [ 321.521287][ T3303] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 321.521305][ T3303] RSP: 002b:00007ffed2eef0d0 EFLAGS: 00010202 [ 321.521322][ T3303] RAX: 0000000000000000 RBX: 000055555a173500 RCX: 00007f0a25c17f57 [ 321.521336][ T3303] RDX: 00007ffed2eef110 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.521348][ T3303] RBP: 00007ffed2eef17c R08: 0000000000000000 R09: 0000000000000000 [ 321.521390][ T3303] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 321.521403][ T3303] R13: 00000000000927c0 R14: 000000000004e71a R15: 00007ffed2eef1d0 [ 321.521422][ T3303] [ 321.521429][ T3303] memory: usage 307200kB, limit 307200kB, failcnt 5480 [ 321.715823][ T9661] loop4: detected capacity change from 0 to 1024 [ 321.726019][ T3303] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 321.774996][ T9661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.796134][ T3303] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 321.815481][ T3303] Memory cgroup stats for /syz0: [ 321.815779][ T3303] cache 0 [ 321.824471][ T3303] rss 0 [ 321.825672][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.848361][ T3303] shmem 0 [ 321.857299][ T3303] mapped_file 0 [ 321.866817][ T3303] dirty 0 [ 321.872769][ T3303] writeback 0 [ 321.878843][ T3303] workingset_refault_anon 1588 [ 321.887238][ T3303] workingset_refault_file 2865 [ 321.892137][ T3303] swap 208896 [ 321.897715][ T3303] swapcached 110174208 [ 321.903771][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.913284][ T3303] pgpgin 304525 [ 321.917069][ T3303] pgpgout 304524 [ 321.920677][ T3303] pgfault 306100 [ 321.924343][ T3303] pgmajfault 618 [ 321.928402][ T3303] inactive_anon 0 [ 321.932097][ T3303] active_anon 4096 [ 321.962536][ T3303] inactive_file 0 [ 321.966272][ T3303] active_file 0 [ 321.969779][ T3303] unevictable 0 [ 321.973315][ T3303] hierarchical_memory_limit 314572800 [ 322.028990][ T3303] hierarchical_memsw_limit 9223372036854771712 [ 322.036162][ T3303] total_cache 0 [ 322.046985][ T9671] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1628'. [ 322.056148][ T3303] total_rss 0 [ 322.064140][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.065336][ T3303] total_shmem 0 [ 322.112398][ T3303] total_mapped_file 0 [ 322.126529][ T3303] total_dirty 0 [ 322.134672][ T3303] total_writeback 0 [ 322.146894][ T3303] total_workingset_refault_anon 1588 [ 322.165319][ T3303] total_workingset_refault_file 2865 [ 322.172577][ T3303] total_swap 208896 [ 322.181026][ T3303] total_swapcached 110174208 [ 322.198220][ T3303] total_pgpgin 304525 [ 322.207729][ T3303] total_pgpgout 304524 [ 322.224849][ T3303] total_pgfault 306100 [ 322.248518][ T3303] total_pgmajfault 618 [ 322.263455][ T3303] total_inactive_anon 0 [ 322.283730][ T3303] total_active_anon 4096 [ 322.300570][ T3303] total_inactive_file 0 [ 322.350365][ T3303] total_active_file 0 [ 322.354481][ T3303] total_unevictable 0 [ 322.390379][ T3303] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1612,pid=9605,uid=0 [ 322.405348][ T3303] Memory cgroup out of memory: Killed process 9605 (syz.0.1612) total-vm:96216kB, anon-rss:1228kB, file-rss:22748kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 322.426161][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 322.460182][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1637'. [ 322.492216][ T9687] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1633'. [ 322.518078][ T9687] loop8: detected capacity change from 0 to 256 [ 322.554004][ T9687] vfat: Unknown parameter '00000000000000000009' [ 322.599668][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1633'. [ 322.661288][ T9687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.684296][ T9694] syz.0.1638 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 322.698647][ T9687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.720538][ T9694] CPU: 0 UID: 0 PID: 9694 Comm: syz.0.1638 Tainted: G W syzkaller #0 PREEMPT(full) [ 322.720593][ T9694] Tainted: [W]=WARN [ 322.720600][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.720613][ T9694] Call Trace: [ 322.720621][ T9694] [ 322.720631][ T9694] __dump_stack+0x1d/0x30 [ 322.720661][ T9694] dump_stack_lvl+0x95/0xd0 [ 322.720685][ T9694] dump_stack+0x15/0x1b [ 322.720720][ T9694] dump_header+0x80/0x240 [ 322.720746][ T9694] oom_kill_process+0x295/0x350 [ 322.720780][ T9694] out_of_memory+0x97d/0xb80 [ 322.720810][ T9694] try_charge_memcg+0x62f/0xa10 [ 322.720859][ T9694] ? radix_tree_lookup+0xfa/0x140 [ 322.720939][ T9694] charge_memcg+0x6d/0x120 [ 322.721007][ T9694] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 322.721076][ T9694] __swap_cache_prepare_and_add+0x69/0x4a0 [ 322.721105][ T9694] ? alloc_pages_mpol+0x217/0x260 [ 322.721191][ T9694] swap_cache_alloc_folio+0xa2/0x120 [ 322.721221][ T9694] swap_cluster_readahead+0x25f/0x3c0 [ 322.721252][ T9694] swapin_readahead+0xde/0x840 [ 322.721357][ T9694] ? _raw_spin_unlock+0x9/0x30 [ 322.721449][ T9694] ? swap_put_entries_cluster+0x46c/0x490 [ 322.721510][ T9694] ? __rcu_read_unlock+0x4e/0x70 [ 322.721533][ T9694] ? swap_cache_get_folio+0x1e0/0x1f0 [ 322.721556][ T9694] do_swap_page+0x31e/0x2180 [ 322.721581][ T9694] ? css_rstat_updated+0xbb/0x280 [ 322.721606][ T9694] ? __rcu_read_lock+0x36/0x50 [ 322.721697][ T9694] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 322.721723][ T9694] handle_mm_fault+0xb2e/0x2e70 [ 322.721760][ T9694] ? vma_start_read+0x1c7/0x2c0 [ 322.721848][ T9694] do_user_addr_fault+0x62f/0x1050 [ 322.721887][ T9694] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 322.721932][ T9694] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 322.721996][ T9694] ? trace_page_fault_user+0x1f/0xa0 [ 322.722094][ T9694] exc_page_fault+0x62/0xa0 [ 322.722115][ T9694] asm_exc_page_fault+0x26/0x30 [ 322.722135][ T9694] RIP: 0033:0x7f0a25b314b0 [ 322.722226][ T9694] Code: 83 f8 04 75 ec 31 f6 80 7c 24 0e 00 74 70 40 88 74 24 0e 8b 7c 24 08 48 89 de e8 fb f2 fd ff 84 c0 75 5b 80 7c 24 0f 00 75 0d <80> 3d d1 0b 3a 00 00 0f 85 a3 01 00 00 49 83 7f 68 07 77 08 49 c7 [ 322.722322][ T9694] RSP: 002b:00007ffed2eeee20 EFLAGS: 00010246 [ 322.722390][ T9694] RAX: 0000000000000000 RBX: ffffffff816436b8 RCX: 0000000000000000 [ 322.722406][ T9694] RDX: 00000000000016b8 RSI: ffffffff816436b8 RDI: 0000000000000000 [ 322.722420][ T9694] RBP: 0000000000000000 R08: 00007f0a25ec0000 R09: 00007f0a25ec2000 [ 322.722434][ T9694] R10: 00000000816436bc R11: 0000000000000000 R12: 00007f0a25ed6038 [ 322.722449][ T9694] R13: 0000000000000002 R14: ffffffff816430c4 R15: 00007f0a26a05720 [ 322.722466][ T9694] ? __sys_bpf+0x144/0x7e0 [ 322.722496][ T9694] ? __sys_bpf+0x738/0x7e0 [ 322.722590][ T9694] ? __sys_bpf+0x738/0x7e0 [ 322.722620][ T9694] [ 322.724074][ T9694] memory: usage 307200kB, limit 307200kB, failcnt 5612 [ 322.802581][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1642'. [ 322.823071][ T9694] memory+swap: usage 302356kB, limit 9007199254740988kB, failcnt 0 [ 322.827767][ T9687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.873374][ T9694] kmem: usage 290112kB, limit 9007199254740988kB, failcnt 0 [ 322.876105][ T9687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.914135][ T9694] Memory cgroup stats for /syz0: [ 323.063472][ T9694] cache 0 [ 323.085133][ T9694] rss 4096 [ 323.088232][ T9694] shmem 0 [ 323.091261][ T9694] mapped_file 0 [ 323.105097][ T9694] dirty 0 [ 323.115078][ T9694] writeback 4096 [ 323.118768][ T9694] workingset_refault_anon 1637 [ 323.123638][ T9694] workingset_refault_file 2865 [ 323.129022][ T9699] vfat: Unknown parameter '00000000000000000009' [ 323.143615][ T9694] swap 98304 [ 323.159830][ T9694] swapcached 110440448 [ 323.173477][ T9694] pgpgin 304599 [ 323.183968][ T9694] pgpgout 304588 [ 323.195079][ T9694] pgfault 306230 [ 323.198690][ T9694] pgmajfault 644 [ 323.206180][ T9694] inactive_anon 45056 [ 323.214697][ T9694] active_anon 0 [ 323.225542][ T9694] inactive_file 0 [ 323.232434][ T9694] active_file 0 [ 323.239780][ T9694] unevictable 0 [ 323.257291][ T9694] hierarchical_memory_limit 314572800 [ 323.278605][ T9694] hierarchical_memsw_limit 9223372036854771712 [ 323.284859][ T9694] total_cache 0 [ 323.288730][ T9694] total_rss 4096 [ 323.292315][ T9694] total_shmem 0 [ 323.296056][ T9694] total_mapped_file 0 [ 323.300078][ T9694] total_dirty 0 [ 323.303658][ T9694] total_writeback 4096 [ 323.307882][ T9694] total_workingset_refault_anon 1637 [ 323.313446][ T9694] total_workingset_refault_file 2865 [ 323.319502][ T9694] total_swap 98304 [ 323.323333][ T9694] total_swapcached 110440448 [ 323.328306][ T9694] total_pgpgin 304599 [ 323.332325][ T9694] total_pgpgout 304588 [ 323.336993][ T9694] total_pgfault 306230 [ 323.341211][ T9694] total_pgmajfault 644 [ 323.345494][ T9694] total_inactive_anon 45056 [ 323.357617][ T9694] total_active_anon 0 [ 323.361762][ T9694] total_inactive_file 0 [ 323.366303][ T9694] total_active_file 0 [ 323.378723][ T9694] total_unevictable 0 [ 323.382825][ T9694] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1638,pid=9694,uid=0 [ 323.398020][ T9694] Memory cgroup out of memory: Killed process 9694 (syz.0.1638) total-vm:94036kB, anon-rss:1228kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 323.430764][ T9721] netlink: 'syz.8.1645': attribute type 5 has an invalid length. [ 323.566025][ T9722] EXT4-fs (loop7): orphan cleanup on readonly fs [ 323.573049][ T9722] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1644: ea_inode with extended attributes [ 323.585730][ T9722] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 323.586076][ T9722] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1644: error while reading EA inode 11 err=-117 [ 323.595276][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 323.595296][ C1] EXT4-fs (loop7): initial error at time 1778092203: ext4_xattr_inode_iget:441: inode 11 [ 323.595323][ C1] EXT4-fs (loop7): last error at time 1778092203: ext4_xattr_inode_iget:441: inode 11 [ 323.634060][ T9722] loop7: lost filesystem error report for type 5 error -117 [ 323.640102][ T9722] EXT4-fs (loop7): 1 orphan inode deleted [ 323.654607][ T9722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 323.884305][ T9721] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 324.170835][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.211443][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 324.211463][ T28] audit: type=1400 audit(1778092203.825:18488): avc: denied { name_bind } for pid=9742 comm="syz.7.1654" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 324.255259][ T28] audit: type=1326 audit(1778092203.865:18489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 324.319307][ T28] audit: type=1326 audit(1778092203.875:18490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 324.378385][ T28] audit: type=1326 audit(1778092203.875:18491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 324.407546][ T28] audit: type=1326 audit(1778092203.875:18492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 324.503822][ T28] audit: type=1326 audit(1778092203.875:18493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 324.555058][ T9756] set_capacity_and_notify: 2 callbacks suppressed [ 324.555122][ T9756] loop4: detected capacity change from 0 to 512 [ 324.568983][ T9756] EXT4-fs: Ignoring removed nobh option [ 324.645726][ T9756] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 324.814298][ T28] audit: type=1326 audit(1778092203.875:18494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 324.840420][ T28] audit: type=1326 audit(1778092203.875:18495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 324.930892][ T28] audit: type=1326 audit(1778092203.925:18496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9742 comm="syz.7.1654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 325.090756][ T28] audit: type=1400 audit(1778092204.365:18497): avc: denied { bind } for pid=9757 comm="syz.7.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 325.231889][ T9778] loop8: detected capacity change from 0 to 1024 [ 325.240218][ T9778] EXT4-fs: inline encryption not supported [ 325.246645][ T9778] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 325.320567][ T9778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.337652][ T9787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8218 sclass=netlink_route_socket pid=9787 comm=syz.4.1673 [ 325.358725][ T9788] netlink: 'syz.2.1672': attribute type 5 has an invalid length. [ 325.387059][ T9775] loop7: detected capacity change from 0 to 256 [ 325.413656][ T9775] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.440099][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.444067][ T9788] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 325.592992][ T9796] __nla_validate_parse: 14 callbacks suppressed [ 325.593011][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1676'. [ 325.616064][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1676'. [ 325.672112][ T9801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1678'. [ 325.685661][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1681'. [ 325.747964][ T9801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 326.153629][ T9818] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1685'. [ 326.180283][ T9818] loop7: detected capacity change from 0 to 256 [ 326.186990][ T9828] syzkaller0: entered promiscuous mode [ 326.192615][ T9828] syzkaller0: entered allmulticast mode [ 326.198527][ T9818] vfat: Unknown parameter '00000000000000000009' [ 326.208171][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 326.217210][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 326.265152][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1685'. [ 326.409378][ T9843] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1693'. [ 326.619321][ T9854] loop2: detected capacity change from 0 to 1024 [ 326.656567][ T9856] loop4: detected capacity change from 0 to 256 [ 326.665493][ T9856] vfat: Unknown parameter '00000000000000000009' [ 326.796619][ T9854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.898737][ T9869] loop8: detected capacity change from 0 to 128 [ 326.984330][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.999800][ T9871] loop7: detected capacity change from 0 to 2048 [ 327.059341][ T9871] loop7: detected capacity change from 0 to 512 [ 327.224004][ T9883] loop7: detected capacity change from 0 to 1024 [ 327.246005][ T9883] EXT4-fs: inline encryption not supported [ 327.293758][ T9883] EXT4-fs (loop7): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 327.328881][ T9883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.482815][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.557377][ T9899] xt_ecn: cannot match TCP bits for non-tcp packets [ 327.575621][ T9899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 327.725528][ T9899] EXT4-fs (loop4): 1 truncate cleaned up [ 327.733115][ T9899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.601302][ T9925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.614369][ T9925] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.132276][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.152006][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.222133][ T9943] FAULT_INJECTION: forcing a failure. [ 329.222133][ T9943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.235407][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.2.1725 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.235444][ T9943] Tainted: [W]=WARN [ 329.235452][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.235470][ T9943] Call Trace: [ 329.235478][ T9943] [ 329.235488][ T9943] __dump_stack+0x1d/0x30 [ 329.235516][ T9943] dump_stack_lvl+0x95/0xd0 [ 329.235552][ T9943] dump_stack+0x15/0x1b [ 329.235574][ T9943] should_fail_ex+0x263/0x280 [ 329.235641][ T9943] should_fail+0xb/0x20 [ 329.235670][ T9943] should_fail_usercopy+0x1a/0x20 [ 329.235702][ T9943] _copy_from_user+0x1c/0xb0 [ 329.235810][ T9943] ___sys_sendmsg+0xc1/0x1e0 [ 329.235849][ T9943] __x64_sys_sendmsg+0xd4/0x160 [ 329.235909][ T9943] x64_sys_call+0x194c/0x3020 [ 329.235957][ T9943] do_syscall_64+0x12c/0x3b0 [ 329.236029][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.236104][ T9943] RIP: 0033:0x7f28bcd0cdd9 [ 329.236125][ T9943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.236146][ T9943] RSP: 002b:00007f28bb75f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.236171][ T9943] RAX: ffffffffffffffda RBX: 00007f28bcf85fa0 RCX: 00007f28bcd0cdd9 [ 329.236225][ T9943] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 329.236241][ T9943] RBP: 00007f28bb75f090 R08: 0000000000000000 R09: 0000000000000000 [ 329.236332][ T9943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.236348][ T9943] R13: 00007f28bcf86038 R14: 00007f28bcf85fa0 R15: 00007fff7481fe38 [ 329.236369][ T9943] [ 329.451994][ T28] kauditd_printk_skb: 173 callbacks suppressed [ 329.452010][ T28] audit: type=1400 audit(1778092209.065:18671): avc: denied { block_suspend } for pid=9944 comm="syz.7.1730" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 329.505912][ T9939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.518675][ T9947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.569804][ T9963] FAULT_INJECTION: forcing a failure. [ 329.569804][ T9963] name failslab, interval 1, probability 0, space 0, times 0 [ 329.590250][ T9963] CPU: 0 UID: 0 PID: 9963 Comm: syz.0.1734 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.590399][ T9963] Tainted: [W]=WARN [ 329.590408][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.590422][ T9963] Call Trace: [ 329.590429][ T9963] [ 329.590437][ T9963] __dump_stack+0x1d/0x30 [ 329.590465][ T9963] dump_stack_lvl+0x95/0xd0 [ 329.590541][ T9963] dump_stack+0x15/0x1b [ 329.590562][ T9963] should_fail_ex+0x263/0x280 [ 329.590595][ T9963] should_failslab+0x8c/0xb0 [ 329.590630][ T9963] kmem_cache_alloc_noprof+0x66/0x3f0 [ 329.590667][ T9963] ? skb_clone+0x151/0x1f0 [ 329.590692][ T9963] skb_clone+0x151/0x1f0 [ 329.590796][ T9963] __netlink_deliver_tap+0x2c9/0x500 [ 329.590909][ T9963] netlink_unicast+0x653/0x680 [ 329.590938][ T9963] netlink_sendmsg+0x5c8/0x6f0 [ 329.590970][ T9963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.591000][ T9963] ____sys_sendmsg+0x563/0x5b0 [ 329.591079][ T9963] ___sys_sendmsg+0x195/0x1e0 [ 329.591166][ T9963] __x64_sys_sendmsg+0xd4/0x160 [ 329.591194][ T9963] x64_sys_call+0x194c/0x3020 [ 329.591229][ T9963] do_syscall_64+0x12c/0x3b0 [ 329.591311][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.591335][ T9963] RIP: 0033:0x7f0a25c5cdd9 [ 329.591353][ T9963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.591374][ T9963] RSP: 002b:00007f0a246af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.591397][ T9963] RAX: ffffffffffffffda RBX: 00007f0a25ed5fa0 RCX: 00007f0a25c5cdd9 [ 329.591433][ T9963] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 329.591482][ T9963] RBP: 00007f0a246af090 R08: 0000000000000000 R09: 0000000000000000 [ 329.591545][ T9963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.591558][ T9963] R13: 00007f0a25ed6038 R14: 00007f0a25ed5fa0 R15: 00007ffed2eeedd8 [ 329.591580][ T9963] [ 329.638907][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.658752][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.841616][ T9973] set_capacity_and_notify: 4 callbacks suppressed [ 329.841634][ T9973] loop7: detected capacity change from 0 to 256 [ 329.916229][ T9973] vfat: Unknown parameter '00000000000000000009' [ 330.277939][ T9977] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 330.565064][ T9984] xt_ecn: cannot match TCP bits for non-tcp packets [ 330.574762][ T9984] loop2: detected capacity change from 0 to 512 [ 330.599607][ T9984] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 330.613812][ T9984] EXT4-fs (loop2): 1 truncate cleaned up [ 330.619850][ T9984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.900577][T10001] FAULT_INJECTION: forcing a failure. [ 330.900577][T10001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.915666][T10001] CPU: 0 UID: 0 PID: 10001 Comm: syz.7.1747 Tainted: G W syzkaller #0 PREEMPT(full) [ 330.915777][T10001] Tainted: [W]=WARN [ 330.915786][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.915800][T10001] Call Trace: [ 330.915808][T10001] [ 330.915818][T10001] __dump_stack+0x1d/0x30 [ 330.915847][T10001] dump_stack_lvl+0x95/0xd0 [ 330.915872][T10001] dump_stack+0x15/0x1b [ 330.915908][T10001] should_fail_ex+0x263/0x280 [ 330.915938][T10001] should_fail+0xb/0x20 [ 330.915962][T10001] should_fail_usercopy+0x1a/0x20 [ 330.915993][T10001] _copy_from_iter+0xcf/0xea0 [ 330.916075][T10001] ? __alloc_skb+0x4f6/0x690 [ 330.916093][T10001] ? __alloc_skb+0x200/0x690 [ 330.916114][T10001] netlink_sendmsg+0x4ae/0x6f0 [ 330.916149][T10001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.916220][T10001] ____sys_sendmsg+0x563/0x5b0 [ 330.916248][T10001] ___sys_sendmsg+0x195/0x1e0 [ 330.916281][T10001] __x64_sys_sendmsg+0xd4/0x160 [ 330.916367][T10001] x64_sys_call+0x194c/0x3020 [ 330.916400][T10001] do_syscall_64+0x12c/0x3b0 [ 330.916432][T10001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.916485][T10001] RIP: 0033:0x7ff9847ecdd9 [ 330.916507][T10001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.916530][T10001] RSP: 002b:00007ff98323f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.916560][T10001] RAX: ffffffffffffffda RBX: 00007ff984a65fa0 RCX: 00007ff9847ecdd9 [ 330.916576][T10001] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 330.916590][T10001] RBP: 00007ff98323f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.916603][T10001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.916692][T10001] R13: 00007ff984a66038 R14: 00007ff984a65fa0 R15: 00007ffd922a8028 [ 330.916712][T10001] [ 330.919678][ T9999] netlink: 'syz.0.1746': attribute type 3 has an invalid length. [ 331.014137][ T9969] loop4: detected capacity change from 0 to 512 [ 331.160513][ T28] audit: type=1326 audit(1778092210.775:18672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.221227][ T28] audit: type=1326 audit(1778092210.805:18673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.247113][ T28] audit: type=1326 audit(1778092210.805:18674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.277330][ T9969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.292080][T10008] loop7: detected capacity change from 0 to 4096 [ 331.302186][T10007] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 331.320297][ T28] audit: type=1326 audit(1778092210.805:18675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.324887][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.346039][ T28] audit: type=1326 audit(1778092210.805:18676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.360621][T10008] EXT4-fs: Ignoring removed bh option [ 331.380845][ T28] audit: type=1326 audit(1778092210.805:18677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.392186][ T9969] ext4 filesystem being mounted at /351/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.413809][ T28] audit: type=1326 audit(1778092210.805:18678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.458301][ T28] audit: type=1326 audit(1778092210.805:18679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.487322][ T28] audit: type=1326 audit(1778092210.805:18680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.7.1748" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 331.531079][T10008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.574395][T10015] netlink: 'syz.2.1752': attribute type 5 has an invalid length. [ 331.582444][T10015] __nla_validate_parse: 15 callbacks suppressed [ 331.582463][T10015] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1752'. [ 331.604547][T10012] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1751'. [ 331.612800][T10008] 9p: Bad value for 'rfdno' [ 331.615876][T10012] loop8: detected capacity change from 0 to 256 [ 331.688162][T10012] vfat: Unknown parameter '00000000000000000009' [ 331.716709][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1754'. [ 331.729204][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.743818][T10020] ip6gre2: entered promiscuous mode [ 331.749103][T10020] ip6gre2: entered allmulticast mode [ 331.755039][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1751'. [ 331.764326][T10023] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1755'. [ 331.766933][T10023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1755'. [ 331.821634][T10026] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1756'. [ 331.831741][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 331.843294][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1756'. [ 331.853288][T10028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1757'. [ 331.938742][T10034] loop4: detected capacity change from 0 to 512 [ 331.959686][T10034] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1760: bg 0: block 393: padding at end of block bitmap is not set [ 331.974267][T10034] loop4: lost filesystem error report for type 5 error -117 [ 331.974552][T10034] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 331.991068][T10034] loop4: lost filesystem error report for type 5 error -117 [ 331.991491][T10034] EXT4-fs (loop4): 2 truncates cleaned up [ 332.006359][T10034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.036811][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.058868][T10038] loop8: detected capacity change from 0 to 1024 [ 332.126271][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.194226][T10038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.261143][T10055] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1768' sets config #-1 [ 332.325631][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.404379][T10067] loop8: detected capacity change from 0 to 256 [ 332.413080][T10067] vfat: Unknown parameter '00000000000000000008' [ 332.480614][T10072] FAULT_INJECTION: forcing a failure. [ 332.480614][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.496461][T10072] CPU: 1 UID: 0 PID: 10072 Comm: syz.7.1769 Tainted: G W syzkaller #0 PREEMPT(full) [ 332.496535][T10072] Tainted: [W]=WARN [ 332.496542][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.496555][T10072] Call Trace: [ 332.496562][T10072] [ 332.496571][T10072] __dump_stack+0x1d/0x30 [ 332.496678][T10072] dump_stack_lvl+0x95/0xd0 [ 332.496720][T10072] dump_stack+0x15/0x1b [ 332.496756][T10072] should_fail_ex+0x263/0x280 [ 332.496791][T10072] should_fail+0xb/0x20 [ 332.496821][T10072] should_fail_usercopy+0x1a/0x20 [ 332.496927][T10072] _copy_from_iter+0xcf/0xea0 [ 332.496975][T10072] ? __rcu_read_unlock+0x4e/0x70 [ 332.497000][T10072] ? avc_has_perm_noaudit+0xab/0x130 [ 332.497037][T10072] copy_page_from_iter+0x161/0x1f0 [ 332.497118][T10072] ? anon_pipe_write+0xa1/0xb20 [ 332.497161][T10072] anon_pipe_write+0x53c/0xb20 [ 332.497207][T10072] ? anon_pipe_write+0xa1/0xb20 [ 332.497249][T10072] ? __pfx_anon_pipe_write+0x10/0x10 [ 332.497298][T10072] vfs_write+0x5a6/0x9f0 [ 332.497355][T10072] ksys_write+0xdc/0x1a0 [ 332.497387][T10072] __x64_sys_write+0x40/0x50 [ 332.497415][T10072] x64_sys_call+0x27e1/0x3020 [ 332.497441][T10072] do_syscall_64+0x12c/0x3b0 [ 332.497527][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.497671][T10072] RIP: 0033:0x7ff9847ad60e [ 332.497738][T10072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.497761][T10072] RSP: 002b:00007ff9831fcce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 332.497787][T10072] RAX: ffffffffffffffda RBX: 00007ff9831fd6c0 RCX: 00007ff9847ad60e [ 332.497802][T10072] RDX: 0000000000000029 RSI: 00007ff9831fce90 RDI: 0000000000000002 [ 332.497817][T10072] RBP: 00007ff9831fce90 R08: 0000000000000000 R09: 0000000000000000 [ 332.497831][T10072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 332.497846][T10072] R13: 00007ff984a3d7a0 R14: 00007ff984a344a0 R15: 0000000000000001 [ 332.497868][T10072] [ 332.504094][T10074] ip6gre3: entered promiscuous mode [ 332.722312][T10074] ip6gre3: entered allmulticast mode [ 332.740858][T10081] loop7: detected capacity change from 0 to 1024 [ 332.752260][T10081] EXT4-fs: inline encryption not supported [ 332.775289][T10081] EXT4-fs (loop7): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 332.810049][T10085] loop4: detected capacity change from 0 to 128 [ 332.903899][T10081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.081712][T10103] xt_l2tp: v2 tid > 0xffff: 262144 [ 333.168158][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.172874][T10105] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 333.188949][T10108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 333.246519][T10108] EXT4-fs (loop4): 1 orphan inode deleted [ 333.279390][T10108] EXT4-fs (loop4): 1 truncate cleaned up [ 333.299087][T10108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.326384][T10108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.375686][T10108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.736475][T10139] tmpfs: Bad value for 'mpol' [ 333.751161][T10139] sch_tbf: peakrate 2 is lower than or equals to rate 50420 ! [ 333.772116][T10140] syz.7.1786: attempt to access beyond end of device [ 333.772116][T10140] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 333.857931][T10139] netlink: 'syz.2.1796': attribute type 3 has an invalid length. [ 333.893551][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.108222][T10146] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 334.219698][T10156] EXT4-fs: inline encryption not supported [ 334.246687][T10156] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 334.367862][T10156] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.416755][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.466399][ T28] kauditd_printk_skb: 366 callbacks suppressed [ 334.466436][ T28] audit: type=1326 audit(1778092214.085:19047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.7.1786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 334.567175][T10173] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.659014][T10175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.777627][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.810238][T10192] ip6gre2: entered promiscuous mode [ 334.825120][T10192] ip6gre2: entered allmulticast mode [ 334.875538][T10190] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 335.056331][T10210] veth0: entered promiscuous mode [ 335.062500][T10210] bond0: entered promiscuous mode [ 335.072462][T10210] bond_slave_0: entered promiscuous mode [ 335.084173][T10210] bond_slave_1: entered promiscuous mode [ 335.099565][T10209] bond0: left promiscuous mode [ 335.120337][T10209] bond_slave_0: left promiscuous mode [ 335.127154][T10209] bond_slave_1: left promiscuous mode [ 335.132848][T10209] veth0: left promiscuous mode [ 335.179257][T10211] xt_ecn: cannot match TCP bits for non-tcp packets [ 335.188677][T10211] set_capacity_and_notify: 5 callbacks suppressed [ 335.188694][T10211] loop7: detected capacity change from 0 to 512 [ 335.201989][T10211] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 335.212982][T10211] EXT4-fs (loop7): 1 truncate cleaned up [ 335.219164][T10211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.241911][ T28] audit: type=1400 audit(1778092214.855:19048): avc: denied { read } for pid=10214 comm="syz.0.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 335.541562][T10229] syzkaller1: left promiscuous mode [ 335.546931][T10229] syzkaller1: left allmulticast mode [ 335.556697][T10229] loop4: detected capacity change from 0 to 512 [ 335.567339][T10229] EXT4-fs: Ignoring removed oldalloc option [ 335.578889][T10229] EXT4-fs (loop4): 1 truncate cleaned up [ 335.585049][T10229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.901606][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.978087][T10234] loop2: detected capacity change from 0 to 512 [ 335.987777][T10234] EXT4-fs: Ignoring removed oldalloc option [ 336.001269][T10234] EXT4-fs (loop2): 1 truncate cleaned up [ 336.007345][T10234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.081269][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.348455][ T28] audit: type=1326 audit(1778092215.965:19049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.8.1834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x0 [ 336.470300][T10257] random: crng reseeded on system resumption [ 336.490826][T10257] loop8: detected capacity change from 0 to 512 [ 336.510803][T10257] ext4: Unknown parameter 'subj_role' [ 336.511422][ T28] audit: type=1400 audit(1778092216.085:19050): avc: denied { mounton } for pid=10250 comm="syz.8.1834" path="/file0" dev="ramfs" ino=30235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 336.595274][ T28] audit: type=1400 audit(1778092216.135:19051): avc: denied { watch } for pid=10250 comm="syz.8.1834" path="/file0" dev="ramfs" ino=30235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 336.645335][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.696864][T10261] loop7: detected capacity change from 0 to 1024 [ 336.848373][T10265] __nla_validate_parse: 20 callbacks suppressed [ 336.848418][T10265] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1838'. [ 336.876265][T10265] loop2: detected capacity change from 0 to 512 [ 336.884328][T10265] EXT4-fs: Ignoring removed nobh option [ 336.894838][T10265] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 336.978613][T10261] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.466543][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.606846][T10277] loop7: detected capacity change from 0 to 512 [ 337.624627][T10277] EXT4-fs: Ignoring removed bh option [ 337.663141][T10277] EXT4-fs: inline encryption not supported [ 337.675385][T10277] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 337.709656][T10279] loop2: detected capacity change from 0 to 2048 [ 337.791676][T10284] loop4: detected capacity change from 0 to 128 [ 337.792137][ T28] audit: type=1326 audit(1778092217.395:19052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.4.1845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e5a6cdd9 code=0x7ffc0000 [ 337.832096][T10277] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 337.862819][T10277] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1841: bg 0: block 248: padding at end of block bitmap is not set [ 337.865399][ T28] audit: type=1326 audit(1778092217.395:19053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.4.1845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e5a6cdd9 code=0x7ffc0000 [ 337.883050][T10277] loop7: lost filesystem error report for type 5 error -117 [ 337.915043][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 337.928962][ C0] EXT4-fs (loop7): last error at time 1778092217: ext4_validate_block_bitmap:441 [ 337.952293][T10277] Quota error (device loop7): write_blk: dquota write failed [ 337.965218][T10277] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 337.984382][ T28] audit: type=1326 audit(1778092217.395:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10282 comm="syz.4.1845" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e5a6cdd9 code=0x7ffc0000 [ 337.985543][T10277] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.1841: Failed to acquire dquot type 1 [ 338.052186][T10277] loop7: lost filesystem error report for type 5 error -28 [ 338.054283][T10277] EXT4-fs (loop7): 1 truncate cleaned up [ 338.071775][T10279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.094324][T10277] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 338.132232][T10289] syz.4.1845: attempt to access beyond end of device [ 338.132232][T10289] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 338.193472][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 338.253250][T10289] syz.4.1845: attempt to access beyond end of device [ 338.253250][T10289] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 338.288184][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1846'. [ 338.307022][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1846'. [ 338.324737][T10294] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1846'. [ 338.339085][T10289] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 338.375481][T10289] syz.4.1845: attempt to access beyond end of device [ 338.375481][T10289] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 338.436762][T10289] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 338.448383][T10289] syz.4.1845: attempt to access beyond end of device [ 338.448383][T10289] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 338.536753][T10300] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 338.584472][T10289] syz.4.1845: attempt to access beyond end of device [ 338.584472][T10289] loop4: rw=0, sector=166, nr_sectors = 2 limit=128 [ 338.600750][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.673878][T10306] netlink: 'syz.2.1851': attribute type 13 has an invalid length. [ 338.711518][T10312] loop7: detected capacity change from 0 to 128 [ 338.722235][T10306] netlink: 'syz.2.1851': attribute type 17 has an invalid length. [ 338.815055][T10307] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.974412][T10319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1854'. [ 339.150431][T10307] tipc: Resetting bearer [ 339.174931][T10318] syz.7.1853: attempt to access beyond end of device [ 339.174931][T10318] loop7: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 339.216813][T10307] ip6gretap0: left promiscuous mode [ 339.488576][ T28] kauditd_printk_skb: 326 callbacks suppressed [ 339.488594][ T28] audit: type=1326 audit(1778092219.095:19381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.7.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9847ad60e code=0x7ffc0000 [ 339.586913][ T28] audit: type=1326 audit(1778092219.205:19382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.7.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 339.614381][ T28] audit: type=1326 audit(1778092219.205:19383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.7.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 339.628700][T10323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.652616][ T28] audit: type=1326 audit(1778092219.225:19384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.7.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 339.819711][T10329] FAULT_INJECTION: forcing a failure. [ 339.819711][T10329] name failslab, interval 1, probability 0, space 0, times 0 [ 339.849247][T10312] syz.7.1853 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 339.863568][T10312] CPU: 0 UID: 0 PID: 10312 Comm: syz.7.1853 Tainted: G W syzkaller #0 PREEMPT(full) [ 339.863604][T10312] Tainted: [W]=WARN [ 339.863613][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 339.863628][T10312] Call Trace: [ 339.863637][T10312] [ 339.863648][T10312] __dump_stack+0x1d/0x30 [ 339.863734][T10312] dump_stack_lvl+0x95/0xd0 [ 339.863760][T10312] dump_stack+0x15/0x1b [ 339.863815][T10312] dump_header+0x80/0x240 [ 339.863841][T10312] oom_kill_process+0x295/0x350 [ 339.863881][T10312] out_of_memory+0x97d/0xb80 [ 339.863918][T10312] try_charge_memcg+0x62f/0xa10 [ 339.864029][T10312] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 339.864063][T10312] __alloc_frozen_pages_noprof+0x18a/0x350 [ 339.864093][T10312] alloc_pages_mpol+0xb3/0x260 [ 339.864142][T10312] alloc_pages_noprof+0x8f/0x140 [ 339.864173][T10312] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 339.864288][T10312] __kvmalloc_node_noprof+0x3d4/0x640 [ 339.864309][T10312] ? futex_hash_allocate+0x190/0x9a0 [ 339.864401][T10312] ? futex_hash_allocate+0x190/0x9a0 [ 339.864439][T10312] futex_hash_allocate+0x190/0x9a0 [ 339.864626][T10312] ? __seccomp_filter+0x8ec/0x1350 [ 339.864658][T10312] ? cap_task_prctl+0x13f/0x6b0 [ 339.864737][T10312] futex_hash_prctl+0xd8/0xf0 [ 339.864770][T10312] __se_sys_prctl+0x4f4/0x1400 [ 339.864803][T10312] __x64_sys_prctl+0x67/0x80 [ 339.864865][T10312] x64_sys_call+0x2533/0x3020 [ 339.864892][T10312] do_syscall_64+0x12c/0x3b0 [ 339.864920][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.864962][T10312] RIP: 0033:0x7ff9847ecdd9 [ 339.865045][T10312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.865066][T10312] RSP: 002b:00007ff98323f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 339.865092][T10312] RAX: ffffffffffffffda RBX: 00007ff984a65fa0 RCX: 00007ff9847ecdd9 [ 339.865107][T10312] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 339.865121][T10312] RBP: 00007ff984882d69 R08: 0000000000000000 R09: 0000000000000000 [ 339.865141][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.865157][T10312] R13: 00007ff984a66038 R14: 00007ff984a65fa0 R15: 00007ffd922a8028 [ 339.865257][T10312] [ 339.865266][T10312] memory: usage 307200kB, limit 307200kB, failcnt 447 [ 339.945717][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 339.949300][T10329] CPU: 0 UID: 0 PID: 10329 Comm: syz.8.1857 Tainted: G W syzkaller #0 PREEMPT(full) [ 339.949374][T10329] Tainted: [W]=WARN [ 339.949400][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 339.949477][T10329] Call Trace: [ 339.949484][T10329] [ 339.949492][T10329] __dump_stack+0x1d/0x30 [ 339.949518][T10329] dump_stack_lvl+0x95/0xd0 [ 339.949619][T10329] dump_stack+0x15/0x1b [ 339.949640][T10329] should_fail_ex+0x263/0x280 [ 339.949670][T10329] ? sctp_add_bind_addr+0x71/0x1e0 [ 339.949698][T10329] should_failslab+0x8c/0xb0 [ 339.949791][T10329] __kmalloc_cache_noprof+0x5f/0x400 [ 339.949944][T10329] sctp_add_bind_addr+0x71/0x1e0 [ 339.949974][T10329] sctp_copy_local_addr_list+0x1b3/0x250 [ 339.950006][T10329] sctp_copy_one_addr+0x7f/0x280 [ 339.950034][T10329] sctp_bind_addr_copy+0x79/0x290 [ 339.950081][T10329] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 339.950108][T10329] sctp_connect_new_asoc+0x1c3/0x3a0 [ 339.950145][T10329] sctp_sendmsg+0xfff/0x1d60 [ 339.950201][T10329] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 339.950238][T10329] ? __pfx_sctp_sendmsg+0x10/0x10 [ 339.950304][T10329] ? __pfx_inet_sendmsg+0x10/0x10 [ 339.950336][T10329] inet_sendmsg+0xc5/0xd0 [ 339.950361][T10329] __sys_sendto+0x3db/0x490 [ 339.950392][T10329] __x64_sys_sendto+0x76/0x90 [ 339.950463][T10329] x64_sys_call+0x2d35/0x3020 [ 339.950488][T10329] do_syscall_64+0x12c/0x3b0 [ 339.950516][T10329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.950602][T10329] RIP: 0033:0x7f8bd41bcdd9 [ 339.950621][T10329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.950701][T10329] RSP: 002b:00007f8bd2c0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 339.950725][T10329] RAX: ffffffffffffffda RBX: 00007f8bd4435fa0 RCX: 00007f8bd41bcdd9 [ 339.950740][T10329] RDX: 000000000000ffe0 RSI: 0000200000000080 RDI: 0000000000000003 [ 339.950754][T10329] RBP: 00007f8bd2c0f090 R08: 0000200000000140 R09: 000000000000001c [ 339.950811][T10329] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000002 [ 339.950883][T10329] R13: 00007f8bd4436038 R14: 00007f8bd4435fa0 R15: 00007ffda3e52288 [ 339.950903][T10329] [ 339.951038][T10312] memory+swap: usage 311496kB, limit 9007199254740988kB, failcnt 0 [ 340.008884][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 340.021575][T10312] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 340.051261][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1858'. [ 340.070198][T10312] Memory cgroup stats for [ 340.133311][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1859'. [ 340.140137][T10312] /syz7: [ 340.140420][T10312] cache 0 [ 340.140432][T10312] rss 4096 [ 340.140441][T10312] shmem 0 [ 340.147858][T10306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.151317][T10312] mapped_file 0 [ 340.219221][T10306] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.227008][T10312] dirty 0 [ 340.426194][T10312] writeback 0 [ 340.429902][T10312] workingset_refault_anon 132 [ 340.434715][T10312] workingset_refault_file 2 [ 340.440498][T10312] swap 4399104 [ 340.443943][T10312] swapcached 17571840 [ 340.448745][ T28] audit: type=1326 audit(1778092220.065:19385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10311 comm="syz.7.1853" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff9847ecdd9 code=0x7ffc0000 [ 340.478354][T10312] pgpgin 37925 [ 340.486273][T10312] pgpgout 37924 [ 340.501095][T10343] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1860'. [ 340.511752][T10312] pgfault 48968 [ 340.519906][T10306] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.527259][T10306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.537310][T10312] pgmajfault 96 [ 340.543058][T10343] set_capacity_and_notify: 2 callbacks suppressed [ 340.543076][T10343] loop4: detected capacity change from 0 to 1024 [ 340.556571][T10312] inactive_anon 4096 [ 340.560619][T10312] active_anon 0 [ 340.564295][T10312] inactive_file 0 [ 340.568351][T10312] active_file 0 [ 340.571968][T10312] unevictable 0 [ 340.575893][T10343] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 340.576007][T10312] hierarchical_memory_limit 314572800 [ 340.589211][T10343] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 340.591615][T10312] hierarchical_memsw_limit 9223372036854771712 [ 340.602580][T10343] EXT4-fs (loop4): journal inode is deleted [ 340.621137][T10312] total_cache 0 [ 340.624803][T10312] total_rss 4096 [ 340.628584][T10312] total_shmem 0 [ 340.632208][T10312] total_mapped_file 0 [ 340.641098][T10312] total_dirty 0 [ 340.645309][T10312] total_writeback 0 [ 340.649325][T10312] total_workingset_refault_anon 132 [ 340.656604][T10312] total_workingset_refault_file 2 [ 340.662206][T10312] total_swap 4399104 [ 340.666628][T10312] total_swapcached 17571840 [ 340.671403][ T28] audit: type=1400 audit(1778092220.285:19386): avc: denied { create } for pid=10342 comm="syz.4.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 340.702145][T10312] total_pgpgin 37925 [ 340.702772][T10306] hsr0: left promiscuous mode [ 340.710748][T10312] total_pgpgout 37924 [ 340.711511][T10306] hsr0: left allmulticast mode [ 340.719142][T10312] total_pgfault 48968 [ 340.720429][T10306] hsr_slave_0: left allmulticast mode [ 340.724169][ T28] audit: type=1400 audit(1778092220.295:19387): avc: denied { sys_admin } for pid=10342 comm="syz.4.1860" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 340.730160][T10306] hsr_slave_1: left allmulticast mode [ 340.757387][T10312] total_pgmajfault 96 [ 340.767393][T10312] total_inactive_anon 4096 [ 340.768505][T10306] veth1_vlan: left promiscuous mode [ 340.776593][T10312] total_active_anon 0 [ 340.782898][T10306] veth0_vlan: left promiscuous mode [ 340.787259][T10312] total_inactive_file 0 [ 340.793011][T10306] veth0_vlan: entered promiscuous mode [ 340.793527][T10312] total_active_file 0 [ 340.805855][T10306] veth1_vlan: entered promiscuous mode [ 340.812945][T10312] total_unevictable 0 [ 340.820290][T10306] veth1_macvtap: left promiscuous mode [ 340.826504][T10312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1853,pid=10311,uid=0 [ 340.841651][T10312] Memory cgroup out of memory: Killed process 10312 (syz.7.1853) total-vm:94300kB, anon-rss:1264kB, file-rss:22424kB, shmem-rss:4kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 340.846304][T10306] veth0_macvtap: left promiscuous mode [ 340.877784][T10306] veth0_macvtap: entered promiscuous mode [ 340.906479][T10349] loop4: detected capacity change from 0 to 512 [ 340.914338][T10306] veth1_macvtap: entered promiscuous mode [ 340.938841][T10306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.948767][T10306] tipc: Resetting bearer [ 340.955643][T10349] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 340.980748][T10306] tipc: Resetting bearer [ 340.987070][T10306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.994680][T10349] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 341.003071][T10349] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 341.005526][T10306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.022178][T10306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.030283][ T3456] kworker/u8:8: attempt to access beyond end of device [ 341.030283][ T3456] loop4: rw=1, sector=17179852714, nr_sectors = 56 limit=512 [ 341.048119][T10306] ip6gretap0: entered promiscuous mode [ 341.057456][T10306] macvtap1: left promiscuous mode [ 341.118424][T10306] ip6gre1: left promiscuous mode [ 341.126098][T10306] ip6gre1: left allmulticast mode [ 341.150471][T10306] vlan2: left promiscuous mode [ 341.155585][T10306] bridge0: left promiscuous mode [ 341.161432][T10306] ip6gre2: left promiscuous mode [ 341.166585][T10306] ip6gre2: left allmulticast mode [ 341.173119][T10306] ip6gre3: left promiscuous mode [ 341.178133][T10306] ip6gre3: left allmulticast mode [ 341.209777][ T66] tipc: Resetting bearer [ 341.228322][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.235701][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.257934][T10358] loop4: detected capacity change from 0 to 128 [ 341.274055][ T28] audit: type=1326 audit(1778092220.815:19388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.4.1865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e5a6cdd9 code=0x7ffc0000 [ 341.310079][ T28] audit: type=1326 audit(1778092220.815:19389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.4.1865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e5a6cdd9 code=0x7ffc0000 [ 341.337229][ T66] ip6_tunnel: K xmit: Local address not yet configured! [ 341.382309][ T28] audit: type=1326 audit(1778092220.815:19390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10357 comm="syz.4.1865" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e5a6cdd9 code=0x7ffc0000 [ 341.481488][T10370] loop8: detected capacity change from 0 to 1024 [ 341.573206][T10373] syz.4.1865: attempt to access beyond end of device [ 341.573206][T10373] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 341.615473][T10373] syz.4.1865: attempt to access beyond end of device [ 341.615473][T10373] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 341.670277][T10373] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 341.678990][T10373] syz.4.1865: attempt to access beyond end of device [ 341.678990][T10373] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 341.716903][T10373] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 341.725874][T10373] syz.4.1865: attempt to access beyond end of device [ 341.725874][T10373] loop4: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 341.949293][T10373] syz.4.1865: attempt to access beyond end of device [ 341.949293][T10373] loop4: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 341.982549][T10391] loop7: detected capacity change from 0 to 256 [ 342.063381][ T3439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.131288][T10395] __nla_validate_parse: 2 callbacks suppressed [ 342.131326][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 342.148219][T10373] Buffer I/O error on dev loop4, logical block 83, lost async page write [ 342.191494][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 342.218134][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 342.249844][T10373] syz.4.1865: attempt to access beyond end of device [ 342.249844][T10373] loop4: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 342.300067][T10373] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 342.325906][T10373] syz.4.1865: attempt to access beyond end of device [ 342.325906][T10373] loop4: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 342.407977][T10399] netlink: 'syz.2.1880': attribute type 1 has an invalid length. [ 342.434108][T10373] syz.4.1865: attempt to access beyond end of device [ 342.434108][T10373] loop4: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 342.510718][T10358] syz.4.1865 (10358) used greatest stack depth: 6520 bytes left [ 342.588645][T10373] Buffer I/O error on dev loop4, logical block 95, lost async page write [ 342.607929][T10373] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 342.619598][T10409] xt_ecn: cannot match TCP bits for non-tcp packets [ 343.554124][T10416] ip6gre4: entered promiscuous mode [ 343.578815][T10416] ip6gre4: entered allmulticast mode [ 343.789315][T10423] loop2: detected capacity change from 0 to 1024 [ 343.825783][T10423] EXT4-fs: inline encryption not supported [ 343.888929][T10423] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 344.137915][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 344.151765][T10437] loop2: detected capacity change from 0 to 164 [ 344.201958][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 344.544923][ T28] kauditd_printk_skb: 183 callbacks suppressed [ 344.544941][ T28] audit: type=1400 audit(1778092224.115:19574): avc: denied { append } for pid=10448 comm="syz.0.1894" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.593352][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1895'. [ 344.633577][T10451] ip6gre3: entered promiscuous mode [ 344.647589][ T28] audit: type=1400 audit(1778092224.265:19575): avc: denied { execmod } for pid=10453 comm="syz.4.1896" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 344.648517][T10451] ip6gre3: entered allmulticast mode [ 344.722410][ T28] audit: type=1400 audit(1778092224.265:19576): avc: denied { execute } for pid=10453 comm="syz.4.1896" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 345.002421][T10466] xt_ecn: cannot match TCP bits for non-tcp packets [ 345.012335][T10466] loop7: detected capacity change from 0 to 512 [ 345.102138][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 345.158279][T10469] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1899'. [ 345.174383][T10471] loop2: detected capacity change from 0 to 1024 [ 345.196968][T10471] EXT4-fs: inline encryption not supported [ 345.805097][ T28] audit: type=1400 audit(1778092225.415:19577): avc: denied { execute_no_trans } for pid=10475 comm="syz.0.1903" path="/404/file0" dev="tmpfs" ino=2225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 345.901736][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 345.909885][T10466] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 345.926436][T10471] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 345.937037][T10466] EXT4-fs (loop7): 1 truncate cleaned up [ 345.943809][T10466] EXT4-fs mount: 5 callbacks suppressed [ 345.943826][T10466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.046707][T10471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.114055][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 346.253833][ T28] audit: type=1400 audit(1778092225.855:19578): avc: denied { listen } for pid=10475 comm="syz.0.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 346.288406][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 346.391150][T10484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1904'. [ 346.405124][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.431052][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.490669][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.505560][T10484] loop4: detected capacity change from 0 to 256 [ 346.537268][T10484] vfat: Unknown parameter '00000000000000000008' [ 346.677793][T10487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1905'. [ 346.733195][T10487] loop2: detected capacity change from 0 to 256 [ 346.742007][T10487] vfat: Unknown parameter '00000000000000000008' [ 346.774004][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 346.868168][T10476] infiniband syz0: set active [ 346.872988][ T3390] xfrm0 speed is unknown, defaulting to 1000 [ 346.898115][T10476] infiniband syz0: added xfrm0 [ 346.974376][T10476] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 346.976411][T10476] infiniband syz0: Couldn't open port 1 [ 347.009610][T10500] loop7: detected capacity change from 0 to 512 [ 347.017331][T10500] EXT4-fs: Ignoring removed nobh option [ 347.025039][T10500] EXT4-fs (loop7): can't mount with commit=, fs mounted w/o journal [ 347.089014][ T28] audit: type=1400 audit(1778092226.705:19579): avc: denied { write } for pid=10503 comm="syz.2.1909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 347.174689][T10506] __nla_validate_parse: 1 callbacks suppressed [ 347.174719][T10506] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1909'. [ 347.203490][T10476] RDS/IB: syz0: added [ 347.234660][T10476] smc: adding ib device syz0 with port count 1 [ 347.280329][T10508] loop4: detected capacity change from 0 to 512 [ 347.288737][T10476] smc: ib device syz0 port 1 has no pnetid [ 347.347279][T10508] EXT4-fs (loop4): fragment/cluster size (131072) != block size (2048) [ 347.390241][ T3390] xfrm0 speed is unknown, defaulting to 1000 [ 347.404549][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 347.548309][T10509] loop2: detected capacity change from 0 to 2048 [ 347.608372][T10509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.650790][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 347.666830][T10514] loop4: detected capacity change from 0 to 512 [ 347.723552][T10514] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.737658][T10516] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1912'. [ 347.802751][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.821515][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.834375][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1913'. [ 347.839975][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.865097][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.885275][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.905309][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.917995][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 347.918091][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1913'. [ 347.928603][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.933328][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1913'. [ 347.967358][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 347.970095][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.985863][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 348.000353][T10520] loop7: detected capacity change from 0 to 164 [ 348.005517][T10514] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fffff00) [ 348.039272][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1915'. [ 348.097520][ T6361] bio_check_eod: 1 callbacks suppressed [ 348.098431][ T6361] kworker/u8:9: attempt to access beyond end of device [ 348.098431][ T6361] loop4: rw=1, sector=17179852714, nr_sectors = 56 limit=512 [ 348.128625][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 348.143752][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1914'. [ 348.284875][ T28] audit: type=1326 audit(1778092227.895:19580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.1918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 348.307131][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 348.321690][T10532] loop2: detected capacity change from 0 to 128 [ 348.352128][ T28] audit: type=1326 audit(1778092227.935:19581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.1918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 348.412829][ T28] audit: type=1326 audit(1778092227.935:19582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.1918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 348.468757][ T28] audit: type=1326 audit(1778092227.935:19583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10531 comm="syz.2.1918" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 348.535439][T10534] loop4: detected capacity change from 0 to 512 [ 348.562116][T10534] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 348.575058][T10534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 348.584221][T10537] loop8: detected capacity change from 0 to 1024 [ 348.585690][T10476] xfrm0 speed is unknown, defaulting to 1000 [ 348.603424][T10534] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 348.642687][T10537] EXT4-fs: inline encryption not supported [ 348.651570][T10534] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 348.651709][T10537] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 348.669649][T10534] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1919: bg 0: block 15: invalid block bitmap [ 348.682234][T10534] loop4: lost filesystem error report for type 5 error -117 [ 348.706452][T10534] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 348.737883][T10537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.745110][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 348.757434][ C1] EXT4-fs (loop4): initial error at time 1778092228: ext4_validate_block_bitmap:432 [ 348.759101][T10539] syz.2.1918: attempt to access beyond end of device [ 348.759101][T10539] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 348.766988][ C1] EXT4-fs (loop4): last error at time 1778092228: ext4_validate_block_bitmap:432 [ 348.782732][T10534] loop4: lost filesystem error report for type 5 error -117 [ 348.829520][T10534] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.1919: data will be lost [ 348.848124][T10534] EXT4-fs (loop4): 1 truncate cleaned up [ 348.854564][T10534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.892790][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.944060][T10547] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1923'. [ 349.005726][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.153618][T10552] EXT4-fs: Ignoring removed nobh option [ 349.163908][T10552] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 349.505463][ T28] kauditd_printk_skb: 319 callbacks suppressed [ 349.505479][ T28] audit: type=1326 audit(1778092229.115:19902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 349.583574][ T28] audit: type=1326 audit(1778092229.155:19903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 349.616789][ T28] audit: type=1326 audit(1778092229.155:19904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 349.642762][ T28] audit: type=1326 audit(1778092229.155:19905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 349.668488][ T28] audit: type=1326 audit(1778092229.155:19906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 349.696814][ T28] audit: type=1326 audit(1778092229.215:19907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 349.722925][ T28] audit: type=1326 audit(1778092229.215:19908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a25c5cb42 code=0x7ffc0000 [ 349.748431][ T28] audit: type=1326 audit(1778092229.325:19909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0a25c5cbd7 code=0x7ffc0000 [ 349.778319][ T28] audit: type=1326 audit(1778092229.335:19910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0a25c19ad1 code=0x7ffc0000 [ 349.840060][ T28] audit: type=1326 audit(1778092229.335:19911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.0.1924" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f0a25c5dbc9 code=0x7ffc0000 [ 350.070985][T10563] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 350.087550][T10563] EXT4-fs (loop7): 1 truncate cleaned up [ 350.093720][T10563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.207862][T10563] netlink: 'syz.7.1928': attribute type 29 has an invalid length. [ 350.260040][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1932'. [ 350.274149][T10563] netlink: 'syz.7.1928': attribute type 29 has an invalid length. [ 350.357652][T10563] tipc: Started in network mode [ 350.362763][T10563] tipc: Node identity 4, cluster identity 4711 [ 350.369058][T10563] tipc: Node number set to 4 [ 350.430789][ T8591] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.503157][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1934'. [ 350.794746][T10590] syz.2.1936: attempt to access beyond end of device [ 350.794746][T10590] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 350.937749][T10590] syz.2.1936: attempt to access beyond end of device [ 350.937749][T10590] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 350.951977][T10590] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 350.968336][T10593] EXT4-fs: Ignoring removed nobh option [ 350.975735][T10593] EXT4-fs (loop7): can't mount with commit=, fs mounted w/o journal [ 350.984123][T10590] syz.2.1936: attempt to access beyond end of device [ 350.984123][T10590] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 351.111178][T10590] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 351.122701][T10590] syz.2.1936: attempt to access beyond end of device [ 351.122701][T10590] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 351.391840][T10590] syz.2.1936: attempt to access beyond end of device [ 351.391840][T10590] loop2: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 351.431171][T10590] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 351.451767][T10590] syz.2.1936: attempt to access beyond end of device [ 351.451767][T10590] loop2: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 351.497058][T10590] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 351.530146][T10607] vfat: Unknown parameter '00000000000000000009' [ 351.547808][T10590] syz.2.1936: attempt to access beyond end of device [ 351.547808][T10590] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 351.563270][T10590] syz.2.1936: attempt to access beyond end of device [ 351.563270][T10590] loop2: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 351.620940][T10590] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 351.704225][T10590] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 351.710081][T10619] set_capacity_and_notify: 5 callbacks suppressed [ 351.710097][T10619] loop4: detected capacity change from 0 to 512 [ 351.763307][T10590] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 351.780199][T10619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.829870][T10590] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 351.853129][T10619] ext4 filesystem being mounted at /394/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 351.955212][T10619] EXT4-fs error (device loop4): ext4_empty_dir:3085: inode #12: comm syz.4.1946: Directory block failed checksum [ 352.043525][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.649331][T10648] xt_ecn: cannot match TCP bits for non-tcp packets [ 352.667706][T10648] loop8: detected capacity change from 0 to 512 [ 352.674727][T10648] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 352.877013][T10642] loop2: detected capacity change from 0 to 256 [ 352.898632][T10648] EXT4-fs (loop8): 1 truncate cleaned up [ 352.904921][T10648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.960963][T10642] FAT-fs (loop2): codepage cp863 not found [ 353.055380][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 354.059317][ T8884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.208274][T10674] loop8: detected capacity change from 0 to 512 [ 354.233254][T10674] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 354.345774][T10679] loop4: detected capacity change from 0 to 512 [ 354.387704][T10679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 354.409893][T10679] EXT4-fs (loop4): 1 truncate cleaned up [ 354.424419][T10679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.817688][ T28] kauditd_printk_skb: 326 callbacks suppressed [ 354.817757][ T28] audit: type=1400 audit(1778092234.435:20238): avc: denied { kexec_image_load } for pid=10678 comm="syz.4.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 354.887004][ T28] audit: type=1326 audit(1778092234.475:20239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.0.1958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 354.971310][ T28] audit: type=1326 audit(1778092234.475:20240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10646 comm="syz.0.1958" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 354.998710][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.128551][T10687] __nla_validate_parse: 9 callbacks suppressed [ 355.128596][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 355.147886][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1970'. [ 355.225228][T10689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1972'. [ 355.235521][T10691] loop8: detected capacity change from 0 to 512 [ 355.255894][T10691] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.376169][T10691] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 355.434960][T10694] xt_ecn: cannot match TCP bits for non-tcp packets [ 355.453391][T10691] bio_check_eod: 5 callbacks suppressed [ 355.453407][T10691] syz.8.1973: attempt to access beyond end of device [ 355.453407][T10691] loop8: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 355.520755][T10691] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fffff00) [ 355.605095][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.645293][T10707] program syz.0.1977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.812008][T10716] loop2: detected capacity change from 0 to 1024 [ 355.848136][T10721] blktrace: Concurrent blktraces are not allowed on sg0 [ 355.874113][T10723] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1985'. [ 355.930446][T10716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.041775][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.238253][T10750] loop2: detected capacity change from 0 to 512 [ 356.261603][T10742] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 356.283276][T10754] blktrace: Concurrent blktraces are not allowed on sg0 [ 356.364502][T10750] Quota error (device loop2): v2_read_file_info: Free block number 1536 out of range (1, 6). [ 356.378357][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2000'. [ 356.406399][T10750] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 356.438685][T10750] EXT4-fs (loop2): mount failed [ 356.581509][T10769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2003'. [ 356.816866][T10779] FAULT_INJECTION: forcing a failure. [ 356.816866][T10779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.835441][T10779] CPU: 0 UID: 0 PID: 10779 Comm: syz.8.2007 Tainted: G W syzkaller #0 PREEMPT(full) [ 356.835483][T10779] Tainted: [W]=WARN [ 356.835492][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.835585][T10779] Call Trace: [ 356.835594][T10779] [ 356.835605][T10779] __dump_stack+0x1d/0x30 [ 356.835630][T10779] dump_stack_lvl+0x95/0xd0 [ 356.835651][T10779] dump_stack+0x15/0x1b [ 356.835675][T10779] should_fail_ex+0x263/0x280 [ 356.835747][T10779] should_fail+0xb/0x20 [ 356.835850][T10779] should_fail_usercopy+0x1a/0x20 [ 356.835940][T10779] _copy_from_user+0x1c/0xb0 [ 356.836008][T10779] ___sys_recvmsg+0xaa/0x3b0 [ 356.836047][T10779] do_recvmmsg+0x1ef/0x560 [ 356.836081][T10779] ? fput+0x8f/0xc0 [ 356.836157][T10779] __x64_sys_recvmmsg+0xe5/0x170 [ 356.836183][T10779] x64_sys_call+0x80f/0x3020 [ 356.836210][T10779] do_syscall_64+0x12c/0x3b0 [ 356.836242][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.836379][T10779] RIP: 0033:0x7f8bd41bcdd9 [ 356.836400][T10779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.836428][T10779] RSP: 002b:00007f8bd2c0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 356.836454][T10779] RAX: ffffffffffffffda RBX: 00007f8bd4435fa0 RCX: 00007f8bd41bcdd9 [ 356.836516][T10779] RDX: 0000000000000001 RSI: 0000200000003280 RDI: 0000000000000003 [ 356.836531][T10779] RBP: 00007f8bd2c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.836544][T10779] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 356.836557][T10779] R13: 00007f8bd4436038 R14: 00007f8bd4435fa0 R15: 00007ffda3e52288 [ 356.836577][T10779] [ 357.039306][T10758] loop4: detected capacity change from 0 to 256 [ 357.046139][T10758] vfat: Unknown parameter '00000000000000000009' [ 357.127409][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1999'. [ 357.179717][T10786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2009'. [ 357.383406][T10788] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 357.439554][ T28] audit: type=1400 audit(1778092237.025:20241): avc: denied { create } for pid=10791 comm="syz.8.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 357.726068][T10801] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2016'. [ 357.985313][T10805] IPv6: NLM_F_REPLACE set, but no existing node found! [ 358.085075][T10808] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2019'. [ 358.106352][T10808] loop8: detected capacity change from 0 to 256 [ 358.132248][T10808] vfat: Unknown parameter '00000000000000000009' [ 358.137981][ T28] audit: type=1326 audit(1778092237.735:20242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 358.252430][ T28] audit: type=1326 audit(1778092237.735:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 358.305070][ T28] audit: type=1326 audit(1778092237.735:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 358.438778][ T28] audit: type=1326 audit(1778092237.735:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 358.498814][ T28] audit: type=1326 audit(1778092237.735:20246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 358.561757][T10826] loop2: detected capacity change from 0 to 512 [ 358.569165][T10826] EXT4-fs: Ignoring removed nobh option [ 358.584116][T10826] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 358.643088][T10822] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 359.021866][T10830] 9pnet_fd: p9_fd_create_unix (10830): problem connecting socket: ./file0: -2 [ 359.713623][T10854] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 359.850965][T10857] loop2: detected capacity change from 0 to 256 [ 359.876362][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 359.876379][ T28] audit: type=1326 audit(1778092239.495:20381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 359.929649][T10857] vfat: Unknown parameter '00000000000000000009' [ 359.998521][ T28] audit: type=1326 audit(1778092239.495:20382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 360.080760][ T28] audit: type=1326 audit(1778092239.545:20383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 360.109176][ T28] audit: type=1326 audit(1778092239.555:20384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.0.2022" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a25c5cdd9 code=0x7ffc0000 [ 360.174698][T10866] loop2: detected capacity change from 0 to 512 [ 360.192420][T10866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.291000][T10872] __nla_validate_parse: 7 callbacks suppressed [ 360.291020][T10872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2043'. [ 360.326201][T10866] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 360.335152][T10866] syz.2.2040: attempt to access beyond end of device [ 360.335152][T10866] loop2: rw=0, sector=17179852721, nr_sectors = 1 limit=512 [ 360.335264][T10874] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2044'. [ 360.378296][T10874] ip6gre1: entered promiscuous mode [ 360.384860][T10866] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 360.390772][T10874] ip6gre1: entered allmulticast mode [ 360.585957][T10881] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 360.756258][T10893] loop2: detected capacity change from 0 to 256 [ 360.778467][T10893] vfat: Unknown parameter 'iocŠ*harset' [ 360.934072][T10902] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2056'. [ 361.079346][ T23] xfrm0 speed is unknown, defaulting to 1000 [ 361.179272][T10915] tmpfs: Unknown parameter 'nr_ x¯zŠoM¼a#RAW° VÍu¢es' [ 361.269470][T10921] loop2: detected capacity change from 0 to 128 [ 361.450965][T10916] xt_ecn: cannot match TCP bits for non-tcp packets [ 361.603600][T10930] loop4: detected capacity change from 0 to 512 [ 361.614321][T10930] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 361.636378][T10930] EXT4-fs (loop4): 1 truncate cleaned up [ 361.642812][T10930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.051155][T10933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10933 comm=syz.8.2068 [ 362.405481][T10944] blktrace: Concurrent blktraces are not allowed on sg0 [ 362.430068][T10946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2072'. [ 362.590912][T10951] loop2: detected capacity change from 0 to 1024 [ 362.679735][T10951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.746515][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.859489][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.872049][T10956] tipc: Resetting bearer [ 363.057398][T10968] loop2: detected capacity change from 0 to 1024 [ 363.071899][T10968] EXT4-fs: test_dummy_encryption option not supported [ 363.237205][T10974] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2084'. [ 363.249473][T10968] loop2: detected capacity change from 0 to 512 [ 363.294577][T10968] EXT4-fs (loop2): 1 orphan inode deleted [ 363.315220][ T8029] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 363.329429][T10968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.361347][ T8029] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 363.386228][T10983] tmpfs: Bad value for 'mpol' [ 363.410374][T10968] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.424966][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2086'. [ 363.462732][T10983] sch_tbf: peakrate 2 is lower than or equals to rate 50420 ! [ 363.574173][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.588193][T10983] netlink: 'syz.8.2086': attribute type 3 has an invalid length. [ 363.673094][T10995] loop2: detected capacity change from 0 to 128 [ 363.677836][ T28] audit: type=1326 audit(1778092243.275:20385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.2089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 363.742728][ T28] audit: type=1326 audit(1778092243.275:20386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.2089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 363.805535][T10990] FAULT_INJECTION: forcing a failure. [ 363.805535][T10990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.825412][ T28] audit: type=1326 audit(1778092243.275:20387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.2089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 363.861457][T10990] CPU: 0 UID: 0 PID: 10990 Comm: syz.4.2088 Tainted: G W syzkaller #0 PREEMPT(full) [ 363.861520][T10990] Tainted: [W]=WARN [ 363.861527][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 363.861541][T10990] Call Trace: [ 363.861548][T10990] [ 363.861558][T10990] __dump_stack+0x1d/0x30 [ 363.861586][T10990] dump_stack_lvl+0x95/0xd0 [ 363.861610][T10990] dump_stack+0x15/0x1b [ 363.861712][T10990] should_fail_ex+0x263/0x280 [ 363.861745][T10990] should_fail+0xb/0x20 [ 363.861825][T10990] should_fail_usercopy+0x1a/0x20 [ 363.861870][T10990] strncpy_from_user+0x27/0x250 [ 363.861905][T10990] ? kmem_cache_alloc_noprof+0x2f9/0x3f0 [ 363.861940][T10990] do_getname+0x59/0x1c0 [ 363.861962][T10990] getname_flags+0x1d/0x30 [ 363.862023][T10990] do_sys_openat2+0x60/0x130 [ 363.862048][T10990] __x64_sys_creat+0x65/0x90 [ 363.862085][T10990] x64_sys_call+0x2ea0/0x3020 [ 363.862115][T10990] do_syscall_64+0x12c/0x3b0 [ 363.862146][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.862189][T10990] RIP: 0033:0x7ff5e5a6cdd9 [ 363.862251][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.862270][T10990] RSP: 002b:00007ff5e44c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 363.862291][T10990] RAX: ffffffffffffffda RBX: 00007ff5e5ce5fa0 RCX: 00007ff5e5a6cdd9 [ 363.862305][T10990] RDX: 0000000000000000 RSI: 0000000000000028 RDI: 0000200000000340 [ 363.862401][T10990] RBP: 00007ff5e44c7090 R08: 0000000000000000 R09: 0000000000000000 [ 363.862415][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.862428][T10990] R13: 00007ff5e5ce6038 R14: 00007ff5e5ce5fa0 R15: 00007ffd71a1e3d8 [ 363.862448][T10990] [ 363.862623][ T28] audit: type=1326 audit(1778092243.285:20388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.2089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 364.100766][T11005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2096'. [ 364.112680][ T28] audit: type=1326 audit(1778092243.285:20389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.2089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28bcd0cb42 code=0x7ffc0000 [ 364.162571][T11009] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2095'. [ 364.212201][T11011] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2097'. [ 364.250162][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2097'. [ 364.285563][T11016] loop4: detected capacity change from 0 to 256 [ 364.350568][T11022] loop8: detected capacity change from 0 to 128 [ 364.383405][T11016] FAT-fs (loop4): codepage cp863 not found [ 364.394117][T11019] syz.2.2089: attempt to access beyond end of device [ 364.394117][T11019] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 364.607002][T11026] syz.8.2101: attempt to access beyond end of device [ 364.607002][T11026] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 364.713271][T11026] syz.8.2101: attempt to access beyond end of device [ 364.713271][T11026] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 364.806127][T11022] ================================================================== [ 364.815229][T11022] BUG: KCSAN: data-race in compact_zone / compact_zone [ 364.823189][T11022] [ 364.825887][T11022] write to 0xffff88823fffab98 of 8 bytes by task 10995 on cpu 1: [ 364.836785][T11022] compact_zone+0x1e81/0x2720 [ 364.841838][T11022] try_to_compact_pages+0x3ca/0x960 [ 364.848493][T11022] __alloc_pages_direct_compact+0x64/0x3b0 [ 364.854841][T11022] __alloc_pages_slowpath+0x25a/0x600 [ 364.860790][T11022] __alloc_frozen_pages_noprof+0x270/0x350 [ 364.866774][T11022] alloc_pages_mpol+0xb3/0x260 [ 364.872205][T11022] alloc_pages_noprof+0x8f/0x140 [ 364.877267][T11022] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 364.884270][T11022] __kvmalloc_node_noprof+0x3d4/0x640 [ 364.890243][T11022] futex_hash_allocate+0x190/0x9a0 [ 364.895736][T11022] futex_hash_prctl+0xd8/0xf0 [ 364.900446][T11022] __se_sys_prctl+0x4f4/0x1400 [ 364.905945][T11022] __x64_sys_prctl+0x67/0x80 [ 364.910755][T11022] x64_sys_call+0x2533/0x3020 [ 364.916012][T11022] do_syscall_64+0x12c/0x3b0 [ 364.921207][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.928841][T11022] [ 364.931883][T11022] write to 0xffff88823fffab98 of 8 bytes by task 11022 on cpu 0: [ 364.942088][T11022] compact_zone+0x1e81/0x2720 [ 364.946992][T11022] try_to_compact_pages+0x3ca/0x960 [ 364.953224][T11022] __alloc_pages_direct_compact+0x64/0x3b0 [ 364.959771][T11022] __alloc_pages_slowpath+0x25a/0x600 [ 364.966235][T11022] __alloc_frozen_pages_noprof+0x270/0x350 [ 364.972977][T11022] alloc_pages_mpol+0xb3/0x260 [ 364.978377][T11022] alloc_pages_noprof+0x8f/0x140 [ 364.985551][T11022] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 364.992264][T11022] __kvmalloc_node_noprof+0x3d4/0x640 [ 364.998196][T11022] futex_hash_allocate+0x190/0x9a0 [ 365.004058][T11022] futex_hash_prctl+0xd8/0xf0 [ 365.009831][T11022] __se_sys_prctl+0x4f4/0x1400 [ 365.015247][T11022] __x64_sys_prctl+0x67/0x80 [ 365.020576][T11022] x64_sys_call+0x2533/0x3020 [ 365.030268][T11022] do_syscall_64+0x12c/0x3b0 [ 365.035520][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.042142][T11022] [ 365.044874][T11022] value changed: 0x0000000000152e00 -> 0x0000000000155600 [ 365.053163][T11022] [ 365.055914][T11022] Reported by Kernel Concurrency Sanitizer on: [ 365.062452][T11022] CPU: 0 UID: 0 PID: 11022 Comm: syz.8.2101 Tainted: G W syzkaller #0 PREEMPT(full) [ 365.074820][T11022] Tainted: [W]=WARN [ 365.079966][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 365.091804][T11022] ================================================================== [ 365.165204][T11026] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 365.188089][ T28] kauditd_printk_skb: 454 callbacks suppressed [ 365.188111][ T28] audit: type=1326 audit(1778092244.715:20844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.8.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8bd417d60e code=0x7ffc0000 [ 365.240724][ T28] audit: type=1326 audit(1778092244.855:20845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10994 comm="syz.2.2089" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f28bcd0cdd9 code=0x7ffc0000 [ 365.322563][ T28] audit: type=1326 audit(1778092244.935:20846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.8.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 365.448185][T11026] syz.8.2101: attempt to access beyond end of device [ 365.448185][T11026] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 365.455365][ T28] audit: type=1326 audit(1778092245.065:20847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.8.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 365.518195][T11026] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 365.555097][ T28] audit: type=1326 audit(1778092245.115:20848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.8.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 365.635708][ T28] audit: type=1326 audit(1778092245.155:20849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11021 comm="syz.8.2101" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8bd41bcdd9 code=0x7ffc0000 [ 367.479702][T10615] syz.7.1945: page allocation failure: order:0, mode:0xd00(GFP_NOIO|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 367.500222][T10615] CPU: 0 UID: 0 PID: 10615 Comm: syz.7.1945 Tainted: G W syzkaller #0 PREEMPT(full) [ 367.500262][T10615] Tainted: [W]=WARN [ 367.500272][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.500288][T10615] Call Trace: [ 367.500298][T10615] [ 367.500308][T10615] __dump_stack+0x1d/0x30 [ 367.500335][T10615] dump_stack_lvl+0x95/0xd0 [ 367.500405][T10615] dump_stack+0x15/0x1b [ 367.500429][T10615] warn_alloc+0x145/0x1c0 [ 367.500460][T10615] __alloc_pages_slowpath+0x5aa/0x600 [ 367.500491][T10615] __alloc_frozen_pages_noprof+0x270/0x350 [ 367.500550][T10615] alloc_pages_mpol+0x1f6/0x260 [ 367.500575][T10615] alloc_pages_noprof+0x8f/0x140 [ 367.500601][T10615] relay_open_buf+0x1dc/0x880 [ 367.501328][T10615] relay_open+0x2e8/0x640 [ 367.501469][T10615] blk_trace_setup_prepare+0x242/0x300 [ 367.501489][T10615] blk_trace_setup+0x261/0x3f0 [ 367.501526][T10615] ? __pfx_blkdev_ioctl+0x10/0x10 [ 367.501545][T10615] blk_trace_ioctl+0x215/0x710 [ 367.501568][T10615] ? ioctl_has_perm+0x27e/0x2d0 [ 367.501648][T10615] ? do_vfs_ioctl+0x84f/0xe70 [ 367.501753][T10615] ? selinux_file_ioctl+0x338/0x3b0 [ 367.501784][T10615] ? __pfx_blkdev_ioctl+0x10/0x10 [ 367.501809][T10615] blkdev_ioctl+0x2ac/0x460 [ 367.501877][T10615] ? __pfx_blkdev_ioctl+0x10/0x10 [ 367.501903][T10615] __se_sys_ioctl+0xce/0x140 [ 367.501938][T10615] __x64_sys_ioctl+0x43/0x50 [ 367.501970][T10615] x64_sys_call+0x1563/0x3020 [ 367.502043][T10615] do_syscall_64+0x12c/0x3b0 [ 367.502083][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.502110][T10615] RIP: 0033:0x7ff9847ecdd9 [ 367.502131][T10615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.502146][T10615] RSP: 002b:00007ff98323f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.502184][T10615] RAX: ffffffffffffffda RBX: 00007ff984a65fa0 RCX: 00007ff9847ecdd9 [ 367.502197][T10615] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 367.502207][T10615] RBP: 00007ff984882d69 R08: 0000000000000000 R09: 0000000000000000 [ 367.502216][T10615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.502225][T10615] R13: 00007ff984a66038 R14: 00007ff984a65fa0 R15: 00007ffd922a8028 [ 367.502239][T10615] [ 367.502310][T10615] Mem-Info: [ 367.773157][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 367.837131][T10615] active_anon:714 inactive_anon:6785 isolated_anon:0 [ 367.837131][T10615] active_file:35 inactive_file:1718 isolated_file:0 [ 367.837131][T10615] unevictable:0 dirty:3 writeback:0 [ 367.837131][T10615] slab_reclaimable:2764 slab_unreclaimable:61832 [ 367.837131][T10615] mapped:26794 shmem:4212 pagetables:4462 [ 367.837131][T10615] sec_pagetables:0 bounce:0 [ 367.837131][T10615] kernel_misc_reclaimable:0 [ 367.837131][T10615] free:12411 free_pcp:2497 free_cma:0 [ 367.908677][T10615] Node 0 active_anon:2928kB inactive_anon:27104kB active_file:248kB inactive_file:6852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107160kB dirty:12kB writeback:0kB shmem:16812kB kernel_stack:4176kB pagetables:17848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 367.944107][T10615] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 367.980110][T10615] lowmem_reserve[]: 0 2878 7857 7857 [ 367.986386][T10615] Node 0 DMA32 free:16168kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:76kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB zspages:0kB present:3129332kB managed:2948072kB mlocked:0kB bounce:0kB free_pcp:8060kB local_pcp:8060kB free_cma:0kB [ 368.025286][T10615] lowmem_reserve[]: 0 0 4978 4978 [ 368.031378][T10615] Node 0 Normal free:18008kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2920kB inactive_anon:27028kB active_file:244kB inactive_file:6848kB unevictable:0kB writepending:8kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:1928kB local_pcp:1004kB free_cma:0kB [ 368.074294][T10615] lowmem_reserve[]: 0 0 0 0 [ 368.079676][T10615] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 368.094450][T10615] Node 0 DMA32: 2*4kB (UM) 2*8kB (UM) 3*16kB (UM) 7*32kB (M) 4*64kB (M) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 4*1024kB (M) 4*2048kB (M) 0*4096kB = 16168kB [ 368.114113][T10615] Node 0 Normal: 810*4kB (UM) 468*8kB (UME) 187*16kB (UME) 87*32kB (UME) 30*64kB (UME) 18*128kB (UME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 368.133078][T10615] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 368.143401][T10615] 6410 total pagecache pages [ 368.148745][T10615] 437 pages in swap cache [ 368.153474][T10615] Free swap = 47016kB [ 368.157701][T10615] Total swap = 124996kB [ 368.163308][T10615] 2097051 pages RAM [ 368.167795][T10615] 0 pages HighMem/MovableOnly [ 368.173364][T10615] 81634 pages reserved [ 368.179477][ T29] oom_reaper: reaped process 10615 (syz.7.1945), now anon-rss:0kB, file-rss:21256kB, shmem-rss:0kB [ 373.525176][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!