last executing test programs: 9m27.746344064s ago: executing program 32 (id=196): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0), 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) move_pages(0x0, 0x0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000140)=[0x0], 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) lseek(r4, 0x2000, 0x0) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc) dup(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) 8m13.83721718s ago: executing program 33 (id=677): unshare(0x20000400) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') read$eventfd(r0, &(0x7f0000000340), 0x8) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x6, 0x6, 0x301, 0x0, 0x0, {0x8, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="280028a7b1bd3332319a796c17b4e2de0074785764", @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25070000001400018008000300e00000010600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, 0x0) 7m59.873621654s ago: executing program 34 (id=780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1419}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x5}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m48.896730714s ago: executing program 35 (id=881): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x3fffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58}, 0x10) unshare(0xa000200) r2 = semget$private(0x0, 0x4000, 0x0) semtimedop(r2, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000000)) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) rseq(0x0, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffd, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) sendmmsg(r6, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x44804) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 7m47.922095745s ago: executing program 36 (id=897): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x5, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x244004, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x4}}, 0xffffffffffffff93) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setresuid(0x0, 0xee00, 0x0) setrlimit(0x40000000000008, 0x0) mlockall(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback, r3, 0x36, 0x4}, 0x20) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x9, 0x2}}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000000103afffe80000000000000ab430000000000aaff02000000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(0x0, &(0x7f00000001c0)='./file1\x00') uname(0x0) openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x2}}, 0x10) 7m32.630580218s ago: executing program 37 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x464, 0x4, 0x70bd2a, 0x25dfdbfe, "742bf3752de2a2f34a88b34890188c6e3bacf64a2bdb624a9b8358b69990ad7bbd20dcddba69655f15a3a1bddbe08c7b414f77e8e6b60a7c265dc7548eb5b1e93b92446c3e4dca699da1981dbc019e66ea37", ["", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a63, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x4080}]}, 0x28}}, 0x0) 7m24.459928942s ago: executing program 38 (id=1030): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r3, 0x0, 0x44010) shutdown(r3, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000340)=ANY=[]) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 7m24.379008206s ago: executing program 39 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELSET={0x18c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_DESC={0x16c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x44, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_DESC_CONCAT={0x10c, 0x2, 0x0, 0x1, [{0x4}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xa}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xa490}]}, @NFT_MSG_DELOBJ={0xf8, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0x79, 0x8, "e7cc93bb8b5bf8a301f8d26b1963fdc8b39457efcc04ecca6f340c56ae24ceaff287f21e4a728646497f59316c46f1f667c95c303bc67ddc900dfc005efc8f6f636a139d2d999ea2d30272ef0a9cc96489302f75afdfe55d53123aac0e4ede34f6046fa75435300fe36913a40d883cdd5b6f463250"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x1a, 0x8, "e7086d9b56bfdb43c341b2b592dc5917e1c8d309d5bb"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd4, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3f0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 7m23.207332037s ago: executing program 40 (id=1046): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000c, 0x13, 0xffffffffffffffff, 0x1ecb5000) socket$packet(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000001c0)={[{@dax_never}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@grpjquota}, {@dioread_lock}, {@nojournal_checksum}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1000005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0xffff}]}}]}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xa}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000300)={0x101080, &(0x7f0000000140), &(0x7f0000000180), 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7m16.237886049s ago: executing program 41 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x84000000, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 7m8.088381692s ago: executing program 42 (id=1120): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd, 0x8c3ff}]}}) unshare(0x20000400) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = socket(0x5, 0x4, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x222840, 0x20, 0x13}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x8000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmmsg$unix(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0xe}, 0x1006a1, 0x5, 0x10ffe, 0x6, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xe000000000000000, 0xffffffffffffffff, 0xb) ioctl$sock_netdev_private(r1, 0x89f6, &(0x7f00000002c0)="a6c407d16077a53c5e0d54bbb63fdfbb58742a9a77dbee21fe70d9a84ad8f101edeb658e777b4e8000aa25065ec28118a445bd749a8164075cc36c1abfc2f9b822271b0d559df25e4c3daba8765f1ba7c6a3c2bfc04ac1c4b84d869ba9af8f99bdc01876f1ddc00d64803c1b9563ee628f2f5dda9eff689ead7e02f441e2b18fd0396209777966ce75e78793da37e335e4") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r9, 0x0, 0x44010) 7m3.50369891s ago: executing program 43 (id=1167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setgroups(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b02805402"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000814) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000002) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000340)=0x8009, 0x4) 6m58.420494434s ago: executing program 44 (id=1198): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01ffffeb2200140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 6m52.187361357s ago: executing program 45 (id=1223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000800000000000000400000000000000fdffffffffffff7ffeffffffff7f40000200000000000008030000000100000001000201000000004400050000000000000000000000000000000000000000002b00000000000000fc"], 0xfc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4b02060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff2f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 6m40.132657433s ago: executing program 46 (id=1270): unshare(0x24020400) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) 6m32.369234306s ago: executing program 47 (id=1304): socket(0x15, 0x5, 0x0) syz_io_uring_setup(0x2f90, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000005000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xffe0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m22.883506979s ago: executing program 48 (id=1398): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2801003, &(0x7f0000000100)=ANY=[@ANYBLOB='size=G']) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) unshare(0x8040000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x5, 0x90000) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000080)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000a4000000ffff0000000000"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89b0, &(0x7f0000000080)) getpeername$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x1c, &(0x7f0000000340)=ANY=[@ANYRES8=r2, @ANYRES16=r4, @ANYRESHEX, @ANYRESOCT=r5, @ANYRES16=r4, @ANYRESDEC=r7], &(0x7f0000000040)='GPL\x00', 0x8000000c, 0x0, 0x0, 0x41100, 0x63, '\x00', r7, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 6m12.245481411s ago: executing program 49 (id=1456): mmap(&(0x7f0000a30000/0x2000)=nil, 0x2000, 0x2000002, 0x2010, 0xffffffffffffffff, 0xffffd000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x54, r1, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91, 0x4}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x759, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0x7, @loopback, 0xfc47}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) shutdown(r4, 0x1) (async) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) (async, rerun: 64) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) mknodat(r7, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x879) (async, rerun: 32) write$P9_RVERSION(r7, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRES32=r2, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRESOCT], 0x13) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) (async) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 6m11.648045471s ago: executing program 50 (id=1460): fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x0, 0x3b}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@remote}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0x29}], 0x1, 0x0, 0x0, 0x8000}, 0x48004) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f00000003c0)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @remote}, {0x0, @link_local}, 0x38}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000015}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x112a68, 0x10000, 0x4, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) 6m2.667293748s ago: executing program 51 (id=1538): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c311225f21db11c7101278ef4c7", 0xe2}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x402}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5m59.72472674s ago: executing program 52 (id=1556): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x10, &(0x7f0000000540)) 5m59.630912655s ago: executing program 53 (id=1559): unshare(0x20000400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x0, 0x0, 0x60}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3}, 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="757466383d302c726f6469722c726f6469722c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c646f733178666c6f7070792c73686f72746e616d653d6d697865642c636f6465706167653d3835322c696f636861727365743d6370313235312c756e695f786c6174653d302c757365667265652c757466383d302c756e695f786c6174653d312c757466383d302c757466383d302c000c92a2ebb3078016143217a27fa76dd70e0a48a1d34f4dedd5a451c3f5becc47efeb79d7e4a6996c3f6e4da63ffdaf683cf16f36033754820b4773355653d56d2cef62b755e2dbf6b7eab87571d21d926f57f789e17ad85e267c649cb763c329b273111303c55dab9bafe4496b6792309b30c4462d6f87fd3620a37a2e5f15f4f0cfcfa913aa93097e252a9e95915782bf8d654d4d8d1afad25f05461d6d7670d85f539a5d92c325cf85efe646350d61f4cf9619e5a7ec197556b6696cbbeb6ddaebec7105b4a6791a2d20f26323880aa90aafcc083fe9f292a8eb6041b63e50725a4e1c32ce10"], 0x1, 0x355, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x1}}, 0xe) 5m49.022334225s ago: executing program 54 (id=1640): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(r0, 0x0, 0x44080) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a1c40, 0x0) mkdir(0x0, 0x1b8) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x10454ca, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0x8000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 5m19.45938794s ago: executing program 55 (id=1919): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000011c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@timestamp, @window={0x3, 0x2, 0x8}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x7, 0x2}], 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x7, 0x2, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f000000d040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3, &(0x7f00000003c0)={[{@noquota}, {@sb={'sb', 0x3d, 0x3}}, {@noblock_validity}, {@bsdgroups}, {@resuid}, {@user_xattr}, {@nobh}]}, 0x1, 0x633, &(0x7f0000001980)="$eJzs3c1rHOUfAPDvbDbZvPx+Ji2i1oMNiLSgTZrYShHB9i6lvtz0Epu0lKZNaSKYWjAFvSlePAiePFj/CrHgTfwHPHjxJIUi0kMrxa7M7G4ySXbTJJvN5OXzgW2eeWZnnmdavn2eefI8MwHsW8PpH6WIQxFxLYkYzO0rR33ncO179/++eT79JFGtvvtXEjc/TRby50rqPw/UD/53MJL08IPjP64qd3b+xuWJ6emp69lWpZ47f+PYpSsTF6cuTl0df2381MkTJ0+NHW//+vKXE/H+998+SsZ++P1sEqfjcVctM72ulcdW2io5LXs4qjUP8/lpRU61ee6d4sHg0l9sTV8k5cKqwwZdyAXGszEYXbl/zcH4/O3CKgZ0XDWJRhsF7DvJpuK/d+srAmyzRj+gcW/f7D54tVKHeyXAdrh3pjYAUIv97ohoxH+5PnbWG2lu//1k2ThPEhHtjczVpGX8+vPZz9JPtBiHAzpj4ValPm6/sv1Pstgcit5sq/9+aVn8l3KfNP+dTZY/vGJb/MP2WbgVEc/V2/+e2FD8D+fi/8NNli/+AQAAAAAAYOvcORMRrzSb/1danP/T02T+z0BEnN6C8p/8+7/S3Xoi2YLigJx7ZyLeaDr/d3GO71BXfev/2XyA7uTCpemp4xHxVEQcje5Kuj224rz5GcLHvjz4Tavy8/P/0k9afmMuYP1Md8srFuJOTsxNtHvdQMS9WxHPZ/N/D9dzls//Sdv/pEn7n8b3tXWWcfCl2+da7Xty/AOdUv0u4kjT9n+pu52mRueuXBudbfp8jtGsPzDa6BU0LPUAXvjkq4FW5a8R/54iAR2Wtv/9a8d/Jck/r2d2I2evZGMHr86Xq62+sdn+f0/yXvbknp563scTc3PXxyJ6krdW549vpM6wdzXioREvafwffXHt8b/F/n8uDvsiYmHlyVuM0D3zeOCPVvXR/4fipPE/uXb7P7S8/d94Yvz20E+tyj+3rvb/RNamH63nGP+DvNXP41gVhf3RNEALqS4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7HKliPhfJKWRxXSpNDISMRART0d/aXpmdu7lCzMfXZ1M92Xv/y813vQ7WNtOGu//H8ptjy/f7kvLOhARX3f1ZftHzs9MTxZ98QAAAAAAAAAAAAAAAAAAALBDDGRr/quVlev/U392FV07oOPK9Z9L8d5TWF2A7VWP/y8+2PCR1Uobxf7SxrHAFikXXQGgMOuP/+6O1gPYfq3j/+GjamZbqwNsI/1/2L82Gf9+PQh7gPYf9qt1jun1droeQBG0/wAAAAAAsKccOHzntyQiFl7vyz6RW/xrsj/sbaVGop2FvMCuZA4v7F/lmaJrABTFPT6QLKb+abrYv/Xs/6QzFQIAAAAAAAAAAAAAVjlyyPp/2K9Ka+41tx/2sjXW/2fBn70a4FF1HV8HdpvWr/7Iwv9B1ft/Yc9a4x7fC79gn3jSnb71/wAAAAAAAAAAAACwA/TeuDwxPT11fXZ+9yXe3BnV2FhiYWJHVKPdRF9ELOY87kxZ3RFR/JVuXaIcUVrflxuP4CiwzgX/vwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz6LwAA//+QfimF") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000000)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x4f9, &(0x7f0000001480)="$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") r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0xa3) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x9) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 4m59.191651152s ago: executing program 56 (id=2105): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$bpf(0x8c, &(0x7f0000001240)='./file0\x00', &(0x7f0000001280), 0x2008412, &(0x7f00000013c0)={[], [{@seclabel}]}) 3m43.89308506s ago: executing program 0 (id=2830): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x2938, 0x4) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400200000f07010327bd7000fbdbdf25051e000772924d710f281ee99261046935cf961e356a8f4cffaca228e01a01bf8008000a00", @ANYRES32, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x40}, 0x48001) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3m43.803954085s ago: executing program 0 (id=2833): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m43.7057737s ago: executing program 0 (id=2834): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0xd0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={&(0x7f00000003c0), 0x6}, 0x2004, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 3m43.50526378s ago: executing program 0 (id=2835): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5475d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_emit_ethernet(0x8a, &(0x7f0000000300)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@mpls_uc={0x8847, {[], @generic="4c0660a0df594e182b76f04b42b1b4f3a2bf8d1f58b74b1e7d4e38c847b8b668aa88cd2c30c99beb97a593a8b412b0655ad2841aa55055964d21997896013601168146f1a36e91e7342efd84139ca9a4d8668b691f454a371c7bccd3a93f1d7bafea72064578f65e3a96da3b65e28fbed809f2d25c14789c3be258f4"}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000010300)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES8, @ANYBLOB="480739ec7f920fa6747a8d8b349973cf30a48915269c162dc20ae93cf8fbfa28624f375bdec0b1a8ea75b79c5d3d4d8ed5ac8a1508fb15b3ac020fccfcbbabba643c13fc7eac589762cbeb037eb9a48ae4fd4672bf3d1185e4693115a4b61ffece04ed4a690feb7ce885c8cec3623bb08fe74fd339982f378771670bc977462814b8835519212d0c4f23e8276671e88a5ac111f89af06d91333e6fe2cdf1e466adbd"], 0x1, 0x11f0, &(0x7f0000001b00)="$eJzs209rY1UYB+C3mdR2MrZT/43ObDzoRjcXZxauZlOkBZmAMjMRZgThDk01JCYhN4tkcDHgzpWfQ1y6E8Qv0G/hrgiim3FjpE1a2xq1BZtYfJ7NfcnvnNxz4CZwQt7d219+2twusu28H6WFhSh3FyM9TZGiFJdi7Em8+fnmL1/ce/Dwznq1unE3pc31+zffTimtvvrdh599/dr3/SsffLP67VLsrH20+9OtH3au7Vzf/e3+J40iNYrU7vRTnh51Ov38UauethpFM0vp/VY9L+qp0S7qvWP5dqvT7Q5T3t5aqXR79aJIeXuYmvVh6ndSvzdM+cd5o52yLEsrleCk0Wg0Ou3Y2ldP90b/Wjmcevl2Ja7Es7ESq3E11uK5eD5eiBfjpbgWL8crcf1M7w8AAAAAAAAAAAAAAAAAAACcxn7/f4xGi/HMfmf/5dD/DwAAAAAAAAAAAAAAAAAAALOm/x8AAAAAAAAAAAAAAAAAAADmT/8/AAAAAAAAAAAAAAAAAAAAzN+9Bw/vrFerG3dTWo748cmgNqiNr+N8893qxltp39ofs34eDGqXDvOb4zwdz5eiMslvTc2X443Xx/le9s571aN5KWo3Yuv8tw8AAAD/C1k6NPV8n2V/lY+rI78PnDjfl+NGedodlyfX0dXz2A9nUwwfN/NWq94rhosHxeN/uSjHaQcvTFZ1LstQXPBiafJ07L1yUP8nFnakKMc/jCn93fQpn8q5FbP/LmL2/vzsAQAAAAAAAAAAcBHM4u+EJ+9Zms9WAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5nB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE4BAAD//z4uiDQ=") getdents64(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r3, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x7) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') getdents64(r5, 0xffffffffffffffff, 0x43) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='g'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r6, 0x80000001, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b503000000000000850000000c000000b7000000000000009500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0}}, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000002ec0), r7) sendmsg$NFC_CMD_ENABLE_SE(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000008c23796a835a0f5f810de6a13744452b50b208eb42f483de9b7c52407e1041c387bd0df32516ee221a1396aff1cb9010fc95cebf597eff040b27df19eef452c36ad1430ac6777c88d258831feaf98b5e35f225b0bb4632abf1751a463cd803207a796ed7", @ANYRES16=r10, @ANYBLOB="010025bd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 3m43.328123099s ago: executing program 0 (id=2836): syz_emit_ethernet(0x76, &(0x7f00000000c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [{0x3, 0x6, "bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be"}]}}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000001640)='attr/keycreate\x00') read(r1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000440)='@\n', 0x2}, {0x0}], 0x2}}], 0x1, 0x0) 3m42.968037988s ago: executing program 0 (id=2840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}, 0x600}], 0x1, 0x0) 3m42.92439694s ago: executing program 57 (id=2840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}, 0x600}], 0x1, 0x0) 2m41.381387305s ago: executing program 2 (id=3317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x6e) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000d80)={0x1, {{0xa, 0x4e24, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000001}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e24, 0xf, @private1, 0xfc91}}]}, 0x190) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10092, &(0x7f0000000080)={[{@nodioread_nolock}]}, 0xff, 0x253, &(0x7f0000000b00)="$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") getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000001fc0)=""/4096, &(0x7f0000002fc0)=0x1000) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000880)={0xf97cff8c, 0x8, 'SE Linux', "d99462a7dff17633622542a4274392e3de5440b094f94701ded9a3408e567622920d5e1c6d0f22ba884689f23c1eb6827c6f74ffe1b36340a4da00964883d992403c7538abda1cf48ef0c765001bf4c8bcdf4f3d51759447b6e4c334369f141b9dcaaa7c2a469e5f6c82a3b1504bce0b988368c40f9d1f9baf0197f6dc96bf24fd787d67295ea18ebd6e1d97ba4d4b71d0aecfab56b55c6040a4185f4b0acb3f3fd14cd8716b184d6720f93f960798b7d48eeff45ec9facca068cd757f8d0c3138a92a68bafe9e2f2294385038c2aaf4e64494a6cd08d6a3ce25bad044"}, 0xed) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents64(r8, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$eJzs3c1vXOW9B/DvGduJMSgJkMvlRkAm4SYY8HVs55LciMW9iT1JzPXLle1IRHdBKHGqKG5pSSsBqtQgVV0VtVKrLtod6qorJDZlU7Frd+2qi0oV/wLqKlIruToz43hsjz2O69gmfD7WzJyX33me33l9NOOZ84Qvl8WDK8YWF+uPLY5f+fUOZMwedmHs848+/rB8fHAn+9KVV4rfJL1Jqkl3kqeTntGxmenJDgXdSq4l+SwpkuxP43VTrqX4cR5bHv8sxS/Lete1b7Ml08kiX2m7ffwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBeVIyODQ0NF/syPnXl9WpDUl1jdGxmusji4to5S8s0fFrv9bv4tGO9SVE+0tu71NX304eXZz+VpHo8zzTGnql3SJ7evP/oU4defbK7srT8etn8U/Zvvtjb771/682Fhfl3Hkgie9+l2tT47PT45PlLter47HT13JkzQ6cuX5ytXhyfqM1enZ2rTVZHZ2rn56Znqv2jL1aHz507Xa0NXp2+MnVpbHCitjTx7H+MDA2dqb42+H+18zOz01OnXhucHb08PjExPnWpHlPOLmPOlgfi/47PVedq5yer1Rs3F+ZPr8qpq350tUwog4Y7rUkZNNIpaGRoZGR4eGRk+INm79n3Jpx55dwrZ4eGuodWyci+VREP6KBlb3lk/d28/Rdx2KJKo/1PJjKeqVzJ69mXapu/0YxlJtP525lysbXzm5ba/xOnahvW29r+N1v57pbZR8qn43muOdq7TvvfNtOd/Lud9/J+buXNLGQh83ln1zPa2b9LqWUq45nNdMYzmfP1KdXmlGrO5UzOZChv5HKOZjbVXMx4JlLLbK5mNnOpZbJ+dM2klvOZy3RmUk1/RvNiqhnOuZzL6VRTy2CuZjpXMpVLGcv5eik3crO+3U9vkOO9oOHNBI1sELSmud9E+78yojwpdrQdYs/Z9ms4bNVis/3f1zm0f3QnEgIAAAC23b/9PgcOP/G7vyRFnq1/Ln9xfKI2tNtpAQAAANuo/nW9Z8qXnnLo2RTe/wMAAMDDpqj/xq5I0pejjaGlX0L5EAAAAAAeEvX//z+X4ujyBO//AQAA4CHT+R77HSOKgaXb/1avN16vNyMaY0XfxfGJ2uDo9MSrwzlZv8tA/ZcGa0rrSoqe+s8PXsqxRtSxvsZr33KJZZ29ZdTw4KvDeSnHmyvS/3z58nx/m8iRRuQLjcgXWiO7siLydBkJAA+74xu0x5tt/1/KQCNi4Ei9ye8+0qYNHtKyAsBecTy3m0PNLs3atP/NXnieW6/9/88N3v+XEU/kxtHGVwoG81bezkKuZyDNbxwcbVfqUm8Eja8hDHT4NKCv+ZWFP56tZGDN5wG999a1NXY+Ixlo+4lAS7lFeldsrK5t3vgAsEuOb9gOb679H+jw/n+5zd2/S2sJALS614N924FKM2qjmM4Du7yKAMAqWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfpu6gf8fTiYLC/PJ1u7/v7WB3vvJcOOBSjaI+fvOrM7ODHQl2a3a/zv3vVS5j/fKpjOwcmCXL0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsiCLpaje9kuxPMpTk1M5n9eDc2e0Etkt1a4sVd3M37+bAdqcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBV17z/fyWN10cbk9JdSU4kuZbk/3c7x+10d7cT2DXfqD+33P+/kvRksUh3Y7en6Bkdm5meLHd/sb+c//lHH39YPjqXvbZXhbKAsoYVnUs0a2iZ0rNyqcfrS/WNzd++9Z23v1Udu1A/MC/MXZwYm7w08z/LgU8VnzS6QKgWyxOX8v3eid/+pKXQfc3KPynXtL3V9V6s1zu2tt5/bbf0OvVuws2F+ZGyprna63Pf/ebNd1tmPZFjyfP9Sf/Kmr5ePtap6djq7blS8UXxw+JAfp5r9f1fbo1isSh30cH6+j9y4+bC/OBbby9cv5fT91fkdChHk1xPejef09EU6+VTP+oqPWWtQ/Wg8ulwh/I21FLi8Drb9fH6YdN3X+tQXX8d6jps92ZGp9tm9NNvP5mT972nT3aosa3ii+LPxeX8KT9o6f+jUu7/E2l7drYpoh7ZcqS0zltxelUakfU1H2md8cbqMtc9K+95pGMEm/WjfC3/dW//V1qu/819VTYLD/561FJj+/Miuf/z4lcH17Qoy+ot0uFVLVLz6rPeMs08Dzei1snzX/Jy0n3kvq4oL3e4ojyo8/8XRX/+mjv6/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPa+IulqN72SnEhyKMnBcryaLK6OubOF+ip9xVbS3DZbyfnLp1h3RYu7uZt3c2CnMwIAAAAAAADgwbgw9vlHH39YPur/j+/Kv1eac6pJd5JDxc96Rsdmpic7FNSTXFv6l37v/eVwrXx6bHn8s3Ls6Q4L7e7XBwDgS+0fAQAA//9T8Gpj") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m40.30456045s ago: executing program 2 (id=3329): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x22020400) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x124, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xfffffffa, 0x3, 0x4, 0x3}, {0xffffffff, 0x6, 0x80, 0x4}, {0x1004, 0x2, 0x1, 0xa}, {0x2, 0x0, 0xf53, 0x8}, {0x6, 0x7, 0x7ff, 0x9}, {0x2, 0x7, 0x0, 0x4}, {0xc8f, 0x7}, {0x20, 0xf0, 0x3134, 0x8}, {0x1, 0xeb, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x1ff, 0x0, 0x5, 0x5}]}}]}}]}, 0x15c}}, 0x24040084) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000200), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) fcntl$setown(r4, 0x8, r1) 2m39.635759405s ago: executing program 2 (id=3337): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) setuid(0xee00) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) (async) r1 = open(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000080)={0x6, 'erspan0\x00', {0x100001}, 0x8}) 2m39.486644933s ago: executing program 2 (id=3341): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x5, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e, 0x2, @perf_bp={0x0, 0x6}, 0x110000, 0x0, 0x0, 0x5, 0x2, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1ff}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r1 = socket(0x28, 0x5, 0x0) r2 = syz_clone(0x0, &(0x7f0000000100)="569db1079a54796d0fc6b433321e", 0xe, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="ea0db175b1a7b072ba02bca148e26bfcc4757fa85d4fcef2") syz_open_procfs(r2, &(0x7f0000000700)='net/ip6_mr_cache\x00') connect$vsock_stream(r1, &(0x7f0000000080), 0x10) close(r1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) unshare(0x2040400) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x54, r5, 0x1, 0x70bd21, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xffffffffffffffb3, 0x8f, 0x1000}, {0xc, 0x90, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r5, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m39.234465916s ago: executing program 2 (id=3344): r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000100)=@generic={0x2, "a1e21e59a3d376f7b400bc661f886420d8d036b249e2edb929f0b9fdb51cddd3b3f161313a691d50d1781899b0bad19dde2942ede70b6e02603cdbf4452706e0160afca4d6a8f314240f33f098aba06d532bb9c3b7c1f8237d00c0a7e1f2afdb1ce5aa51e8b4ef0476cdaca2bbae42193d9123b0ffb0fc2d17fbaefb73c8"}, 0x80, 0x0, 0x0, 0x0, 0x360}, 0x40084) timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r7, &(0x7f0000001300)={&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @multicast, 'netdevsim0\x00'}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000b40)="7282a69bae573ea61962940fba79edf8690239f2c6fe7096c4fe988d7f69882e89b68fd8987af128df7f5fb26bf02620768ba0b354667c43c456757f496ef82a6601cb9009dc5e9c7c18e7353ece089110b410650750d1bee969309aabe0242773342b6b5a2753ef9d172d8dcd40a72f587841a8b172becb21f1a724719eb484a654b495b5f23a1a0402c7243abd613aaf9d", 0x92}, {&(0x7f0000000c00)="ff7bde15808de8d2c35e835b3acfabb6cdd5b61325771b08b60b862821171581196870bc3f94d56d60ef04ab0a8cb99ebe7f079db3fb28b6f14099364a193810e284e4f2a17b540c0244c58bb80b152aa18c75dce5dc0c3ece9f2f218ea4272d63fa14c972ac7c67eb3fa43266f71596db58ed24eb559f7db3d01102a8fd25fdd4088908f7a1282c215435c6956ece107c1e4302f6ad48e1d56178f78080795d7a1153a80a3df6e0b0f15766d23cd130188547b3acb907b8296acbc23ac3ec9579f77380f7c335dae0709e694c06e4b4c4ccdd0f99ebb1d86f9d31e9dbd2fe8f286e0e8cda00ba46496ca63e3b7552736a4cbdb58ac98eb7", 0xf8}, {&(0x7f0000000d00)="31fde2834c9cd430637b325ea07c22f44db34615de6dfde17d97fc8a609339cef28584c1353112f3cb4582b7c2adf59daf3d05941917c5affb705062cb1f22d0f914b02559990a35e85e6d7fb53bb2a93d2fd33ffce1893a4430884037e9a7d7535416c7aaaef8e75d7039d9a4e7e14e12d4ec3bc1da315b5e304b8935efa798fb9f84e212e494bc45b2ca92ea6d", 0x8e}, {&(0x7f0000000dc0)="e55cbfe8d184cec9e172285c6d17310725a0602239d44fdd6eb2a7", 0x1b}, {&(0x7f0000000e00)="ee14599217f7f3ed5b6d61f188bd5021daecaddbeb3fb2714a9946de08a7bdbcdc4d68d57243d32010d515077dafc7d8daa1a33ecce3245a90dca7276a1b619e26e878b36b788051", 0x48}, {&(0x7f0000000e80)="8d6baa6c69e231dfeecab8efad10142a0a12fdaf89318ffc8dec60ab3951494bb0702da90d32a85e184e66b02be64aad31a86a84baad031df1dee98921b00bf9d24ff76add4e16f0e5b607d7e3e6a0a395c2007fa4c824ada9651893b30e37b082a73d17766246f284cc3f78c09ebbd2195a03966c02122200cc9580640b0cd48b428fb06e0a702ae96d542a4bed9af305b9ea24f353a3875823a092ec317041db81842a0613d8341e6da26cb6767045357f2aa132a2e9123acb01aeaeb134b97af1766a0a6a7cb880bf7bf207b6cd1add5873fcf45341e4c271c798a09536efe55bbc77cfbe854b8ed3474b", 0xec}, {&(0x7f0000000f80)="773d339f04fd9f6f", 0x8}, {&(0x7f0000000fc0)}, {&(0x7f00000010c0)}], 0x9, &(0x7f0000001280)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x48}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="5400000006060104f5f348bf35b6719dc5e06dff9a00000000000000000200000405000100070000000900030073797a32000000000900030073797a32000000000900020073797a30000000000900020073797a320000000005000100070000007f579fd464b60cb14fe52dca407b1ea8767c7abf578a2aba277e1d6e0b6dd735bd535c0ae4799e87fa109eb12403d0f587b04fa8a58414b5ed03ee586ea82b6972d1c721632085f041e92be4b6e67722b86858cabf7bce2799b68343beac5d2f7281d039842a6fa535edcf28f8e7877fe7eb95a0340a321196855556e048f8c62a5d2335fb1bfc2ddc7f9924487c53f0124508df1a70590c12d7aa6cf7765d09bbccaa5b97f3f55568bd7674c21bc4dfd3b55ca603db1f7aa3789aabb51ed1164a48e5670b0e"], 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b140100"], 0x24}, 0x1, 0x0, 0x0, 0x24048850}, 0x8010) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x80480, 0x62) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 2m38.96372062s ago: executing program 2 (id=3348): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x100000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000366086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 2m38.903149693s ago: executing program 58 (id=3348): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200)=0x4, 0x100000001) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000366086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r1}, 0x14) 2m37.847461538s ago: executing program 5 (id=3361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x4, 0xf, 0x9, 0x5, 0x2, @local, @mcast2, 0x7, 0x700, 0x0, 0xd}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r3, 0x4, 0xf, 0x9, 0x5, 0x2, @local, @mcast2, 0x7, 0x700, 0x0, 0xd}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r5, &(0x7f0000000080)=@rc={0x1f, @any, 0xca}, 0x80) (async) connect(r5, &(0x7f0000000080)=@rc={0x1f, @any, 0xca}, 0x80) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x33, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x460b585e, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@call={0x85, 0x0, 0x0, 0x43}, @ringbuf_query, @map_val={0x18, 0x9, 0x2, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x79d9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x22}, @ldst={0x3, 0x1, 0x0, 0x4, 0x7, 0xffffffffffffffff, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0xa, 0x69, &(0x7f0000000580)=""/105, 0x40f00, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x2, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x3, 0x2, 0xb, 0x1}, {0x0, 0x4, 0xe}, {0x1, 0x3, 0x3, 0x9}, {0x1, 0x2, 0xc, 0x4}, {0x5, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xb, 0xa}], 0x10, 0x9}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) semget$private(0x0, 0x6, 0x0) (async) r7 = semget$private(0x0, 0x6, 0x0) semop(r7, &(0x7f0000000040)=[{0x0, 0x85fd, 0x1000}], 0x1) semop(r7, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) (async) semop(r7, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000000)) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800), 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000840)=@newlink={0x68, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000840)=@newlink={0x68, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r3, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r6}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 2m36.65346288s ago: executing program 5 (id=3362): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) unshare(0x22020400) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xf, 0x5, 0xfffffff9}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x15c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x130, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x124, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0x8001, 0x7, 0x1c00}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x7, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0xfffffffa, 0x3, 0x4, 0x3}, {0xffffffff, 0x6, 0x80, 0x4}, {0x1004, 0x2, 0x1, 0xa}, {0x2, 0x0, 0xf53, 0x8}, {0x6, 0x7, 0x7ff, 0x9}, {0x2, 0x7, 0x0, 0x4}, {0xc8f, 0x7}, {0x20, 0xf0, 0x3134, 0x8}, {0x1, 0xeb, 0x401, 0xd}, {0x0, 0xffffff50, 0xfffffff9, 0x2}, {0x0, 0x1, 0x464, 0x7fffffff}, {0x1ff, 0x0, 0x5, 0x5}]}}]}}]}, 0x15c}}, 0x24040084) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_DESTROY(r6, &(0x7f0000000200), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) fcntl$setown(r4, 0x8, r1) 2m35.775237365s ago: executing program 5 (id=3364): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2014494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f00000000c0)="$eJzs3E9rE2sUx/HTpk3TlDa5cLlwBfWgG92ENr4ADdKCGFBqU9SFMLUTDRmTMhMqEbHZiFtfR3HpTlBfgN2IG3HrrgiCmy7Ekc6fmrRpzZ+2SdvvB8o8mWd+PKfTaTlTmFm//fJRMe+k8kZFBmMqgyI12RBJbo4CA8F20BtHpV5NLo79+Hz61p271zPZ7PSs6kxm7lJaVSfOvn389NW595Wx+dcTb0ZkLXlv/Xv669p/a/+v/5p7WHCGxdFSuaKGLpTLFWPBMnWx4BRTqjct03BMLZQc026Yz1vlpaWqGqXF8fiSbTqOGqWqFs2qVspasatqPDAKJU2lUjoel5Mi0XTvUAvJ3OrsrJHZddqNdFEVemC02U7bztSaT+ZWD6EmAADQZ/bu//1ef/f+Pzvvbzvq/7WwW/8v0nX//yF6+OfyKKg1fPpL/x9qfoMR27eicKBsO2PEg9/fRvT/AAAAAAAAAAAAAAAAAAAAAAAcBRuum3BdNxFuw6+R4AGP8HOv68TBaPPnH74Q4HIPS8Y+qntwLyZivVjOLef8rT+fyUtBLDFlUhLy07seAv545lp2elI9SXlnrQT5leVcRDavoUxUCluLJcP8gPcYmp8/88+Un9fG/LDE69dPS0L+bb5+umk+KhfO1+VTkpCP96UsliyKfAkuaC//bEr16o3stvzo5nEAAAAAABwLKd2y4/7dm/cOiMnOeT/fxv8Htt1fD8mpVl5RCQAAAAAAuuZUnxQNyzLtDgYjItJF/LgOItIXZWwbXBGRTuLxfii+/UFMRPw92kn821a8pZTbwjFDItLz09LGoNd/mQAAAADstz9NfxuhT88PsCIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6eVt8HFh6/Yyqc2CNet1zk0L9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoI/8DgAA///REBf+") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x2) shutdown(r4, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2014494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f00000000c0)="$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") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180040003000800"], 0x44}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r4, 0x2) (async) shutdown(r4, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) (async) 2m35.192767926s ago: executing program 5 (id=3368): semtimedop(0x0, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) semget$private(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffc, 0xdd5}, 0x0, 0x0, 0xff, 0x2, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x8bb3763092707e44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) getdents(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001042bbd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003665727370616e0000001400028006000200"/32], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000200)='./bus\x00', 0x1861426, &(0x7f0000000000), 0x1, 0x609, &(0x7f0000001340)="$eJzs3c9vFFUcAPDv7LalpWALMSoeZBNjIFFaWsAQ4wGuxjT4I168WGlBQoGmrdGiCSXBi4nxYoyJJw/if6FErp70ogcvngwJUcPRxDWzu9Ofs/2xtDvAfj7JsjPz5vHesHz3zbx9byaAjlVJ/yhFHIiI6SRiIFlYTOuKRmKlvt+9fz4+m76SqFbf+CuJpLEt2z9pvPc3MvdGxM8/JrG/vLbc2fmrF8enpiZnGuvDc5emh2fnrx65cGn8/OT5ycujL46ePHH8xMmRoy0d17W1m9LqfDDw6djb3379bzLy3e9jSZyKVxo7Lj+O7VKJSu3fJFmb1H9yuwsrSLnx/2T5R5x0FVghtiT7/Loj4skYiHIsfXgD8clrhVYO2FHVJKK6Sdl3/Gb3Bx50iXiGDpWdB2TX9quvg0ttPyMB2uXu6XoHwNr476r3DUZvrW9g970klnfrJBHRWs/cSnsi4qfbYzfO3R67MbN3Z/rhgHwL1yPiqWXx35OlJIvxP1iL/9KK+E/PC8403tPtr7dY/uquYvEP7VOP/96c9r8e/4O1n83y4/+dZfH/bovlV5YW3+tbEf99rR4SAAAAAAAAdKxbpyPihbzxP6XF3/8jZ/xPf0Sc2obyK6vW1/7+X7qzDcUAOe6ejng5d/xvKcr10b+D5cbv/Htr4wG6k3MXpiaPRsRjEXE4unel6yPrlHHks/1fNUurNMb/Za+0/PR9aY/Sna5dK/NMjM+N3+9xAxF3r0c8nTv+d2n8X5LT/qffB9ObLGP/czfPNEvbOP6BnVL9JuJQbvu/dNeKZP37cwzXzgeGs7OCtZ756PPvm5Xfavy7xQTcv7T9371+/A8my+/XM7v1Mo7Nd1WbpbV6/t+TvFm7HUE2XeHD8bm5mZGIvuTVcrp1xfbRrdcZHkVZPGTxksb/4WfX7//LO//vi4iFVX938vfKOcWZJ/7r/6NZfbT/UJw0/ie21P43XUgWInKTRm8O/tCs/Ers2kT7f7zW1h9ubNH/B3VfZmHas3J7ToB25SW1u74AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CgoRcSeSEpDi8ul0tBQRH9EPB67S1NXZueeP3fl/csTaVrt+f+l7Em/A/X1JHv+/+Cy9dFV68ciYl9EfFHuq60Pnb0yNVH0wQMAAAAAAAAAAAAAAAAAAMADor/J/P/Un+WiawfsuK6iKwAUJif+fymiHkD7af+hc4l/6FziHzqX+IfOJf6hc4l/6FziHzqX+AcAAAAAgEfKvoO3fksiYuGlvtor1dNI6y60ZsBOKxVdAaAwbvEDncvQH+hcrvGBZIP03qaZNsrZLHNq+uzGmQEAAAAAAAAAAACAzKED5v9DpzL/HzqX+f/QubL5/wcLrgfQfi1f4zed0ws8jNabyd883Ou5qi4kAAAAAAAAAAAAAGDHzc5fvTg+NTU5076FXxsP/crdpy8i2lyfbOGtIgotdqFarV6rfRQPSH0e8oVsAP3mc/XmR8HOLGRz/TaXq6AvJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYI3/AwAA//8P7hVI") socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{}], 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000040)) 2m34.869584723s ago: executing program 5 (id=3369): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) syz_clone3(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000280)=0x4, 0x4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdir(&(0x7f0000000240)='./file0/../file0\x00', 0x6) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) 2m34.409284017s ago: executing program 5 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000005000000000000000000000003000500"/40], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x140) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x4d, "0e1e727c3ce62c1b318ac58f67e1120aa0e296474b0f96943dba65fd4fdab10ea0d0d68a3fa2769692e63bf769a6568c84b9a4909d997d3210300fd795b961ced556a67b41d7a2d6e4a89804f6"}, &(0x7f00000001c0)=0x55) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 2m34.408983137s ago: executing program 59 (id=3372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000005000000000000000000000003000500"/40], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x50f, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x140) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x4d, "0e1e727c3ce62c1b318ac58f67e1120aa0e296474b0f96943dba65fd4fdab10ea0d0d68a3fa2769692e63bf769a6568c84b9a4909d997d3210300fd795b961ced556a67b41d7a2d6e4a89804f6"}, &(0x7f00000001c0)=0x55) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 2m34.258045424s ago: executing program 8 (id=3375): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) close_range(r0, 0xffffffffffffffff, 0x0) 2m34.131225961s ago: executing program 8 (id=3377): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x804000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2de, &(0x7f0000000800)="$eJzs3b+LI1UcAPDv7G6yUYuksBLBAa+w8bi91iaH7EEwlZJCLXTxbuFIgnAHC/7AeJWtjaV/gSDY+U/YWNgLtoKdBx6MvMnMZsedRHOYO398PkX27Xvf78z3zbzd7Aby8u7z8+mtPE7vf/xj9HpZ7A1jGA+yGMReRCdKn0bD8PMAAP7NHhRFZFGUmiPZxrw02tttaQDAjqTn/1+Ktuf/Nb7ZeUkAwI698eZbr90Yj49fz/Ne3Jx/djZJ/9mnr1XAadyJWdyOa9GPh1G9UrD8ayE93iyKYnGQJ4O4Ml+cTVLm/J3vqvQbP0eU+UfRj0HZ1cwfjY+P8qUL+YtUx9Mp/zTuDFP+9ejHsy3nH42Pr7fkx6QbL724zC/PfzX68f178X7M4lZZRJn/8m+j8fEnR3n+avHFrx+9ncpL+dnibHJYxq0U+4/3zgAAAAAAAAAAAAAAAAAAAAAA8F92Nc8PIy8fBnFlnrqq/Xf2H6ZvOpHXBs39eZb557sE/2F/oEURX9b781zL87yoAlf5B/HcQRw8mVkDAAAAAAAAAAAAAAAAAADAP8u9Dz6cnsxmt+/+LY16N4D6bf2PepzhhZ4XoiVmEOc9h6tT7sV+2d5w5CoiItW6sYx0xK2K79RH3nrKT63L+urrbS9d789jOo9QYdXott2L1Miac69X1/Qka7+Gh1H39OpF8u3FmG78xcK664aKrZZft3Wofzk43eTznr004+Zxnikbiw3nimxTYa/8tLxyVU8WkTViuuVVbU3vVI3lz0Lb2thqPV/+XZHZrQMAAAAAAAAAAAAAAAAAAHZq9abflsH7a5J+GC0/5D8GO64OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6P1ef/b9FYVMnNoc6lnunJrBt37z3hKQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8HsAAAD//1j1Vf8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250c"], 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getuid() ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000080)={0x2}) ftruncate(r0, 0x4) unshare(0x28020480) r3 = getpid() sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1}, 0xab09}], 0x1, 0x100, 0x0) close(r5) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r6 = syz_pidfd_open(r3, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xb, 0x4) setns(r6, 0x24020000) 2m33.826987506s ago: executing program 8 (id=3381): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (fail_nth: 1) 2m33.55584722s ago: executing program 8 (id=3383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000300)='personality\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x6677) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8304000001000000000014c053bfa6ef94e6c475010000000800"], 0x20}}, 0x0) 2m33.355182631s ago: executing program 8 (id=3384): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c672, r4, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000004800, 0x401) syz_usb_disconnect(r6) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r7 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@private2, @in6=@mcast1}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xfd6a) ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x1, 0x8, 0x2}, {0x1000, 0x3ff, 0x100, 0x9}], 0x2, 0x20, 0x46, 0xfffffffffffffb95}) 2m32.9927557s ago: executing program 8 (id=3390): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0xc0141, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r1, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010023000000000000000000000a"], 0x70}}, 0x24040884) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x5, 0x0) r5 = syz_io_uring_setup(0x19d1, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="b3", 0x1}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3b8}, 0x0, 0x4000, 0x1}) open$dir(&(0x7f0000000240)='./bus\x00', 0xb41, 0x153) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r12, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="010018bd7000ffdbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000814) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x80000000, 0x0, @mcast1, @mcast2, 0x1, 0x20, 0x3, 0x4}}) 2m32.977522521s ago: executing program 60 (id=3390): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000100", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcffffff1400000018000180140002006e657464657673696d30000000000000050019"], 0x34}}, 0x800) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0xc0141, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf250600000008000004", @ANYRES32=r1, @ANYBLOB="f0ff0500000000000500530000000000050053000000000008001780040003001c00e700e460bf5bffa1de43e25a8059c41cc41c15766ff2a89e3f281c00e70027c66567930c3f16bbd528e2c86571eca4c71cd39542f1681c00e7008a126b1be8650e01b9ea6b0ffd5ed66c40643f80808537e41c00e70007cf7d8c4aa9e3c779a0ef41415e6c66d83f1e6d9c15c598080005000c0000000500530001000000080005000600000005005300000000000500530001000000"], 0xd4}, 0x1, 0x0, 0x0, 0x5}, 0x895) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000000000000000000500000a400000000000000000020000030900010073797a3000000000140003800800014000000000080002400000000309000f69b1d3c3917f0402637f244d460073797a3200000000140000001100010000000000000000100000000a"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003801400010067656e65766530000000000000000000140000001100010023000000000000000000000a"], 0x70}}, 0x24040884) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x5, 0x0) r5 = syz_io_uring_setup(0x19d1, &(0x7f0000000940)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="b3", 0x1}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3b8}, 0x0, 0x4000, 0x1}) open$dir(&(0x7f0000000240)='./bus\x00', 0xb41, 0x153) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xe480, 0x6, 0xdd7e, 0x4, 0x6, 0x1, 0x7000000, 0x401, 0x6000, 0xffffffff, 0x7, 0x5, 0x15, 0x80, 0x2, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x5, 0x8, 0x0, 0x1}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r9) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r12, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000) sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="010018bd7000ffdbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000814) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x80000000, 0x0, @mcast1, @mcast2, 0x1, 0x20, 0x3, 0x4}}) 1m20.210884568s ago: executing program 1 (id=3865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="04000000000000000000000000000000020000007400018014000180080001000000000008000200e00000020c00a7e4ad028005000100000000004300028005000100060006000c0003800500010000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) socket(0x1e, 0x3, 0x80000000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000a4808431765a00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x40000) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000100)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x10, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) gettid() socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, 0x0) socket$isdn(0x22, 0x3, 0x23) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) write$tun(r5, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r8) fchdir(r7) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) open$dir(&(0x7f0000000000)='./file0\x00', 0x7ab2e0918647f40d, 0x9) 1m20.063468745s ago: executing program 1 (id=3871): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x3, 0x7f, 0x8000c61) 1m19.957505361s ago: executing program 1 (id=3872): r0 = socket$key(0xf, 0x3, 0x2) sendmsg(r0, &(0x7f0000000a80)={&(0x7f0000000100)=@generic={0x2, "a1e21e59a3d376f7b400bc661f886420d8d036b249e2edb929f0b9fdb51cddd3b3f161313a691d50d1781899b0bad19dde2942ede70b6e02603cdbf4452706e0160afca4d6a8f314240f33f098aba06d532bb9c3b7c1f8237d00c0a7e1f2afdb1ce5aa51e8b4ef0476cdaca2bbae42193d9123b0ffb0fc2d17fbaefb73c8"}, 0x80, 0x0, 0x0, 0x0, 0x360}, 0x40084) timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r2, r3, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r7, &(0x7f0000001300)={&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @multicast, 'netdevsim0\x00'}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000b40)="7282a69bae573ea61962940fba79edf8690239f2c6fe7096c4fe988d7f69882e89b68fd8987af128df7f5fb26bf02620768ba0b354667c43c456757f496ef82a6601cb9009dc5e9c7c18e7353ece089110b410650750d1bee969309aabe0242773342b6b5a2753ef9d172d8dcd40a72f587841a8b172becb21f1a724719eb484a654b495b5f23a1a0402c7243abd613aaf9d", 0x92}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="4802675d8789ef083f7cd995a768f111e68ad4f957cce26d1c9cc4cfb56db01ee33d3761bdcd32c33c677b4c6b53e92366571eba480c818b519e48777fae42cd12338e3a80365e0a1808b6", 0x4b}, {&(0x7f00000010c0)}], 0x7, &(0x7f0000001280)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x48}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b140100"], 0x24}, 0x1, 0x0, 0x0, 0x24048850}, 0x8010) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x80480, 0x62) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 1m19.425692638s ago: executing program 1 (id=3874): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000000000000b, 0x149900) pread64(r0, &(0x7f0000002d40)=""/8, 0x8, 0x20000004) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 1m18.565167093s ago: executing program 1 (id=3892): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.645579694s ago: executing program 1 (id=3895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@multicast, @random="9366f942d32d", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@generic={0xc, 0x6, "bab728", 0x0, 0x33, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}, 0x0) 1m15.586630158s ago: executing program 61 (id=3895): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4085}, 0x20000004) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@multicast, @random="9366f942d32d", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@generic={0xc, 0x6, "bab728", 0x0, 0x33, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}, 0x0) 9.680644118s ago: executing program 6 (id=4406): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='a '], 0xa) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000000)={0x52c3dde7, {0x0, 0x0, 0x101, 0x8000, 0xe9}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 8.604939234s ago: executing program 6 (id=4412): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.512415859s ago: executing program 9 (id=4413): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 8.444279113s ago: executing program 9 (id=4414): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffd, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x47}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xede}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x4090) socket$kcm(0xa, 0x922000000003, 0x11) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 7.641138004s ago: executing program 4 (id=4418): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000001304000000000000000100000500110000000000000300000000000000000000000000000901"], 0x0, 0x4a}, 0x20) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x40049409, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000fc14832fdba5e28acb1d5d6d6fc7aeff9834f56bc658e88f4b8fe1062a7722f59f520c28972b3fee3e0c515dd2231fc92577f73ef0f70401d1b4344214210fd468d47fb3f2b03c7a0789b916814c35ecc5cb2de302ae"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0x5}, 0x1) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, &(0x7f0000000180)) 7.591077816s ago: executing program 6 (id=4420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r6, @ANYBLOB='\b\x00\r'], 0x70}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x6e) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000d80)={0x1, {{0xa, 0x4e24, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @remote}, 0x80000001}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {{0xa, 0x4e24, 0xf, @private1, 0xfc91}}]}, 0x190) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10092, &(0x7f0000000080)={[{@nodioread_nolock}]}, 0xff, 0x253, &(0x7f0000000b00)="$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") getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000001fc0)=""/4096, &(0x7f0000002fc0)=0x1000) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000880)={0xf97cff8c, 0x8, 'SE Linux', "d99462a7dff17633622542a4274392e3de5440b094f94701ded9a3408e567622920d5e1c6d0f22ba884689f23c1eb6827c6f74ffe1b36340a4da00964883d992403c7538abda1cf48ef0c765001bf4c8bcdf4f3d51759447b6e4c334369f141b9dcaaa7c2a469e5f6c82a3b1504bce"}, 0x7f) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents64(r8, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) add_key$keyring(&(0x7f00000101c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0x60}], 0x1, 0x2000, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.51584164s ago: executing program 9 (id=4424): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r2 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 7.455224524s ago: executing program 4 (id=4425): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r5, 0x26, &(0x7f0000000240)={0x1, 0x2, 0x809, 0x34ef}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="be28582b177b0865e193667cf25765bc1cfd23c4ee760403b1ba86184d5747d26f09d408c12deddccd1ce9b7f256d5835db8043b129a40668db2ff6a022291368b02c79e48c60c0d53670dff867a330248d5ec6ac0686644d66c802be0bc37b7ddc4612b3d859870d5ac6ff82eccd243c39491777dd43e9b2839fe6c2d918f8a52bb0358da4af3d2268ccc8287e3baa54ab489ed1898eb13a6b9e458477744484d102cf4fcee5714cd2659160ea49239321c633535f4640539", &(0x7f0000000380)=""/41}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000000100003052dbd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000010000014001280ff070100626f6e640000000094def79e00000a007ac97377d9682a09", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 7.349484729s ago: executing program 9 (id=4426): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000000)={'icmp6\x00'}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000100000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private0, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 6.17149736s ago: executing program 4 (id=4428): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x4404, 0x10004, 0x30da, 0x5, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x6}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x20008000) 5.441617618s ago: executing program 4 (id=4429): r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xd, @private2, 0xc0}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}], 0x84}}], 0x3ffffffffffff53, 0x20004080) 5.357334403s ago: executing program 4 (id=4430): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.976843192s ago: executing program 7 (id=4431): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000001400)={0xffffffffffffffff, &(0x7f0000001500)='%\x02\x00\x00\x00\x00\x00\x00\x9d\x04H\xc4E\xc0*\x8c\x17\xb0\xea\xc52h\xc0\xfc\xfae', 0x8000, &(0x7f0000001340)={@align=0x6, {0xc3, 0xad, 0x1, 0x3}}, 0x13ffff, &(0x7f0000001380)={@_ha_fsid}, &(0x7f00000013c0)=0x6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r5, 0x309, 0x70bd2c, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=ANY=[@ANYBLOB="740000000001010400000000141a000002000005100005800a000100512e3933310000000800074000000001240001801400018008000100e000000108000200e00000020c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00020810c0055e6277c2b6f5800500010000000000811fe0260749676245bed4fe0e91811f8692bdc374e9edf2068b37b305e0a32259de1d22c6289d"], 0x74}}, 0x0) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001440)={0x0, 0x46}, &(0x7f0000001480)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000015c0)={r9, @in6={{0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf18e}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000380)={0x1d, r11, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$IPVS_CMD_NEW_DEST(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x500}, 0x1, 0x0, 0x0, 0x24008807}, 0x8010) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2, 0x0, {}, 0xf0ffdfff}}, 0x4c}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)) r12 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0x2, 0x87}) socket(0x14, 0x6, 0xa8) io_uring_register$IORING_REGISTER_BUFFERS2(r12, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 4.943000944s ago: executing program 9 (id=4432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x0, 0x0, 0xf000000}, 0x20004014) 4.546532095s ago: executing program 6 (id=4433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="04000000000000000000000000000000020000007400018014000180080001000000000008000200e00000020c00a7e4ad028005000100000000004300028005000100060006000c0003800500010000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000400)={0x6, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x10, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) open$dir(&(0x7f0000000000)='./file0\x00', 0x7ab2e0918647f40d, 0x9) 2.996916995s ago: executing program 7 (id=4438): syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15\x11\xf0\xd3\xa0\x99\xef\xe4\xb3\xc5\xc3AK\x7f\xe2\xa6]\x9a\xadyr\xaf <\xd5\xe1\xfa,N\x8a\x03\xe7s\xef\x96\xfc\x8c\xe4\xd2', 0x2, 0x186, 0x0) poll(0x0, 0x0, 0xfffffffa) clock_gettime(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x195949d, 0x0, 0x3c, 0x0, &(0x7f0000000140)) creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) 2.149177449s ago: executing program 4 (id=4441): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe4) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r2, 0x1) gettid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r6 = socket(0x1d, 0x2, 0x6) accept4$vsock_stream(r6, 0x0, 0x0, 0x0) 2.1402805s ago: executing program 6 (id=4442): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xe, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x400, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x20009a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xcfc, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x40009, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000003, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x80000001, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x6, 0x8, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x8, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x9, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x1000009, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x100003, 0x2, 0x204, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffdfffff, 0x2de9, 0x9, 0x2, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xba, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x40, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x5, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x4, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0xff, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x80, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x7, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0xf, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x9, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x1, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r7}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 2.093356632s ago: executing program 3 (id=4443): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000000)=""/103, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x38}}, 0x40408e0) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4236}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000840000000100001472120e4ea6b1f500d40b0000060000000400000004d0410833e7ea957161b9e54cf2060dae00000007000000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000000050000000000000001000000"], 0x48, 0x4008000}, 0x28008841) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000014001f"], 0x38}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f00000000c0), 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r8 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x103, 0x0) mq_getsetattr(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0x6, 0x0) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) 2.076095613s ago: executing program 9 (id=4444): r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000000)={r0}) r1 = request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='./bus/file0\x00', 0x2000414, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0xffffffffffffffff, @ANYRES32=r1, @ANYBLOB="929cb718d040a784cfbe6686e6cdf5c650f7d687b34b39d5e5916d7175b1ba298c759bb03d7adf998974c1a5407cd4b49210264b3310339916da668be0d43e7b8ca5a68495f21267917556ac9174aa3080afa53685eee03f0cc5121eb48f1eb98fb9301eb365e80399117c936f0f1e3e7b8e601036dab6b0729ca71d06f7b7f2880defd232e2fd183f8f2241c9b1af5128c346e753cf6470156692e1af081cf96346f0", @ANYRES8], 0x1, 0x2ba, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r1, @ANYRES64], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000e40)=ANY=[@ANYBLOB="240000001c0001002cbd7000fddbdf2502000000", @ANYRES64=r2, @ANYBLOB="000000000c3acbb3cb34f4213968"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c00)=ANY=[], 0x110) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x8000, 0x10000, 0x8008, 0x1, 0x8, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r6, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140), 0x3, 0x43b, &(0x7f0000000200)="$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") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES8=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) getresuid(&(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000088000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000500004801400030076657468315f6d6163767461700000000800014000000005"], 0x124}, 0x1, 0x0, 0x0, 0xd4}, 0x800) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r13, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r14 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x0) connect$inet6(r13, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(r12, &(0x7f0000000e00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="08030000", @ANYRESOCT=r4, @ANYBLOB="040026bd7000fedbdf251000000008000300", @ANYRES16=r10, @ANYBLOB, @ANYRES16, @ANYRESHEX=r9], 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYRES16=r15], 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x20008000) 2.056443834s ago: executing program 3 (id=4445): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='\x00'/13, @ANYRESDEC=r0, @ANYBLOB="ead886be3a11d6862170da17c9f1b3b94447f16c0881da33b6313688304680c5fe8eff64b8b775e9c6ac1550476cff7b2e7a5222f3cfe1eea8f54c8160572e49608c2e768410b0bffdb2c34383da53be880f0172de854d8e3b6e92d544f104d7f2a7095fdbb7b5db7d943c03efd571b075372ef5b4ef9196ab6604163ca69a12000a13bff9132d1592506c0604d88d8c12405f31a83fbf25156b578fa1a621ed1cf2a66ce80fded307e340598ba1cae0c9b7e2b33a08058973526c079b01fae027f1e6540d678b1a5b5a220cd248f8a45d9edb5aa763df2445edc312", @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) (async) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) (async, rerun: 32) clock_nanosleep(0x9, 0x0, 0x0, 0x0) (rerun: 32) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) geteuid() (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r6, @ANYRESHEX=r8], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) (async) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) (async) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) 2.008469497s ago: executing program 7 (id=4446): pipe(&(0x7f0000000140)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r1, 0x0, 0x9, 0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1ca98000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4000, 0x161, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r4, 0x7}, &(0x7f0000000040)=0x8) 2.007490567s ago: executing program 7 (id=4447): r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0xca880, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/xfrm_stat\x00') syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1, 0x2aa, &(0x7f0000000c80)="$eJzs3c9OE10Yx/EfpS/wgjBVFAVjPNGNbiZQr6AhkBibaJAa/yQmg0y16dCSToOpMcLOrWsvgbh0Z2K8ATZegQt3bFyyMI7pdIACQ4IEmYLfz+Y8nTNPc06eM81p0pmuP3y3UC76dtGpK9VllJYGtCFllFK3WrqiNhXGPWq3opvD+W9X7j96fCeXz0/NGDOdm72VNcYMXf388vWHa1/qAw8+Dn3q1Vrm6fqP7Pe1kbXR9V+zL0q+KfmmUq0bx8xVq3VnznPNfMkv28bc81zHd02p4ru1Hf1Fr7q42DBOZX6wf7Hm+r5xKg1TdhumXjX1WsM4z51Sxdi2bQb7haa+/btSxzkOJKVWyzmTksb29BRWExkQAABIVMz+f+Uw+/909Jr9/0lSWJ2ZcXJJjwJHyNp7qLn/fxL7dY/9PwAAAAAAAAAAAAAAAAAAAAAAJ8FGEFhBEFjNdvP+gB5JQXT8f0n9kgYknZE0KGkous0gI+mspHOShiWdl3RB0oiki5IuSRpte6+Ep4oY7fVvtv9F9e+m/v+E/eq/6/oPHyJB/U+fA9af6/+UantwT5+08HapsFRota3+XFEleXI1Lks/w1pGWvH07fzUuAlldHlhOcpfXip078yfkNVcMHH5E618szO/N1x3W/lZWc0FFpefjc3v043rbfm2LH19pqo8zYdrcjv/zYQxk3fzu/LHwvN26zne8vx1ttkSWz/b3q+/lX+A9RGMx9YnrbF0snOH5DdelR3Pc2sEBJ0XjHTGMA4dvO+MYRwmSPqTCcdhu+hJjwQAAAAAAAAAAAAAAAAA8CeO5jeDm/8UFn9OwlMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCP3wEAAP//t8JUVA==") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@auto_da_alloc}]}, 0x1, 0x46d, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh/9bmKtH61Vo0UIikmTVu3Bi6IgUlHQQz3GZFtCt400UWwtNhXxJEhBz+JR9C/wJoKoJ8GrJ09SKNpLW0+RmZ1pN9tsYs2mE7O/H+zmfWfe3XmezNe777sbQNcayp6SiO0R8VtEDDSqixsMNf5cu3Ju8vqVc5NJLCy8/meSt7t65dxk2bR83baiMpxGpB8lxUYWmz1z9sREvV47XdRH506+PTp75uyT756cOF47Xjs1fvjwoYNjzzw9/lRH8szyurr3g5l9e1568+Irk0cvvvXTN1m824v1zXl0ylCW+F8LudZ1j3V6YxXb0VROeisMhNvSExHZ7urLz/+B6ImbO28gXvyw0uCANZXdmza1Xz2/AGxgSVQdAVCN8kafff4tH3eo67EuXH6u8QEoy/ta8Wis6Y20aNPX8vm2k4Yi4uj8319kj1ijcQgAgGafTH5+pD8i3r/+9ctZ32MgIsrxoHvz59/z563FHMpgRNwVEbsi4u6I2B0R9xRt74uI+1cZz639n/TSKt9yWVn/79libmtx/6/s/cVgT1HbkefflxybrtcORMTOiBiOvk1ZfWyZbXz3wq+ftlvX3P/LHtn2y75gEcel3pYBuqmJuYm8U9oBly9E7O1dKv/kxkxAEhF7ImLv7b31zrIw/fhX+9o1Wjn/ZXRgnmnhyyy9+Sz/+WjJv5Q0z09O3zI/Obo56rUDo+VRcauff/n4tXbbX1X+HXC51vjbtP9bmwwmzfO1s53d/n88/tP+5I18nrm/WPbexNzc6bGI/uRIXl+0fPzma8t62T47/of3L33+7ypek+X/QERkB/GDEfFQRDxcxP5IRDwaEfuXyfHH51fOP9KK9v+FiKklr383jv+W/X/7hZ4TP3zbbvv/bv8fykvDxZL8+reCpcLJLhetAa7mfwcAAAD/F2n+HfgkHblRTtORkcZ3+HfH1rQ+Mzv3xLGZd05NNb4rPxh9aTnSNVCMh9an67WxZL54x8b46HgxVlyOlx4sxo0/69mS10cmZ+pTFecO3W5bm/M/80dP1dEBa2zLkkvH++94IEAFWufR08XV86+GiwFsVH6vDd1rhfO/+XcwwAbj/g/da6nz/3xL3VwAbEzu/9C9nP/QpdLvq44AqJD7P3Sl1fyufw0Lm9dHGNUU1utOyQsRZSFdF/EorFGh6isTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wTAAD//6MS5oc=") r3 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) r4 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x9, 0x0, 0x8, 0xf4261, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x10, 0x0, 0x0, 0x0, 0xd38e}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$key(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="02100803030000002abd7000fedbdf2501001800"], 0x18}}, 0x8000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x9, 0x0, &(0x7f0000000040)) chdir(&(0x7f0000000380)='./file0\x00') stat(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r6, 0x109, 0x2, 0xffffffffffffffff, &(0x7f0000000080)) read$eventfd(r2, 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r7, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000001c0)=0x44fb, 0x4) recvmmsg(r7, 0x0, 0x0, 0x1000400000de, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x34, 0x27, 0xd, 0x1e, 0x2, 0x1, 0x6, 0xe4dc}) 1.94300025s ago: executing program 3 (id=4448): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) 1.94235192s ago: executing program 3 (id=4449): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee, 0x0, 0x0, 0x840}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext2\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f00000001c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x61, 0x31, 0x37, 0x61, 0x33, 0x63, 0x64], 0x2d, [0xc, 0x61, 0x31, 0x65], 0x2d, [0x37, 0x30, 0x39, 0x38], 0x2d, [0x34, 0x65, 0x32, 0x66], 0x2d, [0xa, 0x37, 0x66, 0x64, 0x1, 0x31, 0x62, 0x33]}}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '\xec&:&%'}}, {@euid_eq}, {@smackfsdef}]}, 0x3, 0x573, &(0x7f0000000940)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x9, 0xe7, 0x0, 0x0, 0x0, 0x2000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', r1, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pipe2(&(0x7f00000005c0), 0x104800) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30e0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25010000000000000002410000001000137564703a73797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x850) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r6, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x1}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe1e) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, 0x0, &(0x7f0000000300)=""/84}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x20000003}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) close_range(r8, r3, 0x0) 1.606984987s ago: executing program 7 (id=4450): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x80c002, &(0x7f00000009c0)={[{@errors_remount}, {@grpquota}]}, 0x2, 0x517, &(0x7f0000000140)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000005000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64], 0x108}}], 0x2, 0xc040) r7 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_pidfd_open(r7, 0x0) 234.928449ms ago: executing program 6 (id=4451): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000001000071101a000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa029}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b"], 0x70}}, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000640)=ANY=[@ANYBLOB="0000000000000a0081000000000000000700000100"]) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001680)={{r5, &(0x7f00000000c0)='ramfs\x00', 0x100, &(0x7f0000000240)={@align=0x4, {0x5, 0x4, 0x4, 0x2}}, 0xf, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x2}, {[0x0, 0xd240, 0x8, 0x60e]}, 0x80000000, 0x1000, &(0x7f0000000680)=""/4096}) close_range(r5, r7, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) 223.449949ms ago: executing program 3 (id=4452): socket$inet(0x2, 0x3, 0x6) memfd_secret(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 177.485951ms ago: executing program 7 (id=4453): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x50042, 0x20, 0x20}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e21, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mknodat$null(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0x103) vmsplice(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000a00)}], 0x1, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x1, 0x0, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x1, 0x5, 0x0, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x7, 0x3, 0x0, [{@empty, 0xfffffffe}, {@multicast2}]}, @lsrr={0x83, 0xb, 0x61, [@multicast2, @loopback]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1}}}}}}, 0x0) 0s ago: executing program 3 (id=4454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x100, @local, 0x4}, {0xa, 0x4e23, 0x7, @empty, 0xd473}, 0x0, {[0x4, 0x7, 0x3, 0x8001, 0xe10, 0xe, 0x3]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000003080101000000000000000003000001050003003a0000000c00048008a70001400000"], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r3 = gettid() r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000140)=0x7) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x0, 0x408, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x9}, @NFC_ATTR_VENDOR_DATA={0x5f, 0x1f, "82279c711f1e3456959ff00b65f8bd63b882dc2adc960a2e75074fbf5301438eab909252d9e496acbad882ae31d37358e411da21fc97606e2ea9f671ce2417e359963370f5d49865db80ea9cc1dcf987700d0eae8d17eecf504d81"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10004}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000100)={r4}) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "0517a9f6040839040000008d776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r10, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r10, 0x0, 0x0, 0x87b0cc373e1cda89, 0x0, 0x0) kernel console output (not intermixed with test programs): ntext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 545.687623][ T28] audit: type=1400 audit(2000005524.014:6153): avc: denied { open } for pid=26352 comm="syz.1.3778" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 545.807316][T23900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.948765][T26378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3784'. [ 545.976686][T26378] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3784'. [ 546.327637][ T28] audit: type=1400 audit(2000005524.684:6154): avc: denied { bind } for pid=26380 comm="syz.3.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 546.351866][T26381] netlink: 'syz.3.3786': attribute type 4 has an invalid length. [ 546.777812][ T28] audit: type=1400 audit(2000005525.134:6155): avc: denied { mount } for pid=26387 comm="syz.1.3790" name="/" dev="ramfs" ino=70093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 546.841628][ T28] audit: type=1400 audit(2000005525.164:6156): avc: denied { ioctl } for pid=26387 comm="syz.1.3790" path="socket:[70094]" dev="sockfs" ino=70094 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 546.909579][ T28] audit: type=1400 audit(2000005525.174:6157): avc: denied { mounton } for pid=26387 comm="syz.1.3790" path="/file0" dev="ramfs" ino=70095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 546.957329][ T28] audit: type=1400 audit(2000005525.254:6158): avc: denied { name_bind } for pid=26389 comm="syz.1.3791" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 547.004825][T26390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.009755][ T28] audit: type=1400 audit(2000005525.254:6159): avc: denied { node_bind } for pid=26389 comm="syz.1.3791" saddr=224.0.0.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 547.045202][T26390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.059711][ T28] audit: type=1400 audit(2000005525.364:6160): avc: denied { read write } for pid=26389 comm="syz.1.3791" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.116422][ T28] audit: type=1400 audit(2000005525.364:6161): avc: denied { open } for pid=26389 comm="syz.1.3791" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 547.194080][T26403] FAULT_INJECTION: forcing a failure. [ 547.194080][T26403] name failslab, interval 1, probability 0, space 0, times 0 [ 547.207983][T26403] CPU: 1 UID: 0 PID: 26403 Comm: syz.7.3795 Tainted: G W syzkaller #0 PREEMPT(full) [ 547.208023][T26403] Tainted: [W]=WARN [ 547.208032][T26403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 547.208046][T26403] Call Trace: [ 547.208053][T26403] [ 547.208062][T26403] __dump_stack+0x1d/0x30 [ 547.208114][T26403] dump_stack_lvl+0x95/0xd0 [ 547.208142][T26403] dump_stack+0x15/0x1b [ 547.208203][T26403] should_fail_ex+0x263/0x280 [ 547.208311][T26403] should_failslab+0x8c/0xb0 [ 547.208334][T26403] __kvmalloc_node_noprof+0x155/0x640 [ 547.208384][T26403] ? path_openat+0x1ab2/0x2050 [ 547.208417][T26403] ? traverse+0xa2/0x3a0 [ 547.208464][T26403] traverse+0xa2/0x3a0 [ 547.208546][T26403] ? _parse_integer_limit+0x170/0x190 [ 547.208574][T26403] seq_read_iter+0x85f/0x940 [ 547.208601][T26403] ? _parse_integer+0x27/0x40 [ 547.208696][T26403] ? kstrtoull+0x111/0x140 [ 547.208720][T26403] seq_read+0x279/0x2c0 [ 547.208819][T26403] ? __pfx_seq_read+0x10/0x10 [ 547.208846][T26403] proc_reg_read+0x128/0x1c0 [ 547.208866][T26403] ? __pfx_proc_reg_read+0x10/0x10 [ 547.208884][T26403] vfs_read+0x1ab/0x7f0 [ 547.208980][T26403] ? __rcu_read_unlock+0x4e/0x70 [ 547.209003][T26403] ? __fget_files+0x184/0x1c0 [ 547.209031][T26403] ? mutex_unlock+0x4e/0x90 [ 547.209057][T26403] __x64_sys_pread64+0xfd/0x150 [ 547.209156][T26403] x64_sys_call+0x27b5/0x3020 [ 547.209181][T26403] do_syscall_64+0x12c/0x3b0 [ 547.209200][T26403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.209282][T26403] RIP: 0033:0x7efda65dc819 [ 547.209299][T26403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.209376][T26403] RSP: 002b:00007efda502f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 547.209397][T26403] RAX: ffffffffffffffda RBX: 00007efda6855fa0 RCX: 00007efda65dc819 [ 547.209410][T26403] RDX: 0000000000018fd4 RSI: 0000200000000080 RDI: 0000000000000003 [ 547.209505][T26403] RBP: 00007efda502f090 R08: 0000000000000000 R09: 0000000000000000 [ 547.209517][T26403] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 547.209535][T26403] R13: 00007efda6856038 R14: 00007efda6855fa0 R15: 00007ffc99c211e8 [ 547.209572][T26403] [ 547.304724][T26405] lo speed is unknown, defaulting to 1000 [ 547.630965][T26411] lo speed is unknown, defaulting to 1000 [ 547.673071][T26412] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3798'. [ 550.624385][T26451] __nla_validate_parse: 1 callbacks suppressed [ 550.624404][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3814'. [ 550.708369][T26457] lo speed is unknown, defaulting to 1000 [ 550.720763][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 550.720781][ T28] audit: type=1400 audit(2000005529.085:6168): avc: denied { connect } for pid=26464 comm="syz.4.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 550.799202][T26471] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3816'. [ 551.325578][ T28] audit: type=1400 audit(2000005529.685:6169): avc: denied { bind } for pid=26472 comm="syz.1.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 551.345679][ T28] audit: type=1400 audit(2000005529.685:6170): avc: denied { listen } for pid=26472 comm="syz.1.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 551.381181][ T28] audit: type=1400 audit(2000005529.735:6171): avc: denied { connect } for pid=26472 comm="syz.1.3821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 551.598899][T26486] loop6: detected capacity change from 0 to 512 [ 551.608175][T26486] EXT4-fs: old and new quota format mixing [ 551.659489][T26486] loop6: detected capacity change from 0 to 2048 [ 553.782350][T26495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26495 comm=syz.1.3826 [ 554.607796][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 554.720547][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 554.730181][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 554.739477][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 554.977287][ T3009] loop6: p2 p3 p7 [ 555.128678][ T28] audit: type=1400 audit(2000005533.426:6172): avc: denied { setopt } for pid=26500 comm="syz.4.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 555.267723][T26506] loop1: detected capacity change from 0 to 512 [ 555.314013][T24291] udevd[24291]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 555.354301][T24641] udevd[24641]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 555.583431][T26506] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 555.599973][T26506] EXT4-fs (loop1): mount failed [ 555.615942][T25350] udevd[25350]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 555.808956][T17797] IPVS: starting estimator thread 0... [ 555.927508][T26516] IPVS: using max 2544 ests per chain, 127200 per kthread [ 556.107885][ T28] audit: type=1400 audit(2000005534.337:6173): avc: denied { read } for pid=26502 comm="syz.7.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 556.211650][ T28] audit: type=1400 audit(2000005534.567:6174): avc: denied { write } for pid=26502 comm="syz.7.3829" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 556.248186][T26520] loop6: detected capacity change from 0 to 1024 [ 556.254992][T26520] EXT4-fs: Ignoring removed orlov option [ 556.279142][T26520] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.373946][T26520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.525242][ T28] audit: type=1400 audit(2000005534.887:6175): avc: denied { getopt } for pid=26538 comm="syz.6.3836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 556.677103][ T28] audit: type=1400 audit(2000005535.047:6176): avc: denied { watch watch_reads } for pid=26546 comm="syz.4.3840" path="/79/file1" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 556.737682][T26547] loop4: detected capacity change from 0 to 1024 [ 556.807231][T26547] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 556.834025][T26547] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 556.862884][T26547] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3840: Failed to acquire dquot type 0 [ 556.898926][T26547] loop4: lost filesystem error report for type 5 error -5 [ 556.899658][T26547] EXT4-fs (loop4): 1 truncate cleaned up [ 556.912509][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 556.912529][ C1] EXT4-fs (loop4): initial error at time 2000005535: ext4_acquire_dquot:7034 [ 556.912555][ C1] EXT4-fs (loop4): last error at time 2000005535: ext4_acquire_dquot:7034 [ 557.023044][T26547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.068358][ T28] audit: type=1400 audit(2000005535.437:6177): avc: denied { block_suspend } for pid=26546 comm="syz.4.3840" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 557.435055][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.456279][T26554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3843'. [ 557.476279][T26554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3843'. [ 557.510197][ T28] audit: type=1400 audit(2000005535.877:6178): avc: denied { name_bind } for pid=26553 comm="syz.1.3843" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 557.576788][ T28] audit: type=1400 audit(2000005535.937:6179): avc: denied { create } for pid=26557 comm="syz.1.3844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 557.802887][ T28] audit: type=1400 audit(2000005536.167:6180): avc: denied { setattr } for pid=26560 comm="syz.3.3845" name="SCTPv6" dev="sockfs" ino=70478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 557.878397][T26567] loop1: detected capacity change from 0 to 164 [ 557.885192][T26567] iso9660: Unknown parameter '' [ 558.128840][T26579] loop4: detected capacity change from 0 to 512 [ 558.174312][T26579] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.3851: corrupted in-inode xattr: e_name out of bounds [ 558.188225][T26579] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 558.188701][T26579] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.3851: couldn't read orphan inode 15 (err -117) [ 558.209841][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 558.209874][ C0] EXT4-fs (loop4): initial error at time 2000005536: ext4_iget_extra_inode:5128: inode 15 [ 558.209909][ C0] EXT4-fs (loop4): last error at time 2000005536: ext4_iget_extra_inode:5128: inode 15 [ 558.375892][T26586] netlink: 'syz.7.3850': attribute type 39 has an invalid length. [ 558.379478][T26579] loop4: lost filesystem error report for type 5 error -117 [ 558.386061][T26579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.588425][T26589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3852'. [ 558.598412][T26589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3852'. [ 559.335760][T26595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3854'. [ 559.395236][T26579] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.542673][T26605] xt_recent: Unsupported userspace flags (000000b1) [ 559.565820][T26579] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.578807][T26609] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.594493][T26609] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.607918][T26579] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.626124][T26579] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.641656][T26602] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.661844][T26602] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.674592][T26603] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.698562][T26603] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.711734][T26579] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.745446][T26611] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3858'. [ 559.758642][T26579] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.771962][T26609] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.786679][T26609] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.799567][T26602] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.814137][T26602] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.827367][T26579] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.841896][T26579] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 559.860393][T26602] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 3: comm syz.4.3851: lblock 0 mapped to illegal pblock 3 (length 1) [ 559.875430][T26602] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.3851: error -117 reading directory block [ 560.259392][T26623] loop1: detected capacity change from 0 to 2048 [ 560.294501][T26623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.313125][T26623] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 560.328638][T26623] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 560.341155][T26623] EXT4-fs (loop1): This should not happen!! Data will be lost [ 560.341155][T26623] [ 560.351246][T26623] EXT4-fs (loop1): Total free blocks count 0 [ 560.357541][T26623] EXT4-fs (loop1): Free/Dirty block details [ 560.363695][T26623] EXT4-fs (loop1): free_blocks=4096 [ 560.369393][T26623] EXT4-fs (loop1): dirty_blocks=32 [ 560.374847][T26623] EXT4-fs (loop1): Block reservation details [ 560.381208][T26623] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 561.859551][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.925117][T23900] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 561.937778][T23900] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.997861][T26637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3865'. [ 562.072166][ T28] kauditd_printk_skb: 259 callbacks suppressed [ 562.072183][ T28] audit: type=1400 audit(2000005540.438:6440): avc: denied { cpu } for pid=26628 comm="syz.3.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 562.128415][T26650] batadv_slave_0: entered promiscuous mode [ 562.145991][ T28] audit: type=1400 audit(2000005540.518:6441): avc: denied { read } for pid=26628 comm="syz.3.3864" path="socket:[71683]" dev="sockfs" ino=71683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 562.170279][ T28] audit: type=1400 audit(2000005540.518:6442): avc: denied { write } for pid=26628 comm="syz.3.3864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 562.171082][T26650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3870'. [ 562.231795][T26650] batadv_slave_0 (unregistering): left promiscuous mode [ 562.402550][ T28] audit: type=1400 audit(2000005540.628:6443): avc: denied { create } for pid=26638 comm="syz.6.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 562.422114][ T28] audit: type=1400 audit(2000005540.628:6444): avc: denied { write } for pid=26638 comm="syz.6.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 562.441534][ T28] audit: type=1400 audit(2000005540.759:6445): avc: denied { create } for pid=26638 comm="syz.6.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.515271][T26659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3872'. [ 562.531952][ T28] audit: type=1400 audit(2000005540.769:6446): avc: denied { bind } for pid=26638 comm="syz.6.3868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.691265][ T28] audit: type=1400 audit(2000005540.769:6447): avc: denied { write } for pid=26638 comm="syz.6.3868" path="socket:[70797]" dev="sockfs" ino=70797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.715756][ T28] audit: type=1400 audit(2000005540.849:6448): avc: denied { connect } for pid=26643 comm="syz.7.3869" lport=47 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.810277][ T28] audit: type=1400 audit(2000005541.179:6449): avc: denied { write } for pid=26671 comm="syz.1.3874" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 562.864003][T26683] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3877'. [ 562.912911][T26683] loop4: detected capacity change from 0 to 1024 [ 562.984151][T26683] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 563.030419][T26683] System zones: 0-1, 3-36 [ 563.052988][T26683] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.3877: bad orphan inode 134217728 [ 563.064333][T26683] loop4: lost filesystem error report for type 5 error -117 [ 563.064848][T26683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.065393][T26690] lo speed is unknown, defaulting to 1000 [ 563.110004][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.209290][T26704] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3883'. [ 563.285428][T26712] xt_hashlimit: size too large, truncated to 1048576 [ 563.299964][T26712] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 563.300723][T26709] syzkaller1: entered promiscuous mode [ 563.324624][T26709] syzkaller1: entered allmulticast mode [ 563.366083][T26715] netlink: 'syz.4.3889': attribute type 21 has an invalid length. [ 566.465460][T26724] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3894'. [ 566.470697][T26726] loop4: detected capacity change from 0 to 512 [ 566.484272][T26726] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 566.495050][T26724] loop6: detected capacity change from 0 to 128 [ 566.502158][T26724] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 566.561274][T26724] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 566.615791][T26727] loop4: detected capacity change from 0 to 4096 [ 566.628783][ T4232] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 566.633315][T26727] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.714686][T26727] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 566.719426][T26737] lo speed is unknown, defaulting to 1000 [ 566.759442][T26727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.876547][T26745] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3899'. [ 566.901087][ T4242] bridge_slave_1: left allmulticast mode [ 566.917696][ T4242] bridge_slave_1: left promiscuous mode [ 566.933666][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.294196][ T4242] bridge_slave_0: left allmulticast mode [ 567.306246][ T4242] bridge_slave_0: left promiscuous mode [ 567.323641][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.345440][T26769] loop6: detected capacity change from 0 to 128 [ 567.407396][ T4242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.417086][ T4242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.426266][ T4242] bond0 (unregistering): Released all slaves [ 567.435035][ T3048] 8021q: adding VLAN 0 to HW filter on device eth9 [ 567.457315][ T4242] hsr_slave_0: left promiscuous mode [ 567.468966][ T4242] hsr_slave_1: left promiscuous mode [ 567.549079][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 567.549097][ T28] audit: type=1400 audit(2000005545.920:6463): avc: denied { bind } for pid=26775 comm="syz.3.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 567.586571][T26776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3903'. [ 567.614868][ T4242] team0 (unregistering): Port device team_slave_1 removed [ 567.617229][ T28] audit: type=1400 audit(2000005545.980:6464): avc: denied { connect } for pid=26775 comm="syz.3.3903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 567.658013][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.677568][ T4242] team0 (unregistering): Port device team_slave_0 removed [ 567.773487][ T28] audit: type=1400 audit(2000005546.140:6465): avc: denied { create } for pid=26784 comm="syz.4.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 567.803282][T26776] batadv_slave_0: entered promiscuous mode [ 567.816349][T26775] batadv_slave_0: left promiscuous mode [ 567.848510][T26738] lo speed is unknown, defaulting to 1000 [ 567.927949][ T28] audit: type=1400 audit(2000005546.300:6466): avc: denied { write } for pid=26784 comm="syz.4.3905" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 568.004742][T26802] loop6: detected capacity change from 0 to 1024 [ 568.031550][ T4242] IPVS: stop unused estimator thread 0... [ 568.038217][T26802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 568.050517][T26802] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.066806][T26738] chnl_net:caif_netlink_parms(): no params data found [ 568.081036][ T28] audit: type=1400 audit(2000005546.440:6467): avc: denied { remove_name } for pid=26800 comm="syz.6.3907" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.125449][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 568.153980][ T28] audit: type=1400 audit(2000005546.440:6468): avc: denied { rename } for pid=26800 comm="syz.6.3907" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.228489][T26822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3910'. [ 568.236987][ T3048] 8021q: adding VLAN 0 to HW filter on device eth10 [ 568.245046][T26738] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.252806][T26738] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.260127][T26822] loop6: detected capacity change from 0 to 764 [ 568.260493][T26738] bridge_slave_0: entered allmulticast mode [ 568.273542][T26738] bridge_slave_0: entered promiscuous mode [ 568.285149][T26822] rock: directory entry would overflow storage [ 568.290474][T26738] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.297256][T26822] rock: sig=0x4654, size=5, remaining=4 [ 568.304095][T26738] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.311590][T26738] bridge_slave_1: entered allmulticast mode [ 568.318861][T26738] bridge_slave_1: entered promiscuous mode [ 568.340027][T26738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.380832][T26738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.425384][ T28] audit: type=1400 audit(2000005546.800:6469): avc: denied { bind } for pid=26826 comm="syz.6.3911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 568.447125][T26738] team0: Port device team_slave_0 added [ 568.458330][T26738] team0: Port device team_slave_1 added [ 568.481509][ T28] audit: type=1400 audit(2000005546.800:6470): avc: denied { name_bind } for pid=26826 comm="syz.6.3911" src=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 568.509688][T26738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.512874][ T28] audit: type=1400 audit(2000005546.820:6471): avc: denied { node_bind } for pid=26826 comm="syz.6.3911" saddr=d00:0:1500:0:700:0:ac00:0 src=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 568.517164][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.566369][T26738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.577953][ T3048] 8021q: adding VLAN 0 to HW filter on device eth11 [ 568.585960][T26738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.593063][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.619210][T26738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.637657][T26840] FAULT_INJECTION: forcing a failure. [ 568.637657][T26840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.652224][T26840] CPU: 0 UID: 0 PID: 26840 Comm: syz.6.3912 Tainted: G W syzkaller #0 PREEMPT(full) [ 568.652307][T26840] Tainted: [W]=WARN [ 568.652315][T26840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 568.652327][T26840] Call Trace: [ 568.652335][T26840] [ 568.652358][T26840] __dump_stack+0x1d/0x30 [ 568.652431][T26840] dump_stack_lvl+0x95/0xd0 [ 568.652454][T26840] dump_stack+0x15/0x1b [ 568.652475][T26840] should_fail_ex+0x263/0x280 [ 568.652517][T26840] should_fail+0xb/0x20 [ 568.652543][T26840] should_fail_usercopy+0x1a/0x20 [ 568.652614][T26840] _copy_to_user+0x20/0xa0 [ 568.652634][T26840] simple_read_from_buffer+0xb5/0x130 [ 568.652711][T26840] proc_fail_nth_read+0x10e/0x150 [ 568.652783][T26840] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 568.652817][T26840] vfs_read+0x1ab/0x7f0 [ 568.652846][T26840] ? __rcu_read_unlock+0x4e/0x70 [ 568.652954][T26840] ? __fget_files+0x184/0x1c0 [ 568.652978][T26840] ? mutex_lock+0x57/0x90 [ 568.653027][T26840] ksys_read+0xdc/0x1a0 [ 568.653063][T26840] __x64_sys_read+0x40/0x50 [ 568.653110][T26840] x64_sys_call+0x2886/0x3020 [ 568.653197][T26840] do_syscall_64+0x12c/0x3b0 [ 568.653221][T26840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.653251][T26840] RIP: 0033:0x7ff34ed3d04e [ 568.653366][T26840] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 568.653391][T26840] RSP: 002b:00007ff34d7d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 568.653415][T26840] RAX: ffffffffffffffda RBX: 00007ff34d7d76c0 RCX: 00007ff34ed3d04e [ 568.653430][T26840] RDX: 000000000000000f RSI: 00007ff34d7d70a0 RDI: 0000000000000004 [ 568.653513][T26840] RBP: 00007ff34d7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 568.653529][T26840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.653545][T26840] R13: 00007ff34eff6038 R14: 00007ff34eff5fa0 R15: 00007fffd5d42808 [ 568.653567][T26840] [ 568.873329][T26738] hsr_slave_0: entered promiscuous mode [ 568.879872][T26738] hsr_slave_1: entered promiscuous mode [ 568.894898][T26738] debugfs: 'hsr0' already exists in 'hsr' [ 568.913753][T26738] Cannot create hsr debugfs directory [ 568.924303][T26849] netlink: 'syz.3.3915': attribute type 1 has an invalid length. [ 568.932274][ T28] audit: type=1400 audit(2000005547.290:6472): avc: denied { setopt } for pid=26844 comm="syz.4.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 569.005184][T26849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3915'. [ 569.177520][ T3048] 8021q: adding VLAN 0 to HW filter on device eth12 [ 569.257014][T26738] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 569.266207][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 569.276724][T26738] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 569.288948][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 569.297232][T26738] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 569.308323][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.321174][T26738] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 569.335866][T26738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.398488][T26738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.419153][T26738] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.434789][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.441905][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.461898][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.469012][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.629256][T26738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.658637][T26923] netlink: 830 bytes leftover after parsing attributes in process `syz.7.3919'. [ 569.772242][T26944] tap0: tun_chr_ioctl cmd 35111 [ 569.884724][T26738] veth0_vlan: entered promiscuous mode [ 569.928792][T26738] veth1_vlan: entered promiscuous mode [ 569.982812][T26738] veth0_macvtap: entered promiscuous mode [ 570.023539][T26738] veth1_macvtap: entered promiscuous mode [ 570.080773][T26738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.113011][T26738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.235518][ T4474] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.256972][ T4474] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.310480][ T4474] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.368701][ T4474] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.000118][T27006] netlink: 'syz.4.3930': attribute type 15 has an invalid length. [ 571.387144][T27037] loop9: detected capacity change from 0 to 512 [ 571.417291][T27037] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 571.435235][T27037] EXT4-fs (loop9): mount failed [ 571.529791][T27048] loop4: detected capacity change from 0 to 1764 [ 574.018005][T27147] loop4: detected capacity change from 0 to 2048 [ 574.044736][T27147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.063807][T27147] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.268953][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 574.268971][ T28] audit: type=1400 audit(2000005552.642:6492): avc: denied { connect } for pid=27157 comm="syz.7.3946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 574.295457][ T28] audit: type=1400 audit(2000005552.652:6493): avc: denied { ioctl } for pid=27157 comm="syz.7.3946" path="socket:[72523]" dev="sockfs" ino=72523 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 574.327828][T27160] loop6: detected capacity change from 0 to 512 [ 574.335566][ T28] audit: type=1400 audit(2000005552.702:6494): avc: denied { execute_no_trans } for pid=27159 comm="syz.6.3947" path="/493/file0" dev="tmpfs" ino=2637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 574.363832][T27160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.376527][T27160] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.436202][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.542519][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.614917][T17800] hid_parser_main: 4 callbacks suppressed [ 574.614941][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.652127][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.659564][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.669471][T27175] loop9: detected capacity change from 0 to 512 [ 574.680497][T27175] EXT4-fs: Ignoring removed orlov option [ 574.693720][ T28] audit: type=1400 audit(2000005553.062:6495): avc: denied { ioctl } for pid=27174 comm="syz.7.3953" path="socket:[72761]" dev="sockfs" ino=72761 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 574.699710][T27175] EXT4-fs: dax option not supported [ 574.724436][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.741717][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.752381][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.760919][T27181] loop4: detected capacity change from 0 to 512 [ 574.767701][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.782484][T27181] msdos: Bad value for 'uid' [ 574.789998][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.815630][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.824298][T27181] msdos: Bad value for 'uid' [ 574.830306][T17800] hid-generic 0000:0000:0004.000B: unknown main item tag 0x0 [ 574.848767][T17800] hid-generic 0000:0000:0004.000B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 575.051081][T27195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3956'. [ 575.128308][T27202] xt_connbytes: Forcing CT accounting to be enabled [ 575.180016][ T28] audit: type=1400 audit(2000005553.532:6496): avc: denied { ioctl } for pid=27205 comm="syz.9.3964" path="socket:[72837]" dev="sockfs" ino=72837 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 575.205068][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3964'. [ 575.234062][T27209] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3965'. [ 575.243326][T27209] gretap0: entered promiscuous mode [ 575.249937][T27209] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3965'. [ 575.259456][ T28] audit: type=1400 audit(2000005553.612:6497): avc: denied { read append } for pid=27210 comm="syz.3.3966" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 575.259715][T27209] 0{X功: renamed from gretap0 [ 575.309958][ T28] audit: type=1400 audit(2000005553.612:6498): avc: denied { open } for pid=27210 comm="syz.3.3966" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 575.335903][ T28] audit: type=1400 audit(2000005553.612:6499): avc: denied { ioctl } for pid=27210 comm="syz.3.3966" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 575.375256][T27214] loop6: detected capacity change from 0 to 1024 [ 575.395973][T27214] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 575.404240][T27214] System zones: 0-1, 3-36 [ 575.410103][T27209] 0{X功: left promiscuous mode [ 575.415169][T27209] 0{X功: entered allmulticast mode [ 575.421222][T27214] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3965: bad orphan inode 134217728 [ 575.429429][T27209] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 575.431939][T27214] loop6: lost filesystem error report for type 5 error -117 [ 575.432657][T27214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.526004][T27216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3967'. [ 575.597295][T27219] bond2: (slave veth3): Enslaving as an active interface with an up link [ 575.681585][T27208] program syz.6.3965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.419780][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.431876][T27216] bond2: entered promiscuous mode [ 576.478870][T27216] veth3: entered promiscuous mode [ 576.486539][T27235] loop6: detected capacity change from 0 to 512 [ 576.518718][T27235] EXT4-fs: Mount option(s) incompatible with ext2 [ 576.529514][T27238] loop9: detected capacity change from 0 to 1024 [ 576.536039][T27216] bond2: entered allmulticast mode [ 576.553955][ T28] audit: type=1400 audit(2000005554.932:6500): avc: denied { ioctl } for pid=27234 comm="syz.6.3970" path="socket:[72888]" dev="sockfs" ino=72888 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 576.556306][T27238] ext4: Unknown parameter 'subj_type' [ 576.590857][T27216] veth3: entered allmulticast mode [ 576.599712][T27216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.873397][T27248] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 576.912194][T27248] bond1 (unregistering): Released all slaves [ 576.924806][T27255] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3977'. [ 576.997802][T27255] 0{X功: entered promiscuous mode [ 577.003143][T27255] 0{X功: left allmulticast mode [ 577.009611][T27258] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3977'. [ 577.018624][T27258] 1{X功: renamed from 30{X功 [ 577.043025][T27258] 1{X功: left promiscuous mode [ 577.048211][T27258] 1{X功: entered allmulticast mode [ 577.069617][T27258] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 577.105865][T27255] loop6: detected capacity change from 0 to 1024 [ 577.147883][ T28] audit: type=1400 audit(2000005555.133:6501): avc: denied { read } for pid=27246 comm="syz.7.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 577.184501][T27255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 577.192901][T27255] System zones: 0-1, 3-36 [ 577.210300][T27255] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.3977: bad orphan inode 134217728 [ 577.226726][T27255] loop6: lost filesystem error report for type 5 error -117 [ 577.227555][T27255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.238640][T27260] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3978'. [ 577.256911][T27255] program syz.6.3977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.268610][T27260] gretap0: entered promiscuous mode [ 577.282609][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.305840][T27260] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3978'. [ 577.327953][T27262] hub 8-0:1.0: USB hub found [ 577.335140][T27260] 0{X功: renamed from gretap0 [ 577.340427][T27262] hub 8-0:1.0: 8 ports detected [ 577.340513][T27269] netlink: 'syz.6.3980': attribute type 1 has an invalid length. [ 577.348984][T27262] program syz.7.3979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.358950][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3976'. [ 577.363809][T27260] 0{X功: left promiscuous mode [ 577.386104][T27260] 0{X功: entered allmulticast mode [ 577.402565][T27260] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 577.536996][T27260] program syz.3.3978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.933039][T27269] loop6: detected capacity change from 0 to 128 [ 577.963605][T27269] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 577.997708][T27269] ext4 filesystem being mounted at /501/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.020912][T27269] SELinux: policydb version -1486711591 does not match my version range 15-35 [ 578.056957][T27269] SELinux: failed to load policy [ 578.062888][T27269] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.3980: No space for directory leaf checksum. Please run e2fsck -D. [ 578.079053][T27269] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.3980: Directory block failed checksum [ 578.199203][T27303] loop4: detected capacity change from 0 to 4096 [ 578.225364][T27303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.451668][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.524609][T15319] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 578.886365][T27338] netlink: 'syz.4.4005': attribute type 8 has an invalid length. [ 579.034821][T27340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.079221][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.675593][T27349] netlink: 'syz.3.4008': attribute type 10 has an invalid length. [ 579.709214][T27349] syz_tun: entered promiscuous mode [ 579.739133][T27349] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 580.136316][T27356] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 580.204975][T27359] netlink: 'syz.4.4009': attribute type 10 has an invalid length. [ 580.528887][T27358] 8021q: adding VLAN 0 to HW filter on device bond19 [ 580.548676][T27358] bond18: (slave bond19): making interface the new active one [ 580.568977][T27358] bond18: (slave bond19): Enslaving as an active interface with an up link [ 580.597626][T27359] bridge0: port 3(syz_tun) entered disabled state [ 580.641810][T27359] syz_tun: left allmulticast mode [ 580.677553][T27359] bridge0: port 3(syz_tun) entered disabled state [ 580.729854][T27359] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 580.876348][T27381] set_capacity_and_notify: 2 callbacks suppressed [ 580.876370][T27381] loop6: detected capacity change from 0 to 4096 [ 580.917332][T27381] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.034264][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.733165][T27394] __nla_validate_parse: 5 callbacks suppressed [ 581.733183][T27394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4021'. [ 581.914608][T27417] FAULT_INJECTION: forcing a failure. [ 581.914608][T27417] name failslab, interval 1, probability 0, space 0, times 0 [ 581.929199][T27414] loop4: detected capacity change from 0 to 2048 [ 581.935982][T27417] CPU: 1 UID: 0 PID: 27417 Comm: syz.7.4026 Tainted: G W syzkaller #0 PREEMPT(full) [ 581.936020][T27417] Tainted: [W]=WARN [ 581.936027][T27417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 581.936110][T27417] Call Trace: [ 581.936119][T27417] [ 581.936129][T27417] __dump_stack+0x1d/0x30 [ 581.936162][T27417] dump_stack_lvl+0x95/0xd0 [ 581.936190][T27417] dump_stack+0x15/0x1b [ 581.936261][T27417] should_fail_ex+0x263/0x280 [ 581.936298][T27417] ? simple_xattrs_alloc+0x2f/0xa0 [ 581.936414][T27417] should_failslab+0x8c/0xb0 [ 581.936439][T27417] __kmalloc_cache_noprof+0x5f/0x400 [ 581.936505][T27417] simple_xattrs_alloc+0x2f/0xa0 [ 581.936567][T27417] shmem_initxattrs+0x42/0x3d0 [ 581.936624][T27417] security_inode_init_security+0x249/0x320 [ 581.936662][T27417] ? __pfx_shmem_initxattrs+0x10/0x10 [ 581.936741][T27417] shmem_mknod+0xaa/0x170 [ 581.936775][T27417] shmem_mkdir+0x33/0x70 [ 581.936809][T27417] vfs_mkdir+0x294/0x3e0 [ 581.936880][T27417] filename_mkdirat+0x138/0x300 [ 581.936907][T27417] __se_sys_mkdirat+0x32/0xf0 [ 581.936929][T27417] __x64_sys_mkdirat+0x43/0x50 [ 581.936950][T27417] x64_sys_call+0x2c4e/0x3020 [ 581.937106][T27417] do_syscall_64+0x12c/0x3b0 [ 581.937132][T27417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.937202][T27417] RIP: 0033:0x7efda65dc819 [ 581.937221][T27417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.937246][T27417] RSP: 002b:00007efda502f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 581.937272][T27417] RAX: ffffffffffffffda RBX: 00007efda6855fa0 RCX: 00007efda65dc819 [ 581.937289][T27417] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 581.937306][T27417] RBP: 00007efda502f090 R08: 0000000000000000 R09: 0000000000000000 [ 581.937322][T27417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.937337][T27417] R13: 00007efda6856038 R14: 00007efda6855fa0 R15: 00007ffc99c211e8 [ 581.937387][T27417] [ 582.168356][T27414] EXT4-fs (loop4): unsupported descriptor size 7 [ 582.284917][T27437] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4029'. [ 582.334932][T27439] loop6: detected capacity change from 0 to 4096 [ 582.353015][T27439] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.418154][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.461341][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 582.461360][ T28] audit: type=1400 audit(2000005560.834:6509): avc: denied { mount } for pid=27448 comm="syz.4.4031" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 582.513982][T27452] loop4: detected capacity change from 0 to 128 [ 582.538731][ T4245] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 582.556617][T27452] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 582.567381][ T4230] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 582.583803][ T4230] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 582.601575][ T4245] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 582.647330][T27452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4031'. [ 582.751362][T27464] syzkaller0: entered promiscuous mode [ 582.763261][T27464] syzkaller0: entered allmulticast mode [ 582.803820][T27470] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4038'. [ 583.190443][ T28] audit: type=1400 audit(2000005561.544:6510): avc: denied { bind } for pid=27479 comm="syz.4.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 583.209985][ T28] audit: type=1400 audit(2000005561.544:6511): avc: denied { node_bind } for pid=27479 comm="syz.4.4041" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 583.281395][ T28] audit: type=1400 audit(2000005561.544:6512): avc: denied { read } for pid=27479 comm="syz.4.4041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 583.669406][T27486] loop6: detected capacity change from 0 to 1024 [ 583.693045][T27486] EXT4-fs: Ignoring removed bh option [ 583.749753][T27488] loop9: detected capacity change from 0 to 4096 [ 583.765172][T27486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 583.789957][T27488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.822368][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 583.841245][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.886886][T27493] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4045'. [ 583.923175][ T28] audit: type=1400 audit(2000005562.294:6513): avc: denied { create } for pid=27494 comm="syz.9.4046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 584.011394][ T28] audit: type=1400 audit(2000005562.325:6514): avc: denied { sys_admin } for pid=27494 comm="syz.9.4046" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 584.055460][T27500] loop9: detected capacity change from 0 to 512 [ 584.074518][T27500] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.123942][T27500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.138373][ T28] audit: type=1400 audit(2000005562.375:6515): avc: denied { append } for pid=27499 comm="syz.9.4047" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 584.212200][T27506] netlink: 'syz.6.4051': attribute type 1 has an invalid length. [ 584.237149][ T28] audit: type=1400 audit(2000005562.415:6516): avc: denied { bind } for pid=27499 comm="syz.9.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 584.294944][T27500] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.342447][ T28] audit: type=1400 audit(2000005562.465:6517): avc: denied { read append } for pid=27502 comm="syz.6.4049" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 584.374140][T27500] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 584.448235][T27500] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4047'. [ 584.483946][ T28] audit: type=1400 audit(2000005562.465:6518): avc: denied { open } for pid=27502 comm="syz.6.4049" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 584.521331][T27500] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4047'. [ 584.703840][T27506] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4051'. [ 584.731812][T27519] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4052'. [ 584.826952][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.953472][T27506] loop6: detected capacity change from 0 to 128 [ 584.983771][T27506] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 585.013004][T27544] loop9: detected capacity change from 0 to 4096 [ 585.041076][T27506] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.109484][T27544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.236663][T27506] SELinux: policydb version -1486711591 does not match my version range 15-35 [ 585.249836][T27557] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4059'. [ 585.268265][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.278533][T27506] SELinux: failed to load policy [ 585.296772][T27506] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.4051: No space for directory leaf checksum. Please run e2fsck -D. [ 585.314355][T27506] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.4051: Directory block failed checksum [ 585.447166][T27580] netlink: 'syz.3.4061': attribute type 10 has an invalid length. [ 585.533616][T27582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.542108][T27582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.680754][T15319] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 585.823274][T27570] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.830615][T27570] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.885442][T27570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 585.940492][T27590] loop9: detected capacity change from 0 to 512 [ 585.964220][T27590] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 585.995867][T27590] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 586.016399][T27590] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 586.024767][T27590] System zones: 0-2, 18-18, 34-34 [ 586.031584][T27590] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.4063: bad orphan inode 15 [ 586.048978][T27590] loop9: lost filesystem error report for type 5 error -117 [ 586.049303][T27590] ext4_test_bit(bit=14, block=18) = 1 [ 586.062057][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 586.062078][ C1] EXT4-fs (loop9): initial error at time 2000005564: ext4_orphan_get:1423 [ 586.062121][ C1] EXT4-fs (loop9): last error at time 2000005564: ext4_orphan_get:1423 [ 586.081333][T27597] loop6: detected capacity change from 0 to 1764 [ 586.104858][T27590] is_bad_inode(inode)=0 [ 586.109422][T27590] NEXT_ORPHAN(inode)=2264924160 [ 586.118951][T27590] max_ino=32 [ 586.122342][T27590] i_nlink=0 [ 586.127737][T27590] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.4063: corrupted inode contents [ 586.139987][T27590] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.142537][T27590] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #15: comm syz.9.4063: mark_inode_dirty error [ 586.163747][T27590] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.165928][T27590] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.4063: corrupted inode contents [ 586.185369][T27590] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.187311][T27590] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.4063: mark_inode_dirty error [ 586.218794][T27590] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.219090][T27590] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.4063: mark inode dirty (error -117) [ 586.253649][T27590] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.253818][T27590] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 586.321862][T27590] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.646593][T27627] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4063: bg 0: block 80: padding at end of block bitmap is not set [ 587.180915][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.388837][T27653] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4074'. [ 587.464877][T27656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4073'. [ 587.476267][T27656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4073'. [ 587.486963][T27656] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4073'. [ 587.498899][T27656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4073'. [ 587.509633][T27656] netlink: 'syz.7.4073': attribute type 6 has an invalid length. [ 589.431952][T27677] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4078'. [ 589.536326][T27680] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4079'. [ 589.652724][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 589.652751][ T28] audit: type=1400 audit(2000005568.026:6529): avc: denied { execute } for pid=27686 comm="syz.7.4081" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=73533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 589.728025][ T28] audit: type=1400 audit(2000005568.086:6530): avc: denied { write } for pid=27686 comm="syz.7.4081" path="socket:[73540]" dev="sockfs" ino=73540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 589.878263][T27692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 589.912324][T27697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4084'. [ 590.114039][T27702] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4086'. [ 590.303280][T27706] netlink: 'syz.3.4087': attribute type 10 has an invalid length. [ 591.021508][T27718] netlink: 'syz.7.4091': attribute type 1 has an invalid length. [ 591.044500][T27720] netlink: 'syz.3.4092': attribute type 1 has an invalid length. [ 591.288607][T27726] loop9: detected capacity change from 0 to 512 [ 591.313711][T27726] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 591.361505][T27726] EXT4-fs (loop9): 1 orphan inode deleted [ 591.383549][T27726] EXT4-fs (loop9): 1 truncate cleaned up [ 591.405937][T27726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.542578][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.562278][T27718] SELinux: policydb version -1486711591 does not match my version range 15-35 [ 591.583866][T27718] SELinux: failed to load policy [ 591.623755][ T28] audit: type=1400 audit(2000005569.997:6531): avc: denied { map } for pid=27730 comm="syz.9.4094" path="socket:[74374]" dev="sockfs" ino=74374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 591.693243][ T28] audit: type=1400 audit(2000005569.997:6532): avc: denied { read } for pid=27730 comm="syz.9.4094" path="socket:[74374]" dev="sockfs" ino=74374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 591.701777][T27720] SELinux: policydb version -1486711591 does not match my version range 15-35 [ 591.782083][T27720] SELinux: failed to load policy [ 592.102574][ T28] audit: type=1400 audit(2000005570.477:6533): avc: denied { connect } for pid=27742 comm="syz.6.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 592.106296][T27743] netlink: 'syz.6.4098': attribute type 1 has an invalid length. [ 592.268632][ T28] audit: type=1400 audit(2000005570.647:6534): avc: denied { mounton } for pid=27739 comm="syz.7.4097" path="/142/bus" dev="tmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 592.482743][ T28] audit: type=1400 audit(2000005570.857:6535): avc: denied { read } for pid=27742 comm="syz.6.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 592.664121][ T28] audit: type=1400 audit(2000005570.957:6536): avc: denied { write } for pid=27742 comm="syz.6.4098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 592.863165][T27764] netlink: 'syz.4.4102': attribute type 6 has an invalid length. [ 592.897100][T27768] __nla_validate_parse: 3 callbacks suppressed [ 592.897172][T27768] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4104'. [ 592.906549][T27761] delete_channel: no stack [ 592.915223][T27766] netlink: 'syz.6.4103': attribute type 10 has an invalid length. [ 592.935622][T27769] lo speed is unknown, defaulting to 1000 [ 592.951453][T27771] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4104'. [ 593.004165][T27768] gretap0: entered promiscuous mode [ 593.077612][T27774] netlink: 260 bytes leftover after parsing attributes in process `syz.7.4105'. [ 593.091241][T27773] loop9: detected capacity change from 0 to 1024 [ 593.111634][T27771] 0{X功: renamed from gretap0 [ 593.120472][T27773] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 593.130503][T27773] System zones: 0-1, 3-36 [ 593.137253][T27771] 0{X功: left promiscuous mode [ 593.157597][T27771] 0{X功: entered allmulticast mode [ 593.164595][T27773] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.4104: bad orphan inode 134217728 [ 593.175870][T27771] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 593.192284][T27773] loop9: lost filesystem error report for type 5 error -117 [ 593.193160][T27773] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.266944][ T28] audit: type=1400 audit(2000005571.607:6537): avc: denied { listen } for pid=27784 comm="syz.6.4108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 593.301764][T27783] loop4: detected capacity change from 0 to 764 [ 593.400526][T27791] loop6: detected capacity change from 0 to 1024 [ 593.401262][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.410965][T27791] EXT4-fs: Ignoring removed mblk_io_submit option [ 593.422951][T27791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.431540][T27791] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 593.469711][T27791] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.4108: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 593.488393][T27791] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 593.489565][T27791] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4108: couldn't read orphan inode 11 (err -117) [ 593.510616][T27791] loop6: lost filesystem error report for type 5 error -117 [ 593.520530][ C0] EXT4-fs (loop6): error count since last fsck: 2 [ 593.534371][ C0] EXT4-fs (loop6): initial error at time 2000005571: ext4_ext_check_inode:521: inode 11 [ 593.544137][ C0] EXT4-fs (loop6): last error at time 2000005571: ext4_orphan_get:1402 [ 593.581044][T27796] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4109'. [ 593.657121][T27791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.818134][ T28] audit: type=1400 audit(2000005572.177:6538): avc: denied { getopt } for pid=27799 comm="syz.9.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 594.012254][T27807] netlink: 'syz.9.4112': attribute type 1 has an invalid length. [ 594.034414][T27807] bond1: entered promiscuous mode [ 594.040358][T27807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 594.090811][T27807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=27807 comm=syz.9.4112 [ 594.174092][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.742672][T27826] netlink: 'syz.4.4118': attribute type 10 has an invalid length. [ 595.144183][T27829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.164980][T27829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.265900][T27835] lo speed is unknown, defaulting to 1000 [ 595.332595][T27842] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4120'. [ 595.415406][T27841] Process accounting resumed [ 595.439483][T27847] loop9: detected capacity change from 0 to 512 [ 595.454892][T27847] msdos: Bad value for 'uid' [ 595.459898][T27847] msdos: Bad value for 'uid' [ 595.503045][T27847] syzkaller0: entered promiscuous mode [ 595.513420][T27847] syzkaller0: entered allmulticast mode [ 595.544132][T27852] loop4: detected capacity change from 0 to 512 [ 595.555523][T27852] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 595.586013][T27852] EXT4-fs (loop4): 1 truncate cleaned up [ 595.594374][T27852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 595.610435][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 595.610458][ T28] audit: type=1400 audit(2000005573.988:6540): avc: denied { unlink } for pid=27850 comm="syz.4.4126" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 595.804592][ T28] audit: type=1400 audit(2000005573.998:6541): avc: denied { rename } for pid=27850 comm="syz.4.4126" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 596.686150][T27852] netlink: 'syz.4.4126': attribute type 39 has an invalid length. [ 596.769272][ T28] audit: type=1400 audit(2000005573.998:6542): avc: denied { rmdir } for pid=27850 comm="syz.4.4126" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 596.852688][ T28] audit: type=1400 audit(2000005575.218:6543): avc: denied { setopt } for pid=27858 comm="syz.6.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 596.867741][T27867] netlink: 'syz.9.4129': attribute type 1 has an invalid length. [ 596.886474][T27867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 596.927729][T27867] bond2: (slave veth3): Enslaving as an active interface with a down link [ 596.946194][T27873] FAULT_INJECTION: forcing a failure. [ 596.946194][T27873] name failslab, interval 1, probability 0, space 0, times 0 [ 596.960508][T27867] bond2: (slave dummy0): making interface the new active one [ 596.965197][T27873] CPU: 0 UID: 0 PID: 27873 Comm: syz.7.4131 Tainted: G W syzkaller #0 PREEMPT(full) [ 596.965232][T27873] Tainted: [W]=WARN [ 596.965269][T27873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 596.965282][T27873] Call Trace: [ 596.965289][T27873] [ 596.965298][T27873] __dump_stack+0x1d/0x30 [ 596.965328][T27873] dump_stack_lvl+0x95/0xd0 [ 596.965353][T27873] dump_stack+0x15/0x1b [ 596.965377][T27873] should_fail_ex+0x263/0x280 [ 596.965501][T27873] ? __pfx_sock_alloc_inode+0x10/0x10 [ 596.965532][T27873] should_failslab+0x8c/0xb0 [ 596.965590][T27873] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 596.965624][T27873] ? sock_alloc_inode+0x36/0xf0 [ 596.965652][T27873] ? selinux_socket_create+0xfd/0x180 [ 596.965674][T27873] ? __pfx_sock_alloc_inode+0x10/0x10 [ 596.965703][T27873] sock_alloc_inode+0x36/0xf0 [ 596.965833][T27873] alloc_inode+0x40/0x170 [ 596.965908][T27873] __sock_create+0x120/0x580 [ 596.965997][T27873] __sys_socket+0xaf/0x180 [ 596.966028][T27873] __x64_sys_socket+0x3f/0x50 [ 596.966090][T27873] x64_sys_call+0x11fc/0x3020 [ 596.966118][T27873] do_syscall_64+0x12c/0x3b0 [ 596.966139][T27873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.966162][T27873] RIP: 0033:0x7efda65de087 [ 596.966218][T27873] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.966238][T27873] RSP: 002b:00007efda502df98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 596.966268][T27873] RAX: ffffffffffffffda RBX: 00007efda6855fa0 RCX: 00007efda65de087 [ 596.966283][T27873] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 596.966308][T27873] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 596.966322][T27873] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000001 [ 596.966336][T27873] R13: 00007efda6856038 R14: 00007efda6855fa0 R15: 00007ffc99c211e8 [ 596.966356][T27873] [ 596.966429][T27873] socket: no more sockets [ 596.972125][T27867] dummy0: entered promiscuous mode [ 597.034183][ T28] audit: type=1400 audit(2000005575.408:6544): avc: denied { setopt } for pid=27876 comm="syz.7.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 597.044276][T27867] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 597.266458][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.267858][T27878] bond2 (unregistering): (slave veth3): Releasing active interface [ 597.293440][T27882] loop6: detected capacity change from 0 to 128 [ 597.303144][T27878] bond2 (unregistering): (slave dummy0): Releasing active interface [ 597.319101][T27878] bond2 (unregistering): Released all slaves [ 597.408734][T27882] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 597.417845][T27882] FAT-fs (loop6): Filesystem has been set read-only [ 597.424999][T27882] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 597.435436][T27882] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 597.503332][T27878] loop9: detected capacity change from 0 to 1764 [ 597.517095][T27897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4139'. [ 597.538908][T27892] netlink: 'syz.4.4138': attribute type 4 has an invalid length. [ 597.550593][ T28] audit: type=1400 audit(2000005575.918:6545): avc: denied { connect } for pid=27890 comm="syz.4.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 597.595382][T27895] netlink: 'syz.4.4138': attribute type 4 has an invalid length. [ 598.751498][T27916] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4143'. [ 599.103667][T27919] netlink: 'syz.3.4140': attribute type 36 has an invalid length. [ 599.121451][T27919] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 599.131419][T27919] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 599.146149][T27919] netlink: 'syz.3.4140': attribute type 10 has an invalid length. [ 599.217283][T27920] xt_TPROXY: Can be used only with -p tcp or -p udp [ 599.664120][T27919] macvlan1: entered allmulticast mode [ 599.736522][T27928] netlink: 'syz.9.4148': attribute type 1 has an invalid length. [ 599.784229][ T28] audit: type=1400 audit(2000005578.133:6546): avc: denied { bind } for pid=27930 comm="syz.6.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.896284][T27946] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4153'. [ 600.066277][T27954] serio: Serial port ttyS3 [ 600.068270][T27928] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4148'. [ 600.142943][T27942] loop9: detected capacity change from 0 to 128 [ 600.158011][T27942] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 600.175047][T27942] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.203751][T27942] SELinux: policydb version -1486711591 does not match my version range 15-35 [ 600.213844][T27938] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.228727][T27942] SELinux: failed to load policy [ 600.234883][T27942] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.4148: No space for directory leaf checksum. Please run e2fsck -D. [ 600.252027][T27942] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.4148: Directory block failed checksum [ 600.256718][T27961] sg_write: data in/out 443358/706 bytes for SCSI command 0x0-- guessing data in; [ 600.256718][T27961] program syz.6.4156 not setting count and/or reply_len properly [ 600.304504][T27961] 9p: Could not find request transport: 鏳rfd [ 600.311793][T27961] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4156'. [ 600.328906][T27938] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.371822][T27938] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.472653][T27938] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.530273][ T4242] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.550198][ T4242] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.562533][T27981] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4163'. [ 600.566563][ T4242] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.579831][ T4242] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.598796][T27981] 1{X功: entered promiscuous mode [ 600.604344][T27981] 1{X功: left allmulticast mode [ 600.632507][T27981] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4163'. [ 600.672522][T27981] 0{X功: renamed from 31{X功 [ 600.673656][T26738] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 600.707383][T27929] Set syz1 is full, maxelem 65536 reached [ 600.713541][T27983] loop6: detected capacity change from 0 to 1024 [ 600.725755][T27981] 0{X功: left promiscuous mode [ 600.731383][T27981] 0{X功: entered allmulticast mode [ 600.743124][T27981] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 600.780445][T27983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 600.793479][ T28] audit: type=1400 audit(2000005579.068:6547): avc: denied { map } for pid=27990 comm="syz.3.4167" path="socket:[75885]" dev="sockfs" ino=75885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 600.812513][T27983] System zones: 0-1, 3-36 [ 600.831684][T27983] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.4163: bad orphan inode 134217728 [ 600.836727][T27993] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4165'. [ 600.860905][T27983] loop6: lost filesystem error report for type 5 error -117 [ 600.861420][T27983] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.953649][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.065748][T28018] xt_hashlimit: size too large, truncated to 1048576 [ 601.090561][T28018] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 601.154037][T28024] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4179'. [ 601.211448][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4180'. [ 601.358410][ T28] audit: type=1400 audit(2000005579.602:6548): avc: denied { bind } for pid=28046 comm="syz.7.4186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 601.475645][T28054] loop6: detected capacity change from 0 to 1024 [ 601.510782][T28055] netlink: 'syz.7.4187': attribute type 10 has an invalid length. [ 601.511195][T28054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.569520][T28054] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.654987][T28055] syz_tun: entered promiscuous mode [ 601.667030][T28055] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 601.788645][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 601.806022][T28074] syzkaller0: entered promiscuous mode [ 601.811665][ T28] audit: type=1400 audit(2000005580.023:6549): avc: denied { ioctl } for pid=28072 comm="syz.3.4193" path="socket:[75331]" dev="sockfs" ino=75331 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 601.838479][T28074] syzkaller0: entered allmulticast mode [ 601.916725][T28078] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 601.939420][T28078] block device autoloading is deprecated and will be removed. [ 603.446822][T27959] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 604.983341][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 605.120280][T28106] loop9: detected capacity change from 0 to 1024 [ 605.128122][T28108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4199'. [ 605.139236][T28106] EXT4-fs: Ignoring removed i_version option [ 605.146787][T28076] can0: slcan on ttyS3. [ 605.172311][T28106] EXT4-fs: quotafile must be on filesystem root [ 605.349648][T28139] syzkaller1: entered promiscuous mode [ 605.369531][T28139] syzkaller1: entered allmulticast mode [ 605.374841][T28142] IPv6: Can't replace route, no match found [ 605.385881][ T28] audit: type=1400 audit(2000005583.364:6550): avc: denied { mount } for pid=28141 comm="syz.9.4206" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 605.467709][T28149] loop9: detected capacity change from 0 to 1024 [ 605.490084][T28149] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 605.490084][T28149] [ 605.716297][T28163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4208'. [ 605.725408][T28163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4208'. [ 605.734591][T28163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4208'. [ 605.743841][T28163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4208'. [ 605.752805][T28163] netlink: 'syz.3.4208': attribute type 6 has an invalid length. [ 606.068029][ T28] audit: type=1400 audit(2000005584.009:6551): avc: denied { create } for pid=28148 comm="syz.9.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 606.092170][T28149] SET target dimension over the limit! [ 606.110901][ T28] audit: type=1400 audit(2000005584.028:6552): avc: denied { connect } for pid=28148 comm="syz.9.4207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 608.806769][T28179] FAULT_INJECTION: forcing a failure. [ 608.806769][T28179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.852578][T28179] CPU: 0 UID: 0 PID: 28179 Comm: syz.7.4214 Tainted: G W syzkaller #0 PREEMPT(full) [ 608.852619][T28179] Tainted: [W]=WARN [ 608.852629][T28179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 608.852643][T28179] Call Trace: [ 608.852698][T28179] [ 608.852707][T28179] __dump_stack+0x1d/0x30 [ 608.852738][T28179] dump_stack_lvl+0x95/0xd0 [ 608.852765][T28179] dump_stack+0x15/0x1b [ 608.852791][T28179] should_fail_ex+0x263/0x280 [ 608.852889][T28179] should_fail+0xb/0x20 [ 608.852979][T28179] should_fail_usercopy+0x1a/0x20 [ 608.853072][T28179] _copy_from_user+0x1c/0xb0 [ 608.853093][T28179] l2cap_sock_setsockopt+0xbf9/0x13d0 [ 608.853137][T28179] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 608.853251][T28179] __sys_setsockopt+0x184/0x200 [ 608.853277][T28179] __x64_sys_setsockopt+0x64/0x80 [ 608.853369][T28179] x64_sys_call+0x2327/0x3020 [ 608.853401][T28179] do_syscall_64+0x12c/0x3b0 [ 608.853435][T28179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.853459][T28179] RIP: 0033:0x7efda65dc819 [ 608.853541][T28179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.853564][T28179] RSP: 002b:00007efda502f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 608.853632][T28179] RAX: ffffffffffffffda RBX: 00007efda6855fa0 RCX: 00007efda65dc819 [ 608.853656][T28179] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000004 [ 608.853668][T28179] RBP: 00007efda502f090 R08: 000000000000000c R09: 0000000000000000 [ 608.853680][T28179] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 608.853692][T28179] R13: 00007efda6856038 R14: 00007efda6855fa0 R15: 00007ffc99c211e8 [ 608.853710][T28179] [ 609.033272][T28185] loop6: detected capacity change from 0 to 512 [ 609.046638][T28185] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.059274][T28185] EXT4-fs: inline encryption not supported [ 609.070997][T28185] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.077646][T28185] EXT4-fs (loop6): unable to read superblock [ 609.088242][T28191] netlink: 'syz.7.4221': attribute type 6 has an invalid length. [ 609.113599][ T28] audit: type=1400 audit(2000005586.864:6553): avc: denied { write } for pid=28183 comm="syz.6.4218" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 609.150774][ T28] audit: type=1400 audit(2000005586.864:6554): avc: denied { ioctl } for pid=28183 comm="syz.6.4218" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 609.180421][T28187] loop4: detected capacity change from 0 to 8192 [ 609.195165][T28195] netlink: 'syz.9.4220': attribute type 10 has an invalid length. [ 609.203468][T28195] syz_tun: entered promiscuous mode [ 609.216892][T28187] FAT-fs (loop4): bogus number of directory entries (249) [ 609.247788][T28187] FAT-fs (loop4): Can't find a valid FAT filesystem [ 609.266948][T28204] netlink: 'syz.7.4222': attribute type 10 has an invalid length. [ 609.395395][ T28] audit: type=1400 audit(2000005587.116:6555): avc: denied { wake_alarm } for pid=28208 comm="syz.4.4225" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 609.615111][ T28] audit: type=1400 audit(2000005587.322:6556): avc: denied { append } for pid=28216 comm="syz.9.4226" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 609.660643][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4227'. [ 609.691965][T28226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.733115][T28232] netlink: 'syz.7.4232': attribute type 6 has an invalid length. [ 609.765396][T28234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4233'. [ 609.800171][T28241] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4236'. [ 609.821671][T28241] 0{X功: entered promiscuous mode [ 609.838391][T28241] 0{X功: left allmulticast mode [ 609.871325][T28241] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4236'. [ 609.880285][T28241] 1{X功: renamed from 30{X功 [ 609.889814][T28241] 1{X功: left promiscuous mode [ 609.895047][T28241] 1{X功: entered allmulticast mode [ 609.902020][T28241] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 609.916968][T28239] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20000 [ 609.929846][ T28] audit: type=1400 audit(2000005587.622:6557): avc: denied { ioctl } for pid=28238 comm="syz.7.4235" path="socket:[76350]" dev="sockfs" ino=76350 ioctlcmd=0x583c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 609.966809][T28241] loop4: detected capacity change from 0 to 1024 [ 609.967568][T28239] lo speed is unknown, defaulting to 1000 [ 610.049857][T28247] netlink: 'syz.9.4237': attribute type 10 has an invalid length. [ 610.062479][T28241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 610.103512][T28241] System zones: 0-1, 3-36 [ 610.168672][T28241] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.4236: bad orphan inode 134217728 [ 610.180144][T28241] loop4: lost filesystem error report for type 5 error -117 [ 610.200915][T28241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.246246][ T28] audit: type=1400 audit(2000005587.921:6558): avc: denied { map } for pid=28248 comm="syz.3.4238" path="socket:[76398]" dev="sockfs" ino=76398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 610.295382][T28249] openvswitch: netlink: EtherType 0 is less than min 600 [ 610.307298][ T28] audit: type=1400 audit(2000005587.921:6559): avc: denied { accept } for pid=28248 comm="syz.3.4238" path="socket:[76398]" dev="sockfs" ino=76398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 610.337556][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.346953][ T28] audit: type=1400 audit(2000005587.958:6560): avc: denied { audit_write } for pid=28248 comm="syz.3.4238" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 610.373270][ T28] audit: type=1107 audit(2000005587.958:6561): pid=28248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 610.424482][ T28] audit: type=1400 audit(2000005587.958:6562): avc: denied { getopt } for pid=28248 comm="syz.3.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 610.535387][T28264] netlink: 'syz.4.4240': attribute type 10 has an invalid length. [ 610.581046][T28267] netlink: 'syz.7.4244': attribute type 6 has an invalid length. [ 610.624598][T28271] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4246'. [ 610.639067][T28273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4247'. [ 610.778678][T28283] netlink: 'syz.3.4249': attribute type 10 has an invalid length. [ 611.159328][T28315] lo speed is unknown, defaulting to 1000 [ 611.200182][T28319] netlink: 'syz.4.4262': attribute type 1 has an invalid length. [ 611.230324][T28316] netlink: 'syz.7.4260': attribute type 10 has an invalid length. [ 611.248950][T28319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 611.260773][T28324] netlink: 'syz.3.4263': attribute type 1 has an invalid length. [ 611.455256][T28328] loop9: detected capacity change from 0 to 1024 [ 611.585350][T28328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.600878][T28328] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.688885][T28328] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.4259: bg 0: block 3: invalid block bitmap [ 611.708358][T28328] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 611.721978][T28328] EXT4-fs (loop9): This should not happen!! Data will be lost [ 611.721978][T28328] [ 611.732626][T28328] EXT4-fs (loop9): Total free blocks count 0 [ 611.744171][T28328] EXT4-fs (loop9): Free/Dirty block details [ 611.750887][T28328] EXT4-fs (loop9): free_blocks=0 [ 611.756512][T28328] EXT4-fs (loop9): dirty_blocks=64 [ 611.764719][T28328] EXT4-fs (loop9): Block reservation details [ 611.770843][T28328] EXT4-fs (loop9): i_reserved_data_blocks=4 [ 612.584539][T28324] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4263'. [ 612.693303][T28340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4265'. [ 613.008901][T26738] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 613.022844][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 613.143488][T28351] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4268'. [ 613.163101][T28351] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4268'. [ 613.173472][T28360] loop4: detected capacity change from 0 to 512 [ 613.217700][T28360] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 613.248837][T28366] loop6: detected capacity change from 0 to 512 [ 613.279115][T28366] EXT4-fs (loop6): 1 truncate cleaned up [ 613.287119][T28369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4276'. [ 613.297667][T28366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.304330][T28360] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 613.312886][T28365] EXT4-fs (loop6): shut down requested (2) [ 613.331370][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 613.337849][ C0] EXT4-fs (loop4): initial error at time 2000005590: mb_free_blocks:2049: inode 11: block 64 [ 613.348172][ C0] EXT4-fs (loop4): last error at time 2000005590: mb_free_blocks:2049: inode 11: block 64 [ 613.356696][T28360] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.4271: corrupted inode contents [ 613.371219][T28370] loop9: detected capacity change from 0 to 128 [ 613.389282][T28360] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.409226][T28360] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #11: comm syz.4.4271: mark_inode_dirty error [ 613.431299][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.443106][T28360] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.443358][T28360] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4271: invalid indirect mapped block 1 (level 1) [ 613.472200][T28360] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.472370][T28360] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.4271: corrupted inode contents [ 613.499011][T28360] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.499228][T28360] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 613.517892][T28360] loop4: lost filesystem error report for type 5 error -117 [ 613.518071][T28360] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #11: comm syz.4.4271: corrupted inode contents [ 613.537984][T28360] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.538192][T28360] EXT4-fs error (device loop4): ext4_truncate:4690: inode #11: comm syz.4.4271: mark_inode_dirty error [ 613.559754][T28388] netlink: 'syz.3.4278': attribute type 10 has an invalid length. [ 613.568770][T28360] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.634803][T28393] netlink: 'syz.7.4281': attribute type 6 has an invalid length. [ 613.656798][T28360] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 613.682152][T28393] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4281'. [ 613.694770][T28360] loop4: lost filesystem error report for type 5 error -117 [ 613.695165][T28360] EXT4-fs (loop4): 1 truncate cleaned up [ 613.720890][T28360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 613.755120][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4281'. [ 613.766008][T28360] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.4271: invalid fast symlink length 39 [ 613.831256][T28399] FAULT_INJECTION: forcing a failure. [ 613.831256][T28399] name failslab, interval 1, probability 0, space 0, times 0 [ 613.866547][T28399] CPU: 1 UID: 0 PID: 28399 Comm: syz.6.4284 Tainted: G W syzkaller #0 PREEMPT(full) [ 613.866583][T28399] Tainted: [W]=WARN [ 613.866590][T28399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 613.866601][T28399] Call Trace: [ 613.866609][T28399] [ 613.866618][T28399] __dump_stack+0x1d/0x30 [ 613.866656][T28399] dump_stack_lvl+0x95/0xd0 [ 613.866762][T28399] dump_stack+0x15/0x1b [ 613.866790][T28399] should_fail_ex+0x263/0x280 [ 613.866823][T28399] ? ip_set_create+0x1ec/0x970 [ 613.866847][T28399] should_failslab+0x8c/0xb0 [ 613.866909][T28399] __kmalloc_cache_noprof+0x5f/0x400 [ 613.866938][T28399] ip_set_create+0x1ec/0x970 [ 613.866988][T28399] ? nla_get_range_unsigned+0x253/0x290 [ 613.867034][T28399] ? __nla_parse+0x40/0x60 [ 613.867053][T28399] nfnetlink_rcv_msg+0x4fe/0x5d0 [ 613.867126][T28399] netlink_rcv_skb+0x123/0x220 [ 613.867152][T28399] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 613.867248][T28399] nfnetlink_rcv+0x167/0x1720 [ 613.867348][T28399] ? xas_load+0x413/0x430 [ 613.867387][T28399] ? xas_load+0x413/0x430 [ 613.867415][T28399] ? __rcu_read_unlock+0x4e/0x70 [ 613.867499][T28399] ? xa_load+0xb1/0xe0 [ 613.867518][T28399] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 613.867549][T28399] ? set_normalized_timespec64+0xe0/0x110 [ 613.867579][T28399] ? __account_obj_stock+0x3d5/0x590 [ 613.867615][T28399] ? __account_obj_stock+0x3d5/0x590 [ 613.867716][T28399] ? __rcu_read_unlock+0x4e/0x70 [ 613.867783][T28399] ? should_fail_ex+0x30/0x280 [ 613.867814][T28399] ? __rcu_read_unlock+0x4e/0x70 [ 613.867858][T28399] ? avc_has_perm_noaudit+0xab/0x130 [ 613.867895][T28399] ? selinux_nlmsg_lookup+0x99/0x890 [ 613.867919][T28399] ? selinux_netlink_send+0x5c2/0x610 [ 613.868053][T28399] ? __rcu_read_unlock+0x33/0x70 [ 613.868076][T28399] ? __netlink_lookup+0x276/0x2b0 [ 613.868104][T28399] netlink_unicast+0x5a8/0x680 [ 613.868159][T28399] netlink_sendmsg+0x5c8/0x6f0 [ 613.868190][T28399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.868216][T28399] ____sys_sendmsg+0x563/0x5b0 [ 613.868317][T28399] ___sys_sendmsg+0x195/0x1e0 [ 613.868350][T28399] __x64_sys_sendmsg+0xd4/0x160 [ 613.868399][T28399] x64_sys_call+0x194c/0x3020 [ 613.868503][T28399] do_syscall_64+0x12c/0x3b0 [ 613.868526][T28399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.868570][T28399] RIP: 0033:0x7ff34ed7c819 [ 613.868587][T28399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.868604][T28399] RSP: 002b:00007ff34d7d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.868626][T28399] RAX: ffffffffffffffda RBX: 00007ff34eff5fa0 RCX: 00007ff34ed7c819 [ 613.868643][T28399] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 613.868672][T28399] RBP: 00007ff34d7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 613.868686][T28399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.868701][T28399] R13: 00007ff34eff6038 R14: 00007ff34eff5fa0 R15: 00007fffd5d42808 [ 613.868721][T28399] [ 613.952262][ T4474] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 614.192006][ T4474] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 614.203990][T28417] netlink: 'syz.7.4287': attribute type 12 has an invalid length. [ 614.213948][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.230941][T28417] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4287'. [ 614.265319][ T4474] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 614.278419][T28422] loop6: detected capacity change from 0 to 512 [ 614.300311][ T4474] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 614.310584][T28422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 614.340781][T28422] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.4290: iget: bad i_size value: 38620345925642 [ 614.353865][T28422] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 614.357159][T28422] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.4290: couldn't read orphan inode 15 (err -117) [ 614.357222][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 614.384754][ C1] EXT4-fs (loop6): initial error at time 2000005591: ext4_orphan_get:1397: inode 15 [ 614.394286][ C1] EXT4-fs (loop6): last error at time 2000005591: ext4_orphan_get:1397: inode 15 [ 614.404168][T28422] loop6: lost filesystem error report for type 5 error -117 [ 614.408082][T28422] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.178161][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.273763][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 615.273785][ T28] audit: type=1400 audit(2000005592.581:6576): avc: denied { module_load } for pid=28445 comm="syz.6.4296" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=77855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 615.476716][ T28] audit: type=1400 audit(2000005592.665:6577): avc: denied { lock } for pid=28445 comm="syz.6.4296" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=77855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 615.586880][ T28] audit: type=1400 audit(2000005592.797:6578): avc: denied { ioctl } for pid=28447 comm="syz.3.4297" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 615.766720][ T28] audit: type=1400 audit(2000005593.077:6579): avc: denied { append } for pid=28459 comm="syz.3.4300" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 615.863205][T28464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.887377][ T28] audit: type=1400 audit(2000005593.133:6580): avc: denied { setattr } for pid=28459 comm="syz.3.4300" name="NETLINK" dev="sockfs" ino=77904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 615.915969][T28464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.928199][T28464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.957876][T28464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.061047][T28466] lo speed is unknown, defaulting to 1000 [ 616.182811][T28481] FAULT_INJECTION: forcing a failure. [ 616.182811][T28481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 616.196299][T28481] CPU: 1 UID: 0 PID: 28481 Comm: syz.6.4308 Tainted: G W syzkaller #0 PREEMPT(full) [ 616.196337][T28481] Tainted: [W]=WARN [ 616.196345][T28481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 616.196358][T28481] Call Trace: [ 616.196366][T28481] [ 616.196377][T28481] __dump_stack+0x1d/0x30 [ 616.196483][T28481] dump_stack_lvl+0x95/0xd0 [ 616.196543][T28481] dump_stack+0x15/0x1b [ 616.196604][T28481] should_fail_ex+0x263/0x280 [ 616.196700][T28481] should_fail+0xb/0x20 [ 616.196730][T28481] should_fail_usercopy+0x1a/0x20 [ 616.196814][T28481] _copy_to_user+0x20/0xa0 [ 616.196908][T28481] simple_read_from_buffer+0xb5/0x130 [ 616.196936][T28481] proc_fail_nth_read+0x10e/0x150 [ 616.196986][T28481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 616.197021][T28481] vfs_read+0x1ab/0x7f0 [ 616.197074][T28481] ? fdget_pos+0xff/0x1d0 [ 616.197102][T28481] ? __pfx___sanitizer_cov_trace_const_cmp8+0x10/0x10 [ 616.197153][T28481] ksys_read+0xdc/0x1a0 [ 616.197198][T28481] __x64_sys_read+0x40/0x50 [ 616.197231][T28481] x64_sys_call+0x2886/0x3020 [ 616.197266][T28481] do_syscall_64+0x12c/0x3b0 [ 616.197334][T28481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.197360][T28481] RIP: 0033:0x7ff34ed3d04e [ 616.197379][T28481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 616.197402][T28481] RSP: 002b:00007ff34d7d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 616.197462][T28481] RAX: ffffffffffffffda RBX: 00007ff34d7d76c0 RCX: 00007ff34ed3d04e [ 616.197480][T28481] RDX: 000000000000000f RSI: 00007ff34d7d70a0 RDI: 0000000000000004 [ 616.197495][T28481] RBP: 00007ff34d7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 616.197510][T28481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.197525][T28481] R13: 00007ff34eff6038 R14: 00007ff34eff5fa0 R15: 00007fffd5d42808 [ 616.197547][T28481] [ 619.306915][T28514] loop9: detected capacity change from 0 to 512 [ 619.331939][T28514] EXT4-fs (loop9): 1 orphan inode deleted [ 619.347791][ T4437] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 619.365496][T28514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.378307][ T4437] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:28: Failed to release dquot type 1 [ 619.378394][T28524] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 619.390254][ T4437] loop9: lost filesystem error report for type 5 error -117 [ 619.396388][T28524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 619.415373][T28514] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.424994][T28524] vhci_hcd vhci_hcd.0: Device attached [ 619.440834][T28528] netlink: 'syz.3.4318': attribute type 6 has an invalid length. [ 619.449791][T28529] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(5) [ 619.456363][T28529] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 619.466359][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.475480][T28529] vhci_hcd vhci_hcd.0: Device attached [ 619.489496][T28524] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(7) [ 619.496063][T28524] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 619.504140][T28524] vhci_hcd vhci_hcd.0: Device attached [ 619.513886][T28534] vhci_hcd: connection closed [ 619.514066][ T4230] vhci_hcd vhci_hcd.7: stop threads [ 619.514345][T28525] vhci_hcd: connection closed [ 619.519091][T28531] vhci_hcd: connection closed [ 619.528953][ T4230] vhci_hcd vhci_hcd.7: release socket [ 619.549910][ T4230] vhci_hcd vhci_hcd.7: disconnect device [ 619.561473][ T4230] vhci_hcd vhci_hcd.7: stop threads [ 619.568940][ T4230] vhci_hcd vhci_hcd.7: release socket [ 619.575553][T28541] FAULT_INJECTION: forcing a failure. [ 619.575553][T28541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.588803][ T4230] vhci_hcd vhci_hcd.7: disconnect device [ 619.588980][T28541] CPU: 0 UID: 0 PID: 28541 Comm: syz.9.4321 Tainted: G W syzkaller #0 PREEMPT(full) [ 619.589071][T28541] Tainted: [W]=WARN [ 619.589079][T28541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 619.589091][T28541] Call Trace: [ 619.589098][T28541] [ 619.589106][T28541] __dump_stack+0x1d/0x30 [ 619.589135][T28541] dump_stack_lvl+0x95/0xd0 [ 619.589216][T28541] dump_stack+0x15/0x1b [ 619.589263][T28541] should_fail_ex+0x263/0x280 [ 619.589294][T28541] should_fail+0xb/0x20 [ 619.589322][T28541] should_fail_usercopy+0x1a/0x20 [ 619.589407][T28541] _copy_from_iter+0xcf/0xea0 [ 619.589439][T28541] ? __alloc_skb+0x4f6/0x690 [ 619.589460][T28541] ? __alloc_skb+0x200/0x690 [ 619.589480][T28541] netlink_sendmsg+0x4ae/0x6f0 [ 619.589534][T28541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.589626][T28541] ____sys_sendmsg+0x563/0x5b0 [ 619.589652][T28541] ___sys_sendmsg+0x195/0x1e0 [ 619.589693][T28541] __x64_sys_sendmsg+0xd4/0x160 [ 619.589807][T28541] x64_sys_call+0x194c/0x3020 [ 619.589835][T28541] do_syscall_64+0x12c/0x3b0 [ 619.589933][T28541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.589956][T28541] RIP: 0033:0x7f55ab1bc819 [ 619.589973][T28541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.589993][T28541] RSP: 002b:00007f55a9c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.590021][T28541] RAX: ffffffffffffffda RBX: 00007f55ab435fa0 RCX: 00007f55ab1bc819 [ 619.590046][T28541] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 619.590117][T28541] RBP: 00007f55a9c17090 R08: 0000000000000000 R09: 0000000000000000 [ 619.590131][T28541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.590145][T28541] R13: 00007f55ab436038 R14: 00007f55ab435fa0 R15: 00007ffeb96b04c8 [ 619.590203][T28541] [ 619.624848][T28545] __nla_validate_parse: 2 callbacks suppressed [ 619.624864][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4323'. [ 619.650456][ T4230] vhci_hcd vhci_hcd.7: stop threads [ 619.804075][ T4230] vhci_hcd vhci_hcd.7: release socket [ 619.809630][ T4230] vhci_hcd vhci_hcd.7: disconnect device [ 619.831229][T28552] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4324'. [ 619.840664][T28552] 1{X功: entered promiscuous mode [ 619.845963][T28552] 1{X功: left allmulticast mode [ 619.872256][T28552] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4324'. [ 619.883767][T28552] 0{X功: renamed from 31{X功 [ 619.902068][T28552] 0{X功: left promiscuous mode [ 619.911244][T28552] 0{X功: entered allmulticast mode [ 619.930844][T28553] loop4: detected capacity change from 0 to 1024 [ 619.936440][T28552] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 619.956085][T28553] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 619.971657][T28553] System zones: 0-1, 3-36 [ 619.979806][T28553] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.4324: bad orphan inode 134217728 [ 619.990662][T28553] loop4: lost filesystem error report for type 5 error -117 [ 619.991472][T28553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.995755][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4325'. [ 620.047766][T28558] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4326'. [ 620.085703][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.168535][T28566] loop9: detected capacity change from 0 to 2048 [ 620.235906][T28566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.248736][T28566] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.507702][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.923136][T28593] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4338'. [ 620.958772][T28596] netlink: 64985 bytes leftover after parsing attributes in process `syz.6.4339'. [ 621.098236][T28609] netlink: 'syz.6.4342': attribute type 1 has an invalid length. [ 621.106551][T28594] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4335'. [ 621.273737][T28618] netlink: 'syz.7.4346': attribute type 10 has an invalid length. [ 621.301181][T28620] netlink: 'syz.4.4344': attribute type 10 has an invalid length. [ 621.328811][T28614] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4342'. [ 621.436837][T28614] loop6: detected capacity change from 0 to 128 [ 621.460392][T28614] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 621.472886][T28614] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.491570][T28609] SELinux: failed to load policy [ 621.497308][T28609] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.4342: No space for directory leaf checksum. Please run e2fsck -D. [ 621.513041][T28609] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.4342: Directory block failed checksum [ 621.668871][T28640] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4351'. [ 621.723580][T28638] can0 (unregistered): slcan off ttyS3. [ 621.917106][ T28] audit: type=1400 audit(2000005598.758:6581): avc: denied { ioctl } for pid=28637 comm="syz.4.4352" path="socket:[78231]" dev="sockfs" ino=78231 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 624.317868][T28657] rdma_op ffff88810e7da180 conn xmit_rdma 0000000000000000 [ 624.467694][T15319] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 624.491074][T28664] netlink: 'syz.7.4358': attribute type 1 has an invalid length. [ 624.499415][T28656] loop9: detected capacity change from 0 to 1024 [ 624.514752][T28656] EXT4-fs: Ignoring removed bh option [ 624.566580][T28656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.635734][T28656] openvswitch: netlink: EtherType 0 is less than min 600 [ 624.722102][ T28] audit: type=1107 audit(2000005601.462:6582): pid=28655 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 624.840139][T28692] netlink: 'syz.3.4359': attribute type 10 has an invalid length. [ 624.870750][ T28] audit: type=1400 audit(2000005601.602:6583): avc: denied { setattr } for pid=28689 comm="syz.4.4362" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 625.047033][T28664] __nla_validate_parse: 5 callbacks suppressed [ 625.047053][T28664] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4358'. [ 626.063128][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.114838][T28734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.145274][T28734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.162943][T28732] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4364'. [ 626.180164][T28738] netlink: 'syz.7.4366': attribute type 6 has an invalid length. [ 626.204165][T28732] 0{X功: entered promiscuous mode [ 626.222404][T28732] 0{X功: left allmulticast mode [ 626.304362][T28752] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4364'. [ 626.319016][T28752] 1{X功: renamed from 30{X功 [ 626.324496][T28740] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4367'. [ 626.339311][T28752] 1{X功: left promiscuous mode [ 626.344702][T28752] 1{X功: entered allmulticast mode [ 626.388382][T28752] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 626.510757][T28732] loop4: detected capacity change from 0 to 1024 [ 626.532429][T28732] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 626.547850][T28732] System zones: 0-1, 3-36 [ 626.590838][T28732] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.4364: bad orphan inode 134217728 [ 626.602120][T28732] loop4: lost filesystem error report for type 5 error -117 [ 626.609570][T28732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.689147][T24050] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.835891][T28776] lo speed is unknown, defaulting to 1000 [ 626.857584][T28769] loop6: detected capacity change from 0 to 2048 [ 626.867909][T28769] EXT4-fs: Ignoring removed i_version option [ 626.904762][T28780] netlink: 'syz.4.4376': attribute type 10 has an invalid length. [ 626.913969][T28769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.930986][T28769] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.130569][T28794] netlink: 356 bytes leftover after parsing attributes in process `syz.3.4381'. [ 627.309122][T28802] lo speed is unknown, defaulting to 1000 [ 630.804855][T28822] loop4: detected capacity change from 0 to 128 [ 631.423063][T15319] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.660658][T28829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4391'. [ 631.799061][T28838] netlink: 'syz.9.4390': attribute type 10 has an invalid length. [ 631.823292][T28829] bond20: option primary_reselect: invalid value (8) [ 631.834313][T28829] bond20 (unregistering): Released all slaves [ 632.026869][ T28] audit: type=1400 audit(2000005608.303:6584): avc: denied { append } for pid=28848 comm="syz.4.4396" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 632.128810][T28850] openvswitch: netlink: Missing key (keys=40, expected=80) [ 632.167882][T28852] netlink: 'syz.7.4397': attribute type 1 has an invalid length. [ 632.248312][T28860] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4399'. [ 632.259924][T28860] 0{X功: entered promiscuous mode [ 632.265264][T28860] 0{X功: left allmulticast mode [ 632.276925][T28860] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4399'. [ 632.286498][T28860] 1{X功: renamed from 30{X功 [ 632.296870][T28862] loop9: detected capacity change from 0 to 1024 [ 632.322984][T28864] netlink: 'syz.4.4401': attribute type 6 has an invalid length. [ 632.332738][T28862] EXT4-fs: Ignoring removed bh option [ 632.344324][T28860] 1{X功: left promiscuous mode [ 632.349394][T28860] 1{X功: entered allmulticast mode [ 632.355403][T28860] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 632.402528][T28862] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.434000][T28857] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4397'. [ 632.451247][ T28] audit: type=1400 audit(2000005608.696:6585): avc: denied { getopt } for pid=28867 comm="syz.4.4402" lport=40995 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 632.507550][T28862] openvswitch: netlink: EtherType 0 is less than min 600 [ 632.519049][ T28] audit: type=1400 audit(2000005608.761:6586): avc: denied { name_connect } for pid=28875 comm="syz.3.4405" dest=34 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 632.583460][ T28] audit: type=1107 audit(2000005608.817:6587): pid=28861 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='#' [ 632.664357][T26738] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.701405][T28852] SELinux: policydb version -1486711591 does not match my version range 15-35 [ 632.710615][T28852] SELinux: failed to load policy [ 632.808766][T28890] netlink: 'syz.9.4409': attribute type 10 has an invalid length. [ 633.674861][T28904] loop9: detected capacity change from 0 to 128 [ 633.687752][T28904] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 634.593245][T28924] netlink: 'syz.6.4420': attribute type 1 has an invalid length. [ 634.657890][T28932] loop9: detected capacity change from 0 to 128 [ 634.693677][T28932] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 634.792285][ T28] audit: type=1400 audit(2000005610.886:6588): avc: denied { setopt } for pid=28937 comm="syz.9.4426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 634.872735][T28924] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4420'. [ 634.950749][T28936] netlink: 'syz.4.4425': attribute type 1 has an invalid length. [ 635.031212][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4425'. [ 635.209262][T28940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4425'. [ 635.674200][T28936] bond4: entered promiscuous mode [ 635.873467][T28936] 8021q: adding VLAN 0 to HW filter on device bond4 [ 636.554169][T28933] loop6: detected capacity change from 0 to 128 [ 636.573911][T28933] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 636.586382][T28933] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.605799][T28924] SELinux: policydb version -1486711591 does not match my version range 15-35 [ 636.615027][T28924] SELinux: failed to load policy [ 636.620613][T28924] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.4420: No space for directory leaf checksum. Please run e2fsck -D. [ 636.636573][T28924] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.4420: Directory block failed checksum [ 637.237198][T28965] syzkaller0: entered promiscuous mode [ 637.242911][T28965] syzkaller0: entered allmulticast mode [ 637.496637][ T28] audit: type=1400 audit(2000005613.412:6589): avc: denied { create } for pid=28962 comm="syz.7.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 638.079972][T15319] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 638.359248][ T28] audit: type=1400 audit(2000005614.226:6590): avc: denied { write } for pid=28972 comm="syz.3.4436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 640.167098][T29007] loop9: detected capacity change from 0 to 128 [ 640.193583][T29007] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4444'. [ 640.343209][ T28] audit: type=1400 audit(2000005616.079:6591): avc: denied { getopt } for pid=29011 comm="syz.7.4447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 640.470382][ T28] audit: type=1326 audit(2000005616.191:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29000 comm="syz.9.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab1bc819 code=0x7ffc0000 [ 640.519762][T29021] loop9: detected capacity change from 0 to 512 [ 640.571564][T29021] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 640.658729][T29021] EXT4-fs error (device loop9): ext4_init_orphan_info:618: comm syz.9.4444: orphan file block 0: bad magic [ 640.681697][ T28] audit: type=1326 audit(2000005616.191:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29000 comm="syz.9.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f55ab1bc819 code=0x7ffc0000 [ 640.775367][T29021] loop9: lost filesystem error report for type 5 error -117 [ 640.783222][T29021] EXT4-fs (loop9): mount failed [ 640.791244][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 640.791282][ C1] EXT4-fs (loop9): initial error at time 2000005616: ext4_init_orphan_info:618 [ 640.791309][ C1] EXT4-fs (loop9): last error at time 2000005616: ext4_init_orphan_info:618 [ 640.864822][ T28] audit: type=1326 audit(2000005616.201:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29000 comm="syz.9.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab1bc819 code=0x7ffc0000 [ 641.200127][T29018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4442'. [ 641.209167][T29018] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4442'. [ 641.218776][T29018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4442'. [ 641.227801][T29018] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4442'. [ 641.236777][T29018] netlink: 'syz.6.4442': attribute type 6 has an invalid length. [ 641.916341][ T28] audit: type=1326 audit(2000005616.201:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29000 comm="syz.9.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f55ab1bc819 code=0x7ffc0000 [ 641.959887][T29003] 1{X功: left allmulticast mode [ 642.027903][T29030] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4451'. [ 642.048646][T29007] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4444'. [ 642.075102][T29003] syz_tun: left promiscuous mode [ 642.080327][ T28] audit: type=1326 audit(2000005616.201:6596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29000 comm="syz.9.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab1bc819 code=0x7ffc0000 [ 642.105060][T29007] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4444'. [ 642.139010][T29033] loop6: detected capacity change from 0 to 2048 [ 642.145663][ T28] audit: type=1326 audit(2000005616.201:6597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29000 comm="syz.9.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ab1bc819 code=0x7ffc0000 [ 642.170450][T29003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 642.187124][ T28] audit: type=1326 audit(2000005616.201:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29000 comm="syz.9.4444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f55ab1bc819 code=0x7ffc0000 [ 642.217818][T29038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4454'. [ 642.243956][ T4437] ================================================================== [ 642.252088][ T4437] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 642.260440][ T4437] [ 642.262780][ T4437] write to 0xffff8881243bf0e0 of 44 bytes by task 29039 on cpu 0: [ 642.270692][ T4437] tty_set_termios+0xc0/0x910 [ 642.275403][ T4437] set_termios+0x4a7/0x4f0 [ 642.279937][ T4437] tty_mode_ioctl+0x37f/0x5b0 [ 642.284642][ T4437] n_tty_ioctl_helper+0x87/0x370 [ 642.289657][ T4437] n_tty_ioctl+0x101/0x220 [ 642.294092][ T4437] tty_ioctl+0x83e/0xb80 [ 642.298355][ T4437] __se_sys_ioctl+0xce/0x140 [ 642.302974][ T4437] __x64_sys_ioctl+0x43/0x50 [ 642.307674][ T4437] x64_sys_call+0x1563/0x3020 [ 642.312366][ T4437] do_syscall_64+0x12c/0x3b0 [ 642.317048][ T4437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.322948][ T4437] [ 642.325277][ T4437] read to 0xffff8881243bf0f9 of 1 bytes by task 4437 on cpu 1: [ 642.333261][ T4437] n_tty_lookahead_flow_ctrl+0x137/0x300 [ 642.338917][ T4437] tty_port_default_lookahead_buf+0x91/0xc0 [ 642.344833][ T4437] flush_to_ldisc+0x288/0x340 [ 642.349651][ T4437] process_scheduled_works+0x4f0/0x9c0 [ 642.355125][ T4437] worker_thread+0x58a/0x780 [ 642.359730][ T4437] kthread+0x22a/0x280 [ 642.363805][ T4437] ret_from_fork+0x146/0x330 [ 642.368404][ T4437] ret_from_fork_asm+0x1a/0x30 [ 642.373197][ T4437] [ 642.375661][ T4437] value changed: 0x11 -> 0x70 [ 642.380443][ T4437] [ 642.382844][ T4437] Reported by Kernel Concurrency Sanitizer on: [ 642.389026][ T4437] CPU: 1 UID: 0 PID: 4437 Comm: kworker/u8:28 Tainted: G W syzkaller #0 PREEMPT(full) [ 642.401336][ T4437] Tainted: [W]=WARN [ 642.405196][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 642.415865][ T4437] Workqueue: events_unbound flush_to_ldisc [ 642.421697][ T4437] ================================================================== [ 642.440743][T29043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4455'. [ 642.445510][T29033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.454590][T29043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.473135][T29033] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.