last executing test programs: 7m59.644033474s ago: executing program 32 (id=175): r0 = syz_io_uring_setup(0xbe7, &(0x7f0000000400)={0x0, 0xe7a8, 0x80, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r2 = eventfd2(0xff, 0x80001) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0xfffffffffffffffd, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x7ff}, {0x0}, &(0x7f0000000300), 0x0, 0x1900b, 0x3ff}}], 0x48}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000580)=ANY=[@ANYBLOB="2fea7c32ce000000c20400001e05000000000000000000007ffdaddb7ef77e07d8fd9a88c62c5305c22e1e708edcbf8ac427a86be48b11e4a51c65e2b4a9a7932fe94704ad9ddeefa3ee65d48e240e58b475da36c2b938741d9092536f119cc6415ed3080898c99c487cad8fc55f8d1dc713ccffa52237b9398ab6b26d464abbe1b82b0abc113f4fd92242508181fcafdff8453fe4a38c0dad29ecabfd8f8728473bbad75c8f907b3172fe86e6a8074f2d58799de35994f665b8012c6d51c8e02d55"], 0x18) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r2, 0x7ffffffe) 6m48.74413211s ago: executing program 33 (id=892): vmsplice(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000340)="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", 0xe41}], 0x1, 0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket(0x2, 0x3, 0xff) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) sendto$inet6(r0, &(0x7f0000001180)="62543689eeb7551e9e20a764b220e9bc25912b83", 0x14, 0x4, &(0x7f0000002180)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000340)="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", 0xe41}], 0x1, 0xd) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) socket(0x2, 0x3, 0xff) (async) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) (async) sendto$inet6(r0, &(0x7f0000001180)="62543689eeb7551e9e20a764b220e9bc25912b83", 0x14, 0x4, &(0x7f0000002180)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) (async) 6m44.198229658s ago: executing program 34 (id=920): r0 = socket(0x21, 0x800, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}}, 0x0) 5m7.040327921s ago: executing program 35 (id=1891): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) syz_emit_ethernet(0xbe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@quota}, {@nombcache}, {@stripe}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x468, &(0x7f0000000800)="$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") 3m51.123701281s ago: executing program 8 (id=2600): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000680)=ANY=[@ANYBLOB="04000000000800000002000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="01007c8442745182431eee25a2b552a4c25a0060010000000000006039050000c899cbee9dae2b1c5fb35641133146b5af16f3b351e6793b8727cbb63bf4e72959bdb5ffd80568d7eb675e27aefd77d33c3fd8763ab229714c917d5c5eee9708b58b800547735e"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1}, 0x0, 0x2, 0x1, 0x2}}, 0x26) getrlimit(0x5, &(0x7f00000000c0)) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x1, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f00000001c0)=0x80000000, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="f7590e8518301e1b7afe95ec5110df0bdf53a30d74e7e04558e8af4a7dbe73571ae1c741d74bd8dea18dd4923231145686018809ae5e7c57daf73fce96fc10e6b92a9af60e5204debf003a96f530f4c3dd1772a8fb5f4c01f9bdff9b06982abf5ce44b15803253c4e6331e1499b607b72f733bffc95271289226e5effe0de6431594d856ac15def3", @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365", @ANYRESOCT=r4], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x7000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a6158354f86e2da8217cfc57be5369f2edfdcbb894242d0ac9a38232b031e2a5f0aa89e69108660af82049fcd68c9bd83d9707a8be96ec4663ce2da8c2a6667e42c97c150c1ca4cb7ec04d680e0adbb4ab6e2e4857c98b", @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf25530000000c0099000300000042000000"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000605000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x1d, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r7, &(0x7f0000000500)=ANY=[], 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r8, r3, 0x30}, 0x14) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r7, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) clock_getres(0xfffffffffffffffb, 0x0) 3m51.115616441s ago: executing program 8 (id=2601): unshare(0x24040400) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x1000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0xe0, 0x43, 0xa0, 0x0, 0x98, 0x278, 0x178, 0x178, 0x278, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@empty, [], @ipv4=@local, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x79}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r1 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) preadv2(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0x7fffffff, 0x100, 0xa) socketpair(0x9, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) copy_file_range(r1, &(0x7f0000000100)=0x3d, r3, 0x0, 0x8000000010000000, 0x0) unshare(0x24040400) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x1000) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0xe0, 0x43, 0xa0, 0x0, 0x98, 0x278, 0x178, 0x178, 0x278, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x198, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv4=@empty, [], @ipv4=@local, [], @ipv4=@multicast2}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {}, 0x79}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) (async) socket$inet6(0xa, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async) preadv2(r2, &(0x7f0000000840)=[{&(0x7f0000000280)=""/173, 0xad}], 0x1, 0x7fffffff, 0x100, 0xa) (async) socketpair(0x9, 0x5, 0x3, &(0x7f0000000000)) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) (async) copy_file_range(r1, &(0x7f0000000100)=0x3d, r3, 0x0, 0x8000000010000000, 0x0) (async) 3m51.065068124s ago: executing program 8 (id=2602): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000002c0)=r1}, 0x20) r5 = socket$inet(0x2, 0x3, 0x1) sendmsg(r5, &(0x7f00000007c0)={&(0x7f0000000540)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000680)="efa0", 0x2}], 0x1}, 0x8086) sendmsg$inet_sctp(r5, &(0x7f00000003c0)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000006c0)='E=', 0x2}], 0x1, 0x0, 0x0, 0x4011}, 0x844) r6 = inotify_init1(0x80000) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x402) inotify_rm_watch(r6, r7) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0xf7925283aafa81e0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYRESDEC=r0], 0x20) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x111e]}, 0x8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="44f5ff00905ea5a10ad3e91ae15a4184e1efc3c8d7ae8db7ecdadbad35847c1279524a03123439eb383acda2", @ANYRES16=r11, @ANYBLOB="01002abd7000fbdbdf25620000000600b400000800000600b300010000000600b300010000000600b300030000000600b300010000000600b400ae0e0000"], 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4001) write$P9_RFSYNC(r10, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r10, {r10}}, './file0\x00'}) write$cgroup_devices(r12, &(0x7f0000000780)=ANY=[@ANYBLOB="62202a3a2a20727700b6cd"], 0x9) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) 3m50.788413047s ago: executing program 8 (id=2604): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendto(r0, 0x0, 0x0, 0x4800, 0x0, 0x0) 3m50.787846668s ago: executing program 8 (id=2605): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000b40)={[0x2]}, 0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x9, 0xfee, {"bc0998137afa9e4a633371f213f84681"}, 0xaba0, 0x666e, 0x4}}}, 0xa0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff", 0x88}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808d", 0x46}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1", 0x29}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m50.624016675s ago: executing program 8 (id=2611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000f9ff0000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4004) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000000000000000e00000020000000000000000000000000000000000ffffac14144000000000100000000a0020000000000000000000009253f778cb031e7ba3bf89458b2b7d644d52a90bb7391d96ca665dfac847d2bd6b02e8d7b40574b25a47655b54a8784ddcf549a5af8e3edb428e296500dee98e8c30724a63c7228df4db56ed9bc615be7adb5fbc1cb67d5832aa24262a4e228d24fbedbed2abc0f3f06e851f422d7120cab65995d5410b93dcdf162ec4b3e69e5e16b8393e627abb004b3fa7c64fdea665f1ac7d323300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001000000000000000600000000000000fefffffffffffffffeffffffffffffff00000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (async) syz_read_part_table(0x60a, &(0x7f0000000c40)="$eJzs2zGIk2cYB/DnO/P1qFKug5OTOhyluCiOhqKSREVBoreU0nqgiJgpghBp6JVz0FAUM4jdXKyQRe1kzOCkVHDqIOJw5eCGW1ruloNb+pUk39HelVKO5gqlvx8hD+/3/ZPnfeBd3+A/bSx+ybIsiYjsx4htf5tP81qf7X9PdUrl47tPH66ejUhiIiI+//aj7/pvkjyXjQ/r3nw9l68f3N/eu7l8LO28O7Myee5Fa2ytwczgEzsedqdGOSdb41Hx5cTs9XrlVqN46W2luXDjzetTj5dK1e7JVvvJifTo+Tz3Q14Leb0SjbgWl2M6CvF1XIj6xj/+cHiEvtlk/3ud+f3prkrn6cVDq+Xe7ecHBqk/n+v0H029vv/gwEZEv//VPXc+bTeP7Pt+592DjWevqot569rg3Cexlo2YHtEOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpTReTsxer1duNYqX3laaCzfevD71eKlU7Z5stZ+cSI+e74fe+z1fiPcH9Uo04lpcjumoRS0uRP0vO3zwx8X4xrePioV1/e915vf/uqvSeXrx0Gq5d/v5gTx3Or4a2czr++fzJ8Ws3//qnjuftJtH9o3vvHuw8exVdXHbMFfr7zzb+Ot0S/YEAAAAAAAAAAAAAAAAAADA/0+pfHz35OHq2YgkPouIj3/+cqz/PMtv6id5bm9e5/LnD+5v791cPpZ23p1ZmTz3ovXTF8PL8TORxExE7HjYnfr3p2GzfgsAAP//OFiT0A==") r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) (async, rerun: 32) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r0, r5}) 3m50.548759469s ago: executing program 36 (id=2611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000000000000000000000000000f9ff0000000000000000000000000000000a", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4004) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000000000000000e00000020000000000000000000000000000000000ffffac14144000000000100000000a0020000000000000000000009253f778cb031e7ba3bf89458b2b7d644d52a90bb7391d96ca665dfac847d2bd6b02e8d7b40574b25a47655b54a8784ddcf549a5af8e3edb428e296500dee98e8c30724a63c7228df4db56ed9bc615be7adb5fbc1cb67d5832aa24262a4e228d24fbedbed2abc0f3f06e851f422d7120cab65995d5410b93dcdf162ec4b3e69e5e16b8393e627abb004b3fa7c64fdea665f1ac7d323300", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001000000000000000600000000000000fefffffffffffffffeffffffffffffff00000000000000000000020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (async) syz_read_part_table(0x60a, &(0x7f0000000c40)="$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") r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000200)=r2) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0) (async, rerun: 32) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r0, r5}) 3m29.277295051s ago: executing program 4 (id=2771): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xa, 0xffe0}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x6}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000182b00fc010000000000000000000000000001fe8000000000000000000000000000aa3b0002000007000000000000001000"/78], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$tipc(0x1e, 0x5, 0x0) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0xfd}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) read(r4, &(0x7f0000000240)=""/28, 0xffd2) 3m28.91068746s ago: executing program 4 (id=2773): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000b40)={[0x2]}, 0x8) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x9, 0xfee, {"bc0998137afa9e4a633371f213f84681"}, 0xaba0, 0x666e, 0x4}}}, 0xa0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff", 0x88}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b", 0x50}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1", 0x29}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m28.90956624s ago: executing program 4 (id=2774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r1) sendmsg$NL80211_CMD_SET_REG(r1, 0x0, 0x24000000) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000340)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3m27.943242688s ago: executing program 4 (id=2779): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x46, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x26000780) sync() sync() sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = getpgrp(0x0) sendmsg$AUDIT_SET(r2, 0x0, 0x20042090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) capset(&(0x7f00000003c0)={0x0, r3}, &(0x7f0000000380)={0x6, 0x800002, 0x8, 0x8, 0x3, 0xffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x46, 0x0, &(0x7f0000000240)="e300c0678bb63701fd85b69fb68a0000ec67838717bd86ddece156d0f9421c617dd2455138a253e98cf382a75b4e359485bd744edf53e823bd97b020c801a21fb202f0781aee", 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b40100003f00010029bd7000ffdbdf2505000000c7e029f1e646b4fc63637c0c7e22dd9f51c8d83eb091ffa042415abb135b04000f00c273140b6a896220224ff1dc8634cf079eccee28b20ecc744df830eb4d955387d20c05a6b09cc179b52c1a0cfc3efcaa6410dd97b31e1df1f52b05876a96b4eec3a065250db600543a5de6cb8122cccea5e750ef52bc3b3bee79ff11adf8d8e023c08a7f310c2d709a769686358efec908006b00", @ANYRES32=r0, @ANYBLOB='\b\x00H\x00', @ANYRES32=r0, @ANYBLOB="08000d0001000000ac008180a4003d006bbfc617e15b6d6159f40c7687022f26ca4935118c6e80fe088ffcd4adbfda2414fdb57f690fe16cdc3c9db8ec055a66b37b6f7c4e27761399e87c83b495c86ec44fd5fc7375558f15aaf387bc72399188ba35e5b1878630e16a748aba56c8f4bd8d080d92defbefd503026589c491b591aee675b4aaa3308851f94f5375754707ab07686a635ae425f73fe4ef9f0abeaf669a14ad4e87f90def82352e851b170400f180d8034a9ddfafb191697d49ca499864657ee867681db4559b6ab658b90b25607da56d4a6f740000000000000000d0b41e685647454f4c0da608005100", @ANYRES32=r6, @ANYBLOB="0800a9800400a1800000"], 0x1b4}, 0x1, 0x0, 0x0, 0x8000}, 0x802) setns(r2, 0x40000000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r5) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="08010000", @ANYRES16=r7, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 3m27.372412506s ago: executing program 4 (id=2785): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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") r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x80000) getsockname$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 3m26.449350822s ago: executing program 4 (id=2794): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe]}}}}]}, 0x88}}, 0x20000000) 3m26.432663873s ago: executing program 37 (id=2794): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe]}}}}]}, 0x88}}, 0x20000000) 2m10.440680358s ago: executing program 7 (id=3498): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0x4}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xceb, 0x7, 0x4}, {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2m10.307396414s ago: executing program 7 (id=3501): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000140)='fdinfo/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}}}}}}}, 0x0) 2m9.463107686s ago: executing program 7 (id=3507): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') pipe2(&(0x7f00000000c0), 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0, 0xfffffffc}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x33, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@llc={0x4, {@llc={0xaa, 0xd5, "db85", "982612bc3ff5c312c4f7ab885ce34e636867a195263e75712dfb6aaa19"}}}}}, 0x0) 2m9.057798486s ago: executing program 7 (id=3513): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000002000000bd65000006"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001540), &(0x7f0000001640), 0x5e, r1}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040), 0x1}, 0x20) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r6, 0x8916, &(0x7f0000000000)) ioctl(r6, 0x8936, &(0x7f0000000000)) bind$qrtr(r6, &(0x7f00000004c0)={0x2a, 0x2, 0x4001}, 0xc) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000002c0)=0xc) r8 = syz_clone(0x4220000, &(0x7f0000000300)="f47b04857576d5a7f8a18cf16c6b32abf3847df0215407516199e355b44dc89316437d59180685d596c5fc71957a6ba2a6876db8facb434812f5d04555a14520fb932f76654ab45d70b6c5dd62f6deb9841b02b9d245c4a7f293cfbf9477e68d4729c7cc8567ac6d7985bf4f5277d8b5b8c175c718744db203f7154eb8b2164f9a3975d3912f5f46faef8ec2f3c8331d93daf362a2fa60ef92382f304a214df68710a67f5563383fc1c241439d3b0a1b72264d6d8917dca2bab21f18bb0aa0a357351ec94403ce7118d2e7b6b79f721c3f13", 0xd2, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="5a253316aa63f06c43177a31898ca3160eb80efe3c73ac2db527c6366c6f130c1ae04b8f7b5e3844646b054d0a506e573290321b6e12941066e29c") setpgid(r7, r8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 2m8.070695646s ago: executing program 7 (id=3522): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0xc8000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001300050000000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400000000001400030064756d6d793000000000000000000000050021000000000024002b80080001"], 0x60}}, 0x8084) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x5, 0x0, 0xff22) lstat(&(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000580), 0x1008801, &(0x7f0000000ac0)={[{@huge_advise}], [{@uid_gt={'uid>', 0xee01}}, {@flag='nomand'}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '}'}}, {@uid_eq={'uid', 0x3d, r3}}, {@fsname={'fsname', 0x3d, 'huge=advise'}}, {@smackfsdef={'smackfsdef', 0x3d, 'journal_ioprio'}}, {@smackfshat={'smackfshat', 0x3d, 'usrjquota'}}]}) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x20000480) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, 0x0, &(0x7f0000000100)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000480)=0xc) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) accept(r0, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000040)=0x80) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2m7.680643106s ago: executing program 7 (id=3527): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101b82, 0x1a5) openat(r0, &(0x7f0000000240)='./file1\x00', 0x40440, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file1\x00'}, 0x6e) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102384, 0x18ff0, 0x8) 2m7.663651376s ago: executing program 38 (id=3527): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101b82, 0x1a5) openat(r0, &(0x7f0000000240)='./file1\x00', 0x40440, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x1, './file1\x00'}, 0x6e) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102384, 0x18ff0, 0x8) 1m58.903904124s ago: executing program 3 (id=3598): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@dots}, {@dots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@fat=@quiet}, {@dots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@dots}, {@fat=@nocase}, {@fat=@time_offset={'time_offset', 0x3d, 0xf6}}, {@dots}]}, 0x1, 0x224, &(0x7f0000000840)="$eJzs3M9qE10UAPCTNk0n31ekO0EQRlzoqqgrlxWpIAaESha6K9hVZ5Vs0m7ad3DjK/gSPo0PIF11IyPpTDq1Taah5A/W329zz9xz78y9d2CS1cnjZQz9uP81kqQRK9uxHWeN2IyVGDkJAOAuOcvz+JkXlr0WAGAxpvj9/7XgJQEAc/bh46d3rzqdnd00TSJOTwbdQbdoi/ybt52dZ+m5zWrW6WDQXb3IP0+v/ncY5tfivzL/opifXqRbEdFtxdPHRX6Ye/2+k/45fz0+z3nvAAAAAAAAAAAAAAAAAAAAAACwLA8jHanq+6xGRFnfZ2vrar5d1ucpri7VB7pSv6cZD5rlZVUeKD9eyK4AAAAAAAAAAAAAAAAAAADg79I/PDrYy7L9XhWsR8TlnuaYMZODRnnjqQbfHPw/o/tMClbidtPbowNsjD3DuqBRHtG1VBIz3GB7/MudJohm1fN9Y2avsjZYneXes3SeSy2Ddu3x5vkwGH90o7IYE6e3IqL+6U92b7v4szzPs2+Pev3DyGsHV9+I9UV+kAAAAAAAAAAAAAAAAAAA4B/WaRVtr1/1fblXtMlylgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9c/PDrYy7L93nlwvac2OI6Ijbhx8OhZa5Esda8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXb8DAAD//zrXGWw=") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) 1m57.633696797s ago: executing program 3 (id=3605): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101840, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e9780000b90000000000002b5a0000000000000000"], 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000006800011702000000fcffff7f00000000000000000c00020001000000040000000800010001"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) (fail_nth: 6) 1m56.623869008s ago: executing program 3 (id=3612): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x4, 0x20000ac5) syz_clone3(&(0x7f0000000900)={0x23820400, &(0x7f0000000040), 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') writev(r0, &(0x7f00000003c0), 0x100000000000022d) 1m56.497117774s ago: executing program 3 (id=3614): r0 = syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f00000000c0)={[{@cruft}, {@utf8}, {@nojoliet}, {@showassoc}, {@utf8}, {@map_normal}]}, 0x1, 0x55a, &(0x7f0000000b00)="$eJzs3VFP21YbwPHHFN7StEKv3vdVVSHantJ3Ekg0dUKbKurNPOcknDaxI9up4KpCBSrU0E6lkwY3U2+6Tdou9wF6uw+xj7DLad9gV9UudrlpTLYTCDQhFApB6P+LWh/sxz7PiSI/OhDbAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHJLtp2zpGq8xrzqzS0Ffm2f7e3jTf81liy6dvbr+k6/Ilb8T0ZH5Uq66sr/diIvx/9NykT604SMxotR2bx4+d/3/zs81N5/n4ROxPrG5rPFZnP55aATGZCK9kzom5pT0cqEvioWCvbtuXKoyqaqw4WvftY15QbaifxATbnTKlcsziqdXfAbXqXkVHV75b1bedsuqAfZunaC0PduP8iG7pypVo1XSWLizXHMvfiD+NBEKtJOTamV1ebybL8k46DcQYLy/YLydj6fy+XzucLd4t17tj383gp7D3kvYvAfWgzW8ZzIgUMYatV/qYoRTxoyL6rry5WSBOJLrcf2llbhn/7ktt633876367yV3Y2j0tS/6+lP13rVf975HJyr3XZkE15JovSlKYsy8uBZ3Syr4po8cRIKL4YqYmTrFGtNUqKUpCC2PJY5qQsoSgpi5F/iZZQFiSUSHTyiXIlEC2OROJLIEqmxJVpUZKTohRlVpRoycqC+NIQTypSEkeqomVFVpP3fXafHLeDcgcJyu8TlP+D+o89hlunrAPv8HFP4MARbLXrPwAAAAAAOLOs5Lfv8fx/RK4mrbKpanvQaQEAAAAAgI8o+cv/RLwYiVtXxWL+DwAAAADAWWMl19hZIpKR62mrfSUUvwQAAAAAAOCMSP7+fy1eZOLWdbGY/wMAAAAAcNZ80/ce+2H9vPXT7xIEI9br+vz/rTUnjnPWzqX7ndt7xKg8fvHPrcRwcqzCcOuQrp6wLqVB2zfBfNdarPTLw/qQBKyx1t67E5Dv5EYac2MpXS61t6S9ZMqmqrOuX72fE8cZG4r0fPTF89UvJRn+t15tzJKV1eZy9smL5lKSy+v4KK/XWjdQfO8+ivvk8iq530JyzUXXEY8kF2K0+s2k/dqd4x9Kdx/6gD7fyGQaM5lJl5nd4x+N+8xle42+lUXuiCN/IzfTmJtTN9NFlyzy/bLId2ZxqPfiAFnM9sti9ohZAMCgrPSuQn+nRXxrb909xFnuZKr7G5lKY6bGkxPr8HiXM7rd74xuH7G6/bj9DIR2cK8aG/f7/Z6q+jbe4W3PfsNq3orfwnOv1j6Xy+sbm7dW1xafLj9dfp7PzxbsO7Z9Ny8jyTBaC2oPAKCLbs/YadfcdP7f9yk81p0+s+r/bH+lICtP5IU0ZUlmkqsNkm8cdD1qJtnnQvI1hJk+s9ZMxxNeZvrM6jIdD3rpiP3tl7S1K9bqeLwMAABnyWSfOnyQ+j/Ta979Q7K2o+bGtXz/2XFnLQcAAMdDB++sTPS1FQSm/jhXLOacaE6rwHcfqsCUKloZL9KBO+d4Fa3qgR/5rl+NG49MSYcqbNTrfhCpsh+ouh+a+eTJ7ypcCCNdU6GuOV5k3LBe1U6olet7keNGqmRCV9Ubn1VNOKeDZOewrl1TNq4TGd9Tod8IXJ1VKtS6I9CUtBeZsombnqoHpuYEC+qRX23UtCrp0A1MPfLTA7b7Ml7ZD2rJYbODfrMBADgl1jc2ny02m8sv+zU+PUBMj8agxwgAAHajSgMAAAAAAAAAAAAAAAAAAAAAcPod8pK+s9e49LEOuLVrjSUiOzEX5BSM9BCN8+2PyynJh8bxNwZ7XgJw/P4JAAD//1zPX+o=") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000180)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000380)=""/207, 0xcf, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) gettimeofday(&(0x7f0000000000), 0x0) 1m56.400036898s ago: executing program 3 (id=3615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1m56.16773608s ago: executing program 3 (id=3616): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@dots}, {@dots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@fat=@quiet}, {@dots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@dots}, {@fat=@nocase}, {@fat=@time_offset={'time_offset', 0x3d, 0xf6}}, {@dots}]}, 0x1, 0x224, &(0x7f0000000840)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) 1m56.16722912s ago: executing program 39 (id=3616): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@nodots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@dots}, {@dots}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@fat=@quiet}, {@dots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@dots}, {@fat=@nocase}, {@fat=@time_offset={'time_offset', 0x3d, 0xf6}}, {@dots}]}, 0x1, 0x224, &(0x7f0000000840)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) 1m16.869469792s ago: executing program 6 (id=3979): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x50000048) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x0) getdents64(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x2, [0x2, 0x5]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r7, &(0x7f0000000100)=0x4) socket(0x2b, 0x1, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xfffffff8}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="170900004000000000000100000008000b00020010697eef080076de33616e3100000000000000000000f4ff0a0000000000"], 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={r8, 0x3}, 0x8) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) 1m16.744095228s ago: executing program 6 (id=3980): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) 1m15.691996791s ago: executing program 6 (id=3990): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x12) r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = inotify_init1(0x800) inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x50000048) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x0) getdents64(r5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x4, 0x2, [0x2, 0x5]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r7, &(0x7f0000000100)=0x4) socket(0x2b, 0x1, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xfffffff8}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="170900004000000000000100000008000b00020010697eef080076de33616e3100000000000000000000f4ff0a0000000000"], 0x38}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={r8, 0x3}, 0x8) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) 1m15.578798347s ago: executing program 6 (id=3992): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0bdf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) (async, rerun: 64) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd61954a5b00172f00fe8000000000000000000000020000bbfe8000000000000000000000000000aa0c2088be0000000101008100000086dd080088"], 0x0) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x2048dc, &(0x7f0000000740)=ANY=[], 0x1, 0x343, &(0x7f0000000bc0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) (async) setpgid(0x0, r1) (async) tkill(r1, 0x7) (async) wait4(r1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000014c0)={0x28, 0x0, 0x2711, @local}, 0x10) (async) getsockopt(r2, 0x1, 0x4, 0x0, &(0x7f0000000100)) (async) prlimit64(r1, 0xe, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x39) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000020"], 0x24}}, 0x0) (rerun: 32) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r5, 0x0, 0x0, 0x20000ffd, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) (async) sendto$inet(r5, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async, rerun: 32) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) (rerun: 32) 1m15.463840773s ago: executing program 6 (id=3993): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) memfd_create(0x0, 0x1) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001e000100000000020400000002000000047743f8d4620a55a6deca7002b076ce76420cedd86df3a8095a36debc4430bf7fcd5e8382bb015808d8ce7e090c188bb40d3f5df3e3fbef390228474046807059e5142a3285e8dbdb8ae0d0efa0940c98510efacbadcf4336187ac02c7578091577f1e7ccb66e", @ANYRES32=0x0, @ANYBLOB="8000080014000100fe8000000000000000000000000000bb14000e800500010001000000050001008f000000"], 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000540)={'broute\x00', 0x0, 0x3, 0x1000, [0x5, 0x8, 0x4, 0x1, 0x9, 0x8], 0x1, &(0x7f0000000500)=[{}], &(0x7f0000001900)=""/4096}, &(0x7f0000000740)=0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10c2, &(0x7f0000000040)={0x0, 0x815e, 0x180, 0x0, 0x2fe}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="09000000040000040800"/20, @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000181100004917f3bbeb0f1d244a96bcfa3d1e5414814b295421a42ced3500adedfc49991f9db3d65dab0390a89012ce7277d8f50b9ef1fb19c58fba9209270b77c346", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x42, 0x0, 0xffffffffffffffff, 0x0, 0x0}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) 1m14.992318906s ago: executing program 6 (id=3998): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000090000", 0x26) 1m14.981898546s ago: executing program 40 (id=3998): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000090000", 0x26) 4.40813682s ago: executing program 0 (id=4557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x701c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x2}) 4.393116221s ago: executing program 0 (id=4559): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.337934694s ago: executing program 0 (id=4560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5f, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) pipe2$9p(&(0x7f0000000140), 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r4, &(0x7f0000000080)=""/225, 0xe1, 0x7e79ef8a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 3.8028295s ago: executing program 5 (id=4563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) syncfs(0xffffffffffffffff) (fail_nth: 1) 3.548058713s ago: executing program 5 (id=4565): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 3.547684143s ago: executing program 5 (id=4566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) flistxattr(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x8, 0x5, 0x8653, 0x84, 0x400, 0x6}, &(0x7f0000000840)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000880)={r1, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x80000000, 0x4, 0xbdd7, 0x103, 0x11, 0xa3b8, 0xa}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e00000000000000000008000900040000000500020005001900400003803c000380"], 0x7c}, 0x1, 0x0, 0x0, 0x404c851}, 0x48890) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x2f, 0x40, 0x7, 0x1ff, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7800, 0x40, 0x2e}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x1e, &(0x7f0000000940)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0xfe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 3.243774278s ago: executing program 5 (id=4570): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3.225434789s ago: executing program 5 (id=4571): r0 = socket$inet6(0xa, 0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$P9_RGETLOCK(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="280000003701000205000000000000000900000000000000", @ANYRES32=r1, @ANYBLOB="5983d1424060764d6c6572008a29871c6a1424fdce260d80102c63974b2758684a584f61d4b5000000000000575ce5546b028c507a14d89a180e5b221e58c98ce5bd6d5f275569a1b13e77bbdcd9a3b0e599fa9132e5abbd636d414c02b8452d060000080000000023451f073861addcb1f2d2b81371705149"], 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000280)) 3.055021498s ago: executing program 0 (id=4575): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_setup(0xc6d, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000050000000000000604000000002e0017fc0280af88091e254b710cb6887cc60ba25187d2b6ab0be60e17f9ac5f"], 0x0, 0x27, 0x0, 0x1}, 0x28) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[@ANYBLOB="233c71b70c37e1a2840c8083d2783960d95dfc2061e61c341488ca194d00edb39f058d0629b7d0d284555e6b8fa7e9b84d1dcfd0adc91df7827026dd46d7d28f049c60e3d3b8464569", @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000340)={0x6, 0x9, 0xfe, 0x7, 0x1b, "9a2ab0d114ae4ce3"}) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r6 = syz_open_pts(r5, 0x80) r7 = dup3(r6, r5, 0x80000) read$watch_queue(r7, &(0x7f0000001d40)=""/4095, 0xfdef) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) 2.814890309s ago: executing program 2 (id=4579): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) close(r0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x25dfdbfb, {0x26}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.61409534s ago: executing program 2 (id=4580): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=r0], 0x38}}, 0x0) 2.424026609s ago: executing program 2 (id=4581): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) flistxattr(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x8, 0x5, 0x8653, 0x84, 0x400, 0x6}, &(0x7f0000000840)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000880)={r1, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x80000000, 0x4, 0xbdd7, 0x103, 0x11, 0xa3b8, 0xa}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e00000000000000000008000900040000000500020005001900400003803c000380"], 0x7c}, 0x1, 0x0, 0x0, 0x404c851}, 0x48890) 2.061267197s ago: executing program 2 (id=4585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5f, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) pipe2$9p(&(0x7f0000000140), 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r4, &(0x7f0000000080)=""/225, 0xe1, 0x7e79ef8a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 2.024649809s ago: executing program 9 (id=4586): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000440)={0x7d, {{0x29, 0x0, 0x2000000, @mcast2, 0x40000005}}}, 0x88) unshare(0x24060400) r1 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x0) fsmount(r1, 0x0, 0x0) 1.99671309s ago: executing program 9 (id=4587): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) 1.363921112s ago: executing program 9 (id=4588): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$packet(0x11, 0x3, 0x300) unshare(0x20060400) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) cachestat(r7, &(0x7f0000000040)={0x10, 0xfffffffffffffffa}, &(0x7f0000000080), 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) r8 = semget$private(0x0, 0x6, 0x0) semop(r8, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(r8, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(r8, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000000)) 1.345508563s ago: executing program 0 (id=4589): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYBLOB="e7607991caf11104cfdefe545ddb44e4ee6f531f", @ANYBLOB="92d6"], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) close(0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x900, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r5, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 1.336596273s ago: executing program 1 (id=4590): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) close(0x3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 1.144108873s ago: executing program 1 (id=4591): mmap(&(0x7f0000538000/0x4000)=nil, 0x4000, 0x0, 0x20010, 0xffffffffffffffff, 0xccd94000) r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x80) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb52b, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="180080000000000029000000370000002f0000ceee8c7faa122cd6e6f39f6ae560afb394a96f1436843a2023cde28f20aaf1129c974411cc05b5eb6948b140e0d8f1d1b6c96fcf14a5305cfa8d561d8580cf2b6626383351199d9eb593f47cb51040e2cb071d77a43d29f37e73b88105ff50748315dfdab012297d28b13d36688953438e2b5368960812e762f531296792e7136997325b398fe2980d052eca6119229f6167adca4b1d14a78f006cd20c62cf6fef9aa122c34f56009102ea8f6f662a1952f6fe3fcea63665449ae0eda11b96e961ab3687aa4686e55f2e6060525118"], 0x18}, 0x40440c0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f9505e1a1887f70706d038e7fd7fc6e5539b203c0a8b089b3f32356c030890e0879b0af8c6e70a9b334a959b6196048ed30af3988f7ef31952013fffe8d178708c523c921b1b5b31070d0773180acd3b78130daa61d8e8048001005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadeafb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771a0000119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc18892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000ef8271a179c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafff845237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504777b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b5dd7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd66adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d5062c59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861a43ddbd8db411d8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe33c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255235ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e842729251ae033a9e02210e62df0546a74b333a1c48f95fd54acba0ea42e45c1d58efeee305415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af39e088a2a3d152ef95ff569e76db2391f4509d7f339d92fdb4a898a33a6d88e7cfe0e0000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79d6c248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b7c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f077e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000002800128009000100766c616e00000000180002800c0002001e0000001f00000006000100fc0f000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="76a0304e77b4cf662ee881406864a709cc421a4ce7d3cf25a95439922a88d5f9"], 0x58}}, 0x8000) r9 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x80044940, &(0x7f00000010c0)) 1.063030767s ago: executing program 1 (id=4592): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) 516.492414ms ago: executing program 5 (id=4593): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) socket(0x5, 0x9c754b3afb9ee744, 0x7) unshare(0x2040600) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "5f2307e0", "2ce6f8da8e55c427"}, 0x28) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 406.65254ms ago: executing program 9 (id=4594): pipe2(&(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f00000000c0)) 390.448411ms ago: executing program 2 (id=4595): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) flistxattr(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x8, 0x5, 0x8653, 0x84, 0x400, 0x6}, &(0x7f0000000840)=0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000880)={r1, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x80000000, 0x4, 0xbdd7, 0x103, 0x11, 0xa3b8, 0xa}, 0x9c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000078000000000005000000180001801400020073797a5f74756e00000000000000000008000900040000000500020005001900400003803c000380"], 0x7c}, 0x1, 0x0, 0x0, 0x404c851}, 0x48890) 380.275281ms ago: executing program 0 (id=4596): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={0x0, 0x10}, 0x19}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec8, 0x30, 0xb, 0x0, 0x0, {}, [{0xeb4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe68, 0x2, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0x3, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x44, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x0, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0x4, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec8}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@ipv4_newroute={0x2c, 0x1a, 0x800, 0x3, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0xfe}, [@RTA_UID={0x8, 0x19, 0xee01}, @RTA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) 328.188103ms ago: executing program 9 (id=4597): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0xfe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 280.003246ms ago: executing program 1 (id=4598): getrandom(&(0x7f0000000040)=""/43, 0x2b, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x4) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0x0, 0x8539, 0x8}, 0xc) waitid(0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x4, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xd) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\b\x00\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000200"/28], 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4018, r0}, 0x18) r7 = socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f00000000c0)={0x1d, r8}, 0x18) sendmsg$nl_route(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x49000}, 0x4000000) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200e3cb996e00"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000120008000000185000000d000000000000000000000061612dbefeb1761da238f5c9ddba2f5dc7a39c81e156c38e0b49671cc3654118f2daf56b1495751eb4866966354620028826e70000000000000008754f7e0a78bbec4c2fb56886f61d1c43d398ba91a13ff349c63cb1d9b01100594efd5c127650b504f4ea8e0d4a7f00"/149], &(0x7f0000000080)='GPL\x00', 0x7, 0xe4, &(0x7f0000000140)=""/228, 0x100, 0x20, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r0, 0x1, r2, r4, r5, r6, 0x1, r9], &(0x7f0000000600)=[{0x5, 0x1, 0xa, 0x7}, {0x4, 0x2, 0x5, 0x9}, {0x4, 0x3, 0x1, 0x4}, {0x4, 0x2, 0x10, 0x4}, {0x1, 0x1, 0x10, 0x4}, {0x4, 0x1, 0x5, 0xa}], 0x10, 0xfd2}, 0x94) 276.428716ms ago: executing program 2 (id=4599): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYBLOB="e7607991caf11104cfdefe545ddb44e4ee6f531f", @ANYBLOB="92d6"], 0x50) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r1}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) close(0x3) openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x900, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r5, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 230.446319ms ago: executing program 9 (id=4600): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x3}, 0x8) 51.772467ms ago: executing program 1 (id=4601): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) close(0x3) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) 0s ago: executing program 1 (id=4602): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x21, 0x0, 0x0, 0x0, 0x9, 0xf5039, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x100004000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f00000000c0)=""/156, &(0x7f0000000000)=0x9c) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x0, 0x6, 0x0, 0x1, 0xf9, 0x6, 0x8b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(r4, 0x24020000) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x800100, &(0x7f00000001c0)="053bf8e2eb1d23a6eba9b62cfcdb75ff3ab9aacdf0d898be61f9bd66987263e4477b5e1bf74551c66c680caa319e3160f83fb18166a5edc7055213d98c5d94942396fa68890defac3f106ac830c843d05308bccc23426b8d08e6dc2e08de7e157b5d", 0x62, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000380)="fcb5396f656cee6a5a890fa7e6d41c4c88a2133039b7d09ca415c0e1955d1845d61b33dc2a2a64eeae98ac7546d2c15df2bcdf607bd0417a8ca47cc5c30653cbf9b05b5670d50107b38c3882ef4819edfabbbda58a2a4d674ad18d") kernel console output (not intermixed with test programs): 423.597549][T20752] EXT4-fs (loop6): 1 truncate cleaned up [ 423.603655][T20752] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.657568][T20752] EXT4-fs (loop6): shut down requested (0) [ 423.665912][ T28] audit: type=1400 audit(2000525413.971:13928): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 423.741026][ T28] audit: type=1400 audit(2000525413.971:13929): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.763115][ T28] audit: type=1400 audit(2000525413.971:13930): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.784998][ T28] audit: type=1400 audit(2000525413.971:13931): avc: denied { add_name } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.785543][T19485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.806272][ T28] audit: type=1400 audit(2000525413.971:13932): avc: denied { create } for pid=2980 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.836366][ T28] audit: type=1400 audit(2000525413.971:13933): avc: denied { append open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.152502][T20799] xt_hashlimit: size too large, truncated to 1048576 [ 424.294819][T20803] xt_hashlimit: size too large, truncated to 1048576 [ 424.504168][T20829] loop6: detected capacity change from 0 to 164 [ 424.527046][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3744'. [ 424.553692][T20835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3749'. [ 424.617453][T20840] xt_hashlimit: size too large, truncated to 1048576 [ 424.930941][T20862] loop6: detected capacity change from 0 to 1024 [ 424.948215][T20862] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 424.969135][T20862] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 424.977383][T20862] EXT4-fs (loop6): orphan cleanup on readonly fs [ 424.984429][T20862] EXT4-fs error (device loop6): __ext4_get_inode_loc:4782: comm syz.6.3761: Invalid inode table block 0 in block_group 0 [ 424.997318][T20862] loop6: lost filesystem error report for type 5 error -117 [ 424.997460][T20862] EXT4-fs (loop6): Remounting filesystem read-only [ 425.011396][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 425.011422][ C1] EXT4-fs (loop6): initial error at time 2000525415: __ext4_get_inode_loc:4782 [ 425.011443][ C1] EXT4-fs (loop6): last error at time 2000525415: __ext4_get_inode_loc:4782 [ 425.036288][T20862] EXT4-fs (loop6): 1 truncate cleaned up [ 425.048727][T20862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.064415][T20862] raw_sendmsg: syz.6.3761 forgot to set AF_INET. Fix it! [ 425.083422][T19485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.500602][T20877] IPVS: lc: FWM 3 0x00000003 - no destination available [ 425.550389][ T3412] IPVS: starting estimator thread 0... [ 425.667983][T20878] IPVS: using max 2640 ests per chain, 132000 per kthread [ 425.707565][T20877] ªªªªªª: renamed from vlan0 (while UP) [ 425.786409][T20880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3765'. [ 425.878217][T20880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3765'. [ 425.930933][T20892] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3768'. [ 425.984710][T20888] sctp: [Deprecated]: syz.5.3767 (pid 20888) Use of int in maxseg socket option. [ 425.984710][T20888] Use struct sctp_assoc_value instead [ 426.045995][T20888] SELinux: avc: seqno 3 < latest_notif 4 [ 426.117410][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 426.117424][ T28] audit: type=1400 audit(2000525416.272:14052): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 426.213036][ T28] audit: type=1400 audit(2000525416.272:14053): avc: denied { sendto } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 426.265185][T20910] xt_hashlimit: size too large, truncated to 1048576 [ 426.279619][T20913] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3771'. [ 426.299018][T20913] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 426.332794][T20913] tmpfs: Unsupported parameter 'huge' [ 426.554613][T20928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3773'. [ 426.623850][T20922] syzkaller0: entered promiscuous mode [ 426.640202][ T28] audit: type=1400 audit(2000525416.263:14049): avc: denied { write } for pid=20887 comm="syz.5.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 426.659721][T20922] syzkaller0: entered allmulticast mode [ 426.662393][ T28] audit: type=1400 audit(2000525416.329:14055): avc: denied { setopt } for pid=20887 comm="syz.5.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 426.689165][ T28] audit: type=1400 audit(2000525416.319:14054): avc: denied { read } for pid=20887 comm="syz.5.3767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 426.709826][ T28] audit: type=1400 audit(2000525416.338:14056): avc: denied { map_create } for pid=20903 comm="syz.9.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.740909][ T28] audit: type=1400 audit(2000525416.347:14057): avc: denied { prog_load } for pid=20903 comm="syz.9.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.773065][ T28] audit: type=1400 audit(2000525416.347:14058): avc: denied { bpf } for pid=20903 comm="syz.9.3769" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.795616][ T28] audit: type=1400 audit(2000525416.347:14059): avc: denied { create } for pid=20903 comm="syz.9.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.816349][ T28] audit: type=1400 audit(2000525416.347:14060): avc: denied { perfmon } for pid=20903 comm="syz.9.3769" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.928307][T20946] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3780'. [ 426.977633][T20948] sctp: [Deprecated]: syz.5.3781 (pid 20948) Use of int in maxseg socket option. [ 426.977633][T20948] Use struct sctp_assoc_value instead [ 427.002463][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3781'. [ 427.389777][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3783'. [ 427.416134][T20975] loop5: detected capacity change from 0 to 128 [ 427.430390][T20975] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 428.098595][ T6226] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 428.311526][T20999] sctp: [Deprecated]: syz.6.3793 (pid 20999) Use of int in maxseg socket option. [ 428.311526][T20999] Use struct sctp_assoc_value instead [ 428.320101][T21001] loop5: detected capacity change from 0 to 512 [ 428.332333][ T3398] IPVS: starting estimator thread 0... [ 428.383432][T21001] vfat: Unknown parameter '”8†HID`‡ó›®ÎS$' [ 428.427176][T21002] IPVS: using max 2640 ests per chain, 132000 per kthread [ 428.641196][T21017] netlink: 'syz.9.3792': attribute type 46 has an invalid length. [ 428.663745][T21027] sctp: [Deprecated]: syz.0.3807 (pid 21027) Use of int in maxseg socket option. [ 428.663745][T21027] Use struct sctp_assoc_value instead [ 428.780798][T21030] loop6: detected capacity change from 0 to 8192 [ 429.322281][T21045] netlink: 'syz.9.3812': attribute type 10 has an invalid length. [ 429.330344][T21045] dummy0: entered promiscuous mode [ 429.335591][T21045] dummy0: entered allmulticast mode [ 429.341532][T21045] bridge0: port 3(dummy0) entered blocking state [ 429.358820][T21045] bridge0: port 3(dummy0) entered disabled state [ 429.451123][T21051] xt_hashlimit: size too large, truncated to 1048576 [ 429.676213][T21067] loop9: detected capacity change from 0 to 512 [ 429.684108][T21067] EXT4-fs: Ignoring removed oldalloc option [ 429.707145][T21067] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.3817: invalid block [ 429.725643][T21067] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 429.725852][T21067] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3817: invalid indirect mapped block 4294967295 (level 1) [ 429.735088][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 429.735112][ C0] EXT4-fs (loop9): initial error at time 2000525419: ext4_get_branch:178: inode 11: block 4294967295 [ 429.735159][ C0] EXT4-fs (loop9): last error at time 2000525419: ext4_get_branch:178: inode 11: block 4294967295 [ 429.778077][T21067] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 429.787811][T21067] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3817: invalid indirect mapped block 4294967295 (level 1) [ 429.814184][T21067] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 429.814451][T21067] EXT4-fs (loop9): 2 truncates cleaned up [ 429.830196][T21067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.831958][T21076] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 429.946586][T21082] loop5: detected capacity change from 0 to 164 [ 430.013875][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.027778][T21089] IPv6: Can't replace route, no match found [ 430.304626][T21095] vcan0: tx address claim with dlc 1 [ 430.572330][T21101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.595923][T21101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.601379][T21114] xt_hashlimit: size too large, truncated to 1048576 [ 432.031936][ T28] kauditd_printk_skb: 183 callbacks suppressed [ 432.031960][ T28] audit: type=1400 audit(2000525421.801:14242): avc: denied { listen } for pid=21165 comm="syz.6.3852" lport=48054 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.065491][ T28] audit: type=1400 audit(2000525421.801:14243): avc: denied { accept } for pid=21165 comm="syz.6.3852" lport=48054 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 432.105594][ T28] audit: type=1400 audit(2000525421.801:14244): avc: denied { write } for pid=21165 comm="syz.6.3852" lport=48054 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 432.129969][ T28] audit: type=1400 audit(2000525421.801:14245): avc: denied { setopt } for pid=21165 comm="syz.6.3852" lport=48054 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 433.752024][ T28] audit: type=1400 audit(2000525423.419:14246): avc: denied { ioctl } for pid=21241 comm="syz.0.3863" path="socket:[68451]" dev="sockfs" ino=68451 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 433.807384][T21247] xt_hashlimit: size too large, truncated to 1048576 [ 433.893198][T21256] netlink: 'syz.1.3862': attribute type 36 has an invalid length. [ 433.908409][T21256] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 433.918299][T21256] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 433.938052][T21256] netlink: 'syz.1.3862': attribute type 10 has an invalid length. [ 434.059010][T21256] macvlan1: entered allmulticast mode [ 434.067686][T21256] veth1_vlan: entered allmulticast mode [ 434.079166][T21256] team0: Port device macvlan1 added [ 434.483957][T21269] __nla_validate_parse: 7 callbacks suppressed [ 434.483972][T21269] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3869'. [ 434.516790][T21269] selinux_netlink_send: 7 callbacks suppressed [ 434.516808][T21269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21269 comm=syz.9.3869 [ 434.536175][T21269] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3869'. [ 434.569062][T21274] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.579864][T21274] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.050184][T21274] loop5: detected capacity change from 0 to 256 [ 435.071640][ T28] audit: type=1400 audit(2000525424.644:14247): avc: denied { mounton } for pid=21273 comm="syz.5.3871" path="/33/file0/file0" dev="loop5" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 435.156825][T21292] SELinux: policydb magic number 0x8902 does not match expected magic number 0xf97cff8c [ 435.156829][ T28] audit: type=1400 audit(2000525424.728:14248): avc: denied { load_policy } for pid=21291 comm="syz.5.3876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 435.187450][T21292] SELinux: failed to load policy [ 435.208029][ T28] audit: type=1400 audit(2000525424.775:14249): avc: denied { shutdown } for pid=21293 comm="syz.5.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 435.233535][ T28] audit: type=1400 audit(2000525424.794:14250): avc: denied { read } for pid=21293 comm="syz.5.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 435.307304][ T28] audit: type=1326 audit(2000525424.869:14251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21295 comm="syz.6.3878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d4f0c799 code=0x7ffc0000 [ 435.345129][T21300] xt_hashlimit: size too large, truncated to 1048576 [ 435.636021][T21323] SELinux: policydb string S does not match my string SE Linux [ 435.684116][T21323] SELinux: failed to load policy [ 435.882210][T21332] FAULT_INJECTION: forcing a failure. [ 435.882210][T21332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.897102][T21331] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3890'. [ 436.013890][T21332] CPU: 0 UID: 0 PID: 21332 Comm: syz.9.3889 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.013926][T21332] Tainted: [W]=WARN [ 436.013933][T21332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.013946][T21332] Call Trace: [ 436.013955][T21332] [ 436.013963][T21332] __dump_stack+0x1d/0x30 [ 436.014056][T21332] dump_stack_lvl+0x95/0xd0 [ 436.014082][T21332] dump_stack+0x15/0x1b [ 436.014102][T21332] should_fail_ex+0x263/0x280 [ 436.014190][T21332] should_fail+0xb/0x20 [ 436.014211][T21332] should_fail_usercopy+0x1a/0x20 [ 436.014236][T21332] _copy_from_user+0x1c/0xb0 [ 436.014296][T21332] __sys_bpf+0x183/0x7e0 [ 436.014324][T21332] __x64_sys_bpf+0x41/0x50 [ 436.014371][T21332] x64_sys_call+0x10cb/0x3020 [ 436.014474][T21332] do_syscall_64+0x12c/0x370 [ 436.014525][T21332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.014604][T21332] RIP: 0033:0x7f4b9f36c799 [ 436.014690][T21332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.014708][T21332] RSP: 002b:00007f4b9dd9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 436.014731][T21332] RAX: ffffffffffffffda RBX: 00007f4b9f5e6090 RCX: 00007f4b9f36c799 [ 436.014747][T21332] RDX: 0000000000000038 RSI: 0000200000000500 RDI: 000000000000001a [ 436.014779][T21332] RBP: 00007f4b9dd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 436.014792][T21332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.014804][T21332] R13: 00007f4b9f5e6128 R14: 00007f4b9f5e6090 R15: 00007ffe20842a98 [ 436.014855][T21332] [ 436.564178][T21358] loop5: detected capacity change from 0 to 8192 [ 436.790611][T21378] netlink: 'syz.0.3906': attribute type 4 has an invalid length. [ 436.822631][T21380] FAULT_INJECTION: forcing a failure. [ 436.822631][T21380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.864531][T21380] CPU: 0 UID: 0 PID: 21380 Comm: syz.9.3910 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.864570][T21380] Tainted: [W]=WARN [ 436.864578][T21380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.864599][T21380] Call Trace: [ 436.864606][T21380] [ 436.864668][T21380] __dump_stack+0x1d/0x30 [ 436.864698][T21380] dump_stack_lvl+0x95/0xd0 [ 436.864753][T21380] dump_stack+0x15/0x1b [ 436.864778][T21380] should_fail_ex+0x263/0x280 [ 436.864809][T21380] should_fail+0xb/0x20 [ 436.864885][T21380] should_fail_usercopy+0x1a/0x20 [ 436.864916][T21380] _copy_from_iter+0xcf/0xea0 [ 436.864949][T21380] ? alloc_pages_mpol+0x217/0x260 [ 436.865007][T21380] copy_page_from_iter+0x178/0x2a0 [ 436.865037][T21380] tun_get_user+0xbbd/0x27c0 [ 436.865067][T21380] ? ref_tracker_alloc+0x1eb/0x2f0 [ 436.865108][T21380] tun_chr_write_iter+0x15e/0x210 [ 436.865131][T21380] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 436.865245][T21380] vfs_write+0x5a6/0x9f0 [ 436.865280][T21380] ksys_write+0xdc/0x1a0 [ 436.865298][T21380] __x64_sys_write+0x40/0x50 [ 436.865314][T21380] x64_sys_call+0x27e1/0x3020 [ 436.865338][T21380] do_syscall_64+0x12c/0x370 [ 436.865413][T21380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.865433][T21380] RIP: 0033:0x7f4b9f32cfce [ 436.865496][T21380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.865578][T21380] RSP: 002b:00007f4b9ddbefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.865610][T21380] RAX: ffffffffffffffda RBX: 00007f4b9ddbf6c0 RCX: 00007f4b9f32cfce [ 436.865645][T21380] RDX: 000000000000004a RSI: 0000200000000000 RDI: 00000000000000c8 [ 436.865656][T21380] RBP: 00007f4b9ddbf090 R08: 0000000000000000 R09: 0000000000000000 [ 436.865681][T21380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.865692][T21380] R13: 00007f4b9f5e6038 R14: 00007f4b9f5e5fa0 R15: 00007ffe20842a98 [ 436.865710][T21380] [ 436.866228][T21382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3911'. [ 437.173112][T21382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21382 comm=syz.5.3911 [ 437.237733][T21382] netlink: 'syz.5.3911': attribute type 10 has an invalid length. [ 437.278369][T21382] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 437.433475][T21400] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3917'. [ 437.457606][T21402] loop5: detected capacity change from 0 to 1024 [ 437.470431][T21400] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3917'. [ 437.491302][T21402] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.525995][T21363] syz.6.3903 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 437.540573][T21363] CPU: 1 UID: 0 PID: 21363 Comm: syz.6.3903 Tainted: G W syzkaller #0 PREEMPT(full) [ 437.540605][T21363] Tainted: [W]=WARN [ 437.540612][T21363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.540625][T21363] Call Trace: [ 437.540633][T21363] [ 437.540640][T21363] __dump_stack+0x1d/0x30 [ 437.540701][T21363] dump_stack_lvl+0x95/0xd0 [ 437.540727][T21363] dump_stack+0x15/0x1b [ 437.540818][T21363] dump_header+0x80/0x240 [ 437.540841][T21363] oom_kill_process+0x295/0x350 [ 437.540864][T21363] out_of_memory+0x97d/0xb80 [ 437.540945][T21363] try_charge_memcg+0x62e/0xa10 [ 437.541053][T21363] obj_cgroup_charge_pages+0x23/0xc0 [ 437.541087][T21363] __memcg_kmem_charge_page+0x9e/0x170 [ 437.541187][T21363] __alloc_frozen_pages_noprof+0x18a/0x360 [ 437.541230][T21363] alloc_pages_mpol+0xb3/0x260 [ 437.541264][T21363] alloc_pages_noprof+0x8f/0x130 [ 437.541361][T21363] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 437.541428][T21363] __kvmalloc_node_noprof+0x3d4/0x650 [ 437.541455][T21363] ? futex_hash_allocate+0x190/0x9d0 [ 437.541486][T21363] ? futex_hash_allocate+0x190/0x9d0 [ 437.541571][T21363] futex_hash_allocate+0x190/0x9d0 [ 437.541678][T21363] ? cap_task_prctl+0x13f/0x6e0 [ 437.541704][T21363] futex_hash_prctl+0xd8/0xf0 [ 437.541733][T21363] __se_sys_prctl+0xa3d/0x13f0 [ 437.541762][T21363] __x64_sys_prctl+0x67/0x80 [ 437.541821][T21363] x64_sys_call+0x2533/0x3020 [ 437.541854][T21363] do_syscall_64+0x12c/0x370 [ 437.541883][T21363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.541909][T21363] RIP: 0033:0x7f62d4f0c799 [ 437.541979][T21363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.542000][T21363] RSP: 002b:00007f62d3967028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 437.542022][T21363] RAX: ffffffffffffffda RBX: 00007f62d5185fa0 RCX: 00007f62d4f0c799 [ 437.542036][T21363] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 437.542093][T21363] RBP: 00007f62d4fa2c99 R08: 0000000000000000 R09: 0000000000000000 [ 437.542106][T21363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.542119][T21363] R13: 00007f62d5186038 R14: 00007f62d5185fa0 R15: 00007fffd360c258 [ 437.542140][T21363] [ 437.542149][T21363] memory: usage 307200kB, limit 307200kB, failcnt 596 [ 437.785509][T21363] memory+swap: usage 307552kB, limit 9007199254740988kB, failcnt 0 [ 437.793553][T21363] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 437.794303][T19964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.800837][T21363] Memory cgroup stats for /syz6: [ 437.809998][T21363] cache 0 [ 437.818121][T21363] rss 4096 [ 437.821229][T21363] shmem 0 [ 437.824283][T21363] mapped_file 0 [ 437.829202][T21363] dirty 0 [ 437.832187][T21363] writeback 0 [ 437.835646][T21363] workingset_refault_anon 219 [ 437.840325][T21363] workingset_refault_file 1729 [ 437.845158][T21363] swap 364544 [ 437.848499][T21363] swapcached 51011584 [ 437.852489][T21363] pgpgin 368451 [ 437.855996][T21363] pgpgout 368444 [ 437.859627][T21363] pgfault 415765 [ 437.863172][T21363] pgmajfault 67 [ 437.870630][T21412] FAULT_INJECTION: forcing a failure. [ 437.870630][T21412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.897928][T21363] inactive_anon 8192 [ 437.901967][T21363] active_anon 8192 [ 437.905744][T21363] inactive_file 0 [ 437.909467][T21363] active_file 12288 [ 437.913270][T21363] unevictable 0 [ 437.916828][T21363] hierarchical_memory_limit 314572800 [ 437.922242][T21363] hierarchical_memsw_limit 9223372036854771712 [ 437.946296][T21363] total_cache 0 [ 437.949780][T21363] total_rss 4096 [ 437.994852][T21416] loop5: detected capacity change from 0 to 8192 [ 437.994886][T21412] CPU: 1 UID: 0 PID: 21412 Comm: syz.0.3922 Tainted: G W syzkaller #0 PREEMPT(full) [ 437.994913][T21412] Tainted: [W]=WARN [ 437.994945][T21412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.994959][T21412] Call Trace: [ 437.994968][T21412] [ 437.994976][T21412] __dump_stack+0x1d/0x30 [ 437.995034][T21412] dump_stack_lvl+0x95/0xd0 [ 437.995096][T21412] dump_stack+0x15/0x1b [ 437.995118][T21412] should_fail_ex+0x263/0x280 [ 437.995189][T21412] should_fail+0xb/0x20 [ 437.995317][T21412] should_fail_usercopy+0x1a/0x20 [ 437.995390][T21412] _copy_from_user+0x1c/0xb0 [ 437.995520][T21412] io_sync_cancel+0x12f/0x8a0 [ 437.995555][T21412] ? __rcu_read_unlock+0x4e/0x70 [ 437.995594][T21412] ? __pfx_autoremove_wake_function+0x10/0x10 [ 437.995632][T21412] __se_sys_io_uring_register+0x969/0x12d0 [ 437.995660][T21412] ? mutex_unlock+0x4e/0x90 [ 437.995692][T21412] ? fput+0x8f/0xc0 [ 437.995756][T21412] ? ksys_write+0x194/0x1a0 [ 437.995775][T21412] __x64_sys_io_uring_register+0x55/0x70 [ 437.995805][T21412] x64_sys_call+0x2be0/0x3020 [ 437.995860][T21412] do_syscall_64+0x12c/0x370 [ 437.995885][T21412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.995909][T21412] RIP: 0033:0x7f0e225fc799 [ 437.995927][T21412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.995963][T21412] RSP: 002b:00007f0e21057028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 437.995985][T21412] RAX: ffffffffffffffda RBX: 00007f0e22875fa0 RCX: 00007f0e225fc799 [ 437.996000][T21412] RDX: 0000200000000980 RSI: 0000000000000018 RDI: 0000000000000003 [ 437.996014][T21412] RBP: 00007f0e21057090 R08: 0000000000000000 R09: 0000000000000000 [ 437.996050][T21412] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 437.996064][T21412] R13: 00007f0e22876038 R14: 00007f0e22875fa0 R15: 00007ffd83583098 [ 437.996083][T21412] [ 438.004733][T21363] total_shmem 0 [ 438.202024][T21363] total_mapped_file 0 [ 438.206689][T21363] total_dirty 0 [ 438.210411][T21363] total_writeback 0 [ 438.214326][T21363] total_workingset_refault_anon 219 [ 438.219537][T21363] total_workingset_refault_file 1729 [ 438.224891][T21363] total_swap 364544 [ 438.228787][T21363] total_swapcached 51011584 [ 438.233319][T21363] total_pgpgin 368451 [ 438.237396][T21363] total_pgpgout 368444 [ 438.241554][T21363] total_pgfault 415765 [ 438.245694][T21363] total_pgmajfault 67 [ 438.249878][T21363] total_inactive_anon 8192 [ 438.281883][T21363] total_active_anon 8192 [ 438.317059][T21363] total_inactive_file 0 [ 438.324756][T21363] total_active_file 12288 [ 438.340725][T21363] total_unevictable 0 [ 438.356093][T21363] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3903,pid=21361,uid=0 [ 438.381210][T21431] FAULT_INJECTION: forcing a failure. [ 438.381210][T21431] name failslab, interval 1, probability 0, space 0, times 0 [ 438.394283][T21431] CPU: 0 UID: 0 PID: 21431 Comm: syz.0.3928 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.394320][T21431] Tainted: [W]=WARN [ 438.394328][T21431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.394422][T21431] Call Trace: [ 438.394429][T21431] [ 438.394438][T21431] __dump_stack+0x1d/0x30 [ 438.394468][T21431] dump_stack_lvl+0x95/0xd0 [ 438.394500][T21431] dump_stack+0x15/0x1b [ 438.394555][T21431] should_fail_ex+0x263/0x280 [ 438.394614][T21431] ? nf_tables_newtable+0x375/0xea0 [ 438.394651][T21431] should_failslab+0x8c/0xb0 [ 438.394751][T21431] __kmalloc_cache_noprof+0x5f/0x410 [ 438.394779][T21431] ? __nla_validate_parse+0x1650/0x1cf0 [ 438.394822][T21431] nf_tables_newtable+0x375/0xea0 [ 438.394919][T21431] nfnetlink_rcv+0xc1e/0x1720 [ 438.394971][T21431] netlink_unicast+0x5c0/0x690 [ 438.395042][T21431] netlink_sendmsg+0x5c8/0x6f0 [ 438.395081][T21431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.395120][T21431] ____sys_sendmsg+0x563/0x5b0 [ 438.395159][T21431] ___sys_sendmsg+0x195/0x1e0 [ 438.395254][T21431] __x64_sys_sendmsg+0xd4/0x160 [ 438.395383][T21431] x64_sys_call+0x194c/0x3020 [ 438.395414][T21431] do_syscall_64+0x12c/0x370 [ 438.395491][T21431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.395517][T21431] RIP: 0033:0x7f0e225fc799 [ 438.395536][T21431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.395556][T21431] RSP: 002b:00007f0e21057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.395588][T21431] RAX: ffffffffffffffda RBX: 00007f0e22875fa0 RCX: 00007f0e225fc799 [ 438.395604][T21431] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 438.395619][T21431] RBP: 00007f0e21057090 R08: 0000000000000000 R09: 0000000000000000 [ 438.395634][T21431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.395649][T21431] R13: 00007f0e22876038 R14: 00007f0e22875fa0 R15: 00007ffd83583098 [ 438.395671][T21431] [ 438.395765][T21363] Memory cgroup out of memory: Killed process 21361 (syz.6.3903) total-vm:94164kB, anon-rss:1228kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 439.853441][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 439.853456][ T28] audit: type=1400 audit(2000525429.115:14281): avc: denied { read write } for pid=21454 comm="syz.0.3936" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 439.903695][ T28] audit: type=1400 audit(2000525429.153:14282): avc: denied { open } for pid=21454 comm="syz.0.3936" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 440.038925][T21457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.047949][T21457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.148686][T21472] FAULT_INJECTION: forcing a failure. [ 440.148686][T21472] name failslab, interval 1, probability 0, space 0, times 0 [ 440.161526][T21472] CPU: 0 UID: 0 PID: 21472 Comm: syz.5.3941 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.161621][T21472] Tainted: [W]=WARN [ 440.161629][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.161703][T21472] Call Trace: [ 440.161709][T21472] [ 440.161717][T21472] __dump_stack+0x1d/0x30 [ 440.161743][T21472] dump_stack_lvl+0x95/0xd0 [ 440.161768][T21472] dump_stack+0x15/0x1b [ 440.161793][T21472] should_fail_ex+0x263/0x280 [ 440.161851][T21472] should_failslab+0x8c/0xb0 [ 440.161876][T21472] __kmalloc_noprof+0xb8/0x4e0 [ 440.161901][T21472] ? io_cache_alloc_new+0x2a/0xb0 [ 440.162008][T21472] io_cache_alloc_new+0x2a/0xb0 [ 440.162043][T21472] __io_prep_rw+0x116/0x710 [ 440.162097][T21472] ? __rcu_read_unlock+0x4e/0x70 [ 440.162120][T21472] io_prep_rwv+0x33/0x260 [ 440.162206][T21472] io_prep_readv+0x1f/0x30 [ 440.162235][T21472] io_submit_sqes+0x756/0x1230 [ 440.162270][T21472] __se_sys_io_uring_enter+0x1c9/0xf50 [ 440.162341][T21472] ? __fget_files+0x184/0x1c0 [ 440.162365][T21472] ? mutex_unlock+0x4e/0x90 [ 440.162396][T21472] ? fput+0x8f/0xc0 [ 440.162488][T21472] __x64_sys_io_uring_enter+0x78/0x90 [ 440.162508][T21472] x64_sys_call+0x1e16/0x3020 [ 440.162585][T21472] do_syscall_64+0x12c/0x370 [ 440.162612][T21472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.162635][T21472] RIP: 0033:0x7f16e78dc799 [ 440.162653][T21472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.162674][T21472] RSP: 002b:00007f16e630e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 440.162759][T21472] RAX: ffffffffffffffda RBX: 00007f16e7b56090 RCX: 00007f16e78dc799 [ 440.162776][T21472] RDX: 0000000000000000 RSI: 00000000000847ba RDI: 0000000000000008 [ 440.162791][T21472] RBP: 00007f16e630e090 R08: 0000000000000000 R09: 0000000000000000 [ 440.162805][T21472] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 440.162817][T21472] R13: 00007f16e7b56128 R14: 00007f16e7b56090 R15: 00007ffe0f4501a8 [ 440.162834][T21472] [ 440.833534][T21471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.945738][T21471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.056120][ T28] audit: type=1326 audit(2000525430.247:14283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21478 comm="syz.1.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 441.107351][ T28] audit: type=1326 audit(2000525430.275:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21478 comm="syz.1.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 441.136776][ T28] audit: type=1326 audit(2000525430.275:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21478 comm="syz.1.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 441.161308][ T28] audit: type=1326 audit(2000525430.341:14286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21478 comm="syz.1.3944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 441.478860][T21471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.684487][T21471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.178187][ T3438] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.195525][ T3438] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.222607][ T3438] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.247374][ T28] audit: type=1400 audit(2000525431.351:14287): avc: denied { read } for pid=21562 comm="syz.5.3953" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 442.278367][ T3438] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.340038][T21567] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 442.371723][ T28] audit: type=1400 audit(2000525431.351:14288): avc: denied { open } for pid=21562 comm="syz.5.3953" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 442.371813][ T28] audit: type=1400 audit(2000525431.417:14289): avc: denied { create } for pid=21562 comm="syz.5.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 442.371922][ T28] audit: type=1400 audit(2000525431.435:14290): avc: denied { bind } for pid=21566 comm="syz.1.3955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 442.672856][T21574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3957'. [ 442.672877][T21574] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3957'. [ 442.776395][T21577] loop5: detected capacity change from 0 to 512 [ 442.906243][T21579] xt_hashlimit: size too large, truncated to 1048576 [ 442.948566][T21577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.973499][T21577] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.021273][T19964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.237297][T21603] sctp: [Deprecated]: syz.0.3966 (pid 21603) Use of int in maxseg socket option. [ 443.237297][T21603] Use struct sctp_assoc_value instead [ 443.259578][T21603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3966'. [ 443.364043][T21615] loop6: detected capacity change from 0 to 1024 [ 443.421966][T21615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.452841][T21622] FAULT_INJECTION: forcing a failure. [ 443.452841][T21622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.466470][T21622] CPU: 0 UID: 0 PID: 21622 Comm: syz.5.3972 Tainted: G W syzkaller #0 PREEMPT(full) [ 443.466504][T21622] Tainted: [W]=WARN [ 443.466510][T21622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.466522][T21622] Call Trace: [ 443.466528][T21622] [ 443.466537][T21622] __dump_stack+0x1d/0x30 [ 443.466564][T21622] dump_stack_lvl+0x95/0xd0 [ 443.466660][T21622] dump_stack+0x15/0x1b [ 443.466682][T21622] should_fail_ex+0x263/0x280 [ 443.466712][T21622] should_fail+0xb/0x20 [ 443.466808][T21622] should_fail_usercopy+0x1a/0x20 [ 443.466840][T21622] _copy_from_user+0x1c/0xb0 [ 443.466866][T21622] do_sock_getsockopt+0xf1/0x210 [ 443.466921][T21622] __x64_sys_getsockopt+0x11d/0x1a0 [ 443.466951][T21622] x64_sys_call+0x2dcf/0x3020 [ 443.466974][T21622] do_syscall_64+0x12c/0x370 [ 443.467035][T21622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.467055][T21622] RIP: 0033:0x7f16e78dc799 [ 443.467120][T21622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.467142][T21622] RSP: 002b:00007f16e632f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 443.467160][T21622] RAX: ffffffffffffffda RBX: 00007f16e7b55fa0 RCX: 00007f16e78dc799 [ 443.467176][T21622] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 443.467204][T21622] RBP: 00007f16e632f090 R08: 0000200000000040 R09: 0000000000000000 [ 443.467217][T21622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.467230][T21622] R13: 00007f16e7b56038 R14: 00007f16e7b55fa0 R15: 00007ffe0f4501a8 [ 443.467251][T21622] [ 443.652957][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'. [ 443.662032][T21625] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3969'. [ 443.671096][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'. [ 443.680153][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'. [ 443.689120][T21625] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3969'. [ 443.698671][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'. [ 443.707756][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'. [ 443.759677][T19485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.889320][T21628] xt_hashlimit: size too large, truncated to 1048576 [ 444.765573][T21661] loop9: detected capacity change from 0 to 512 [ 444.783489][T21661] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 444.842373][T21661] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 444.857381][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 444.863818][ C0] EXT4-fs (loop9): initial error at time 2000525433: ext4_mb_generate_buddy:1315 [ 444.873065][ C0] EXT4-fs (loop9): last error at time 2000525433: ext4_mb_generate_buddy:1315 [ 444.897430][T21668] sctp: [Deprecated]: syz.6.3979 (pid 21668) Use of int in maxseg socket option. [ 444.897430][T21668] Use struct sctp_assoc_value instead [ 444.921680][T21661] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 444.945673][T21661] EXT4-fs (loop9): 1 truncate cleaned up [ 444.965266][T21661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.014101][T21661] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.3978: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 445.088747][T21681] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.3978: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 445.229729][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.508866][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 445.508906][ T28] audit: type=1400 audit(2000525434.400:14295): avc: denied { connect } for pid=21734 comm="syz.0.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 445.512275][T21733] loop5: detected capacity change from 0 to 1024 [ 445.552617][ T28] audit: type=1400 audit(2000525434.447:14296): avc: denied { write } for pid=21734 comm="syz.0.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 445.660718][T21733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.684769][ T28] audit: type=1400 audit(2000525434.475:14297): avc: denied { read } for pid=21734 comm="syz.0.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 445.704897][ T28] audit: type=1400 audit(2000525434.531:14298): avc: denied { setopt } for pid=21734 comm="syz.0.3985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 445.751209][T19964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.101517][T21780] sctp: [Deprecated]: syz.6.3990 (pid 21780) Use of int in maxseg socket option. [ 446.101517][T21780] Use struct sctp_assoc_value instead [ 446.132515][T21783] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.182754][T21792] loop6: detected capacity change from 0 to 512 [ 446.194652][T21783] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.221984][T21794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21794 comm=syz.5.3991 [ 446.253695][T21794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.281275][T21794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.299142][T21783] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.301873][T21794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.318923][T21794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.366271][T21783] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.461098][T21825] FAULT_INJECTION: forcing a failure. [ 446.461098][T21825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.474577][T21825] CPU: 1 UID: 0 PID: 21825 Comm: syz.0.3994 Tainted: G W syzkaller #0 PREEMPT(full) [ 446.474662][T21825] Tainted: [W]=WARN [ 446.474669][T21825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 446.474731][T21825] Call Trace: [ 446.474738][T21825] [ 446.474747][T21825] __dump_stack+0x1d/0x30 [ 446.474777][T21825] dump_stack_lvl+0x95/0xd0 [ 446.474801][T21825] dump_stack+0x15/0x1b [ 446.474836][T21825] should_fail_ex+0x263/0x280 [ 446.474868][T21825] should_fail+0xb/0x20 [ 446.474893][T21825] should_fail_usercopy+0x1a/0x20 [ 446.474922][T21825] _copy_to_user+0x20/0xa0 [ 446.475010][T21825] simple_read_from_buffer+0xb5/0x130 [ 446.475032][T21825] proc_fail_nth_read+0x10e/0x150 [ 446.475059][T21825] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.475136][T21825] vfs_read+0x1ab/0x7f0 [ 446.475206][T21825] ? current_time+0x188/0x240 [ 446.475308][T21825] ? __rcu_read_unlock+0x4e/0x70 [ 446.475334][T21825] ? __fget_files+0x184/0x1c0 [ 446.475429][T21825] ? mutex_lock+0x57/0x90 [ 446.475539][T21825] ksys_read+0xdc/0x1a0 [ 446.475558][T21825] __x64_sys_read+0x40/0x50 [ 446.475582][T21825] x64_sys_call+0x2886/0x3020 [ 446.475610][T21825] do_syscall_64+0x12c/0x370 [ 446.475636][T21825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.475660][T21825] RIP: 0033:0x7f0e225bcfce [ 446.475677][T21825] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.475825][T21825] RSP: 002b:00007f0e21056fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.475846][T21825] RAX: ffffffffffffffda RBX: 00007f0e210576c0 RCX: 00007f0e225bcfce [ 446.475861][T21825] RDX: 000000000000000f RSI: 00007f0e210570a0 RDI: 0000000000000004 [ 446.475874][T21825] RBP: 00007f0e21057090 R08: 0000000000000000 R09: 0000000000000000 [ 446.475887][T21825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.475919][T21825] R13: 00007f0e22876038 R14: 00007f0e22875fa0 R15: 00007ffd83583098 [ 446.475942][T21825] [ 446.485448][ T49] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.596801][T21846] netlink: 'syz.0.3996': attribute type 10 has an invalid length. [ 446.682411][ T28] audit: type=1400 audit(2000525435.429:14299): avc: denied { wake_alarm } for pid=21845 comm="syz.0.3996" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 446.721230][ T549] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.781305][ T69] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.800384][ T549] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.803980][ T28] audit: type=1400 audit(2000525435.626:14300): avc: denied { mounton } for pid=21864 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 446.853684][T21846] team0: entered promiscuous mode [ 446.859114][T21846] team_slave_0: entered promiscuous mode [ 446.864951][T21846] team_slave_1: entered promiscuous mode [ 446.872781][T21846] team0: entered allmulticast mode [ 446.894267][T21846] team_slave_0: entered allmulticast mode [ 446.910118][T21870] sctp: [Deprecated]: syz.1.4002 (pid 21870) Use of int in maxseg socket option. [ 446.910118][T21870] Use struct sctp_assoc_value instead [ 446.933553][T21846] team_slave_1: entered allmulticast mode [ 446.940285][T21846] bridge0: port 3(team0) entered blocking state [ 446.946915][T21846] bridge0: port 3(team0) entered disabled state [ 446.954774][T21846] bridge0: port 3(team0) entered blocking state [ 446.961057][T21846] bridge0: port 3(team0) entered forwarding state [ 446.969389][ T549] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.006779][ T69] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.031933][ T28] audit: type=1326 audit(2000525435.832:14301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 447.056335][ T28] audit: type=1326 audit(2000525435.832:14302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 447.091421][ T69] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.097273][ T28] audit: type=1326 audit(2000525435.832:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 447.151515][ T28] audit: type=1326 audit(2000525435.832:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.1.4005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2896cbc799 code=0x7ffc0000 [ 447.216379][ T69] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.343474][T21864] chnl_net:caif_netlink_parms(): no params data found [ 447.387679][ T69] bridge_slave_1: left allmulticast mode [ 447.387698][ T69] bridge_slave_1: left promiscuous mode [ 447.387796][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.389077][ T69] bridge_slave_0: left allmulticast mode [ 447.389117][ T69] bridge_slave_0: left promiscuous mode [ 447.389253][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.406218][T21902] sctp: [Deprecated]: syz.5.4012 (pid 21902) Use of int in maxseg socket option. [ 447.406218][T21902] Use struct sctp_assoc_value instead [ 447.443398][T21895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.443473][T21895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.532679][T21907] netlink: zone id is out of range [ 447.532995][T21907] netlink: get zone limit has 8 unknown bytes [ 447.555299][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.571449][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.583791][ T69] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 447.602977][ T69] bond0 (unregistering): Released all slaves [ 447.648421][T21909] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.668859][T21911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=21911 comm=syz.9.4014 [ 447.688244][T21911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.697278][T21911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.705140][ T69] hsr_slave_0: left promiscuous mode [ 447.706436][T21911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.719133][ T69] hsr_slave_1: left promiscuous mode [ 447.719876][T21911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.725306][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.739695][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.747831][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.756072][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.766896][ T69] veth1_macvtap: left promiscuous mode [ 447.772692][ T69] veth0_macvtap: left promiscuous mode [ 447.778638][ T69] veth1_vlan: left promiscuous mode [ 447.784685][ T69] veth0_vlan: left promiscuous mode [ 447.852990][ T69] team0 (unregistering): Port device team_slave_1 removed [ 447.863024][ T69] team0 (unregistering): Port device team_slave_0 removed [ 447.903213][T21921] syzkaller0: entered promiscuous mode [ 447.908787][T21921] syzkaller0: entered allmulticast mode [ 447.924989][T21909] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.938900][T21864] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.946113][T21864] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.953714][T21864] bridge_slave_0: entered allmulticast mode [ 447.960338][T21864] bridge_slave_0: entered promiscuous mode [ 447.986920][T21909] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.008661][T21864] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.016582][T21864] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.024098][T21864] bridge_slave_1: entered allmulticast mode [ 448.030478][T21864] bridge_slave_1: entered promiscuous mode [ 448.049377][T21864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.065923][T21864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.098626][T21943] __nla_validate_parse: 28 callbacks suppressed [ 448.098642][T21943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4019'. [ 448.114855][T21909] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.127664][T21864] team0: Port device team_slave_0 added [ 448.134634][T21864] team0: Port device team_slave_1 added [ 448.167133][T21864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.174242][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.203142][T21864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.214954][T21864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.221957][T21864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.248834][T21864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.267693][ T6227] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.283724][ T49] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.294335][ T49] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.321427][ T49] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.343343][T21864] hsr_slave_0: entered promiscuous mode [ 448.349544][T21864] hsr_slave_1: entered promiscuous mode [ 448.355843][T21864] debugfs: 'hsr0' already exists in 'hsr' [ 448.361636][T21864] Cannot create hsr debugfs directory [ 448.537882][T21958] loop5: detected capacity change from 0 to 128 [ 448.549073][T21958] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 448.989546][T22025] sctp: [Deprecated]: syz.9.4022 (pid 22025) Use of int in maxseg socket option. [ 448.989546][T22025] Use struct sctp_assoc_value instead [ 449.023011][T22025] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4022'. [ 449.475799][T21864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 449.484845][T21864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 449.495511][T21864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 449.505058][T21864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 449.555334][T21864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.568608][T21864] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.579404][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.586547][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.604991][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.612293][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.680576][T21864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.758624][T21864] veth0_vlan: entered promiscuous mode [ 449.767315][T21864] veth1_vlan: entered promiscuous mode [ 449.786958][T21864] veth0_macvtap: entered promiscuous mode [ 449.795005][T21864] veth1_macvtap: entered promiscuous mode [ 449.808702][T21864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.821561][T21864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.833838][ T549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.851838][ T549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.864753][ T549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.874360][ T549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.996140][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4029'. [ 450.397021][T22225] sctp: [Deprecated]: syz.5.4034 (pid 22225) Use of int in maxseg socket option. [ 450.397021][T22225] Use struct sctp_assoc_value instead [ 450.423714][T22225] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4034'. [ 450.563762][T22240] FAULT_INJECTION: forcing a failure. [ 450.563762][T22240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.579913][T22240] CPU: 1 UID: 0 PID: 22240 Comm: syz.5.4042 Tainted: G W syzkaller #0 PREEMPT(full) [ 450.579945][T22240] Tainted: [W]=WARN [ 450.579951][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.579962][T22240] Call Trace: [ 450.579967][T22240] [ 450.579997][T22240] __dump_stack+0x1d/0x30 [ 450.580023][T22240] dump_stack_lvl+0x95/0xd0 [ 450.580044][T22240] dump_stack+0x15/0x1b [ 450.580064][T22240] should_fail_ex+0x263/0x280 [ 450.580089][T22240] should_fail+0xb/0x20 [ 450.580181][T22240] should_fail_usercopy+0x1a/0x20 [ 450.580206][T22240] _copy_to_user+0x20/0xa0 [ 450.580234][T22240] x25_getsockopt+0x161/0x1a0 [ 450.580352][T22240] ? __pfx_x25_getsockopt+0x10/0x10 [ 450.580373][T22240] do_sock_getsockopt+0x1c4/0x210 [ 450.580466][T22240] __x64_sys_getsockopt+0x11d/0x1a0 [ 450.580559][T22240] x64_sys_call+0x2dcf/0x3020 [ 450.580587][T22240] do_syscall_64+0x12c/0x370 [ 450.580610][T22240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.580634][T22240] RIP: 0033:0x7f16e78dc799 [ 450.580662][T22240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.580682][T22240] RSP: 002b:00007f16e632f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 450.580704][T22240] RAX: ffffffffffffffda RBX: 00007f16e7b55fa0 RCX: 00007f16e78dc799 [ 450.580720][T22240] RDX: 0000000000000001 RSI: 0000000000000106 RDI: 0000000000000004 [ 450.580807][T22240] RBP: 00007f16e632f090 R08: 00002000000000c0 R09: 0000000000000000 [ 450.580823][T22240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.580837][T22240] R13: 00007f16e7b56038 R14: 00007f16e7b55fa0 R15: 00007ffe0f4501a8 [ 450.580857][T22240] [ 450.840115][T22247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4044'. [ 451.062834][T22257] sctp: [Deprecated]: syz.9.4048 (pid 22257) Use of int in maxseg socket option. [ 451.062834][T22257] Use struct sctp_assoc_value instead [ 451.087303][T22257] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4048'. [ 451.287846][T22272] SET target dimension over the limit! [ 451.544677][T22277] audit_log_lost: 71 callbacks suppressed [ 451.544692][T22277] audit: audit_lost=14 audit_rate_limit=0 audit_backlog_limit=64 [ 451.593834][T22277] audit: out of memory in audit_log_start [ 452.172301][T22302] sctp: [Deprecated]: syz.2.4062 (pid 22302) Use of int in maxseg socket option. [ 452.172301][T22302] Use struct sctp_assoc_value instead [ 452.199243][T22302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4062'. [ 453.008137][ T28] audit: type=1400 audit(2000525441.425:14376): avc: denied { read } for pid=22324 comm="syz.0.4071" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 453.009983][T22325] rtc_cmos 00:00: Alarms can be up to one day in the future [ 453.245769][T22332] sctp: [Deprecated]: syz.0.4073 (pid 22332) Use of int in maxseg socket option. [ 453.245769][T22332] Use struct sctp_assoc_value instead [ 453.275666][T22332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4073'. [ 453.308315][T22338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.317602][T22338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.326339][T22338] bond0: Caught tx_queue_len zero misconfig [ 453.881919][T22340] SELinux: policydb version 64 does not match my version range 15-35 [ 453.907456][T22340] SELinux: failed to load policy [ 453.969897][T22352] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 453.977238][T22352] vhci_hcd vhci_hcd.1: invalid port number 96 [ 453.983425][T22352] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 453.994573][ T28] audit: type=1400 audit(2000525442.351:14377): avc: denied { mac_admin } for pid=22351 comm="syz.0.4083" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.015973][T22352] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 454.040108][ T28] audit: type=1400 audit(2000525442.379:14378): avc: denied { relabelto } for pid=22351 comm="syz.0.4083" name="251" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 454.069469][ T28] audit: type=1400 audit(2000525442.379:14379): avc: denied { associate } for pid=22351 comm="syz.0.4083" name="251" dev="tmpfs" ino=1315 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 454.099696][ T28] audit: type=1400 audit(2000525442.379:14380): avc: denied { create } for pid=22351 comm="syz.0.4083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 454.128739][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4087'. [ 454.154280][ T28] audit: type=1400 audit(2000525442.389:14381): avc: denied { setopt } for pid=22358 comm="syz.9.4086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 454.176434][ T28] audit: type=1400 audit(2000525442.473:14382): avc: denied { remove_name } for pid=13341 comm="syz-executor" name="file1" dev="tmpfs" ino=1320 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 454.205219][ T28] audit: type=1400 audit(2000525442.473:14383): avc: denied { rmdir } for pid=13341 comm="syz-executor" name="251" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 454.283588][T22379] loop5: detected capacity change from 0 to 512 [ 454.290836][T22379] EXT4-fs: Ignoring removed oldalloc option [ 454.307051][T22379] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4093: invalid indirect mapped block 4294967295 (level 1) [ 454.324717][T22362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4087'. [ 454.337272][T22383] FAULT_INJECTION: forcing a failure. [ 454.337272][T22383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.337797][T22379] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 454.359239][T22379] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4093: invalid indirect mapped block 4294967295 (level 1) [ 454.368610][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 454.368652][ C1] EXT4-fs (loop5): initial error at time 2000525442: ext4_free_branches:1023: inode 11 [ 454.368689][ C1] EXT4-fs (loop5): last error at time 2000525442: ext4_free_branches:1023: inode 11 [ 454.369638][T22384] loop2: detected capacity change from 0 to 512 [ 454.390196][T22379] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 454.425522][T22383] CPU: 0 UID: 0 PID: 22383 Comm: syz.0.4092 Tainted: G W syzkaller #0 PREEMPT(full) [ 454.425555][T22383] Tainted: [W]=WARN [ 454.425561][T22383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.425600][T22383] Call Trace: [ 454.425606][T22383] [ 454.425614][T22383] __dump_stack+0x1d/0x30 [ 454.425639][T22383] dump_stack_lvl+0x95/0xd0 [ 454.425660][T22383] dump_stack+0x15/0x1b [ 454.425679][T22383] should_fail_ex+0x263/0x280 [ 454.425775][T22383] should_fail+0xb/0x20 [ 454.425805][T22383] should_fail_usercopy+0x1a/0x20 [ 454.425829][T22383] _copy_to_user+0x20/0xa0 [ 454.425926][T22383] simple_read_from_buffer+0xb5/0x130 [ 454.425947][T22383] proc_fail_nth_read+0x10e/0x150 [ 454.425974][T22383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.426068][T22383] vfs_read+0x1ab/0x7f0 [ 454.426095][T22383] ? __rcu_read_unlock+0x4e/0x70 [ 454.426132][T22383] ? __fget_files+0x184/0x1c0 [ 454.426153][T22383] ? mutex_lock+0x57/0x90 [ 454.426181][T22383] ksys_read+0xdc/0x1a0 [ 454.426261][T22383] __x64_sys_read+0x40/0x50 [ 454.426277][T22383] x64_sys_call+0x2886/0x3020 [ 454.426301][T22383] do_syscall_64+0x12c/0x370 [ 454.426323][T22383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.426404][T22383] RIP: 0033:0x7f0e225bcfce [ 454.426421][T22383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.426438][T22383] RSP: 002b:00007f0e21035fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.426516][T22383] RAX: ffffffffffffffda RBX: 00007f0e210366c0 RCX: 00007f0e225bcfce [ 454.426603][T22383] RDX: 000000000000000f RSI: 00007f0e210360a0 RDI: 0000000000000006 [ 454.426622][T22383] RBP: 00007f0e21036090 R08: 0000000000000000 R09: 0000000000000000 [ 454.426688][T22383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.426699][T22383] R13: 00007f0e22876128 R14: 00007f0e22876090 R15: 00007ffd83583098 [ 454.426717][T22383] [ 454.435172][T22379] EXT4-fs (loop5): 2 truncates cleaned up [ 454.486463][T22384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.532950][T22379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.546647][T22384] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.706597][T21864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.728019][T19964] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.773428][T22406] loop2: detected capacity change from 0 to 512 [ 454.844739][T22408] sctp: [Deprecated]: syz.1.4100 (pid 22408) Use of int in maxseg socket option. [ 454.844739][T22408] Use struct sctp_assoc_value instead [ 454.873415][T22406] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 454.901558][T22408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4100'. [ 454.916976][T22406] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4097: invalid indirect mapped block 4294967295 (level 1) [ 454.941076][T22406] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 454.941187][T22406] EXT4-fs (loop2): Remounting filesystem read-only [ 454.950366][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 454.950390][ C0] EXT4-fs (loop2): initial error at time 2000525443: ext4_free_branches:1023: inode 11 [ 454.950423][ C0] EXT4-fs (loop2): last error at time 2000525443: ext4_free_branches:1023: inode 11 [ 454.985307][T22406] EXT4-fs (loop2): 2 truncates cleaned up [ 454.996017][T22406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.299453][T21864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.483573][T22433] loop9: detected capacity change from 0 to 1764 [ 455.523527][T22437] loop9: detected capacity change from 0 to 512 [ 455.539932][T22437] EXT4-fs: Ignoring removed oldalloc option [ 455.559504][T22437] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4108: invalid indirect mapped block 4294967295 (level 1) [ 455.586438][T22446] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 455.594575][T22417] x_tables: unsorted underflow at hook 2 [ 455.600498][T22437] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.600736][T22437] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4108: invalid indirect mapped block 4294967295 (level 1) [ 455.609960][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 455.609981][ C1] EXT4-fs (loop9): initial error at time 2000525443: ext4_free_branches:1023: inode 11 [ 455.610006][ C1] EXT4-fs (loop9): last error at time 2000525443: ext4_free_branches:1023: inode 11 [ 455.665315][T22437] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.665687][T22437] EXT4-fs (loop9): 2 truncates cleaned up [ 455.724217][T22437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.825050][T22453] sctp: [Deprecated]: syz.5.4112 (pid 22453) Use of int in maxseg socket option. [ 455.825050][T22453] Use struct sctp_assoc_value instead [ 455.848051][T22453] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4112'. [ 455.860861][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.924075][T22456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4111'. [ 457.169826][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4115'. [ 457.252023][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 457.252086][ T28] audit: type=1400 audit(2000525445.391:14388): avc: denied { cpu } for pid=22470 comm="syz.9.4118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 457.345957][ T28] audit: type=1400 audit(2000525445.448:14389): avc: denied { read write } for pid=22472 comm="syz.2.4119" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 457.379948][T22469] loop5: detected capacity change from 0 to 8192 [ 457.401306][T22469] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 457.445352][ T28] audit: type=1400 audit(2000525445.448:14390): avc: denied { open } for pid=22472 comm="syz.2.4119" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 457.559965][ T28] audit: type=1400 audit(2000525445.550:14391): avc: denied { accept } for pid=22468 comm="syz.5.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 458.439474][T22482] FAULT_INJECTION: forcing a failure. [ 458.439474][T22482] name failslab, interval 1, probability 0, space 0, times 0 [ 458.572345][T22482] CPU: 0 UID: 0 PID: 22482 Comm: syz.2.4120 Tainted: G W syzkaller #0 PREEMPT(full) [ 458.572439][T22482] Tainted: [W]=WARN [ 458.572447][T22482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.572461][T22482] Call Trace: [ 458.572469][T22482] [ 458.572478][T22482] __dump_stack+0x1d/0x30 [ 458.572508][T22482] dump_stack_lvl+0x95/0xd0 [ 458.572529][T22482] dump_stack+0x15/0x1b [ 458.572617][T22482] should_fail_ex+0x263/0x280 [ 458.572646][T22482] should_failslab+0x8c/0xb0 [ 458.572716][T22482] __kvmalloc_node_noprof+0x155/0x650 [ 458.572747][T22482] ? _parse_integer+0x27/0x40 [ 458.572770][T22482] ? seq_read_iter+0x143/0x940 [ 458.572806][T22482] seq_read_iter+0x143/0x940 [ 458.572943][T22482] ? avc_policy_seqno+0x15/0x30 [ 458.572973][T22482] ? selinux_file_permission+0x1f2/0x690 [ 458.573002][T22482] kernfs_fop_read_iter+0xc1/0x330 [ 458.573064][T22482] vfs_read+0x6c0/0x7f0 [ 458.573169][T22482] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 458.573312][T22482] ksys_read+0xdc/0x1a0 [ 458.573333][T22482] __x64_sys_read+0x40/0x50 [ 458.573352][T22482] x64_sys_call+0x2886/0x3020 [ 458.573381][T22482] do_syscall_64+0x12c/0x370 [ 458.573420][T22482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.573449][T22482] RIP: 0033:0x7f623504c799 [ 458.573468][T22482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.573501][T22482] RSP: 002b:00007f6233a7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.573524][T22482] RAX: ffffffffffffffda RBX: 00007f62352c6090 RCX: 00007f623504c799 [ 458.573540][T22482] RDX: 00000000000000aa RSI: 0000200000000340 RDI: 0000000000000003 [ 458.573555][T22482] RBP: 00007f6233a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 458.573570][T22482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.573661][T22482] R13: 00007f62352c6128 R14: 00007f62352c6090 R15: 00007ffc34c85d28 [ 458.573682][T22482] [ 458.831823][T22490] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=22490 comm=syz.1.4123 [ 458.856156][T22490] netlink: 'syz.1.4123': attribute type 1 has an invalid length. [ 458.897726][T22497] sctp: [Deprecated]: syz.9.4126 (pid 22497) Use of int in maxseg socket option. [ 458.897726][T22497] Use struct sctp_assoc_value instead [ 458.930921][ T28] audit: type=1400 audit(2000525446.963:14392): avc: denied { append } for pid=22500 comm="syz.0.4128" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 458.931266][T22501] usb usb7: usbfs: process 22501 (syz.0.4128) did not claim interface 3 before use [ 459.005521][T22497] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4126'. [ 459.038684][T22505] usb usb7: usbfs: process 22505 (syz.0.4129) did not claim interface 3 before use [ 459.038764][T22505] FAULT_INJECTION: forcing a failure. [ 459.038764][T22505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.038793][T22505] CPU: 1 UID: 0 PID: 22505 Comm: syz.0.4129 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.038821][T22505] Tainted: [W]=WARN [ 459.038828][T22505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.038839][T22505] Call Trace: [ 459.038845][T22505] [ 459.038852][T22505] __dump_stack+0x1d/0x30 [ 459.038933][T22505] dump_stack_lvl+0x95/0xd0 [ 459.038959][T22505] dump_stack+0x15/0x1b [ 459.038994][T22505] should_fail_ex+0x263/0x280 [ 459.039072][T22505] should_fail+0xb/0x20 [ 459.039097][T22505] should_fail_usercopy+0x1a/0x20 [ 459.039128][T22505] _copy_to_user+0x20/0xa0 [ 459.039232][T22505] simple_read_from_buffer+0xb5/0x130 [ 459.039259][T22505] proc_fail_nth_read+0x10e/0x150 [ 459.039376][T22505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.039459][T22505] vfs_read+0x1ab/0x7f0 [ 459.039492][T22505] ? __rcu_read_unlock+0x4e/0x70 [ 459.039557][T22505] ? __fget_files+0x184/0x1c0 [ 459.039585][T22505] ? mutex_lock+0x57/0x90 [ 459.039619][T22505] ksys_read+0xdc/0x1a0 [ 459.039687][T22505] __x64_sys_read+0x40/0x50 [ 459.039759][T22505] x64_sys_call+0x2886/0x3020 [ 459.039794][T22505] do_syscall_64+0x12c/0x370 [ 459.039847][T22505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.039926][T22505] RIP: 0033:0x7f0e225bcfce [ 459.039941][T22505] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 459.039976][T22505] RSP: 002b:00007f0e21056fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.039999][T22505] RAX: ffffffffffffffda RBX: 00007f0e210576c0 RCX: 00007f0e225bcfce [ 459.040015][T22505] RDX: 000000000000000f RSI: 00007f0e210570a0 RDI: 0000000000000004 [ 459.040030][T22505] RBP: 00007f0e21057090 R08: 0000000000000000 R09: 0000000000000000 [ 459.040112][T22505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.040131][T22505] R13: 00007f0e22876038 R14: 00007f0e22875fa0 R15: 00007ffd83583098 [ 459.040152][T22505] [ 459.099408][T22510] FAULT_INJECTION: forcing a failure. [ 459.099408][T22510] name failslab, interval 1, probability 0, space 0, times 0 [ 459.099468][T22510] CPU: 1 UID: 0 PID: 22510 Comm: syz.0.4130 Tainted: G W syzkaller #0 PREEMPT(full) [ 459.099548][T22510] Tainted: [W]=WARN [ 459.099579][T22510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.099593][T22510] Call Trace: [ 459.099600][T22510] [ 459.099606][T22510] __dump_stack+0x1d/0x30 [ 459.099634][T22510] dump_stack_lvl+0x95/0xd0 [ 459.099659][T22510] dump_stack+0x15/0x1b [ 459.099729][T22510] should_fail_ex+0x263/0x280 [ 459.099761][T22510] should_failslab+0x8c/0xb0 [ 459.099786][T22510] kmem_cache_alloc_noprof+0x66/0x400 [ 459.099807][T22510] ? skb_clone+0x151/0x1f0 [ 459.099949][T22510] skb_clone+0x151/0x1f0 [ 459.100032][T22510] pfkey_sendmsg+0x2cc/0x9b0 [ 459.100059][T22510] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 459.100079][T22510] ____sys_sendmsg+0x563/0x5b0 [ 459.100170][T22510] ___sys_sendmsg+0x195/0x1e0 [ 459.100211][T22510] __x64_sys_sendmsg+0xd4/0x160 [ 459.100246][T22510] x64_sys_call+0x194c/0x3020 [ 459.100308][T22510] do_syscall_64+0x12c/0x370 [ 459.100489][T22510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.100509][T22510] RIP: 0033:0x7f0e225fc799 [ 459.100525][T22510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.100545][T22510] RSP: 002b:00007f0e21057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.100567][T22510] RAX: ffffffffffffffda RBX: 00007f0e22875fa0 RCX: 00007f0e225fc799 [ 459.100584][T22510] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 459.100601][T22510] RBP: 00007f0e21057090 R08: 0000000000000000 R09: 0000000000000000 [ 459.100616][T22510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.100630][T22510] R13: 00007f0e22876038 R14: 00007f0e22875fa0 R15: 00007ffd83583098 [ 459.100649][T22510] [ 459.110384][T22508] loop9: detected capacity change from 0 to 1024 [ 459.110796][T22508] EXT4-fs: test_dummy_encryption option not supported [ 459.163774][T22516] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 459.164885][T22516] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 459.340520][T22516] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4123'. [ 459.355453][T22516] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 459.666512][T22516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4123'. [ 459.669127][T22516] 8021q: adding VLAN 0 to HW filter on device bond1 [ 459.846687][T22534] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4137'. [ 459.846783][T22534] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 459.847632][T22534] tmpfs: Unsupported parameter 'huge' [ 459.915173][T22543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39756 sclass=netlink_route_socket pid=22543 comm=syz.1.4140 [ 460.354925][T22563] bridge_slave_0: left allmulticast mode [ 460.361295][T22563] bridge_slave_0: left promiscuous mode [ 460.370881][T22563] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.393512][ T28] audit: type=1400 audit(2000525448.338:14393): avc: denied { bind } for pid=22564 comm="syz.5.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 460.428537][T22563] bridge_slave_1: left allmulticast mode [ 460.461496][T22563] bridge_slave_1: left promiscuous mode [ 460.486776][T22573] 9p: Bad value for 'rfdno' [ 460.532890][ T28] audit: type=1400 audit(2000525448.357:14394): avc: denied { write } for pid=22564 comm="syz.5.4144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 460.545531][T22563] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.744151][T22563] bond0: (slave bond_slave_0): Releasing backup interface [ 460.846268][T22563] bond0: (slave bond_slave_1): Releasing backup interface [ 460.941633][T22563] team0: Port device team_slave_0 removed [ 461.036273][T22563] team0: Port device team_slave_1 removed [ 461.071939][T22563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.112138][T22584] tmpfs: Unsupported parameter 'huge' [ 461.134646][T22563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.191318][T22563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.230946][T22563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.272873][T22563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.328495][T22583] bridge0: port 3(dummy0) entered disabled state [ 461.340064][T22583] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4148'. [ 461.349522][T22583] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 461.404766][T22588] xt_hashlimit: size too large, truncated to 1048576 [ 461.471277][ T28] audit: type=1326 audit(2000525449.348:14395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22599 comm="syz.9.4151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b9f36c799 code=0x0 [ 461.558825][T22607] IPv6: NLM_F_CREATE should be specified when creating new route [ 461.611292][T22607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.618632][T22607] IPv6: NLM_F_CREATE should be set when creating new route [ 461.711340][ T28] audit: type=1400 audit(2000525449.563:14396): avc: denied { mounton } for pid=22599 comm="syz.9.4151" path="/303/file0" dev="tmpfs" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 461.748321][ T28] audit: type=1400 audit(2000525449.563:14397): avc: denied { getopt } for pid=22599 comm="syz.9.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.378650][T22653] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4161'. [ 462.378676][T22653] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 462.380115][T22653] tmpfs: Unsupported parameter 'huge' [ 462.634536][T22677] loop9: detected capacity change from 0 to 2048 [ 462.781748][T22681] 9pnet_virtio: no channels available for device Ÿë [ 462.919212][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 462.919225][ T28] audit: type=1400 audit(2000525450.695:14399): avc: denied { mount } for pid=22643 comm="syz.0.4160" name="/" dev="autofs" ino=78263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 463.209089][ T28] audit: type=1400 audit(2000525450.966:14400): avc: denied { write } for pid=22686 comm="syz.2.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.245848][T22687] loop2: detected capacity change from 0 to 128 [ 463.504595][ T28] audit: type=1400 audit(2000525451.238:14401): avc: denied { connect } for pid=22686 comm="syz.2.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.593460][ T28] audit: type=1400 audit(2000525451.303:14402): avc: denied { connect } for pid=22693 comm="syz.1.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 463.694051][ T28] audit: type=1400 audit(2000525451.303:14403): avc: denied { read } for pid=22693 comm="syz.1.4172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 464.117544][ T28] audit: type=1400 audit(2000525451.818:14404): avc: denied { getopt } for pid=22686 comm="syz.2.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 465.416681][T22723] FAULT_INJECTION: forcing a failure. [ 465.416681][T22723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.505697][T22723] CPU: 1 UID: 0 PID: 22723 Comm: syz.2.4183 Tainted: G W syzkaller #0 PREEMPT(full) [ 465.505734][T22723] Tainted: [W]=WARN [ 465.505844][T22723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 465.505858][T22723] Call Trace: [ 465.505870][T22723] [ 465.505880][T22723] __dump_stack+0x1d/0x30 [ 465.505907][T22723] dump_stack_lvl+0x95/0xd0 [ 465.505928][T22723] dump_stack+0x15/0x1b [ 465.506002][T22723] should_fail_ex+0x263/0x280 [ 465.506061][T22723] should_fail+0xb/0x20 [ 465.506087][T22723] should_fail_usercopy+0x1a/0x20 [ 465.506206][T22723] _copy_from_user+0x1c/0xb0 [ 465.506241][T22723] __sys_connect+0xd0/0x2a0 [ 465.506277][T22723] __x64_sys_connect+0x3f/0x50 [ 465.506347][T22723] x64_sys_call+0x2df0/0x3020 [ 465.506379][T22723] do_syscall_64+0x12c/0x370 [ 465.506404][T22723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.506430][T22723] RIP: 0033:0x7f623504c799 [ 465.506444][T22723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.506481][T22723] RSP: 002b:00007f6233a9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 465.506500][T22723] RAX: ffffffffffffffda RBX: 00007f62352c5fa0 RCX: 00007f623504c799 [ 465.506514][T22723] RDX: 000000000000006e RSI: 0000200000000500 RDI: 0000000000000003 [ 465.506528][T22723] RBP: 00007f6233a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 465.506541][T22723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.506556][T22723] R13: 00007f62352c6038 R14: 00007f62352c5fa0 R15: 00007ffc34c85d28 [ 465.506575][T22723] [ 465.985345][T22738] ªªªªªª: renamed from hsr0 (while UP) [ 466.116706][T22742] loop2: detected capacity change from 0 to 1024 [ 466.169768][T22742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.220874][T22750] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 466.230383][ T28] audit: type=1400 audit(2000525453.801:14405): avc: denied { relabelto } for pid=22741 comm="syz.2.4188" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 466.328014][ T28] audit: type=1400 audit(2000525453.885:14406): avc: denied { mount } for pid=22732 comm="syz.5.4185" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 466.775793][T22750] EXT4-fs warning (device loop2): empty_inline_dir:1759: bad inline directory (dir #12) - no `..' [ 466.796241][T22758] 9pnet_virtio: no channels available for device Ÿë [ 466.810367][ T28] audit: type=1400 audit(2000525454.296:14407): avc: denied { create } for pid=22741 comm="syz.2.4188" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 466.855305][T22755] loop9: detected capacity change from 0 to 128 [ 466.994561][T22751] tc_dump_action: action bad kind [ 467.056814][T21864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.070034][T22734] loop5: detected capacity change from 0 to 8192 [ 467.149375][ T28] audit: type=1400 audit(2000525454.306:14408): avc: denied { remove_name } for pid=22741 comm="syz.2.4188" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.194508][T11867] loop5: p1 p2 p3 p4 [ 467.202668][T11867] loop5: p1 size 196608 extends beyond EOD, truncated [ 467.224453][T11867] loop5: p2 size 150994944 extends beyond EOD, truncated [ 467.234538][T11867] loop5: p3 size 66846464 extends beyond EOD, truncated [ 467.250426][T11867] loop5: p4 size 479744 extends beyond EOD, truncated [ 467.268970][T22734] loop5: p1 p2 p3 p4 [ 467.275866][T22734] loop5: p1 size 196608 extends beyond EOD, truncated [ 467.291134][T22734] loop5: p2 size 150994944 extends beyond EOD, truncated [ 467.306996][T22734] loop5: p3 size 66846464 extends beyond EOD, truncated [ 467.322615][T22734] loop5: p4 size 479744 extends beyond EOD, truncated [ 467.545352][T22769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4193'. [ 467.555788][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 467.575119][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 467.589949][T11867] udevd[11867]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 467.600173][ T3275] udevd[3275]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 467.668158][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 467.688042][T11867] udevd[11867]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 467.699131][ T3275] udevd[3275]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 467.773755][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 469.172252][T22810] xt_hashlimit: size too large, truncated to 1048576 [ 470.032648][T22821] 9pnet_virtio: no channels available for device Ÿë [ 471.710567][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 471.710691][ T28] audit: type=1400 audit(2000525458.917:14412): avc: denied { listen } for pid=22857 comm="syz.9.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.797484][T22854] geneve1: entered promiscuous mode [ 471.803231][T22854] macsec1: entered promiscuous mode [ 471.813931][T22854] macsec1: entered allmulticast mode [ 471.831233][T22854] geneve1: entered allmulticast mode [ 471.838987][ T28] audit: type=1400 audit(2000525458.945:14413): avc: denied { setopt } for pid=22857 comm="syz.9.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 471.941355][ T28] audit: type=1400 audit(2000525458.955:14414): avc: denied { create } for pid=22852 comm="syz.5.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 472.021740][ T28] audit: type=1400 audit(2000525458.955:14415): avc: denied { sys_admin } for pid=22852 comm="syz.5.4217" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 472.184094][ T28] audit: type=1400 audit(2000525458.973:14416): avc: denied { write } for pid=22861 comm="syz.1.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 472.228012][ T28] audit: type=1400 audit(2000525458.992:14417): avc: denied { unmount } for pid=22852 comm="syz.5.4217" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 472.493606][T22876] 9pnet_virtio: no channels available for device Ÿë [ 472.635514][T22878] sctp: [Deprecated]: syz.2.4224 (pid 22878) Use of int in maxseg socket option. [ 472.635514][T22878] Use struct sctp_assoc_value instead [ 472.755317][T22884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4224'. [ 473.022838][T22888] loop9: detected capacity change from 0 to 512 [ 473.029747][T22887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4227'. [ 473.060692][T22888] EXT4-fs: Ignoring removed oldalloc option [ 473.129656][T22892] loop2: detected capacity change from 0 to 1024 [ 473.178812][T22892] ext2: Unknown parameter 'subj_user' [ 473.199266][T22888] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.4229: invalid block [ 473.251165][T22888] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 473.251683][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 473.267288][ C0] EXT4-fs (loop9): initial error at time 2000525460: ext4_get_branch:178: inode 11: block 4294967295 [ 473.278275][ C0] EXT4-fs (loop9): last error at time 2000525460: ext4_get_branch:178: inode 11: block 4294967295 [ 473.289349][T22888] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4229: invalid indirect mapped block 4294967295 (level 1) [ 473.336273][T22888] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 473.336528][T22888] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4229: invalid indirect mapped block 4294967295 (level 1) [ 473.412121][T22888] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 473.412477][T22888] EXT4-fs (loop9): 2 truncates cleaned up [ 473.579395][T22888] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.353120][T22911] 9pnet_virtio: no channels available for device Ÿë [ 475.083501][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.199477][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.208497][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.217495][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.326887][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.335968][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.345154][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.378554][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.387613][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.396709][T22918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4235'. [ 476.526999][T22939] 9pnet_virtio: no channels available for device Ÿë [ 478.693321][T22947] 9pnet_virtio: no channels available for device Ÿë [ 479.215875][T22953] loop9: detected capacity change from 0 to 1024 [ 479.287889][T22953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.424677][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.507427][ T28] audit: type=1400 audit(2000525467.149:14418): avc: denied { connect } for pid=22972 comm="syz.0.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 480.554580][T22980] xt_hashlimit: size too large, truncated to 1048576 [ 481.637351][ T28] audit: type=1400 audit(2000525468.159:14419): avc: denied { setopt } for pid=22993 comm="syz.2.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 482.443405][ T28] audit: type=1400 audit(2000525468.159:14420): avc: denied { ioctl } for pid=22993 comm="syz.2.4258" path="socket:[78681]" dev="sockfs" ino=78681 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 483.377998][T23025] netlink: 'syz.1.4268': attribute type 27 has an invalid length. [ 483.506826][ T28] audit: type=1400 audit(2000525469.497:14421): avc: denied { mount } for pid=23010 comm="syz.2.4262" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 483.785918][T23025] veth1_vlan: left allmulticast mode [ 483.809875][T23035] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4271'. [ 483.823230][T23025] macvlan1: left allmulticast mode [ 483.886436][T23037] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.908279][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.922938][T23040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=23040 comm=syz.9.4272 [ 483.940735][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.956170][T23040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.961519][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.018446][T23040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.041721][T23040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.059301][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.068422][T23040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.094717][T23037] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.158831][T23037] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.221787][T23037] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.293682][ T3453] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.305797][ T3453] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.325852][ T3453] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.357175][ T3453] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.663255][ T28] audit: type=1400 audit(2000525471.031:14422): avc: denied { create } for pid=23052 comm="syz.2.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 485.959783][T23087] xt_policy: output policy not valid in PREROUTING and INPUT [ 485.980602][T23087] loop2: detected capacity change from 0 to 512 [ 485.991278][T23087] EXT4-fs error (device loop2): ext4_init_orphan_info:583: comm syz.2.4292: inode #0: comm syz.2.4292: iget: illegal inode # [ 486.004855][T23087] loop2: lost filesystem error report for type 5 error -117 [ 486.005529][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 486.010239][T23087] EXT4-fs (loop2): get orphan inode failed [ 486.012928][ C1] EXT4-fs (loop2): initial error at time 2000525472: ext4_init_orphan_info:583 [ 486.012951][ C1] EXT4-fs (loop2): last error at time 2000525472: ext4_init_orphan_info:583 [ 486.043413][T23087] EXT4-fs (loop2): mount failed [ 486.072553][T23093] loop2: detected capacity change from 0 to 2048 [ 486.095977][T23093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.109964][ T28] audit: type=1400 audit(2000525472.387:14423): avc: denied { setattr } for pid=23092 comm="syz.2.4294" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 486.140680][T21864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.169763][T23097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4295'. [ 486.180683][T23097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23097 comm=syz.2.4295 [ 486.193822][T23097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4295'. [ 486.782072][T23111] bond0: (slave dummy0): Releasing backup interface [ 486.799770][T23111] batman_adv: batadv0: Adding interface: dummy0 [ 486.807537][T23111] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.833595][T23111] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 487.295356][ T28] audit: type=1400 audit(2000525473.491:14424): avc: denied { read } for pid=23110 comm="iou-wrk-23115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 487.868392][ T28] audit: type=1326 audit(2000525474.033:14425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23147 comm="syz.5.4314" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16e78dc799 code=0x0 [ 488.090915][T23164] sctp: [Deprecated]: syz.1.4321 (pid 23164) Use of int in maxseg socket option. [ 488.090915][T23164] Use struct sctp_assoc_value instead [ 488.116527][T23164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4321'. [ 488.167593][ T28] audit: type=1326 audit(2000525474.314:14426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23168 comm="syz.1.4323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2896cbc799 code=0x0 [ 488.866347][T23180] SET target dimension over the limit! [ 491.266765][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'. [ 491.286865][T23236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4348'. [ 491.391113][T23241] sctp: [Deprecated]: syz.5.4349 (pid 23241) Use of int in maxseg socket option. [ 491.391113][T23241] Use struct sctp_assoc_value instead [ 491.421734][T23241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4349'. [ 491.674842][ T28] audit: type=1400 audit(2000525477.597:14427): avc: denied { map } for pid=23258 comm="syz.5.4357" path="socket:[79238]" dev="sockfs" ino=79238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 491.674893][ T28] audit: type=1400 audit(2000525477.597:14428): avc: denied { read } for pid=23258 comm="syz.5.4357" path="socket:[79238]" dev="sockfs" ino=79238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 491.792992][T23266] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4361'. [ 491.793236][ T28] audit: type=1400 audit(2000525477.709:14429): avc: denied { bind } for pid=23265 comm="syz.5.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 491.875251][T23270] sctp: [Deprecated]: syz.5.4363 (pid 23270) Use of int in maxseg socket option. [ 491.875251][T23270] Use struct sctp_assoc_value instead [ 491.906194][T23270] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4363'. [ 492.101859][ T28] audit: type=1400 audit(2000525477.999:14430): avc: denied { setopt } for pid=23275 comm="syz.2.4365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 492.191500][T23282] 9pnet_virtio: no channels available for device Ÿë [ 493.083554][T23300] sctp: [Deprecated]: syz.9.4375 (pid 23300) Use of int in maxseg socket option. [ 493.083554][T23300] Use struct sctp_assoc_value instead [ 493.130661][T23300] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4375'. [ 493.610352][T23320] loop9: detected capacity change from 0 to 512 [ 493.634887][T23320] EXT4-fs: Ignoring removed oldalloc option [ 493.646501][T23320] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4383: invalid indirect mapped block 4294967295 (level 1) [ 493.646609][T23320] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 493.646740][T23320] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4383: invalid indirect mapped block 4294967295 (level 1) [ 493.646842][T23320] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 493.649318][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 493.649351][ C1] EXT4-fs (loop9): initial error at time 2000525479: ext4_free_branches:1023: inode 11 [ 493.649376][ C1] EXT4-fs (loop9): last error at time 2000525479: ext4_free_branches:1023: inode 11 [ 493.649665][T23320] EXT4-fs (loop9): 2 truncates cleaned up [ 493.650204][T23320] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.799887][T23322] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 493.835595][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.904745][T23333] sctp: [Deprecated]: syz.0.4388 (pid 23333) Use of int in maxseg socket option. [ 493.904745][T23333] Use struct sctp_assoc_value instead [ 493.930584][T23333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4388'. [ 494.588113][T23345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 494.830454][T23347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4392'. [ 494.961710][T23347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4392'. [ 495.055229][T23345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4392'. [ 495.133791][ T28] audit: type=1400 audit(2000525480.815:14431): avc: denied { unmount } for pid=21864 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 496.085813][T23372] sctp: [Deprecated]: syz.5.4400 (pid 23372) Use of int in maxseg socket option. [ 496.085813][T23372] Use struct sctp_assoc_value instead [ 497.595315][T23369] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4400'. [ 497.821147][T23385] loop2: detected capacity change from 0 to 256 [ 498.126687][T23384] FAULT_INJECTION: forcing a failure. [ 498.126687][T23384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.171406][T23400] loop9: detected capacity change from 0 to 512 [ 498.178285][T23400] EXT4-fs: Ignoring removed oldalloc option [ 498.214280][T23384] CPU: 1 UID: 0 PID: 23384 Comm: syz.0.4405 Tainted: G W syzkaller #0 PREEMPT(full) [ 498.214316][T23384] Tainted: [W]=WARN [ 498.214324][T23384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.214337][T23384] Call Trace: [ 498.214383][T23384] [ 498.214390][T23384] __dump_stack+0x1d/0x30 [ 498.214421][T23384] dump_stack_lvl+0x95/0xd0 [ 498.214447][T23384] dump_stack+0x15/0x1b [ 498.214470][T23384] should_fail_ex+0x263/0x280 [ 498.214552][T23384] should_fail+0xb/0x20 [ 498.214574][T23384] should_fail_usercopy+0x1a/0x20 [ 498.214603][T23384] _copy_to_iter+0x251/0xea0 [ 498.214704][T23384] seq_read_iter+0x776/0x940 [ 498.214743][T23384] seq_read+0x279/0x2c0 [ 498.214777][T23384] ? __pfx_seq_read+0x10/0x10 [ 498.214888][T23384] vfs_read+0x1ab/0x7f0 [ 498.214919][T23384] ? __rcu_read_unlock+0x4e/0x70 [ 498.214973][T23384] ? __fget_files+0x184/0x1c0 [ 498.214999][T23384] ? mutex_lock+0x57/0x90 [ 498.215077][T23384] ksys_read+0xdc/0x1a0 [ 498.215097][T23384] __x64_sys_read+0x40/0x50 [ 498.215142][T23384] x64_sys_call+0x2886/0x3020 [ 498.215172][T23384] do_syscall_64+0x12c/0x370 [ 498.215194][T23384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.215286][T23384] RIP: 0033:0x7f0e225fc799 [ 498.215305][T23384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.215325][T23384] RSP: 002b:00007f0e21057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.215347][T23384] RAX: ffffffffffffffda RBX: 00007f0e22875fa0 RCX: 00007f0e225fc799 [ 498.215363][T23384] RDX: 000000000000002b RSI: 0000200000000d40 RDI: 0000000000000007 [ 498.215375][T23384] RBP: 00007f0e21057090 R08: 0000000000000000 R09: 0000000000000000 [ 498.215389][T23384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.215458][T23384] R13: 00007f0e22876038 R14: 00007f0e22875fa0 R15: 00007ffd83583098 [ 498.215480][T23384] [ 498.514331][T23400] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.4411: invalid block [ 498.526389][T23400] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 498.526609][T23400] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4411: invalid indirect mapped block 4294967295 (level 1) [ 498.535759][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 498.535782][ C0] EXT4-fs (loop9): initial error at time 2000525484: ext4_get_branch:178: inode 11: block 4294967295 [ 498.535838][ C0] EXT4-fs (loop9): last error at time 2000525484: ext4_get_branch:178: inode 11: block 4294967295 [ 498.550225][ T28] audit: type=1326 audit(2000525483.995:14432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 498.605066][T23400] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 498.605404][T23400] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4411: invalid indirect mapped block 4294967295 (level 1) [ 498.635307][T23400] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 498.689221][T23400] EXT4-fs (loop9): 2 truncates cleaned up [ 498.727406][ T28] audit: type=1326 audit(2000525483.995:14433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 498.727978][T23400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.751130][ T28] audit: type=1326 audit(2000525483.995:14434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 498.841968][ T28] audit: type=1326 audit(2000525483.995:14435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 498.898245][ T28] audit: type=1326 audit(2000525483.995:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 498.949609][ T28] audit: type=1326 audit(2000525483.995:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 498.975783][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.985998][T23422] xt_hashlimit: size too large, truncated to 1048576 [ 499.009670][T23424] sctp: [Deprecated]: syz.9.4419 (pid 23424) Use of int in maxseg socket option. [ 499.009670][T23424] Use struct sctp_assoc_value instead [ 499.041278][ T28] audit: type=1326 audit(2000525483.995:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 499.070277][T23424] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4419'. [ 499.109381][ T28] audit: type=1326 audit(2000525483.995:14439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 499.186368][ T28] audit: type=1326 audit(2000525483.995:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 499.270551][ T28] audit: type=1326 audit(2000525483.995:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23411 comm="syz.5.4415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f16e78dc799 code=0x7ffc0000 [ 499.345560][T23429] macvlan0: entered promiscuous mode [ 499.399820][T23429] macvlan0: left promiscuous mode [ 499.608748][T23445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4425'. [ 499.645228][T23445] ip6erspan0: entered allmulticast mode [ 499.693272][T23449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4426'. [ 499.718619][T23449] netlink: 'syz.0.4426': attribute type 6 has an invalid length. [ 500.020597][T23466] netlink: 'syz.0.4433': attribute type 10 has an invalid length. [ 500.037770][T23466] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4433'. [ 500.761435][T23482] loop9: detected capacity change from 0 to 1024 [ 502.331907][T23517] loop2: detected capacity change from 0 to 2048 [ 502.425638][T23517] Alternate GPT is invalid, using primary GPT. [ 502.432012][T23517] loop2: p1 p2 p3 [ 502.551405][ T3275] udevd[3275]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 502.551752][T11867] udevd[11867]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 502.577675][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 503.378834][T23537] macvlan0: entered promiscuous mode [ 503.403616][T23537] dummy0: entered promiscuous mode [ 503.427226][T23537] dummy0: left promiscuous mode [ 503.449936][T23537] macvlan0: left promiscuous mode [ 503.474720][T23540] bond0: (slave dummy0): Releasing backup interface [ 503.475654][T23550] loop9: detected capacity change from 0 to 4096 [ 503.547360][T23550] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.565128][T23554] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4460'. [ 503.581614][T23554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23554 comm=syz.5.4460 [ 503.681117][T23554] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4460'. [ 503.976887][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.503737][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 504.503750][ T28] audit: type=1400 audit(2000525489.598:14496): avc: denied { write } for pid=23587 comm="syz.5.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 504.882697][T23602] loop2: detected capacity change from 0 to 1024 [ 504.982900][T23602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.073510][ T28] audit: type=1400 audit(2000525490.122:14497): avc: denied { read } for pid=23600 comm="syz.2.4479" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 505.101211][ T28] audit: type=1400 audit(2000525490.122:14498): avc: denied { write } for pid=23600 comm="syz.2.4479" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.125559][ T28] audit: type=1400 audit(2000525490.122:14499): avc: denied { ioctl } for pid=23600 comm="syz.2.4479" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.154901][T21864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.246007][T23609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4482'. [ 505.261884][T23609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23609 comm=syz.0.4482 [ 505.346532][T23609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4482'. [ 505.823679][ T28] audit: type=1400 audit(2000525490.824:14500): avc: denied { create } for pid=23623 comm="syz.9.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.997534][ T28] audit: type=1400 audit(2000525490.861:14501): avc: denied { write } for pid=23623 comm="syz.9.4486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 506.202760][ T28] audit: type=1400 audit(2000525491.189:14502): avc: denied { kexec_image_load } for pid=23632 comm="syz.9.4490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 506.374656][ T28] audit: type=1400 audit(2000525491.348:14503): avc: denied { create } for pid=23645 comm="syz.1.4494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 507.002746][T23633] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 507.029190][T23670] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4501'. [ 507.039650][T23670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23670 comm=syz.5.4501 [ 507.052228][T23670] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4501'. [ 507.408198][T23685] ip6t_srh: unknown srh invflags 4000 [ 507.455679][T23676] syz_tun: entered allmulticast mode [ 507.465999][T23676] dvmrp8: entered allmulticast mode [ 507.473820][T23675] syz_tun: left allmulticast mode [ 507.562873][T23695] loop2: detected capacity change from 0 to 512 [ 507.603522][T23695] ext4: Unknown parameter 'euid>18446744073709551615' [ 507.657790][ T28] audit: type=1400 audit(2000525492.545:14504): avc: denied { ioctl } for pid=23694 comm="syz.2.4510" path="socket:[82070]" dev="sockfs" ino=82070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 507.657803][T23695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4510'. [ 508.153113][T23706] 9pnet_virtio: no channels available for device Ÿë [ 509.379735][T23719] macvlan0: entered promiscuous mode [ 509.461811][T23719] dummy0: entered promiscuous mode [ 509.467072][T23719] dummy0: left promiscuous mode [ 509.503521][T23719] macvlan0: left promiscuous mode [ 509.710450][T23733] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4524'. [ 509.741450][T23733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23733 comm=syz.1.4524 [ 509.786542][T23742] loop9: detected capacity change from 0 to 1024 [ 509.827755][T23733] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4524'. [ 509.852927][T23742] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.858022][T23744] macvlan0: entered promiscuous mode [ 509.876628][T23744] dummy0: entered promiscuous mode [ 509.882948][T23744] dummy0: left promiscuous mode [ 509.899709][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.914257][T23744] macvlan0: left promiscuous mode [ 510.175408][T23763] 9pnet_virtio: no channels available for device Ÿë [ 511.143857][ T28] audit: type=1400 audit(2000525495.809:14505): avc: denied { read } for pid=23773 comm="syz.9.4535" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 512.278388][ T28] audit: type=1400 audit(2000525495.809:14506): avc: denied { open } for pid=23773 comm="syz.9.4535" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 513.993222][T23790] loop9: detected capacity change from 0 to 1024 [ 514.028779][T23790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.114537][T23800] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4543'. [ 514.115287][T23800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23800 comm=syz.1.4543 [ 514.115374][T23800] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4543'. [ 514.126900][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.335699][ T28] audit: type=1400 audit(2000525498.784:14507): avc: denied { read write } for pid=23812 comm="syz.9.4548" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 514.335733][ T28] audit: type=1400 audit(2000525498.784:14508): avc: denied { open } for pid=23812 comm="syz.9.4548" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 515.422856][T23822] loop2: detected capacity change from 0 to 256 [ 516.458196][T23827] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4553'. [ 517.029861][ T28] audit: type=1400 audit(2000525501.282:14509): avc: denied { setopt } for pid=23832 comm="syz.0.4555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 517.110310][T23833] netlink: 'syz.0.4555': attribute type 5 has an invalid length. [ 517.202442][T23833] netlink: 'syz.0.4555': attribute type 11 has an invalid length. [ 517.395666][T23844] loop9: detected capacity change from 0 to 512 [ 517.421497][T23844] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.467712][T23844] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.745912][ T28] audit: type=1400 audit(2000525501.974:14510): avc: denied { rename } for pid=23843 comm="syz.9.4551" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.829347][T23859] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4561'. [ 518.074416][ T28] audit: type=1400 audit(2000525502.273:14511): avc: denied { append } for pid=23843 comm="syz.9.4551" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 518.161873][ T28] audit: type=1400 audit(2000525502.282:14512): avc: denied { ioctl } for pid=23843 comm="syz.9.4551" path="/377/bus/file1" dev="loop9" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 518.188130][ T28] audit: type=1400 audit(2000525502.348:14513): avc: denied { map } for pid=23843 comm="syz.9.4551" path="/377/bus/cpu.stat" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 518.241979][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.374119][T23876] netlink: 1010 bytes leftover after parsing attributes in process `syz.9.4567'. [ 518.384575][T23876] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 518.394597][T23872] macvlan0: entered promiscuous mode [ 518.401271][T23872] dummy0: entered promiscuous mode [ 518.406523][T23872] dummy0: left promiscuous mode [ 518.420562][T23872] macvlan0: left promiscuous mode [ 518.530264][T23882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4569'. [ 518.536891][ T28] audit: type=1400 audit(2000525502.713:14514): avc: denied { bind } for pid=23881 comm="syz.1.4569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 518.539256][T23882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4569'. [ 518.995090][T23909] 9pnet_virtio: no channels available for device Ÿë [ 519.623969][T23928] macvlan0: entered promiscuous mode [ 519.651597][T23928] macvlan0: left promiscuous mode [ 519.762512][T23934] loop9: detected capacity change from 0 to 1024 [ 519.843353][T23934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.343588][T12521] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.484212][T23947] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4588'. [ 520.494878][T23947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23947 comm=syz.9.4588 [ 520.507639][T23947] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4588'. [ 521.388776][T23964] macvlan0: entered promiscuous mode [ 521.409959][T23964] macvlan0: left promiscuous mode [ 521.432185][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.439397][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.447723][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.535721][T23962] infiniband syz2: set active [ 521.540564][T12717] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.557290][T23962] infiniband syz2: added ip6_vti0 [ 521.576175][T23962] RDS/IB: syz2: added [ 521.582711][T23962] smc: adding ib device syz2 with port count 1 [ 521.592348][T23962] smc: ib device syz2 port 1 has no pnetid [ 521.602011][T12717] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.613929][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.662411][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.700069][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.745049][T19186] ================================================================== [ 521.753168][T19186] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 521.760915][T19186] [ 521.763242][T19186] read-write to 0xffff88811c015e18 of 8 bytes by task 23978 on cpu 0: [ 521.771569][T19186] inode_add_bytes+0x47/0xe0 [ 521.776177][T19186] __dquot_alloc_space+0x180/0x8a0 [ 521.781298][T19186] shmem_inode_acct_blocks+0x125/0x230 [ 521.786767][T19186] shmem_get_folio_gfp+0x5b2/0xd60 [ 521.791889][T19186] shmem_write_begin+0xfc/0x1f0 [ 521.796759][T19186] generic_perform_write+0x183/0x490 [ 521.802148][T19186] shmem_file_write_iter+0xc5/0xf0 [ 521.807286][T19186] __kernel_write_iter+0x319/0x590 [ 521.812420][T19186] dump_user_range+0xa7d/0xdb0 [ 521.817465][T19186] elf_core_dump+0x21a2/0x2330 [ 521.822261][T19186] coredump_write+0xacc/0xdd0 [ 521.826962][T19186] vfs_coredump+0x26c7/0x3130 [ 521.831665][T19186] get_signal+0xd80/0xf60 [ 521.836016][T19186] arch_do_signal_or_restart+0x96/0x450 [ 521.841577][T19186] irqentry_exit+0xf7/0x520 [ 521.846094][T19186] asm_exc_page_fault+0x26/0x30 [ 521.850975][T19186] [ 521.853394][T19186] read to 0xffff88811c015e18 of 8 bytes by task 19186 on cpu 1: [ 521.861027][T19186] generic_fillattr+0x27d/0x340 [ 521.865910][T19186] shmem_getattr+0x181/0x200 [ 521.870990][T19186] vfs_getattr_nosec+0x146/0x1e0 [ 521.875929][T19186] vfs_getattr+0x48/0x60 [ 521.880253][T19186] vfs_statx_path+0x28/0x140 [ 521.885002][T19186] vfs_statx+0xc4/0x170 [ 521.889166][T19186] vfs_fstatat+0x118/0x170 [ 521.893598][T19186] __se_sys_newfstatat+0x55/0x3e0 [ 521.898640][T19186] __x64_sys_newfstatat+0x55/0x70 [ 521.903843][T19186] x64_sys_call+0x2c64/0x3020 [ 521.908534][T19186] do_syscall_64+0x12c/0x370 [ 521.913130][T19186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.919039][T19186] [ 521.921355][T19186] value changed: 0x0000000000002d68 -> 0x0000000000002d70 [ 521.928458][T19186] [ 521.930779][T19186] Reported by Kernel Concurrency Sanitizer on: [ 521.937021][T19186] CPU: 1 UID: 0 PID: 19186 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 521.948148][T19186] Tainted: [W]=WARN [ 521.951949][T19186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.962011][T19186] ================================================================== [ 521.986222][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.050329][T23962] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.073734][T23980] team0: entered promiscuous mode [ 522.085809][T23980] macvlan1: entered promiscuous mode [ 522.099982][T23980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 522.130490][T23980] bond0: (slave macvlan2): Enslaving as an active interface with an up link