last executing test programs: 12m1.6484881s ago: executing program 32 (id=115): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x9329, 0x8001, 0x100008}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)={0x490102, 0x104, 0x13}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(0x0, &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r4, r4, 0x0, 0xe3aa6ea) sendfile(r2, r2, 0x0, 0xe3aa6ea) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7GtwjAUBdD79RMrER3KDjS01AyB6JkEsQJrULEgAjlGsAFKcU7haz+9WzgswrXF5p5dztP6M/9/5+P7KvuuXoc8k6zSt4UuY42/9PM8GepxmJLT3CzbJJcxdb+0Ssnx9qv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCSvQIAAP//q50IVw==") write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000400)=0x80000000, 0x4) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) 12m0.966363586s ago: executing program 33 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x200010) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000060000/0x2000)=nil, 0x2000, 0x1, 0x80050, r2, 0x4733000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001b80)=""/71) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d7, 0x0) shmctl$IPC_RMID(r1, 0x0) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x18) 10m18.297373373s ago: executing program 34 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_bond\x00', {0x1}, 0xa07}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74726108733d66642c72b2646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',']) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 10m1.669450566s ago: executing program 6 (id=477): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r1, &(0x7f0000000180), 0x0, 0x0, 0x8800) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffd8f, &(0x7f0000000ac0), 0x3}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff4a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m59.631936445s ago: executing program 6 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_bond\x00', {0x1}, 0xa07}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74726108733d66642c72b2646e6f3d", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',']) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 9m58.007620765s ago: executing program 6 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_bond\x00', {0x1}, 0xa07}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74726108733d66642c72b2646e6f3d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',']) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 9m56.558278774s ago: executing program 6 (id=491): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) syz_open_dev$loop(&(0x7f0000000240), 0x2, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e20, 0x10001, @local, 0x4}}, 0x4}, 0x90) r6 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) 9m55.512981846s ago: executing program 6 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_bond\x00', {0x1}, 0xa07}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="74726108733d66642c72b2646e6f3d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',']) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 9m55.143077571s ago: executing program 6 (id=497): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r1, &(0x7f0000000180), 0x0, 0x0, 0x8800) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffd8f, &(0x7f0000000ac0), 0x3}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff4a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m55.142680571s ago: executing program 35 (id=497): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() sync() r1 = openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) preadv(r1, &(0x7f0000000180), 0x0, 0x0, 0x8800) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0xfffffffffffffd8f, &(0x7f0000000ac0), 0x3}, 0xc854) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xffffffffffffff4a}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200080d5}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m28.916709144s ago: executing program 2 (id=1554): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 5m28.866972468s ago: executing program 2 (id=1556): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x5) ioctl$PPPIOCGNPMODE(r0, 0x4004743c, 0x0) 5m28.726083487s ago: executing program 2 (id=1558): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278", 0x10, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 5m28.656584582s ago: executing program 2 (id=1560): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m28.656310662s ago: executing program 2 (id=1562): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 5m28.458348146s ago: executing program 2 (id=1564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20040045, 0x0, 0x0) 5m28.445243686s ago: executing program 36 (id=1564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20040045, 0x0, 0x0) 4m6.739504914s ago: executing program 9 (id=2401): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0x8000000000000000, 0xf794}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r2, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f00000000c0)={0x0, 0x62c4, 0x200, 0x1, 0x7}, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) pipe2(&(0x7f0000000100), 0x84800) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r5 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440)=r4, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc5ec3, 0x0) 4m6.522870879s ago: executing program 9 (id=2404): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x4, 0x51d, &(0x7f0000000680)="$eJzs3d1qJFkdAPB/VdLZzEzW7lWRccHdxV2ZWXS6k427G0V2VxC9WlDX+zEmnRDSSYd0Z5yEQTP4AIKICj6AN4IPIMg8gggDei8qiuiMXuqUVHdlzEd3EvLVs53fD076nDpV9T+n6K7Ux6EqgEvrlYh4LyJGIuL1iCgX09MixXY35fM9fnRvLk9JZNkH/0giKabtrCsvj0bEtWKx8Yj45tcivpMcjNva3FqebTTq60W51l5Zq7U2t24trcwu1hfrq9PTU2/NvD3z5sxkVjhVPysR8c5X/vKTH/7iq+/85nPf/ePtv938Xt6sL32i2+6ImDtVgD666y51tkXs2kbr5xFsQPL+lEYG3QoAAI4jP8b/aER8unP8X46RztEcAAAAMEyydyfiP0lEBgAAAAytNCImIkmrxViAiUjTarU7hvfjcTVtNFvtzy40N1bn87qISpTShaVGfbIYK1yJUpKXp4oxtjvlN/aVpyPihYj4cflKp1ydazbmB33xAwAAAC6Jay/vPf//dznt5AEAAIAhU+lbAAAAAIaFU34AAAAYfs7/AQAAYKh9/f3385TtvMd7/s7mxnLzzq35emu5urIxV51rrq9VF5vNxc4z+1aOWl+j2Vz7fKxu3K216612rbW5dXulubHavr309BXYAAAAwAV74eUHf0giYvuLVzopiucAAuzx50E3ADhLI4NuADAwo4NuADAwpSPnsIeAYZccUX9w8E73WmH89nzaAwAAnL0bnzx4/3+sqDv62gDwYWasDwBcPu7uweVVOukIwOtn3RJgUD7S/XiuX33fh3cc4/5/9xpDlp2oYQAAwJmZ6KQkrRbH6RORptVqxPOd1wKUkoWlRn2yOD/4fbn0XF6e6iyZHDlmGAAAAAAAAAAAAAAAAAAAAAAAAADoyrIkMgAAAGCoRaR/TTpP84+4UX5tYu/VgX1v/fr5Bz+9O9tur09FjCX/LOeTxiKi/bNi+huZVwIAAADAM6B7nl58Tg26NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMm8eP7s3tpIuM+/cvR0SlV/zRGO98jkcpIq7+K4nRXcslETFyBvG370fE9V7xk3iSZVmlaEWv+FfOOX6ls2l6x08j4toZxIfL7EG+/3mv1+8vjVc6n71/f6NFOq3++7/06f5vpM/+5/l95X5efPirWt/49yNeHO29/9mJn3Tj7wmRF149Zh+//a2trZ4Vu1bZK/7uWLX2ylqttbl1a2lldrG+WF+dnp56a+btmTdnJmsLS4168bdnmB996tdPDuv/1T7xK3v7f2D7v3as3mfx34d3H32sWyj1in/z1d7/f6/3iZ8W//s+U+Tz+hs7+e1ufreXfvm7lw7r/3yf/o8f0f+b/Tu9+7vyhde/8YM/9ZzrwNYAAC5Ca3NrebbRqK8fkhk/xjwXnHn32WjGGWbi2WjGoDLZ97vfx9Ot55SLH8hkp1l8NHpU5f3cP3M5+vd97MDvdCRO2p0kYjtf1zG/kAAAwJD5/0H/YXeQAAAAAAAAAAAAAAAAAAAAgPN0wsebjUfEsWfeH3N7MF0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADjU/wIAAP//vRbN1w==") 4m6.056703891s ago: executing program 9 (id=2408): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x4, 0x51d, &(0x7f0000000680)="$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") 4m3.277412591s ago: executing program 9 (id=2415): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r0, &(0x7f0000000240), 0x0, 0x9c00, 0x0, 0x3) syz_open_dev$loop(0x0, 0x2, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x400000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff000000007b510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4d}, 0x94) r6 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) 4m2.206263283s ago: executing program 9 (id=2427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) sendto$packet(r6, &(0x7f0000000200)='$', 0x1, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m1.942458291s ago: executing program 9 (id=2429): eventfd(0x80000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 4m1.942097501s ago: executing program 37 (id=2429): eventfd(0x80000000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 1m36.55292867s ago: executing program 5 (id=3368): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1400000056000100000000000000000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000014c0)=[{{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000380)=""/5, 0x5}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000ac0)=""/88, 0x58}, {&(0x7f0000000b40)=""/121, 0x79}], 0x4, &(0x7f0000000c00)=""/139, 0x8b}, 0x6}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/205, 0xcd}, {&(0x7f0000000dc0)=""/186, 0xba}, {&(0x7f0000000e80)=""/172, 0xac}], 0x3}, 0xffff}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/244, 0xf4}], 0x1, &(0x7f00000010c0)=""/55, 0x37}, 0x7386}, {{&(0x7f0000001100)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001180)=""/154, 0x9a}], 0x1, &(0x7f0000001280)=""/60, 0x3c}, 0x7}, {{&(0x7f00000012c0)=@qipcrtr, 0x80, &(0x7f0000001380)=[{&(0x7f0000001340)=""/45, 0x2d}], 0x1}, 0xcbd}], 0x5, 0x40, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) write$binfmt_misc(r1, &(0x7f0000000040)='\t', 0x27) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x4, 0x10001) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x1, 0xfffffff9, {{0x1b, 0x4, 0x3, 0x7, 0x6c, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x54, 0xdf, 0x3, 0x4, [{@loopback}, {@rand_addr=0x64010102, 0x6}, {@empty}, {@loopback, 0x3}, {@loopback, 0x5}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010102, 0xcaf}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x1}, {@local, 0x1}, {@broadcast, 0x2}]}, @noop]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7}, 0x94) 1m35.658254211s ago: executing program 5 (id=3375): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r2, {}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 1m35.648117252s ago: executing program 5 (id=3376): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x2404c080) 1m34.252239607s ago: executing program 5 (id=3378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f00000004c0)="c35a0682a4a2766b03ba27a344f292d2a25d22053d75361ee6c44361505ab89a8087f75bf23f13c17479af60bc2c1df3cb1916e109f6ec2f32263c61a0b50f59bd9b9b7e5b2a07b579d441cc17fe7834fa43baa9cb298cecd4d141232aabb1ce765e39addfa5668502e5482bf15ee6dc075087e42ce59f99888e63b050f920db0c1597e28d256707164510cf428c9752c4b11b02c716fa1673aa5c5981206c5a1097274fa09024ff444ea8fccae3b52ae8e46dfe6672164df1d7365f9202c74014b6e5e8f09778ab848e1b923a3b8856271681b7894ffb1cfa97149d4433b31459b1880125be82b0e39f4df49a998eb099a8fe53", &(0x7f00000005c0)=@buf="2bc77d01f66af6936ed3591061415fdc319cc0dbba720a8496fbe6e4a07358ade7845fa5b71b0e83ffc1bd1d5d9240dfbd9d823639350fa8c0"}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe70, 0x1}}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000005000000030000000000001103000000010000000000000000000003000000000500000001000000030000000000000001000084000000000000000002000000000000000000002e00705604f90eddc62f2ff2ade00ff28fa44373efffd6213e41224cb68286a3a181912205c69620576dfd6492e44cfc241b7d04fee14c73943e84f050bd03525bd779f1d20f8fc778c4aa8ae355910ce34d03cc03ac2766e3daad7037f5fa8ed4801b366cd6daaab183684443c449cfd9e7a5ad49880aa567a680eacf"], 0x0, 0x5d}, 0x28) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5402, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, 0x0, 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r2, 0x8, 0x0, 0xb33c, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r2, r1, 0x10, 0x0, r1, @void, @value=r1, @void, @void, r4}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f00000004c0)="c35a0682a4a2766b03ba27a344f292d2a25d22053d75361ee6c44361505ab89a8087f75bf23f13c17479af60bc2c1df3cb1916e109f6ec2f32263c61a0b50f59bd9b9b7e5b2a07b579d441cc17fe7834fa43baa9cb298cecd4d141232aabb1ce765e39addfa5668502e5482bf15ee6dc075087e42ce59f99888e63b050f920db0c1597e28d256707164510cf428c9752c4b11b02c716fa1673aa5c5981206c5a1097274fa09024ff444ea8fccae3b52ae8e46dfe6672164df1d7365f9202c74014b6e5e8f09778ab848e1b923a3b8856271681b7894ffb1cfa97149d4433b31459b1880125be82b0e39f4df49a998eb099a8fe53", &(0x7f00000005c0)=@buf="2bc77d01f66af6936ed3591061415fdc319cc0dbba720a8496fbe6e4a07358ade7845fa5b71b0e83ffc1bd1d5d9240dfbd9d823639350fa8c0"}, 0x20) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0xfffffe70, 0x1}}, 0x20) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000005000000030000000000001103000000010000000000000000000003000000000500000001000000030000000000000001000084000000000000000002000000000000000000002e00705604f90eddc62f2ff2ade00ff28fa44373efffd6213e41224cb68286a3a181912205c69620576dfd6492e44cfc241b7d04fee14c73943e84f050bd03525bd779f1d20f8fc778c4aa8ae355910ce34d03cc03ac2766e3daad7037f5fa8ed4801b366cd6daaab183684443c449cfd9e7a5ad49880aa567a680eacf"], 0x0, 0x5d}, 0x28) (async) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5402, 0x3, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, 0x0, 0x0}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r2, 0x8, 0x0, 0xb33c, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r2, r1, 0x10, 0x0, r1, @void, @value=r1, @void, @void, r4}, 0x20) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) creat(&(0x7f0000000380)='./bus\x00', 0x0) (async) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) (async) 1m33.407511974s ago: executing program 5 (id=3388): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x2404c080) 1m32.946505136s ago: executing program 5 (id=3391): request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r3, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x1, 0x4) fcntl$setstatus(r2, 0x4, 0xc00) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000003000000050005000a0000000500010007000000050004000000000009000200738f752c965511d416000300686173683a69702c706f72742c6e6574000000000c0007800800084000000070"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000002000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 1m32.927071627s ago: executing program 38 (id=3391): request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r3, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x1, 0x4) fcntl$setstatus(r2, 0x4, 0xc00) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000003000000050005000a0000000500010007000000050004000000000009000200738f752c965511d416000300686173683a69702c706f72742c6e6574000000000c0007800800084000000070"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000002000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 1m0.628176958s ago: executing program 3 (id=3701): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket(0x15, 0x5, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@loopback}}, {{@in=@local}}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000080)) 58.313838616s ago: executing program 3 (id=3705): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') mq_notify(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) socket$kcm(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x7, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @remote}}}, 0x84) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xfffffffffffffffe) 58.164804096s ago: executing program 3 (id=3711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d3, 0x33}, @in6=@remote, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 57.918149792s ago: executing program 3 (id=3715): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2148c5, &(0x7f0000000040), 0x1, 0x2cf, &(0x7f0000000580)="$eJzs3c9r02AYwPFn7dZ2HVt7GIKC+KAXvYSt/gVFNhALyraK8yBkLtXS2I6mViridvPqX+AfMPTmSUG9yy7evIuXXQQvO6iVpYntuojtfjRz+35g5Nn75mneNm/Hk7Akm7eePygVHKNg1iSSUImIrMmWSHo78gx5y4gbx6TTmlwa+/757Pzi7WvZXG5mTnU2u3A5o6oT5949evLy/Ifa2M3XE2/jspG+s/kt82Xj1MbpzV8L/qtXRExdqlRq5pJt6XLRKRmqN2zLdCwtlh2rWtOO/oJdWVlpqFleHk+uVC3HUbPc0JLV0FpFa9WGmvfMYlkNw9DxZPfwj71o3xn5nzGRbCtOHPyAMGijQY3VataMBnbm1wcxKAAAcLSEVf/fLzpadLRc2VHf767/I9JH/S8SVP/jr/Lrc3NmNuxR4HBt1/9J7/u7E/U/AAAAAAAAAAAAAAAAAAAAAAD/gy2RVLPZTG01m+7S/4l7V4T7v4c9ThwOf7+z/0+m+cUh8S7cS4jYz+r5er61bPVnC1IUWyyZGhH54c4HTyuevZqbmVJXWt7bq17+aj0flbif70sH50+38rUzf1VGJNm5/YykZDI4PxOQX8/H5OKFZtzbsiWGpOTTXamILcvuvG7nP51WvXI915U/6q4HAAAAAMBxYOgfu47f3X5D/duGdPW3GtvnByTVPj8wE3R+oOv4eljODIf3vgEAAAAAOEmcxuOSadtW9V9Bot3ysfesAwyi+34d//kHfadHA7r8/4gZ7IfQGSR6XXlYRLyWN+EMdW9BZB8fb7SPvTyyez7HRGRHy+Tg5/yrF318PXsLvj7sfdKG9RcJAAAAwGHxi/4T85BMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOoF5vHuavv5d7j3VsLhrOuwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOht8BAAD//6dmDZc=") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x2f2, &(0x7f0000000180)="$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") 57.829190369s ago: executing program 3 (id=3717): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$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") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket(0x15, 0x5, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@loopback}}, {{@in=@local}}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000080)) 57.604298464s ago: executing program 3 (id=3722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x194, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_DESC={0x15c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x359}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa71}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x436}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004804) 57.592781945s ago: executing program 39 (id=3722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x194, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_SET_DESC={0x15c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcd30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x359}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5dc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa71}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x94}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x436}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x4}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004804) 8.030094232s ago: executing program 0 (id=4020): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x6, 0xfff1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x34}, 0x28) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 7.995624375s ago: executing program 0 (id=4022): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$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") r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket(0x15, 0x5, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@loopback}}, {{@in=@local}}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000080)) 7.76832551s ago: executing program 8 (id=4024): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x13a0, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xf}, {0xd, 0x2}, {0xd, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1358, 0x2, [@TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9bbd2e92}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_CGROUP_ACT={0x11d8, 0x1, [@m_police={0x10c0, 0x1a, 0x0, 0x0, {{0xb}, {0x1094, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfff, 0x0, 0x7, 0x80000001, 0x4, 0x1ff, 0x4, 0x80, 0x2, 0x8, 0x3ff, 0x4, 0x59, 0x4, 0x40, 0xffff, 0x400, 0x6fa, 0x6, 0x9, 0x4, 0x6, 0x8, 0x7c0000, 0x9, 0x9, 0x100, 0x6, 0x9, 0x9, 0x2, 0x10000, 0x8, 0xda5e, 0x5beb369e, 0x9, 0x8, 0xff, 0x401, 0x2, 0xffff5df3, 0xb3b6, 0x7, 0x3af5, 0x6, 0x8001, 0x6b, 0x49, 0x8000, 0xc, 0xffff, 0x0, 0xffffff01, 0x3, 0xc, 0x8, 0xb, 0x5, 0x7, 0x10000, 0xfffffc01, 0x7ff, 0xfffffd53, 0x2, 0x3, 0x3, 0x4, 0x4, 0x8c, 0x3, 0xfffffdfe, 0x7, 0xa734, 0x8, 0x2, 0x5, 0x101, 0xd, 0x7, 0x398a, 0x9, 0x40, 0x9, 0x7, 0x0, 0x4, 0x400, 0x5, 0x8, 0x0, 0xfffffffb, 0x2, 0x47e4440e, 0x800, 0x3, 0x7fffffff, 0x200, 0x1, 0x1ff, 0x4, 0x0, 0x6, 0xbfcf, 0x2, 0x6, 0x0, 0x0, 0x9, 0xfffffffc, 0x7a47, 0x0, 0x5, 0x1, 0x9, 0x4, 0x3, 0xff, 0x4, 0x4, 0x0, 0x8, 0x8, 0x401, 0x1, 0x3, 0x7f, 0x10001, 0x3, 0xfffff7fb, 0x7, 0x200, 0x8, 0x0, 0x2, 0x7, 0x3, 0x100, 0x8, 0x9, 0x4, 0xbbd, 0x7, 0x8, 0x7f, 0x9, 0x3, 0x40, 0x7, 0x5, 0x7ff, 0x3, 0xe, 0x9, 0x7, 0xf23f405, 0x8, 0x461, 0x2, 0x1, 0x2, 0x3, 0xa161, 0x7f, 0x0, 0xc, 0xff, 0xc9d, 0x3, 0x1, 0xff, 0x101, 0x800, 0x2, 0xd, 0x1000, 0x5, 0x10002, 0xa00, 0x6, 0x7ff, 0x9, 0xb04, 0x0, 0x80, 0x7, 0xfffffffc, 0xdff, 0xc804, 0x1, 0x5, 0x1, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7, 0xe, 0x5, 0xfff, 0x100, 0x7fff, 0xfffffff9, 0xff, 0x7, 0x101, 0x12000000, 0x63, 0x6, 0x5, 0x1, 0xfe4, 0x9, 0x3, 0xbc, 0x7, 0x4, 0x3, 0xffffffff, 0x80, 0x5, 0x2, 0x2, 0xffffffff, 0x9, 0xb0b, 0x3, 0x39, 0xb95, 0x7, 0xdcd8, 0x0, 0x3d4, 0xffffffff, 0x400, 0x16c800, 0x7fff, 0x0, 0x100, 0x800, 0xf40, 0x4, 0x3, 0xb74, 0x3, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x1, 0x1, 0x0, 0x4, 0xad07]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7fffffff, 0xfffffffe, 0x2, 0x6, 0x4, 0xbdd24c1c, 0x9c, 0x2fa9, 0x1ff, 0x9, 0x13de, 0x7, 0x1, 0x0, 0x1e4514c2, 0x7, 0x3, 0x5, 0xe, 0x6, 0x3, 0xd, 0x1, 0x390f2470, 0x8, 0xfffffff7, 0x10000, 0x8, 0x7, 0xffff, 0x40, 0xfffffffb, 0x8, 0x9, 0xffff, 0x8, 0x80, 0x6, 0xe6, 0x7f, 0x6, 0x5, 0x2, 0x4, 0xfffff0e9, 0xb, 0xfffff5d2, 0x10a60000, 0x9, 0x8000000, 0x3, 0x4, 0x4, 0xf, 0x4, 0x4051, 0x9, 0xd, 0x10000, 0x3479, 0x6, 0x5, 0xdd8, 0x6, 0x7ff, 0x7, 0x5, 0x2, 0x6, 0xe, 0x3, 0x9, 0x2, 0x9, 0x4, 0x7, 0x401, 0x9, 0xfffff000, 0x6, 0xffffff19, 0xb5, 0x2b9, 0x3, 0x40, 0xd8, 0x5, 0x5, 0x1, 0x2, 0x80000001, 0x0, 0x1ff, 0xcc, 0x1, 0x8, 0x0, 0x0, 0x4, 0x8, 0x8001, 0x8, 0x7, 0x9, 0xd, 0x5, 0xffff, 0x6, 0x101, 0x4, 0x7, 0x5, 0x7, 0x9, 0xa, 0x6, 0x226e, 0x9, 0x16, 0x9, 0x8, 0xffffffc0, 0x2, 0x8, 0xffffffff, 0x10001, 0xfffffffa, 0xffffffff, 0x2, 0x3, 0x8, 0xfffffff8, 0x0, 0x3, 0x200, 0x3c, 0x401, 0xde9, 0x4, 0x7f, 0x1, 0x6, 0x6, 0x2, 0x1, 0x4, 0xfffffff8, 0x0, 0x2, 0x8000, 0x3, 0x6, 0x4a1, 0x7, 0xc79, 0x5, 0x8001, 0x3, 0xe050, 0x391a90aa, 0x2, 0x3, 0x4, 0x5fe, 0x2, 0xc, 0x0, 0x6, 0x0, 0xffffffff, 0x9, 0x10000, 0x1, 0x7, 0xe2a8, 0x0, 0x5, 0xe7, 0x7, 0xff800000, 0x7fffffff, 0xffff, 0xffffffff, 0x7, 0x9, 0xfffffff8, 0x6, 0x7, 0x7, 0x0, 0x0, 0x81, 0x1, 0x80, 0xffff, 0x7, 0x0, 0x8, 0x9, 0xe8, 0x994, 0x4, 0x5, 0x80, 0x2, 0xb, 0x4, 0x6, 0xff, 0x3, 0x100, 0xf9d3, 0xd, 0xcd18, 0x1, 0xfffffc01, 0x0, 0x6, 0x1ff, 0xc70c, 0x6d, 0x80000001, 0x7, 0x8, 0x6, 0x5, 0x3, 0xf, 0x1, 0x2, 0x0, 0x7fffffff, 0x8, 0x5, 0x929, 0x1, 0xd, 0x100, 0xbc, 0x4, 0xffffffff, 0x2, 0x7fffffff, 0x0, 0x165, 0x40, 0x400, 0x8, 0x1, 0x3, 0x1, 0x800, 0x4, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfa0, 0xe, 0x0, 0xfffffff7, 0xc0000000, 0x4, 0x6, 0x3, 0x0, 0x6, 0xfffffbff, 0x100, 0xffffff00, 0x2, 0x9, 0x2, 0x2, 0x0, 0x0, 0x6, 0xfffffeff, 0xf0, 0x3, 0x8, 0x5, 0xf974, 0x3, 0x0, 0x8000, 0xf3, 0x4, 0xb9c, 0x80, 0x5, 0x9, 0x80000000, 0x9b, 0xffffffff, 0x8, 0x3, 0x401, 0x80, 0x7, 0xe, 0x8000, 0x3, 0x1, 0xf, 0x1, 0x4, 0x4, 0x4, 0x1, 0x84, 0x2, 0x52, 0x4, 0x3, 0x49a, 0x6, 0x9, 0x9, 0x6, 0xd, 0x1d91, 0x6, 0x3, 0x7, 0x6, 0x0, 0x1, 0x5524, 0x4, 0x2, 0x6, 0xfffffff3, 0xd, 0x4, 0x2, 0x0, 0x1cb5, 0x3ff, 0x9c42, 0x7fffffff, 0x1, 0x9, 0x1, 0x10001, 0x2, 0x493, 0x40, 0x4, 0xa, 0x18, 0x1000, 0x16, 0xfffffff7, 0xab, 0x1, 0x3, 0x4, 0x8, 0x1, 0x6, 0xb, 0x2, 0x5, 0x3902a3dd, 0x3, 0x6, 0x5, 0xa, 0xfffff001, 0x200, 0x5, 0x5, 0x1, 0xd9, 0x1, 0x9, 0xa4, 0x800, 0x9, 0x200, 0x9, 0xffff3843, 0x20, 0x9, 0x9619, 0x8, 0x0, 0x1495, 0xffffffff, 0x5f, 0x3, 0x0, 0x200, 0x3f800, 0xc, 0x1, 0x12, 0xe1, 0x3, 0x9, 0xff, 0x6, 0x1, 0x2, 0x9, 0x800, 0x9, 0x3, 0x1, 0xd, 0x64, 0x7, 0x8, 0x5, 0xc2, 0xfffffff7, 0x1, 0x2a7809d6, 0xfffffffc, 0xf, 0x9, 0x500, 0x8, 0xfffffff7, 0x7, 0x81, 0x3, 0x20, 0x6ee24349, 0x8085, 0x101, 0x3, 0x5c7, 0x8, 0x1, 0x6, 0x6, 0x4, 0xe1dc, 0x176, 0x1, 0x0, 0x1, 0x8, 0xded, 0x7a0c, 0x6, 0x7fffffff, 0x401, 0x6, 0x400, 0x2a, 0x2, 0x0, 0x5, 0x2, 0x2, 0x8, 0x3, 0x2, 0x81, 0x5, 0x7, 0x9, 0xffff, 0x3, 0x9, 0x4, 0x2, 0x0, 0x547, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x7, 0x3, 0x13ae397d, 0x7f, 0x101, 0xff, 0x7fffffff, 0x258000, 0x6, 0x8, 0x10001, 0x4, 0x9, 0xab, 0x1, 0xb, 0x2, 0x2, 0x41c, 0x401, 0xa86, 0x1ffe000, 0xd, 0x0, 0x3, 0x80, 0x8, 0x6, 0xe, 0xd, 0x80, 0x80, 0x7fffffff, 0x2, 0x29000000, 0xfffffff8]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xff, 0x2f2f, 0x3, 0x6c, 0xffff, 0x1, 0x7, 0x72e1, 0xe5b, 0x3, 0x6, 0x7, 0x4, 0x5, 0x3, 0x55, 0x401, 0x7f, 0x10001, 0xed5, 0x6, 0x7, 0xdc, 0x10, 0x4, 0x200, 0x0, 0x6d, 0x14000000, 0xfff, 0x5f35, 0x9, 0xa, 0x0, 0x10d, 0x2, 0x8, 0x200, 0x9, 0xffffffff, 0x7f, 0xd25c, 0x2, 0x2, 0x1, 0xb45, 0x0, 0x6, 0xfffffff5, 0x8, 0x4, 0xfc, 0x4, 0x4, 0x3ff, 0x11, 0x7fff, 0x1, 0x2, 0x9, 0x9, 0x4, 0x2, 0x8, 0x4, 0x7, 0x3, 0x7f, 0xfffffffe, 0x1, 0xfffff801, 0x2, 0x9, 0xffff, 0x1, 0x4, 0x1, 0x7, 0x2, 0x0, 0x7ff, 0x8, 0x1, 0xffff, 0xa6, 0xfffffffd, 0xffe, 0x0, 0x8, 0x100, 0x9, 0xaab, 0xffffffff, 0x6f6, 0x5b, 0x4, 0x81, 0x4, 0x9, 0x400, 0x2, 0x0, 0xd0b, 0x91, 0x0, 0x5ef, 0x7f, 0x1, 0x4, 0x101, 0xfff, 0x0, 0x6, 0x10001, 0x0, 0x6, 0xffff, 0xfff, 0x3, 0x5, 0x4, 0x9, 0x7, 0xad, 0xe, 0x5, 0x1, 0x0, 0x3, 0x5, 0x0, 0x4, 0x0, 0x3, 0xfffffffb, 0xc34, 0x9, 0xffff0000, 0x3, 0x1ff, 0x8001, 0x0, 0x7fff, 0x1, 0x2, 0x4, 0xffff, 0x2, 0x2c, 0x4, 0x37, 0x622, 0x474, 0x2, 0x5, 0x2, 0x9, 0x9, 0x2, 0x0, 0x6, 0x3a06, 0x800, 0x40, 0x8, 0x3, 0x1, 0xffffffff, 0xdfd, 0x2, 0x4, 0x1, 0x0, 0x3, 0x2, 0x2, 0xd, 0xc7d, 0x8, 0x9, 0x3, 0x9, 0x8, 0xe8ab, 0x0, 0x1, 0x1, 0x0, 0x3, 0x9, 0x4, 0x8f07, 0x800, 0x9, 0xa, 0x6, 0x6, 0x5, 0x4, 0x9, 0xfffffff9, 0xb4, 0xbc, 0x0, 0x2, 0x3, 0x9973, 0x7, 0xa, 0x2, 0xffffff80, 0xfffffffa, 0x4, 0x4, 0x7, 0x715, 0x7f5, 0x3, 0x9, 0x3, 0xc1a, 0x2, 0xfffffffe, 0x1, 0x20ea, 0x200, 0x81, 0x3, 0x7, 0xb804, 0x1, 0x1, 0x9, 0x5, 0xc, 0x9, 0xde, 0x200, 0x5, 0x10001, 0x3, 0xfea1, 0xb, 0xb, 0x7, 0xe, 0x3, 0x7f, 0x400, 0x2d0d, 0x8, 0x0, 0x9, 0xaf2, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x9, 0x20000, 0x3, {0x50, 0x2, 0x5, 0x1ff, 0x1, 0x4}, {0x7, 0x1, 0xff, 0x1, 0x3, 0x80000000}, 0x5, 0x9, 0x4}}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x114, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x0, 0x5, 0x6, 0xfffffffa}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe, 0x1, 0xffffffffffffffff, 0x7, 0x1}}]}, {0x9e, 0x6, "9340f5ebd66fe0f081c56e00cd0d841b789864259add0f193b44720dd771ad4d2e9ef14388f2e7f300178bdf775a1b95e0d65a75a68b2973f17a75d9fee39ae28f3ea3ceada0b0eb5c027fcb8db4dfbbaebb7eb4ca57ae6fd957398c52437e6fc75402a9bbf1c5b481aadf285f5904e7bde45928226b435a941b057eb69b3c8b9726e7f7ccda060c8bbd4abd9aa20a0f41ebc49479ea1583c452"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x140, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x70, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x80}, "6d0392975b761c9d60b81369d98f0e9c7ca7400a047ca816ea3afe0c98a45e3798bdd9af15c19d38e2895ee855a006387bc6d8deaf20eb59698d00dfd1bcedd61481781becb165477e40f9a67dde62ef5cf5839800e2aecdc14758c97663862f801744"}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x81, 0x7, 0x8}, {{0x3}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x9f, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x91, 0x1}, {0xd0, 0x6}}}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_VAR="9c2e0ca3", @TCF_META_TYPE_VAR="51ae", @TCF_META_TYPE_VAR="0ff44e1bab1b92b29373", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5e1c80d8b444b886c526"]}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x2}, {0x37, 0x9, 0x2, "5a0dc5d1b10ee0fd43"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x40, 0x8, 0x6}, {0x3, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x1000}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xfff8, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}, @TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff5d8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x8a86}, @TCA_CHAIN={0x8, 0xb, 0x82}]}, 0x13a0}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(0xffffffffffffffff, 0x8c73, 0xd9, 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.428559541s ago: executing program 8 (id=4032): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x6, 0xfff1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x34}, 0x28) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 6.362231426s ago: executing program 8 (id=4034): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 6.223345126s ago: executing program 0 (id=4035): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x6, 0xfff1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb"], 0x0, 0x34}, 0x28) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 6.110434123s ago: executing program 1 (id=4036): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x6) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) io_setup(0x325, &(0x7f0000000540)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r3], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.058281697s ago: executing program 1 (id=4037): syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000) 5.471777797s ago: executing program 7 (id=4043): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x13a0, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xf}, {0xd, 0x2}, {0xd, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1358, 0x2, [@TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9bbd2e92}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_CGROUP_ACT={0x11d8, 0x1, [@m_police={0x10c0, 0x1a, 0x0, 0x0, {{0xb}, {0x1094, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfff, 0x0, 0x7, 0x80000001, 0x4, 0x1ff, 0x4, 0x80, 0x2, 0x8, 0x3ff, 0x4, 0x59, 0x4, 0x40, 0xffff, 0x400, 0x6fa, 0x6, 0x9, 0x4, 0x6, 0x8, 0x7c0000, 0x9, 0x9, 0x100, 0x6, 0x9, 0x9, 0x2, 0x10000, 0x8, 0xda5e, 0x5beb369e, 0x9, 0x8, 0xff, 0x401, 0x2, 0xffff5df3, 0xb3b6, 0x7, 0x3af5, 0x6, 0x8001, 0x6b, 0x49, 0x8000, 0xc, 0xffff, 0x0, 0xffffff01, 0x3, 0xc, 0x8, 0xb, 0x5, 0x7, 0x10000, 0xfffffc01, 0x7ff, 0xfffffd53, 0x2, 0x3, 0x3, 0x4, 0x4, 0x8c, 0x3, 0xfffffdfe, 0x7, 0xa734, 0x8, 0x2, 0x5, 0x101, 0xd, 0x7, 0x398a, 0x9, 0x40, 0x9, 0x7, 0x0, 0x4, 0x400, 0x5, 0x8, 0x0, 0xfffffffb, 0x2, 0x47e4440e, 0x800, 0x3, 0x7fffffff, 0x200, 0x1, 0x1ff, 0x4, 0x0, 0x6, 0xbfcf, 0x2, 0x6, 0x0, 0x0, 0x9, 0xfffffffc, 0x7a47, 0x0, 0x5, 0x1, 0x9, 0x4, 0x3, 0xff, 0x4, 0x4, 0x0, 0x8, 0x8, 0x401, 0x1, 0x3, 0x7f, 0x10001, 0x3, 0xfffff7fb, 0x7, 0x200, 0x8, 0x0, 0x2, 0x7, 0x3, 0x100, 0x8, 0x9, 0x4, 0xbbd, 0x7, 0x8, 0x7f, 0x9, 0x3, 0x40, 0x7, 0x5, 0x7ff, 0x3, 0xe, 0x9, 0x7, 0xf23f405, 0x8, 0x461, 0x2, 0x1, 0x2, 0x3, 0xa161, 0x7f, 0x0, 0xc, 0xff, 0xc9d, 0x3, 0x1, 0xff, 0x101, 0x800, 0x2, 0xd, 0x1000, 0x5, 0x10002, 0xa00, 0x6, 0x7ff, 0x9, 0xb04, 0x0, 0x80, 0x7, 0xfffffffc, 0xdff, 0xc804, 0x1, 0x5, 0x1, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7, 0xe, 0x5, 0xfff, 0x100, 0x7fff, 0xfffffff9, 0xff, 0x7, 0x101, 0x12000000, 0x63, 0x6, 0x5, 0x1, 0xfe4, 0x9, 0x3, 0xbc, 0x7, 0x4, 0x3, 0xffffffff, 0x80, 0x5, 0x2, 0x2, 0xffffffff, 0x9, 0xb0b, 0x3, 0x39, 0xb95, 0x7, 0xdcd8, 0x0, 0x3d4, 0xffffffff, 0x400, 0x16c800, 0x7fff, 0x0, 0x100, 0x800, 0xf40, 0x4, 0x3, 0xb74, 0x3, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x1, 0x1, 0x0, 0x4, 0xad07]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7fffffff, 0xfffffffe, 0x2, 0x6, 0x4, 0xbdd24c1c, 0x9c, 0x2fa9, 0x1ff, 0x9, 0x13de, 0x7, 0x1, 0x0, 0x1e4514c2, 0x7, 0x3, 0x5, 0xe, 0x6, 0x3, 0xd, 0x1, 0x390f2470, 0x8, 0xfffffff7, 0x10000, 0x8, 0x7, 0xffff, 0x40, 0xfffffffb, 0x8, 0x9, 0xffff, 0x8, 0x80, 0x6, 0xe6, 0x7f, 0x6, 0x5, 0x2, 0x4, 0xfffff0e9, 0xb, 0xfffff5d2, 0x10a60000, 0x9, 0x8000000, 0x3, 0x4, 0x4, 0xf, 0x4, 0x4051, 0x9, 0xd, 0x10000, 0x3479, 0x6, 0x5, 0xdd8, 0x6, 0x7ff, 0x7, 0x5, 0x2, 0x6, 0xe, 0x3, 0x9, 0x2, 0x9, 0x4, 0x7, 0x401, 0x9, 0xfffff000, 0x6, 0xffffff19, 0xb5, 0x2b9, 0x3, 0x40, 0xd8, 0x5, 0x5, 0x1, 0x2, 0x80000001, 0x0, 0x1ff, 0xcc, 0x1, 0x8, 0x0, 0x0, 0x4, 0x8, 0x8001, 0x8, 0x7, 0x9, 0xd, 0x5, 0xffff, 0x6, 0x101, 0x4, 0x7, 0x5, 0x7, 0x9, 0xa, 0x6, 0x226e, 0x9, 0x16, 0x9, 0x8, 0xffffffc0, 0x2, 0x8, 0xffffffff, 0x10001, 0xfffffffa, 0xffffffff, 0x2, 0x3, 0x8, 0xfffffff8, 0x0, 0x3, 0x200, 0x3c, 0x401, 0xde9, 0x4, 0x7f, 0x1, 0x6, 0x6, 0x2, 0x1, 0x4, 0xfffffff8, 0x0, 0x2, 0x8000, 0x3, 0x6, 0x4a1, 0x7, 0xc79, 0x5, 0x8001, 0x3, 0xe050, 0x391a90aa, 0x2, 0x3, 0x4, 0x5fe, 0x2, 0xc, 0x0, 0x6, 0x0, 0xffffffff, 0x9, 0x10000, 0x1, 0x7, 0xe2a8, 0x0, 0x5, 0xe7, 0x7, 0xff800000, 0x7fffffff, 0xffff, 0xffffffff, 0x7, 0x9, 0xfffffff8, 0x6, 0x7, 0x7, 0x0, 0x0, 0x81, 0x1, 0x80, 0xffff, 0x7, 0x0, 0x8, 0x9, 0xe8, 0x994, 0x4, 0x5, 0x80, 0x2, 0xb, 0x4, 0x6, 0xff, 0x3, 0x100, 0xf9d3, 0xd, 0xcd18, 0x1, 0xfffffc01, 0x0, 0x6, 0x1ff, 0xc70c, 0x6d, 0x80000001, 0x7, 0x8, 0x6, 0x5, 0x3, 0xf, 0x1, 0x2, 0x0, 0x7fffffff, 0x8, 0x5, 0x929, 0x1, 0xd, 0x100, 0xbc, 0x4, 0xffffffff, 0x2, 0x7fffffff, 0x0, 0x165, 0x40, 0x400, 0x8, 0x1, 0x3, 0x1, 0x800, 0x4, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfa0, 0xe, 0x0, 0xfffffff7, 0xc0000000, 0x4, 0x6, 0x3, 0x0, 0x6, 0xfffffbff, 0x100, 0xffffff00, 0x2, 0x9, 0x2, 0x2, 0x0, 0x0, 0x6, 0xfffffeff, 0xf0, 0x3, 0x8, 0x5, 0xf974, 0x3, 0x0, 0x8000, 0xf3, 0x4, 0xb9c, 0x80, 0x5, 0x9, 0x80000000, 0x9b, 0xffffffff, 0x8, 0x3, 0x401, 0x80, 0x7, 0xe, 0x8000, 0x3, 0x1, 0xf, 0x1, 0x4, 0x4, 0x4, 0x1, 0x84, 0x2, 0x52, 0x4, 0x3, 0x49a, 0x6, 0x9, 0x9, 0x6, 0xd, 0x1d91, 0x6, 0x3, 0x7, 0x6, 0x0, 0x1, 0x5524, 0x4, 0x2, 0x6, 0xfffffff3, 0xd, 0x4, 0x2, 0x0, 0x1cb5, 0x3ff, 0x9c42, 0x7fffffff, 0x1, 0x9, 0x1, 0x10001, 0x2, 0x493, 0x40, 0x4, 0xa, 0x18, 0x1000, 0x16, 0xfffffff7, 0xab, 0x1, 0x3, 0x4, 0x8, 0x1, 0x6, 0xb, 0x2, 0x5, 0x3902a3dd, 0x3, 0x6, 0x5, 0xa, 0xfffff001, 0x200, 0x5, 0x5, 0x1, 0xd9, 0x1, 0x9, 0xa4, 0x800, 0x9, 0x200, 0x9, 0xffff3843, 0x20, 0x9, 0x9619, 0x8, 0x0, 0x1495, 0xffffffff, 0x5f, 0x3, 0x0, 0x200, 0x3f800, 0xc, 0x1, 0x12, 0xe1, 0x3, 0x9, 0xff, 0x6, 0x1, 0x2, 0x9, 0x800, 0x9, 0x3, 0x1, 0xd, 0x64, 0x7, 0x8, 0x5, 0xc2, 0xfffffff7, 0x1, 0x2a7809d6, 0xfffffffc, 0xf, 0x9, 0x500, 0x8, 0xfffffff7, 0x7, 0x81, 0x3, 0x20, 0x6ee24349, 0x8085, 0x101, 0x3, 0x5c7, 0x8, 0x1, 0x6, 0x6, 0x4, 0xe1dc, 0x176, 0x1, 0x0, 0x1, 0x8, 0xded, 0x7a0c, 0x6, 0x7fffffff, 0x401, 0x6, 0x400, 0x2a, 0x2, 0x0, 0x5, 0x2, 0x2, 0x8, 0x3, 0x2, 0x81, 0x5, 0x7, 0x9, 0xffff, 0x3, 0x9, 0x4, 0x2, 0x0, 0x547, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x7, 0x3, 0x13ae397d, 0x7f, 0x101, 0xff, 0x7fffffff, 0x258000, 0x6, 0x8, 0x10001, 0x4, 0x9, 0xab, 0x1, 0xb, 0x2, 0x2, 0x41c, 0x401, 0xa86, 0x1ffe000, 0xd, 0x0, 0x3, 0x80, 0x8, 0x6, 0xe, 0xd, 0x80, 0x80, 0x7fffffff, 0x2, 0x29000000, 0xfffffff8]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xff, 0x2f2f, 0x3, 0x6c, 0xffff, 0x1, 0x7, 0x72e1, 0xe5b, 0x3, 0x6, 0x7, 0x4, 0x5, 0x3, 0x55, 0x401, 0x7f, 0x10001, 0xed5, 0x6, 0x7, 0xdc, 0x10, 0x4, 0x200, 0x0, 0x6d, 0x14000000, 0xfff, 0x5f35, 0x9, 0xa, 0x0, 0x10d, 0x2, 0x8, 0x200, 0x9, 0xffffffff, 0x7f, 0xd25c, 0x2, 0x2, 0x1, 0xb45, 0x0, 0x6, 0xfffffff5, 0x8, 0x4, 0xfc, 0x4, 0x4, 0x3ff, 0x11, 0x7fff, 0x1, 0x2, 0x9, 0x9, 0x4, 0x2, 0x8, 0x4, 0x7, 0x3, 0x7f, 0xfffffffe, 0x1, 0xfffff801, 0x2, 0x9, 0xffff, 0x1, 0x4, 0x1, 0x7, 0x2, 0x0, 0x7ff, 0x8, 0x1, 0xffff, 0xa6, 0xfffffffd, 0xffe, 0x0, 0x8, 0x100, 0x9, 0xaab, 0xffffffff, 0x6f6, 0x5b, 0x4, 0x81, 0x4, 0x9, 0x400, 0x2, 0x0, 0xd0b, 0x91, 0x0, 0x5ef, 0x7f, 0x1, 0x4, 0x101, 0xfff, 0x0, 0x6, 0x10001, 0x0, 0x6, 0xffff, 0xfff, 0x3, 0x5, 0x4, 0x9, 0x7, 0xad, 0xe, 0x5, 0x1, 0x0, 0x3, 0x5, 0x0, 0x4, 0x0, 0x3, 0xfffffffb, 0xc34, 0x9, 0xffff0000, 0x3, 0x1ff, 0x8001, 0x0, 0x7fff, 0x1, 0x2, 0x4, 0xffff, 0x2, 0x2c, 0x4, 0x37, 0x622, 0x474, 0x2, 0x5, 0x2, 0x9, 0x9, 0x2, 0x0, 0x6, 0x3a06, 0x800, 0x40, 0x8, 0x3, 0x1, 0xffffffff, 0xdfd, 0x2, 0x4, 0x1, 0x0, 0x3, 0x2, 0x2, 0xd, 0xc7d, 0x8, 0x9, 0x3, 0x9, 0x8, 0xe8ab, 0x0, 0x1, 0x1, 0x0, 0x3, 0x9, 0x4, 0x8f07, 0x800, 0x9, 0xa, 0x6, 0x6, 0x5, 0x4, 0x9, 0xfffffff9, 0xb4, 0xbc, 0x0, 0x2, 0x3, 0x9973, 0x7, 0xa, 0x2, 0xffffff80, 0xfffffffa, 0x4, 0x4, 0x7, 0x715, 0x7f5, 0x3, 0x9, 0x3, 0xc1a, 0x2, 0xfffffffe, 0x1, 0x20ea, 0x200, 0x81, 0x3, 0x7, 0xb804, 0x1, 0x1, 0x9, 0x5, 0xc, 0x9, 0xde, 0x200, 0x5, 0x10001, 0x3, 0xfea1, 0xb, 0xb, 0x7, 0xe, 0x3, 0x7f, 0x400, 0x2d0d, 0x8, 0x0, 0x9, 0xaf2, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x9, 0x20000, 0x3, {0x50, 0x2, 0x5, 0x1ff, 0x1, 0x4}, {0x7, 0x1, 0xff, 0x1, 0x3, 0x80000000}, 0x5, 0x9, 0x4}}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x114, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x0, 0x5, 0x6, 0xfffffffa}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe, 0x1, 0xffffffffffffffff, 0x7, 0x1}}]}, {0x9e, 0x6, "9340f5ebd66fe0f081c56e00cd0d841b789864259add0f193b44720dd771ad4d2e9ef14388f2e7f300178bdf775a1b95e0d65a75a68b2973f17a75d9fee39ae28f3ea3ceada0b0eb5c027fcb8db4dfbbaebb7eb4ca57ae6fd957398c52437e6fc75402a9bbf1c5b481aadf285f5904e7bde45928226b435a941b057eb69b3c8b9726e7f7ccda060c8bbd4abd9aa20a0f41ebc49479ea1583c452"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x140, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x70, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x80}, "6d0392975b761c9d60b81369d98f0e9c7ca7400a047ca816ea3afe0c98a45e3798bdd9af15c19d38e2895ee855a006387bc6d8deaf20eb59698d00dfd1bcedd61481781becb165477e40f9a67dde62ef5cf5839800e2aecdc14758c97663862f801744"}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x81, 0x7, 0x8}, {{0x3}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x9f, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x91, 0x1}, {0xd0, 0x6}}}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_VAR="9c2e0ca3", @TCF_META_TYPE_VAR="51ae", @TCF_META_TYPE_VAR="0ff44e1bab1b92b29373", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5e1c80d8b444b886c526"]}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x2}, {0x37, 0x9, 0x2, "5a0dc5d1b10ee0fd43"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x40, 0x8, 0x6}, {0x3, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x1000}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xfff8, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}, @TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff5d8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x8a86}, @TCA_CHAIN={0x8, 0xb, 0x82}]}, 0x13a0}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(0xffffffffffffffff, 0x8c73, 0xd9, 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.416250411s ago: executing program 1 (id=4044): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x6, 0xfff1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x34}, 0x28) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 5.252145752s ago: executing program 4 (id=4045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x11, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000540)="1e", 0x1}], 0x1}, 0x4c00c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r8 = socket$isdn(0x22, 0x3, 0x22) getsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$igmp(0x2, 0x3, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$packet(0x11, 0x3, 0x300) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="afe5fc6623f781f4496a601926852f194870bf19072fe3", 0x17}], 0x1}}], 0x1, 0x2090) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 3.163279405s ago: executing program 1 (id=4046): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$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") r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) socket(0x15, 0x5, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@loopback}}, {{@in=@local}}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000080)) 3.162943035s ago: executing program 4 (id=4047): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x11) r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000000000000000000000700000044181341"], 0x40}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r2) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, r3, 0x72b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40041}, 0x24004800) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x7fffc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff2, 0xb}, {0x6, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.162100175s ago: executing program 7 (id=4048): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) listen(r0, 0x0) syz_clone3(&(0x7f00000002c0)={0x80100, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x1e}, &(0x7f00000000c0)=""/157, 0x9d, &(0x7f0000000180)=""/195, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) process_vm_writev(r1, &(0x7f0000001700)=[{&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/38, 0x26}, {&(0x7f0000001480)=""/106, 0x6a}, {&(0x7f0000001500)=""/183, 0xb7}, {&(0x7f00000015c0)=""/67, 0x43}, {&(0x7f0000001640)=""/156, 0x9c}], 0x7, &(0x7f0000001880)=[{&(0x7f0000001780)=""/37, 0x25}, {&(0x7f00000017c0)=""/179, 0xb3}], 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @broadcast, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x6, [0x6]}]}}, {0x4e20, 0x4e21, 0xfa4, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0x0, 0x0) socketpair(0x27, 0x800, 0x5b29538e, &(0x7f00000018c0)) 3.151365636s ago: executing program 0 (id=4049): r0 = socket(0x2b, 0x80801, 0x1) clock_adjtime(0x0, &(0x7f0000001100)={0x400d77, 0x2000000000000000, 0x80, 0xfffffffffffffffe, 0x0, 0x4b, 0xf4, 0x0, 0x0, 0xa13, 0x4, 0xfffffffffffffffc, 0x0, 0x3, 0x1, 0x7e28, 0x0, 0x0, 0x0, 0xeff, 0x2, 0x0, 0x0, 0x40000, 0x0, 0x80000000000000}) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getpeername$qrtr(r0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x800000, 0x0, &(0x7f0000048000)=0xfffffffd, 0x1f) timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x4) r3 = syz_open_procfs(r2, &(0x7f0000000000)='fdinfo/3\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc7) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x2, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8d4d, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7b, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@errors_remount}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200) r5 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x847e, 0x40, 0x2, 0x1b, 0x0, r3}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) timer_gettime(r1, &(0x7f0000000040)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) unshare(0x22020600) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0x3, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x20000000, 0xffffffff, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd1}, 0x94) read$nci(r3, &(0x7f0000000180)=""/95, 0x5f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000008, 0x0, 0x0, 0x10, &(0x7f0000000240), 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0xfffffffffffffe49) ioctl$AUTOFS_IOC_FAIL(r6, 0x4c81, 0xfffffffffffffffe) 3.148392066s ago: executing program 8 (id=4050): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691072000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x62, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x343b8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6(0xa, 0x80003, 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) inotify_init1(0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newchain={0x44, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0xd, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_to_bridge\x00'}]}}]}, 0x44}}, 0x44004) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.960614007s ago: executing program 7 (id=4051): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'sit0\x00', 0x0}) (fail_nth: 3) 1.683687316s ago: executing program 8 (id=4052): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r7 = dup(r6) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r6, r8, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x800000, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) socket$kcm(0xa, 0x5, 0x0) 1.498088488s ago: executing program 7 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181243, 0x1bd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 1.463451181s ago: executing program 4 (id=4054): syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000040), 0x80000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4000) 1.208248798s ago: executing program 0 (id=4055): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r7 = dup(r6) r8 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r6, r8, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x800000, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) 1.206992398s ago: executing program 1 (id=4056): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000020010000000006bb55a2a630bf7c045f94cd977", 0x28, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) gettid() getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x242, 0x2e0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r4, r3, 0x0, 0x80000000a) socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$packet(r2, 0x0, 0x0, 0x44010, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000240)={r7, 0xd}, 0x8) socket(0xa, 0x3, 0xff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000a00"], 0x18}, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.160368341s ago: executing program 7 (id=4057): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0xfffff800, 0x47, 0xfffffffc, 0x40008}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x2, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x6, 0x6, 0x4, 0x0, 0x0, 0x0, 0x4}, r1, 0x4000000002, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) unshare(0x6c040000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) pread64(r3, &(0x7f0000000340)=""/238, 0xee, 0xc) bind$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) write$binfmt_script(r6, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 471.280318ms ago: executing program 8 (id=4058): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x34}, 0x28) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 295.86181ms ago: executing program 1 (id=4059): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffff}, {0x6, 0xfff1}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb"], 0x0, 0x34}, 0x28) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 235.458404ms ago: executing program 7 (id=4060): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 193.201927ms ago: executing program 0 (id=4061): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 192.902797ms ago: executing program 40 (id=4061): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 192.751657ms ago: executing program 4 (id=4063): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (fail_nth: 3) 18.470459ms ago: executing program 4 (id=4064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (fail_nth: 3) 0s ago: executing program 4 (id=4065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74fb01, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x35dfdbf8, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc1, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x13a0, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xf}, {0xd, 0x2}, {0xd, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1358, 0x2, [@TCA_CGROUP_POLICE={0x20, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9bbd2e92}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_CGROUP_ACT={0x11d8, 0x1, [@m_police={0x10c0, 0x1a, 0x0, 0x0, {{0xb}, {0x1094, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfff, 0x0, 0x7, 0x80000001, 0x4, 0x1ff, 0x4, 0x80, 0x2, 0x8, 0x3ff, 0x4, 0x59, 0x4, 0x40, 0xffff, 0x400, 0x6fa, 0x6, 0x9, 0x4, 0x6, 0x8, 0x7c0000, 0x9, 0x9, 0x100, 0x6, 0x9, 0x9, 0x2, 0x10000, 0x8, 0xda5e, 0x5beb369e, 0x9, 0x8, 0xff, 0x401, 0x2, 0xffff5df3, 0xb3b6, 0x7, 0x3af5, 0x6, 0x8001, 0x6b, 0x49, 0x8000, 0xc, 0xffff, 0x0, 0xffffff01, 0x3, 0xc, 0x8, 0xb, 0x5, 0x7, 0x10000, 0xfffffc01, 0x7ff, 0xfffffd53, 0x2, 0x3, 0x3, 0x4, 0x4, 0x8c, 0x3, 0xfffffdfe, 0x7, 0xa734, 0x8, 0x2, 0x5, 0x101, 0xd, 0x7, 0x398a, 0x9, 0x40, 0x9, 0x7, 0x0, 0x4, 0x400, 0x5, 0x8, 0x0, 0xfffffffb, 0x2, 0x47e4440e, 0x800, 0x3, 0x7fffffff, 0x200, 0x1, 0x1ff, 0x4, 0x0, 0x6, 0xbfcf, 0x2, 0x6, 0x0, 0x0, 0x9, 0xfffffffc, 0x7a47, 0x0, 0x5, 0x1, 0x9, 0x4, 0x3, 0xff, 0x4, 0x4, 0x0, 0x8, 0x8, 0x401, 0x1, 0x3, 0x7f, 0x10001, 0x3, 0xfffff7fb, 0x7, 0x200, 0x8, 0x0, 0x2, 0x7, 0x3, 0x100, 0x8, 0x9, 0x4, 0xbbd, 0x7, 0x8, 0x7f, 0x9, 0x3, 0x40, 0x7, 0x5, 0x7ff, 0x3, 0xe, 0x9, 0x7, 0xf23f405, 0x8, 0x461, 0x2, 0x1, 0x2, 0x3, 0xa161, 0x7f, 0x0, 0xc, 0xff, 0xc9d, 0x3, 0x1, 0xff, 0x101, 0x800, 0x2, 0xd, 0x1000, 0x5, 0x10002, 0xa00, 0x6, 0x7ff, 0x9, 0xb04, 0x0, 0x80, 0x7, 0xfffffffc, 0xdff, 0xc804, 0x1, 0x5, 0x1, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7, 0xe, 0x5, 0xfff, 0x100, 0x7fff, 0xfffffff9, 0xff, 0x7, 0x101, 0x12000000, 0x63, 0x6, 0x5, 0x1, 0xfe4, 0x9, 0x3, 0xbc, 0x7, 0x4, 0x3, 0xffffffff, 0x80, 0x5, 0x2, 0x2, 0xffffffff, 0x9, 0xb0b, 0x3, 0x39, 0xb95, 0x7, 0xdcd8, 0x0, 0x3d4, 0xffffffff, 0x400, 0x16c800, 0x7fff, 0x0, 0x100, 0x800, 0xf40, 0x4, 0x3, 0xb74, 0x3, 0x2, 0x9, 0xffffffff, 0x5, 0x9, 0x1, 0x1, 0x0, 0x4, 0xad07]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7fffffff, 0xfffffffe, 0x2, 0x6, 0x4, 0xbdd24c1c, 0x9c, 0x2fa9, 0x1ff, 0x9, 0x13de, 0x7, 0x1, 0x0, 0x1e4514c2, 0x7, 0x3, 0x5, 0xe, 0x6, 0x3, 0xd, 0x1, 0x390f2470, 0x8, 0xfffffff7, 0x10000, 0x8, 0x7, 0xffff, 0x40, 0xfffffffb, 0x8, 0x9, 0xffff, 0x8, 0x80, 0x6, 0xe6, 0x7f, 0x6, 0x5, 0x2, 0x4, 0xfffff0e9, 0xb, 0xfffff5d2, 0x10a60000, 0x9, 0x8000000, 0x3, 0x4, 0x4, 0xf, 0x4, 0x4051, 0x9, 0xd, 0x10000, 0x3479, 0x6, 0x5, 0xdd8, 0x6, 0x7ff, 0x7, 0x5, 0x2, 0x6, 0xe, 0x3, 0x9, 0x2, 0x9, 0x4, 0x7, 0x401, 0x9, 0xfffff000, 0x6, 0xffffff19, 0xb5, 0x2b9, 0x3, 0x40, 0xd8, 0x5, 0x5, 0x1, 0x2, 0x80000001, 0x0, 0x1ff, 0xcc, 0x1, 0x8, 0x0, 0x0, 0x4, 0x8, 0x8001, 0x8, 0x7, 0x9, 0xd, 0x5, 0xffff, 0x6, 0x101, 0x4, 0x7, 0x5, 0x7, 0x9, 0xa, 0x6, 0x226e, 0x9, 0x16, 0x9, 0x8, 0xffffffc0, 0x2, 0x8, 0xffffffff, 0x10001, 0xfffffffa, 0xffffffff, 0x2, 0x3, 0x8, 0xfffffff8, 0x0, 0x3, 0x200, 0x3c, 0x401, 0xde9, 0x4, 0x7f, 0x1, 0x6, 0x6, 0x2, 0x1, 0x4, 0xfffffff8, 0x0, 0x2, 0x8000, 0x3, 0x6, 0x4a1, 0x7, 0xc79, 0x5, 0x8001, 0x3, 0xe050, 0x391a90aa, 0x2, 0x3, 0x4, 0x5fe, 0x2, 0xc, 0x0, 0x6, 0x0, 0xffffffff, 0x9, 0x10000, 0x1, 0x7, 0xe2a8, 0x0, 0x5, 0xe7, 0x7, 0xff800000, 0x7fffffff, 0xffff, 0xffffffff, 0x7, 0x9, 0xfffffff8, 0x6, 0x7, 0x7, 0x0, 0x0, 0x81, 0x1, 0x80, 0xffff, 0x7, 0x0, 0x8, 0x9, 0xe8, 0x994, 0x4, 0x5, 0x80, 0x2, 0xb, 0x4, 0x6, 0xff, 0x3, 0x100, 0xf9d3, 0xd, 0xcd18, 0x1, 0xfffffc01, 0x0, 0x6, 0x1ff, 0xc70c, 0x6d, 0x80000001, 0x7, 0x8, 0x6, 0x5, 0x3, 0xf, 0x1, 0x2, 0x0, 0x7fffffff, 0x8, 0x5, 0x929, 0x1, 0xd, 0x100, 0xbc, 0x4, 0xffffffff, 0x2, 0x7fffffff, 0x0, 0x165, 0x40, 0x400, 0x8, 0x1, 0x3, 0x1, 0x800, 0x4, 0x2, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfa0, 0xe, 0x0, 0xfffffff7, 0xc0000000, 0x4, 0x6, 0x3, 0x0, 0x6, 0xfffffbff, 0x100, 0xffffff00, 0x2, 0x9, 0x2, 0x2, 0x0, 0x0, 0x6, 0xfffffeff, 0xf0, 0x3, 0x8, 0x5, 0xf974, 0x3, 0x0, 0x8000, 0xf3, 0x4, 0xb9c, 0x80, 0x5, 0x9, 0x80000000, 0x9b, 0xffffffff, 0x8, 0x3, 0x401, 0x80, 0x7, 0xe, 0x8000, 0x3, 0x1, 0xf, 0x1, 0x4, 0x4, 0x4, 0x1, 0x84, 0x2, 0x52, 0x4, 0x3, 0x49a, 0x6, 0x9, 0x9, 0x6, 0xd, 0x1d91, 0x6, 0x3, 0x7, 0x6, 0x0, 0x1, 0x5524, 0x4, 0x2, 0x6, 0xfffffff3, 0xd, 0x4, 0x2, 0x0, 0x1cb5, 0x3ff, 0x9c42, 0x7fffffff, 0x1, 0x9, 0x1, 0x10001, 0x2, 0x493, 0x40, 0x4, 0xa, 0x18, 0x1000, 0x16, 0xfffffff7, 0xab, 0x1, 0x3, 0x4, 0x8, 0x1, 0x6, 0xb, 0x2, 0x5, 0x3902a3dd, 0x3, 0x6, 0x5, 0xa, 0xfffff001, 0x200, 0x5, 0x5, 0x1, 0xd9, 0x1, 0x9, 0xa4, 0x800, 0x9, 0x200, 0x9, 0xffff3843, 0x20, 0x9, 0x9619, 0x8, 0x0, 0x1495, 0xffffffff, 0x5f, 0x3, 0x0, 0x200, 0x3f800, 0xc, 0x1, 0x12, 0xe1, 0x3, 0x9, 0xff, 0x6, 0x1, 0x2, 0x9, 0x800, 0x9, 0x3, 0x1, 0xd, 0x64, 0x7, 0x8, 0x5, 0xc2, 0xfffffff7, 0x1, 0x2a7809d6, 0xfffffffc, 0xf, 0x9, 0x500, 0x8, 0xfffffff7, 0x7, 0x81, 0x3, 0x20, 0x6ee24349, 0x8085, 0x101, 0x3, 0x5c7, 0x8, 0x1, 0x6, 0x6, 0x4, 0xe1dc, 0x176, 0x1, 0x0, 0x1, 0x8, 0xded, 0x7a0c, 0x6, 0x7fffffff, 0x401, 0x6, 0x400, 0x2a, 0x2, 0x0, 0x5, 0x2, 0x2, 0x8, 0x3, 0x2, 0x81, 0x5, 0x7, 0x9, 0xffff, 0x3, 0x9, 0x4, 0x2, 0x0, 0x547, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x7, 0x3, 0x13ae397d, 0x7f, 0x101, 0xff, 0x7fffffff, 0x258000, 0x6, 0x8, 0x10001, 0x4, 0x9, 0xab, 0x1, 0xb, 0x2, 0x2, 0x41c, 0x401, 0xa86, 0x1ffe000, 0xd, 0x0, 0x3, 0x80, 0x8, 0x6, 0xe, 0xd, 0x80, 0x80, 0x7fffffff, 0x2, 0x29000000, 0xfffffff8]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xff, 0x2f2f, 0x3, 0x6c, 0xffff, 0x1, 0x7, 0x72e1, 0xe5b, 0x3, 0x6, 0x7, 0x4, 0x5, 0x3, 0x55, 0x401, 0x7f, 0x10001, 0xed5, 0x6, 0x7, 0xdc, 0x10, 0x4, 0x200, 0x0, 0x6d, 0x14000000, 0xfff, 0x5f35, 0x9, 0xa, 0x0, 0x10d, 0x2, 0x8, 0x200, 0x9, 0xffffffff, 0x7f, 0xd25c, 0x2, 0x2, 0x1, 0xb45, 0x0, 0x6, 0xfffffff5, 0x8, 0x4, 0xfc, 0x4, 0x4, 0x3ff, 0x11, 0x7fff, 0x1, 0x2, 0x9, 0x9, 0x4, 0x2, 0x8, 0x4, 0x7, 0x3, 0x7f, 0xfffffffe, 0x1, 0xfffff801, 0x2, 0x9, 0xffff, 0x1, 0x4, 0x1, 0x7, 0x2, 0x0, 0x7ff, 0x8, 0x1, 0xffff, 0xa6, 0xfffffffd, 0xffe, 0x0, 0x8, 0x100, 0x9, 0xaab, 0xffffffff, 0x6f6, 0x5b, 0x4, 0x81, 0x4, 0x9, 0x400, 0x2, 0x0, 0xd0b, 0x91, 0x0, 0x5ef, 0x7f, 0x1, 0x4, 0x101, 0xfff, 0x0, 0x6, 0x10001, 0x0, 0x6, 0xffff, 0xfff, 0x3, 0x5, 0x4, 0x9, 0x7, 0xad, 0xe, 0x5, 0x1, 0x0, 0x3, 0x5, 0x0, 0x4, 0x0, 0x3, 0xfffffffb, 0xc34, 0x9, 0xffff0000, 0x3, 0x1ff, 0x8001, 0x0, 0x7fff, 0x1, 0x2, 0x4, 0xffff, 0x2, 0x2c, 0x4, 0x37, 0x622, 0x474, 0x2, 0x5, 0x2, 0x9, 0x9, 0x2, 0x0, 0x6, 0x3a06, 0x800, 0x40, 0x8, 0x3, 0x1, 0xffffffff, 0xdfd, 0x2, 0x4, 0x1, 0x0, 0x3, 0x2, 0x2, 0xd, 0xc7d, 0x8, 0x9, 0x3, 0x9, 0x8, 0xe8ab, 0x0, 0x1, 0x1, 0x0, 0x3, 0x9, 0x4, 0x8f07, 0x800, 0x9, 0xa, 0x6, 0x6, 0x5, 0x4, 0x9, 0xfffffff9, 0xb4, 0xbc, 0x0, 0x2, 0x3, 0x9973, 0x7, 0xa, 0x2, 0xffffff80, 0xfffffffa, 0x4, 0x4, 0x7, 0x715, 0x7f5, 0x3, 0x9, 0x3, 0xc1a, 0x2, 0xfffffffe, 0x1, 0x20ea, 0x200, 0x81, 0x3, 0x7, 0xb804, 0x1, 0x1, 0x9, 0x5, 0xc, 0x9, 0xde, 0x200, 0x5, 0x10001, 0x3, 0xfea1, 0xb, 0xb, 0x7, 0xe, 0x3, 0x7f, 0x400, 0x2d0d, 0x8, 0x0, 0x9, 0xaf2, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x9, 0x20000, 0x3, {0x50, 0x2, 0x5, 0x1ff, 0x1, 0x4}, {0x7, 0x1, 0xff, 0x1, 0x3, 0x80000000}, 0x5, 0x9, 0x4}}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x114, 0x1c, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x0, 0x5, 0x6, 0xfffffffa}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe, 0x1, 0xffffffffffffffff, 0x7, 0x1}}]}, {0x9e, 0x6, "9340f5ebd66fe0f081c56e00cd0d841b789864259add0f193b44720dd771ad4d2e9ef14388f2e7f300178bdf775a1b95e0d65a75a68b2973f17a75d9fee39ae28f3ea3ceada0b0eb5c027fcb8db4dfbbaebb7eb4ca57ae6fd957398c52437e6fc75402a9bbf1c5b481aadf285f5904e7bde45928226b435a941b057eb69b3c8b9726e7f7ccda060c8bbd4abd9aa20a0f41ebc49479ea1583c452"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_EMATCHES={0x140, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x70, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x80}, "6d0392975b761c9d60b81369d98f0e9c7ca7400a047ca816ea3afe0c98a45e3798bdd9af15c19d38e2895ee855a006387bc6d8deaf20eb59698d00dfd1bcedd61481781becb165477e40f9a67dde62ef5cf5839800e2aecdc14758c97663862f801744"}}]}, @TCA_EMATCH_TREE_LIST={0x88, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x81, 0x7, 0x8}, {{0x3}, {0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x44, 0x1, 0x0, 0x0, {{0x9f, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x91, 0x1}, {0xd0, 0x6}}}, @TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_VAR="9c2e0ca3", @TCF_META_TYPE_VAR="51ae", @TCF_META_TYPE_VAR="0ff44e1bab1b92b29373", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="5e1c80d8b444b886c526"]}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x2}, {0x37, 0x9, 0x2, "5a0dc5d1b10ee0fd43"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x40, 0x8, 0x6}, {0x3, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0x1000}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0xfff8, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}, @TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff5d8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x8a86}, @TCA_CHAIN={0x8, 0xb, 0x82}]}, 0x13a0}, 0x1, 0x0, 0x0, 0x4004070}, 0x4008000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sync_file_range(0xffffffffffffffff, 0x8c73, 0xd9, 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 0x250 [ 712.740551][T18942] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 712.740593][T18942] do_getname+0x59/0x1c0 [ 712.740621][T18942] __se_sys_mknodat+0x24/0xf0 [ 712.740640][T18942] __x64_sys_mknodat+0x55/0x70 [ 712.740659][T18942] x64_sys_call+0x312/0x3020 [ 712.740752][T18942] do_syscall_64+0x12c/0x370 [ 712.740827][T18942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.740928][T18942] RIP: 0033:0x7f8ffba1c819 [ 712.740943][T18942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.740960][T18942] RSP: 002b:00007f8ffa477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 712.740979][T18942] RAX: ffffffffffffffda RBX: 00007f8ffbc95fa0 RCX: 00007f8ffba1c819 [ 712.740993][T18942] RDX: 00000000000081c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 712.741084][T18942] RBP: 00007f8ffa477090 R08: 0000000000000000 R09: 0000000000000000 [ 712.741109][T18942] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 712.741122][T18942] R13: 00007f8ffbc96038 R14: 00007f8ffbc95fa0 R15: 00007ffeaabbcc18 [ 712.741214][T18942] [ 713.036667][T18960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3650'. [ 713.040368][T18944] syzkaller0: entered promiscuous mode [ 713.045407][T17088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.049262][T18944] syzkaller0: entered allmulticast mode [ 713.149250][T18965] loop1: detected capacity change from 0 to 512 [ 713.220261][T18957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.229098][T18965] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 713.256227][T18965] EXT4-fs (loop1): 1 truncate cleaned up [ 713.265194][T18960] hsr_slave_1 (unregistering): left promiscuous mode [ 713.272531][T18965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.305208][T18968] loop7: detected capacity change from 0 to 1764 [ 713.311960][T18968] iso9660: Unknown parameter 'utF8' [ 713.330490][T18944] tipc: Resetting bearer [ 713.341410][T18944] tipc: Disabling bearer [ 713.351697][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.413077][T18978] loop8: detected capacity change from 0 to 512 [ 713.426430][T18982] loop0: detected capacity change from 0 to 256 [ 713.439972][T18985] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3656'. [ 713.449279][T18978] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 713.466597][ T28] audit: type=1400 audit(1775757704.773:71521): avc: denied { module_load } for pid=18980 comm="syz.0.3659" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=54731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 713.505491][T18978] EXT4-fs (loop8): 1 truncate cleaned up [ 713.515375][T18978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.627417][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3663'. [ 713.665976][T18995] net_ratelimit: 120 callbacks suppressed [ 713.665993][T18995] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 713.721028][ T28] audit: type=1400 audit(1775757705.033:71522): avc: denied { write } for pid=18994 comm="syz.7.3662" name="file0" dev="tmpfs" ino=754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 713.751071][T19017] FAULT_INJECTION: forcing a failure. [ 713.751071][T19017] name failslab, interval 1, probability 0, space 0, times 0 [ 713.763959][T19017] CPU: 0 UID: 0 PID: 19017 Comm: syz.3.3669 Not tainted syzkaller #0 PREEMPT(full) [ 713.763984][T19017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 713.764070][T19017] Call Trace: [ 713.764078][T19017] [ 713.764085][T19017] __dump_stack+0x1d/0x30 [ 713.764112][T19017] dump_stack_lvl+0x95/0xd0 [ 713.764131][T19017] dump_stack+0x15/0x1b [ 713.764179][T19017] should_fail_ex+0x263/0x280 [ 713.764207][T19017] should_failslab+0x8c/0xb0 [ 713.764230][T19017] kmem_cache_alloc_noprof+0x66/0x400 [ 713.764290][T19017] ? security_inode_alloc+0x37/0x100 [ 713.764382][T19017] security_inode_alloc+0x37/0x100 [ 713.764406][T19017] inode_init_always_gfp+0x4b7/0x500 [ 713.764443][T19017] ? __pfx_sock_alloc_inode+0x10/0x10 [ 713.764468][T19017] alloc_inode+0x58/0x170 [ 713.764490][T19017] __sock_create+0x120/0x580 [ 713.764523][T19017] sock_create_kern+0x38/0x50 [ 713.764548][T19017] mptcp_subflow_create_socket+0x84/0x520 [ 713.764652][T19017] ? _raw_spin_lock_bh+0x56/0xb0 [ 713.764676][T19017] __mptcp_nmpc_sk+0xb5/0x3d0 [ 713.764693][T19017] mptcp_listen+0xc0/0x570 [ 713.764753][T19017] __x64_sys_listen+0x110/0x170 [ 713.764781][T19017] x64_sys_call+0x1fbf/0x3020 [ 713.764804][T19017] do_syscall_64+0x12c/0x370 [ 713.764834][T19017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.764856][T19017] RIP: 0033:0x7f2027aec819 [ 713.764915][T19017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.764997][T19017] RSP: 002b:00007f2026547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 713.765016][T19017] RAX: ffffffffffffffda RBX: 00007f2027d65fa0 RCX: 00007f2027aec819 [ 713.765029][T19017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 713.765039][T19017] RBP: 00007f2026547090 R08: 0000000000000000 R09: 0000000000000000 [ 713.765106][T19017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.765120][T19017] R13: 00007f2027d66038 R14: 00007f2027d65fa0 R15: 00007ffd28cc4068 [ 713.765135][T19017] [ 713.765165][T19017] socket: no more sockets [ 713.814800][T19023] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 714.080676][T19025] iso9660: Unknown parameter 'utF8' [ 714.145774][T19031] ext3: Unknown parameter 'smackfsroot' [ 714.151912][ T35] IPVS: starting estimator thread 0... [ 714.157953][T19023] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 714.169249][ T28] audit: type=1400 audit(1775757705.473:71523): avc: denied { read append } for pid=19030 comm="syz.3.3674" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 714.233439][ T28] audit: type=1400 audit(1775757705.473:71524): avc: denied { open } for pid=19030 comm="syz.3.3674" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 714.257499][T19032] IPVS: using max 2448 ests per chain, 122400 per kthread [ 714.289570][ T28] audit: type=1400 audit(1775757705.503:71525): avc: denied { listen } for pid=19030 comm="syz.3.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 714.428455][T12569] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 714.501011][ T28] audit: type=1400 audit(1775757705.813:71526): avc: denied { write } for pid=19048 comm="syz.7.3679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 714.766020][T17088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.044568][T19083] tc_dump_action: action bad kind [ 715.124258][T19090] syzkaller0: entered promiscuous mode [ 715.131209][T19090] syzkaller0: entered allmulticast mode [ 715.146410][T19092] netlink: 'syz.0.3692': attribute type 1 has an invalid length. [ 715.167271][T19092] bond1: entered promiscuous mode [ 715.172747][T19092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 715.191920][T19092] bond1: (slave bridge1): making interface the new active one [ 715.199712][T19092] bridge1: entered promiscuous mode [ 715.208439][T19092] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 715.221299][T19092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19092 comm=syz.0.3692 [ 715.319951][T19115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19115 comm=syz.3.3700 [ 715.534984][T19119] iso9660: Unknown parameter 'utF8' [ 715.648546][ T3483] IPVS: starting estimator thread 0... [ 715.740155][T19122] IPVS: using max 2448 ests per chain, 122400 per kthread [ 717.617427][T19064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 717.677603][T19124] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 717.738900][ T28] audit: type=1400 audit(1775757709.043:71527): avc: denied { bind } for pid=19125 comm="syz.7.3702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 717.772385][T19142] set_capacity_and_notify: 4 callbacks suppressed [ 717.772401][T19142] loop1: detected capacity change from 0 to 512 [ 717.796328][T19142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.811065][T19142] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.830979][T19150] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 717.865201][T19150] FAULT_INJECTION: forcing a failure. [ 717.865201][T19150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.890467][T19150] CPU: 1 UID: 0 PID: 19150 Comm: syz.7.3710 Not tainted syzkaller #0 PREEMPT(full) [ 717.890498][T19150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.890511][T19150] Call Trace: [ 717.890517][T19150] [ 717.890581][T19150] __dump_stack+0x1d/0x30 [ 717.890605][T19150] dump_stack_lvl+0x95/0xd0 [ 717.890632][T19150] dump_stack+0x15/0x1b [ 717.890654][T19150] should_fail_ex+0x263/0x280 [ 717.890742][T19150] should_fail+0xb/0x20 [ 717.890763][T19150] should_fail_usercopy+0x1a/0x20 [ 717.890787][T19150] _copy_to_user+0x20/0xa0 [ 717.890817][T19150] simple_read_from_buffer+0xb5/0x130 [ 717.890883][T19150] proc_fail_nth_read+0x10e/0x150 [ 717.890911][T19150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 717.890937][T19150] vfs_read+0x1ab/0x7f0 [ 717.890969][T19150] ? __rcu_read_unlock+0x4e/0x70 [ 717.890988][T19150] ? __fget_files+0x184/0x1c0 [ 717.891018][T19150] ? mutex_lock+0x57/0x90 [ 717.891039][T19150] ksys_read+0xdc/0x1a0 [ 717.891099][T19150] __x64_sys_read+0x40/0x50 [ 717.891146][T19150] x64_sys_call+0x2886/0x3020 [ 717.891245][T19150] do_syscall_64+0x12c/0x370 [ 717.891266][T19150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.891348][T19150] RIP: 0033:0x7f3bde65d04e [ 717.891363][T19150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 717.891379][T19150] RSP: 002b:00007f3bdd0f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.891396][T19150] RAX: ffffffffffffffda RBX: 00007f3bdd0f76c0 RCX: 00007f3bde65d04e [ 717.891408][T19150] RDX: 000000000000000f RSI: 00007f3bdd0f70a0 RDI: 0000000000000004 [ 717.891421][T19150] RBP: 00007f3bdd0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 717.891440][T19150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.891453][T19150] R13: 00007f3bde916038 R14: 00007f3bde915fa0 R15: 00007ffc3719f538 [ 717.891473][T19150] [ 718.101788][T19162] loop3: detected capacity change from 0 to 128 [ 718.131614][T19162] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 718.145973][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.160442][ T28] audit: type=1400 audit(1775757709.463:71528): avc: denied { mounton } for pid=19160 comm="syz.3.3715" path="/97/file0/file0" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 718.184398][T17318] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 718.190328][ T28] audit: type=1400 audit(1775757709.483:71529): avc: denied { execute } for pid=19159 comm="syz.0.3714" path="/69/file0" dev="tmpfs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 718.221166][T17318] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 718.240988][T19167] __nla_validate_parse: 5 callbacks suppressed [ 718.241006][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3718'. [ 718.259830][T19167] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 718.412991][T12569] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.462777][T12569] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.514663][T12569] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.558171][T19186] chnl_net:caif_netlink_parms(): no params data found [ 718.576159][T12569] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.607242][T19186] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.614371][T19186] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.621697][T19186] bridge_slave_0: entered allmulticast mode [ 718.628386][T19186] bridge_slave_0: entered promiscuous mode [ 718.635071][T19186] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.642442][T19186] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.649679][T19186] bridge_slave_1: entered allmulticast mode [ 718.656483][T19186] bridge_slave_1: entered promiscuous mode [ 718.673234][T19186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.683774][T19186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.717532][T19186] team0: Port device team_slave_0 added [ 718.724324][T19186] team0: Port device team_slave_1 added [ 718.739793][T12569] bridge_slave_1: left allmulticast mode [ 718.745573][T12569] bridge_slave_1: left promiscuous mode [ 718.751884][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.759648][T12569] bridge_slave_0: left allmulticast mode [ 718.765539][T12569] bridge_slave_0: left promiscuous mode [ 718.771989][T12569] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.884813][T12569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.895194][T12569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.905113][T12569] bond0 (unregistering): Released all slaves [ 718.913112][T12569] bond1 (unregistering): Released all slaves [ 718.922042][T19186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.929109][T19186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.955541][T19186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.974608][T19186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.982113][T19186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.009852][ T28] audit: type=1400 audit(1775757710.323:71530): avc: denied { execute } for pid=19202 comm="syz.7.3725" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=55443 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 719.012118][T19186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.053729][T12569] tipc: Disabling bearer [ 719.070124][T12569] tipc: Disabling bearer [ 719.076435][T12569] tipc: Left network mode [ 719.093523][T12569] hsr_slave_0: left promiscuous mode [ 719.099435][T12569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.107056][T12569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.115447][T12569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.123411][T12569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.135681][T12569] veth1_macvtap: left promiscuous mode [ 719.141465][T12569] veth0_macvtap: left promiscuous mode [ 719.185772][T12569] team0 (unregistering): Port device team_slave_1 removed [ 719.195604][T12569] team0 (unregistering): Port device team_slave_0 removed [ 719.226725][T19186] hsr_slave_0: entered promiscuous mode [ 719.233166][T19186] hsr_slave_1: entered promiscuous mode [ 719.239202][T19186] debugfs: 'hsr0' already exists in 'hsr' [ 719.245605][T19186] Cannot create hsr debugfs directory [ 719.522451][T12569] IPVS: stop unused estimator thread 0... [ 721.230890][T19169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.250623][T19186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 721.286231][T19186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 721.334834][ T28] audit: type=1400 audit(1775757712.643:71531): avc: denied { create } for pid=19208 comm="syz.0.3727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 721.355912][T19212] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 721.361782][ T28] audit: type=1400 audit(1775757712.643:71532): avc: denied { create } for pid=19208 comm="syz.0.3727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 721.367766][T19186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 721.390331][ T28] audit: type=1400 audit(1775757712.663:71533): avc: denied { setopt } for pid=19208 comm="syz.0.3727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 721.413372][ T28] audit: type=1400 audit(1775757712.663:71534): avc: denied { bind } for pid=19208 comm="syz.0.3727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 721.421724][T19186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 721.442080][ T28] audit: type=1400 audit(1775757712.663:71535): avc: denied { name_bind } for pid=19208 comm="syz.0.3727" src=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 721.468188][ T28] audit: type=1400 audit(1775757712.663:71536): avc: denied { node_bind } for pid=19208 comm="syz.0.3727" saddr=::1 src=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 721.495364][T19211] loop8: detected capacity change from 0 to 764 [ 721.569039][T19186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.581225][T19186] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.593244][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.600413][ T9174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.624948][T19238] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 721.645341][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.652433][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.729347][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3734'. [ 721.809770][T19261] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3736'. [ 721.810154][T19186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.967423][T19291] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3737'. [ 722.002351][T19186] veth0_vlan: entered promiscuous mode [ 722.018290][T19186] veth1_vlan: entered promiscuous mode [ 722.032896][T19186] veth0_macvtap: entered promiscuous mode [ 722.042792][T19186] veth1_macvtap: entered promiscuous mode [ 722.053502][T19186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.064008][T19186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.074802][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.083823][ T3493] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.093315][ T3493] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.102649][ T3493] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.261051][T19307] syzkaller0: entered promiscuous mode [ 722.267140][T19307] syzkaller0: entered allmulticast mode [ 723.014312][T19324] loop8: detected capacity change from 0 to 1764 [ 723.021885][T19324] iso9660: Unknown parameter 'utF8' [ 724.272746][T19328] loop1: detected capacity change from 0 to 1024 [ 724.283457][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 724.283471][ T28] audit: type=1400 audit(1775757715.593:71543): avc: denied { mounton } for pid=19327 comm="syz.1.3745" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 724.315141][ T28] audit: type=1400 audit(1775757715.623:71544): avc: denied { connect } for pid=19327 comm="syz.1.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 724.336586][ T28] audit: type=1400 audit(1775757715.633:71545): avc: denied { ioctl } for pid=19327 comm="syz.1.3745" path="socket:[55819]" dev="sockfs" ino=55819 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 725.012562][T19294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.043874][T19342] netlink: 'syz.0.3750': attribute type 29 has an invalid length. [ 725.051851][T19342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'. [ 725.060757][T19342] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 725.127225][ T28] audit: type=1400 audit(1775757716.433:71546): avc: denied { bind } for pid=19344 comm="syz.1.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 725.127297][T19346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3753'. [ 725.169473][T19346] team1: entered promiscuous mode [ 725.186225][T19346] team1: entered allmulticast mode [ 725.203196][T19346] 8021q: adding VLAN 0 to HW filter on device team1 [ 725.486202][T19356] loop8: detected capacity change from 0 to 2048 [ 725.511470][T19356] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 725.524099][T19356] EXT4-fs (loop8): group descriptors corrupted! [ 725.538588][T19396] loop7: detected capacity change from 0 to 1764 [ 725.545391][T19396] iso9660: Unknown parameter 'utF8' [ 725.833421][T19441] syzkaller0: entered promiscuous mode [ 725.839067][T19441] syzkaller0: entered allmulticast mode [ 726.544637][T19572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3768'. [ 726.601897][T19583] FAULT_INJECTION: forcing a failure. [ 726.601897][T19583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.617804][T19583] CPU: 1 UID: 0 PID: 19583 Comm: syz.0.3769 Not tainted syzkaller #0 PREEMPT(full) [ 726.617826][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 726.617837][T19583] Call Trace: [ 726.617842][T19583] [ 726.617848][T19583] __dump_stack+0x1d/0x30 [ 726.617919][T19583] dump_stack_lvl+0x95/0xd0 [ 726.617942][T19583] dump_stack+0x15/0x1b [ 726.617963][T19583] should_fail_ex+0x263/0x280 [ 726.617988][T19583] should_fail+0xb/0x20 [ 726.618078][T19583] should_fail_usercopy+0x1a/0x20 [ 726.618103][T19583] _copy_to_iter+0x251/0xea0 [ 726.618127][T19583] ? __rcu_read_unlock+0x6b/0x70 [ 726.618299][T19583] ? traverse+0x379/0x3a0 [ 726.618331][T19583] seq_read_iter+0x1d5/0x940 [ 726.618381][T19583] ? __tsan_unaligned_write1+0x4/0x180 [ 726.618403][T19583] seq_read+0x279/0x2c0 [ 726.618433][T19583] ? __pfx_seq_read+0x10/0x10 [ 726.618518][T19583] proc_reg_read+0x128/0x1c0 [ 726.618540][T19583] ? __pfx_proc_reg_read+0x10/0x10 [ 726.618559][T19583] vfs_read+0x1ab/0x7f0 [ 726.618576][T19583] ? __rcu_read_unlock+0x4e/0x70 [ 726.618596][T19583] ? __fget_files+0x184/0x1c0 [ 726.618637][T19583] __x64_sys_pread64+0xfd/0x150 [ 726.618655][T19583] x64_sys_call+0x27b5/0x3020 [ 726.618676][T19583] do_syscall_64+0x12c/0x370 [ 726.618769][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.618794][T19583] RIP: 0033:0x7f2b6483c819 [ 726.618889][T19583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.618910][T19583] RSP: 002b:00007f2b63297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 726.618972][T19583] RAX: ffffffffffffffda RBX: 00007f2b64ab5fa0 RCX: 00007f2b6483c819 [ 726.619019][T19583] RDX: 00000000fffffcbb RSI: 0000200000019400 RDI: 0000000000000005 [ 726.619031][T19583] RBP: 00007f2b63297090 R08: 0000000000000000 R09: 0000000000000000 [ 726.619043][T19583] R10: 0000000000001c2a R11: 0000000000000246 R12: 0000000000000001 [ 726.619060][T19583] R13: 00007f2b64ab6038 R14: 00007f2b64ab5fa0 R15: 00007fff05993608 [ 726.619130][T19583] [ 726.871376][ T28] audit: type=1326 audit(1775757718.183:71547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 726.895340][ T28] audit: type=1326 audit(1775757718.183:71548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 726.919141][ T28] audit: type=1326 audit(1775757718.183:71549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 726.945013][ T28] audit: type=1326 audit(1775757718.183:71550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 726.961061][T19612] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 726.971736][ T28] audit: type=1326 audit(1775757718.183:71551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 726.990892][T19612] FAULT_INJECTION: forcing a failure. [ 726.990892][T19612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.999216][ T28] audit: type=1326 audit(1775757718.183:71552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19609 comm="syz.0.3771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 727.012311][T19612] CPU: 0 UID: 0 PID: 19612 Comm: syz.0.3772 Not tainted syzkaller #0 PREEMPT(full) [ 727.012337][T19612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 727.012420][T19612] Call Trace: [ 727.012427][T19612] [ 727.012435][T19612] __dump_stack+0x1d/0x30 [ 727.012507][T19612] dump_stack_lvl+0x95/0xd0 [ 727.012529][T19612] dump_stack+0x15/0x1b [ 727.012570][T19612] should_fail_ex+0x263/0x280 [ 727.012597][T19612] should_fail+0xb/0x20 [ 727.012663][T19612] should_fail_usercopy+0x1a/0x20 [ 727.012690][T19612] _copy_from_iter+0xcf/0xea0 [ 727.012773][T19612] ? should_fail_ex+0xd9/0x280 [ 727.012797][T19612] ? should_failslab+0x8c/0xb0 [ 727.012818][T19612] ? __kmalloc_noprof+0x1e3/0x4e0 [ 727.012839][T19612] ? kernfs_fop_write_iter+0xe2/0x300 [ 727.012873][T19612] kernfs_fop_write_iter+0x125/0x300 [ 727.012893][T19612] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 727.012912][T19612] vfs_write+0x5a6/0x9f0 [ 727.012934][T19612] ksys_write+0xdc/0x1a0 [ 727.012971][T19612] __x64_sys_write+0x40/0x50 [ 727.012989][T19612] x64_sys_call+0x27e1/0x3020 [ 727.013014][T19612] do_syscall_64+0x12c/0x370 [ 727.013080][T19612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.013101][T19612] RIP: 0033:0x7f2b6483c819 [ 727.013116][T19612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.013164][T19612] RSP: 002b:00007f2b63297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.013184][T19612] RAX: ffffffffffffffda RBX: 00007f2b64ab5fa0 RCX: 00007f2b6483c819 [ 727.013198][T19612] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000007 [ 727.013211][T19612] RBP: 00007f2b63297090 R08: 0000000000000000 R09: 0000000000000000 [ 727.013276][T19612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.013316][T19612] R13: 00007f2b64ab6038 R14: 00007f2b64ab5fa0 R15: 00007fff05993608 [ 727.013334][T19612] [ 727.121673][T19614] FAULT_INJECTION: forcing a failure. [ 727.121673][T19614] name failslab, interval 1, probability 0, space 0, times 0 [ 727.241912][T19614] CPU: 0 UID: 0 PID: 19614 Comm: syz.0.3773 Not tainted syzkaller #0 PREEMPT(full) [ 727.241939][T19614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 727.241982][T19614] Call Trace: [ 727.241988][T19614] [ 727.241994][T19614] __dump_stack+0x1d/0x30 [ 727.242018][T19614] dump_stack_lvl+0x95/0xd0 [ 727.242039][T19614] dump_stack+0x15/0x1b [ 727.242058][T19614] should_fail_ex+0x263/0x280 [ 727.242104][T19614] should_failslab+0x8c/0xb0 [ 727.242123][T19614] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 727.242155][T19614] ? __alloc_skb+0x2d6/0x690 [ 727.242178][T19614] __alloc_skb+0x2d6/0x690 [ 727.242269][T19614] ? __alloc_skb+0x200/0x690 [ 727.242294][T19614] netlink_alloc_large_skb+0xbf/0xf0 [ 727.242319][T19614] netlink_sendmsg+0x40c/0x6f0 [ 727.242364][T19614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.242384][T19614] ____sys_sendmsg+0x563/0x5b0 [ 727.242406][T19614] ___sys_sendmsg+0x195/0x1e0 [ 727.242435][T19614] __x64_sys_sendmsg+0xd4/0x160 [ 727.242504][T19614] x64_sys_call+0x194c/0x3020 [ 727.242528][T19614] do_syscall_64+0x12c/0x370 [ 727.242560][T19614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.242582][T19614] RIP: 0033:0x7f2b6483c819 [ 727.242598][T19614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.242641][T19614] RSP: 002b:00007f2b63297028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.242761][T19614] RAX: ffffffffffffffda RBX: 00007f2b64ab5fa0 RCX: 00007f2b6483c819 [ 727.242774][T19614] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 727.242786][T19614] RBP: 00007f2b63297090 R08: 0000000000000000 R09: 0000000000000000 [ 727.242797][T19614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.242837][T19614] R13: 00007f2b64ab6038 R14: 00007f2b64ab5fa0 R15: 00007fff05993608 [ 727.242854][T19614] [ 728.361711][T19381] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.406754][T19624] netlink: 'syz.1.3775': attribute type 29 has an invalid length. [ 728.415233][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3775'. [ 728.463643][T19629] syzkaller0: entered promiscuous mode [ 728.472264][T19632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3778'. [ 728.483337][T19629] syzkaller0: entered allmulticast mode [ 728.688078][T19646] netlink: 'syz.7.3782': attribute type 1 has an invalid length. [ 728.697931][T19648] netlink: 'syz.8.3781': attribute type 1 has an invalid length. [ 728.705472][T19646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3782'. [ 728.706175][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3781'. [ 728.715643][T19646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 728.735438][T19646] vlan2: entered promiscuous mode [ 728.740779][T19646] bond1: entered promiscuous mode [ 728.976685][T19661] tipc: Enabled bearer , priority 0 [ 728.983800][T19661] syzkaller0: entered promiscuous mode [ 728.989265][T19661] syzkaller0: entered allmulticast mode [ 729.013837][T19661] tipc: Resetting bearer [ 729.021151][T19660] tipc: Resetting bearer [ 729.027275][T19659] loop7: detected capacity change from 0 to 1764 [ 729.034065][T19659] iso9660: Unknown parameter 'utF8' [ 729.034268][T19660] tipc: Disabling bearer [ 729.111183][T19665] xt_hashlimit: size too large, truncated to 1048576 [ 729.159762][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 729.181232][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 729.410754][T19678] FAULT_INJECTION: forcing a failure. [ 729.410754][T19678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.426099][T19678] CPU: 0 UID: 0 PID: 19678 Comm: syz.0.3792 Not tainted syzkaller #0 PREEMPT(full) [ 729.426151][T19678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 729.426163][T19678] Call Trace: [ 729.426170][T19678] [ 729.426179][T19678] __dump_stack+0x1d/0x30 [ 729.426206][T19678] dump_stack_lvl+0x95/0xd0 [ 729.426304][T19678] dump_stack+0x15/0x1b [ 729.426325][T19678] should_fail_ex+0x263/0x280 [ 729.426410][T19678] should_fail+0xb/0x20 [ 729.426433][T19678] should_fail_usercopy+0x1a/0x20 [ 729.426459][T19678] _copy_to_user+0x20/0xa0 [ 729.426513][T19678] simple_read_from_buffer+0xb5/0x130 [ 729.426542][T19678] proc_fail_nth_read+0x10e/0x150 [ 729.426568][T19678] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.426628][T19678] vfs_read+0x1ab/0x7f0 [ 729.426643][T19678] ? __rcu_read_unlock+0x4e/0x70 [ 729.426660][T19678] ? __fget_files+0x184/0x1c0 [ 729.426681][T19678] ? mutex_lock+0x57/0x90 [ 729.426731][T19678] ksys_read+0xdc/0x1a0 [ 729.426746][T19678] __x64_sys_read+0x40/0x50 [ 729.426761][T19678] x64_sys_call+0x2886/0x3020 [ 729.426863][T19678] do_syscall_64+0x12c/0x370 [ 729.426885][T19678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.426903][T19678] RIP: 0033:0x7f2b647fd04e [ 729.426917][T19678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 729.427011][T19678] RSP: 002b:00007f2b63296fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.427030][T19678] RAX: ffffffffffffffda RBX: 00007f2b632976c0 RCX: 00007f2b647fd04e [ 729.427042][T19678] RDX: 000000000000000f RSI: 00007f2b632970a0 RDI: 0000000000000005 [ 729.427052][T19678] RBP: 00007f2b63297090 R08: 0000000000000000 R09: 0000000000000000 [ 729.427063][T19678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.427074][T19678] R13: 00007f2b64ab6038 R14: 00007f2b64ab5fa0 R15: 00007fff05993608 [ 729.427138][T19678] [ 729.684664][T19695] netlink: 'syz.0.3798': attribute type 29 has an invalid length. [ 729.692566][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3798'. [ 729.701615][T19695] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 729.783152][T19698] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3799'. [ 730.227135][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 730.227226][ T28] audit: type=1400 audit(1775757721.533:71583): avc: denied { name_connect } for pid=19705 comm="syz.0.3801" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 730.278077][T19707] netlink: 'syz.0.3801': attribute type 21 has an invalid length. [ 730.706286][ T28] audit: type=1400 audit(1775757722.003:71584): avc: denied { create } for pid=19712 comm="syz.8.3803" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 730.802905][ T28] audit: type=1400 audit(1775757722.113:71585): avc: denied { bind } for pid=19716 comm="syz.7.3804" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 730.830755][ T28] audit: type=1400 audit(1775757722.133:71586): avc: denied { name_bind } for pid=19716 comm="syz.7.3804" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 731.660517][T19724] loop0: detected capacity change from 0 to 512 [ 731.669178][T19724] EXT4-fs: Ignoring removed mblk_io_submit option [ 731.682180][T19724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 731.940212][T19723] FAULT_INJECTION: forcing a failure. [ 731.940212][T19723] name failslab, interval 1, probability 0, space 0, times 0 [ 731.953154][T19723] CPU: 0 UID: 0 PID: 19723 Comm: syz.7.3805 Not tainted syzkaller #0 PREEMPT(full) [ 731.953177][T19723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.953227][T19723] Call Trace: [ 731.953234][T19723] [ 731.953243][T19723] __dump_stack+0x1d/0x30 [ 731.953267][T19723] dump_stack_lvl+0x95/0xd0 [ 731.953398][T19723] dump_stack+0x15/0x1b [ 731.953483][T19723] should_fail_ex+0x263/0x280 [ 731.953574][T19723] should_failslab+0x8c/0xb0 [ 731.953653][T19723] __kmalloc_noprof+0xb8/0x4e0 [ 731.953691][T19723] ? io_cache_alloc_new+0x2a/0xb0 [ 731.953784][T19723] io_cache_alloc_new+0x2a/0xb0 [ 731.953807][T19723] io_msg_alloc_async+0xf9/0x190 [ 731.953828][T19723] io_recvmsg_prep+0x4a6/0x8a0 [ 731.953887][T19723] io_submit_sqes+0x75c/0x1230 [ 731.953960][T19723] __se_sys_io_uring_enter+0x1c9/0xf60 [ 731.953980][T19723] ? __fget_files+0x184/0x1c0 [ 731.954006][T19723] ? mutex_unlock+0x4e/0x90 [ 731.954032][T19723] ? fput+0x8f/0xc0 [ 731.954052][T19723] __x64_sys_io_uring_enter+0x78/0x90 [ 731.954071][T19723] x64_sys_call+0x1e16/0x3020 [ 731.954128][T19723] do_syscall_64+0x12c/0x370 [ 731.954153][T19723] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 731.954175][T19723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.954198][T19723] RIP: 0033:0x7f3bde69c819 [ 731.954212][T19723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.954228][T19723] RSP: 002b:00007f3bdd0b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 731.954249][T19723] RAX: ffffffffffffffda RBX: 00007f3bde916180 RCX: 00007f3bde69c819 [ 731.954263][T19723] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 731.954301][T19723] RBP: 00007f3bdd0b5090 R08: 0000000000000000 R09: 0000000000000000 [ 731.954313][T19723] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 731.954323][T19723] R13: 00007f3bde916218 R14: 00007f3bde916180 R15: 00007ffc3719f538 [ 731.954342][T19723] [ 732.682727][T19724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.775506][T19724] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 732.787311][T19671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.998664][ T28] audit: type=1400 audit(1775757724.183:71587): avc: denied { read append } for pid=19721 comm="syz.0.3806" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 733.057338][T19742] loop4: detected capacity change from 0 to 1764 [ 733.064037][T19742] iso9660: Unknown parameter 'utF8' [ 733.092306][T19741] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3811'. [ 733.125231][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3812'. [ 733.130657][ T28] audit: type=1400 audit(1775757724.183:71588): avc: denied { open } for pid=19721 comm="syz.0.3806" path="/91/bus/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 733.140100][ T3409] IPVS: starting estimator thread 0... [ 733.170208][T19746] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 733.182616][ T28] audit: type=1107 audit(1775757724.493:71589): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 733.218015][T17819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.310205][T19745] IPVS: using max 2448 ests per chain, 122400 per kthread [ 733.490636][ T28] audit: type=1400 audit(1775757724.803:71590): avc: denied { write } for pid=19760 comm="syz.1.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 733.836532][T19774] FAULT_INJECTION: forcing a failure. [ 733.836532][T19774] name failslab, interval 1, probability 0, space 0, times 0 [ 733.849258][T19774] CPU: 1 UID: 0 PID: 19774 Comm: syz.4.3820 Not tainted syzkaller #0 PREEMPT(full) [ 733.849356][T19774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 733.849363][T19774] Call Trace: [ 733.849368][T19774] [ 733.849435][T19774] __dump_stack+0x1d/0x30 [ 733.849451][T19774] dump_stack_lvl+0x95/0xd0 [ 733.849492][T19774] dump_stack+0x15/0x1b [ 733.849503][T19774] should_fail_ex+0x263/0x280 [ 733.849518][T19774] should_failslab+0x8c/0xb0 [ 733.849611][T19774] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 733.849625][T19774] ? __alloc_skb+0x2d6/0x690 [ 733.849682][T19774] __alloc_skb+0x2d6/0x690 [ 733.849696][T19774] ? __alloc_skb+0x200/0x690 [ 733.849733][T19774] netlink_alloc_large_skb+0xbf/0xf0 [ 733.849821][T19774] netlink_sendmsg+0x40c/0x6f0 [ 733.849833][T19774] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.849860][T19774] ____sys_sendmsg+0x563/0x5b0 [ 733.849873][T19774] ___sys_sendmsg+0x195/0x1e0 [ 733.849889][T19774] __x64_sys_sendmsg+0xd4/0x160 [ 733.849931][T19774] x64_sys_call+0x194c/0x3020 [ 733.849945][T19774] do_syscall_64+0x12c/0x370 [ 733.849961][T19774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.849973][T19774] RIP: 0033:0x7f36aa3bc819 [ 733.850070][T19774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.850083][T19774] RSP: 002b:00007f36a8dee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.850095][T19774] RAX: ffffffffffffffda RBX: 00007f36aa636090 RCX: 00007f36aa3bc819 [ 733.850127][T19774] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000009 [ 733.850135][T19774] RBP: 00007f36a8dee090 R08: 0000000000000000 R09: 0000000000000000 [ 733.850146][T19774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.850154][T19774] R13: 00007f36aa636128 R14: 00007f36aa636090 R15: 00007fff23229798 [ 733.850195][T19774] [ 734.172939][ T28] audit: type=1400 audit(1775757725.483:71591): avc: denied { mount } for pid=19784 comm="syz.7.3825" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 734.210276][ T28] audit: type=1400 audit(1775757725.513:71592): avc: denied { ioctl } for pid=19780 comm="syz.0.3823" path="socket:[56922]" dev="sockfs" ino=56922 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 734.275400][T19793] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3828'. [ 734.531248][T19805] loop7: detected capacity change from 0 to 1764 [ 734.538164][T19805] iso9660: Unknown parameter 'utF8' [ 735.549969][T19821] capability: warning: `syz.1.3838' uses 32-bit capabilities (legacy support in use) [ 735.562153][T19821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3838'. [ 735.571714][T19821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3838'. [ 736.733866][T19764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 736.815851][T19826] FAULT_INJECTION: forcing a failure. [ 736.815851][T19826] name failslab, interval 1, probability 0, space 0, times 0 [ 736.841700][T19831] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3841'. [ 736.922186][T19828] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3839'. [ 736.923227][T19826] CPU: 0 UID: 0 PID: 19826 Comm: syz.4.3842 Not tainted syzkaller #0 PREEMPT(full) [ 736.923275][T19826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 736.923332][T19826] Call Trace: [ 736.923339][T19826] [ 736.923367][T19826] __dump_stack+0x1d/0x30 [ 736.923392][T19826] dump_stack_lvl+0x95/0xd0 [ 736.923414][T19826] dump_stack+0x15/0x1b [ 736.923433][T19826] should_fail_ex+0x263/0x280 [ 736.923459][T19826] should_failslab+0x8c/0xb0 [ 736.923489][T19826] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 736.923543][T19826] ? __alloc_skb+0x2d6/0x690 [ 736.923569][T19826] __alloc_skb+0x2d6/0x690 [ 736.923594][T19826] ? __alloc_skb+0x200/0x690 [ 736.923640][T19826] netlink_alloc_large_skb+0xbf/0xf0 [ 736.923668][T19826] netlink_sendmsg+0x40c/0x6f0 [ 736.923748][T19826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.923767][T19826] ____sys_sendmsg+0x563/0x5b0 [ 736.923852][T19826] ___sys_sendmsg+0x195/0x1e0 [ 736.923879][T19826] __x64_sys_sendmsg+0xd4/0x160 [ 736.923900][T19826] x64_sys_call+0x194c/0x3020 [ 736.923931][T19826] do_syscall_64+0x12c/0x370 [ 736.923956][T19826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.924006][T19826] RIP: 0033:0x7f36aa3bc819 [ 736.924022][T19826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.924039][T19826] RSP: 002b:00007f36a8e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.924109][T19826] RAX: ffffffffffffffda RBX: 00007f36aa635fa0 RCX: 00007f36aa3bc819 [ 736.924123][T19826] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 736.924136][T19826] RBP: 00007f36a8e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 736.924148][T19826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.924234][T19826] R13: 00007f36aa636038 R14: 00007f36aa635fa0 R15: 00007fff23229798 [ 736.924252][T19826] [ 738.118303][T19849] FAULT_INJECTION: forcing a failure. [ 738.118303][T19849] name failslab, interval 1, probability 0, space 0, times 0 [ 738.132987][T19849] CPU: 0 UID: 0 PID: 19849 Comm: syz.8.3848 Not tainted syzkaller #0 PREEMPT(full) [ 738.133015][T19849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.133028][T19849] Call Trace: [ 738.133035][T19849] [ 738.133084][T19849] __dump_stack+0x1d/0x30 [ 738.133111][T19849] dump_stack_lvl+0x95/0xd0 [ 738.133134][T19849] dump_stack+0x15/0x1b [ 738.133156][T19849] should_fail_ex+0x263/0x280 [ 738.133292][T19849] should_failslab+0x8c/0xb0 [ 738.133315][T19849] kmem_cache_alloc_noprof+0x66/0x400 [ 738.133380][T19849] ? io_submit_one+0xcf/0x1350 [ 738.133410][T19849] io_submit_one+0xcf/0x1350 [ 738.133445][T19849] __se_sys_io_submit+0xfb/0x280 [ 738.133475][T19849] __x64_sys_io_submit+0x43/0x50 [ 738.133541][T19849] x64_sys_call+0x19d5/0x3020 [ 738.133568][T19849] do_syscall_64+0x12c/0x370 [ 738.133594][T19849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.133621][T19849] RIP: 0033:0x7f8ffba1c819 [ 738.133734][T19849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.133752][T19849] RSP: 002b:00007f8ffa477028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 738.133773][T19849] RAX: ffffffffffffffda RBX: 00007f8ffbc95fa0 RCX: 00007f8ffba1c819 [ 738.133860][T19849] RDX: 0000200000000380 RSI: 0000000000000001 RDI: 00007f8ffa454000 [ 738.133880][T19849] RBP: 00007f8ffa477090 R08: 0000000000000000 R09: 0000000000000000 [ 738.133894][T19849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.133907][T19849] R13: 00007f8ffbc96038 R14: 00007f8ffbc95fa0 R15: 00007ffeaabbcc18 [ 738.133927][T19849] [ 738.311619][T19852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.320362][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 738.320377][ T28] audit: type=1326 audit(1775757729.613:71595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.352059][ T28] audit: type=1326 audit(1775757729.613:71596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.376193][ T28] audit: type=1326 audit(1775757729.613:71597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.401034][ T28] audit: type=1326 audit(1775757729.613:71598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.425123][ T28] audit: type=1326 audit(1775757729.613:71599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.456337][T19874] FAULT_INJECTION: forcing a failure. [ 738.456337][T19874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.469688][ T28] audit: type=1326 audit(1775757729.613:71600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.470129][T19874] CPU: 1 UID: 0 PID: 19874 Comm: syz.8.3852 Not tainted syzkaller #0 PREEMPT(full) [ 738.470252][T19874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.470264][T19874] Call Trace: [ 738.470271][T19874] [ 738.470279][T19874] __dump_stack+0x1d/0x30 [ 738.470319][T19874] dump_stack_lvl+0x95/0xd0 [ 738.470401][T19874] dump_stack+0x15/0x1b [ 738.470464][T19874] should_fail_ex+0x263/0x280 [ 738.470489][T19874] should_fail_alloc_page+0xf2/0x100 [ 738.470560][T19874] __alloc_frozen_pages_noprof+0x108/0x360 [ 738.470642][T19874] alloc_pages_mpol+0xb3/0x260 [ 738.470668][T19874] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 738.470696][T19874] alloc_pages_noprof+0x8f/0x140 [ 738.470723][T19874] pte_alloc_one+0x1c/0xc0 [ 738.470742][T19874] __pte_alloc+0x32/0x2a0 [ 738.470765][T19874] handle_mm_fault+0x203a/0x3020 [ 738.470892][T19874] ? mt_find+0x291/0x3d0 [ 738.470921][T19874] ? lock_mm_and_find_vma+0x8b/0x440 [ 738.470944][T19874] do_user_addr_fault+0x3fd/0x1050 [ 738.471053][T19874] exc_page_fault+0x62/0xa0 [ 738.471072][T19874] asm_exc_page_fault+0x26/0x30 [ 738.471092][T19874] RIP: 0010:__put_user_4+0xd/0x20 [ 738.471115][T19874] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 738.471193][T19874] RSP: 0018:ffffc900017c7da8 EFLAGS: 00050206 [ 738.471209][T19874] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000004c5047 [ 738.471222][T19874] RDX: 0000000000000e70 RSI: 0000000000000000 RDI: ffff88811d4f6008 [ 738.471294][T19874] RBP: 0000000000000000 R08: 000188811d4f600f R09: 0000000000000000 [ 738.471307][T19874] R10: 0001c900017c7d7c R11: 0001c900017c7d7f R12: 00002000004c5047 [ 738.471322][T19874] R13: 00000000000000b8 R14: 0000000000000000 R15: ffff888131e8a000 [ 738.471339][T19874] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 738.471368][T19874] mon_bin_fetch+0x117/0x220 [ 738.471438][T19874] mon_bin_ioctl+0x820/0x960 [ 738.471465][T19874] ? __fget_files+0x184/0x1c0 [ 738.471487][T19874] ? mutex_lock+0x57/0x90 [ 738.471511][T19874] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 738.471679][T19874] __se_sys_ioctl+0xce/0x140 [ 738.471698][T19874] __x64_sys_ioctl+0x43/0x50 [ 738.471732][T19874] x64_sys_call+0x1563/0x3020 [ 738.471756][T19874] do_syscall_64+0x12c/0x370 [ 738.471794][T19874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.471826][T19874] RIP: 0033:0x7f8ffba1c819 [ 738.471842][T19874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.471858][T19874] RSP: 002b:00007f8ffa477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.471873][T19874] RAX: ffffffffffffffda RBX: 00007f8ffbc95fa0 RCX: 00007f8ffba1c819 [ 738.471884][T19874] RDX: 00002000000001c0 RSI: 00000000c0109207 RDI: 0000000000000004 [ 738.471895][T19874] RBP: 00007f8ffa477090 R08: 0000000000000000 R09: 0000000000000000 [ 738.471964][T19874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.472048][T19874] R13: 00007f8ffbc96038 R14: 00007f8ffbc95fa0 R15: 00007ffeaabbcc18 [ 738.472065][T19874] [ 738.802352][ T28] audit: type=1326 audit(1775757729.613:71601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.828441][T19852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.843373][ T28] audit: type=1326 audit(1775757729.613:71602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.867715][ T28] audit: type=1326 audit(1775757729.613:71603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 738.891747][ T28] audit: type=1326 audit(1775757729.613:71604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.0.3849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2b6483c819 code=0x7ffc0000 [ 739.056800][T19852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.082439][T19907] loop7: detected capacity change from 0 to 1764 [ 739.089755][T19907] iso9660: Unknown parameter 'utF8' [ 739.299898][T19852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.321247][T19912] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3857'. [ 739.482856][ T9174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.583037][ T9174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.751862][ T9174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.810393][ T9174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.887051][T19950] FAULT_INJECTION: forcing a failure. [ 739.887051][T19950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 740.074676][T19950] CPU: 0 UID: 0 PID: 19950 Comm: syz.1.3866 Not tainted syzkaller #0 PREEMPT(full) [ 740.074703][T19950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 740.074715][T19950] Call Trace: [ 740.074723][T19950] [ 740.074773][T19950] __dump_stack+0x1d/0x30 [ 740.074846][T19950] dump_stack_lvl+0x95/0xd0 [ 740.074867][T19950] dump_stack+0x15/0x1b [ 740.074953][T19950] should_fail_ex+0x263/0x280 [ 740.075020][T19950] should_fail_alloc_page+0xf2/0x100 [ 740.075106][T19950] __alloc_frozen_pages_noprof+0x108/0x360 [ 740.075132][T19950] alloc_pages_mpol+0xb3/0x260 [ 740.075162][T19950] alloc_pages_noprof+0x8f/0x140 [ 740.075229][T19950] pte_alloc_one+0x1c/0xc0 [ 740.075248][T19950] __pte_alloc+0x32/0x2a0 [ 740.075271][T19950] handle_mm_fault+0x203a/0x3020 [ 740.075307][T19950] ? mt_find+0x291/0x3d0 [ 740.075363][T19950] ? lock_mm_and_find_vma+0x8b/0x440 [ 740.075388][T19950] do_user_addr_fault+0x3fd/0x1050 [ 740.075417][T19950] ? __rcu_read_unlock+0x4e/0x70 [ 740.075440][T19950] exc_page_fault+0x62/0xa0 [ 740.075462][T19950] asm_exc_page_fault+0x26/0x30 [ 740.075507][T19950] RIP: 0010:__put_user_4+0xd/0x20 [ 740.075543][T19950] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 740.075558][T19950] RSP: 0018:ffffc9000164fe68 EFLAGS: 00050206 [ 740.075575][T19950] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000200 [ 740.075587][T19950] RDX: ffff8881049c90c0 RSI: 0000000000000005 RDI: 0000000000000000 [ 740.075621][T19950] RBP: 0000000000000004 R08: 000188810da5be47 R09: 0000000000000000 [ 740.075636][T19950] R10: 000188810da5be60 R11: 000188810da5be67 R12: 0000200000000200 [ 740.075652][T19950] R13: 0000000000000002 R14: 0000000000000022 R15: 0000000000000000 [ 740.075712][T19950] __sys_socketpair+0xa6/0x420 [ 740.075739][T19950] ? ksys_write+0x194/0x1a0 [ 740.075760][T19950] __x64_sys_socketpair+0x52/0x60 [ 740.075787][T19950] x64_sys_call+0x2de5/0x3020 [ 740.075897][T19950] do_syscall_64+0x12c/0x370 [ 740.075923][T19950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.076003][T19950] RIP: 0033:0x7f1d0796c819 [ 740.076016][T19950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.076031][T19950] RSP: 002b:00007f1d063c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 740.076101][T19950] RAX: ffffffffffffffda RBX: 00007f1d07be5fa0 RCX: 00007f1d0796c819 [ 740.076113][T19950] RDX: 0000000000000023 RSI: 0000000000000002 RDI: 0000000000000022 [ 740.076124][T19950] RBP: 00007f1d063c7090 R08: 0000000000000000 R09: 0000000000000000 [ 740.076138][T19950] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 740.076152][T19950] R13: 00007f1d07be6038 R14: 00007f1d07be5fa0 R15: 00007fffe0e59d08 [ 740.076183][T19950] [ 740.597627][T19965] delete_channel: no stack [ 740.615226][T19965] delete_channel: no stack [ 740.802743][T19983] syzkaller0: entered promiscuous mode [ 740.808274][T19983] syzkaller0: entered allmulticast mode [ 740.992348][T20007] loop8: detected capacity change from 0 to 8192 [ 741.155637][T20017] loop8: detected capacity change from 0 to 4096 [ 741.216811][T20017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 741.239661][T17088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.303517][T20028] loop8: detected capacity change from 0 to 128 [ 741.311174][T20028] FAT-fs (loop8): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 741.436174][T20038] FAULT_INJECTION: forcing a failure. [ 741.436174][T20038] name failslab, interval 1, probability 0, space 0, times 0 [ 741.448862][T20038] CPU: 1 UID: 0 PID: 20038 Comm: syz.8.3886 Not tainted syzkaller #0 PREEMPT(full) [ 741.448878][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 741.448885][T20038] Call Trace: [ 741.448890][T20038] [ 741.448895][T20038] __dump_stack+0x1d/0x30 [ 741.448911][T20038] dump_stack_lvl+0x95/0xd0 [ 741.448966][T20038] dump_stack+0x15/0x1b [ 741.448977][T20038] should_fail_ex+0x263/0x280 [ 741.449009][T20038] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 741.449058][T20038] should_failslab+0x8c/0xb0 [ 741.449070][T20038] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 741.449127][T20038] ? shmem_alloc_inode+0x34/0x50 [ 741.449142][T20038] ? kstrtouint+0x76/0xc0 [ 741.449161][T20038] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 741.449218][T20038] shmem_alloc_inode+0x34/0x50 [ 741.449234][T20038] alloc_inode+0x40/0x170 [ 741.449246][T20038] new_inode+0x1d/0xe0 [ 741.449259][T20038] shmem_get_inode+0x246/0x750 [ 741.449288][T20038] __shmem_file_setup+0x112/0x210 [ 741.449372][T20038] shmem_file_setup+0x3b/0x50 [ 741.449406][T20038] memfd_alloc_file+0x4e/0x300 [ 741.449490][T20038] __se_sys_memfd_create+0x2e1/0x3b0 [ 741.449508][T20038] __x64_sys_memfd_create+0x31/0x40 [ 741.449588][T20038] x64_sys_call+0x1f22/0x3020 [ 741.449649][T20038] do_syscall_64+0x12c/0x370 [ 741.449665][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.449677][T20038] RIP: 0033:0x7f8ffba1c819 [ 741.449687][T20038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.449757][T20038] RSP: 002b:00007f8ffa476e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 741.449769][T20038] RAX: ffffffffffffffda RBX: 0000000000000b9e RCX: 00007f8ffba1c819 [ 741.449787][T20038] RDX: 00007f8ffa476ee0 RSI: 0000000000000000 RDI: 00007f8ffbab2e71 [ 741.449795][T20038] RBP: 0000200000000c80 R08: 00000000ffffffff R09: 0000000000000000 [ 741.449802][T20038] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000c00 [ 741.449870][T20038] R13: 00007f8ffa476ee0 R14: 00007f8ffa476ea0 R15: 0000200000000c40 [ 741.449888][T20038] [ 741.937493][T20043] loop8: detected capacity change from 0 to 2048 [ 741.982896][T20043] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.745782][T19933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.922464][T20060] loop5: detected capacity change from 0 to 7 [ 742.931015][T20058] loop7: detected capacity change from 0 to 512 [ 742.958513][T20058] EXT4-fs: Ignoring removed mblk_io_submit option [ 742.969428][T20060] buffer_io_error: 24 callbacks suppressed [ 742.969443][T20060] Buffer I/O error on dev loop5, logical block 0, async page read [ 742.987970][T20065] loop1: detected capacity change from 0 to 512 [ 742.997040][T20058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 743.009452][T19075] udevd[19075]: incorrect ext4 checksum on /dev/loop1 [ 743.020681][T20060] Buffer I/O error on dev loop5, logical block 0, async page read [ 743.042239][T20058] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 743.060126][T20060] loop5: unable to read partition table [ 743.076157][T20060] loop_reread_partitions: partition scan of loop5 (úůƒW奙‰üžĂ˝¸*‹şĐ œëÜ%őŤľ4FLQk݊5) failed (rc=-5) [ 743.088188][T20058] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.172269][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3896'. [ 743.214942][T20074] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 743.252594][T17088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.261961][T20078] loop0: detected capacity change from 0 to 1024 [ 743.269110][T20078] EXT4-fs: Ignoring removed orlov option [ 743.282862][T20080] loop4: detected capacity change from 0 to 1164 [ 743.305654][T20078] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.336509][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 743.336523][ T28] audit: type=1400 audit(1775757734.633:71697): avc: denied { remount } for pid=20079 comm="syz.4.3900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 743.376883][T20084] tipc: Enabled bearer , priority 0 [ 743.390526][T17819] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 743.396863][T20084] syzkaller0: entered promiscuous mode [ 743.435346][T20084] syzkaller0: entered allmulticast mode [ 743.472430][T20091] tipc: Resetting bearer [ 743.480832][T20093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3902'. [ 743.505934][T20093] loop4: detected capacity change from 0 to 1024 [ 743.520664][T20091] tipc: Resetting bearer [ 743.534926][T20093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.555378][T20091] tipc: Disabling bearer [ 743.570768][T19186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.790985][T16457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.891523][T20115] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 743.920378][T20115] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 743.952268][ T47] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 744.030431][T20124] syzkaller0: entered promiscuous mode [ 744.036540][T20124] syzkaller0: entered allmulticast mode [ 744.243486][T20129] iso9660: Unknown parameter 'utF8' [ 745.233196][T20135] iso9660: Unknown parameter 'utF8' [ 746.588701][T20087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 747.226695][T20147] set_capacity_and_notify: 3 callbacks suppressed [ 747.226713][T20147] loop1: detected capacity change from 0 to 512 [ 747.244425][T20149] netlink: 'syz.0.3919': attribute type 29 has an invalid length. [ 747.252646][T20147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 747.272580][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3919'. [ 747.288997][T20147] EXT4-fs (loop1): 1 truncate cleaned up [ 747.295072][T20149] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 747.305787][T20147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.336359][ T28] audit: type=1400 audit(1775757738.643:71698): avc: denied { ioctl } for pid=20146 comm="syz.1.3918" path="/302/file1/file1" dev="loop1" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 747.374706][ T28] audit: type=1400 audit(1775757738.673:71699): avc: denied { map } for pid=20152 comm="syz.8.3920" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 747.400298][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.409953][ T28] audit: type=1400 audit(1775757738.673:71700): avc: denied { read write } for pid=20152 comm="syz.8.3920" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 747.453000][T20157] loop8: detected capacity change from 0 to 128 [ 747.472786][T20157] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 747.485180][ T28] audit: type=1400 audit(1775757738.683:71701): avc: denied { override_creds } for pid=20152 comm="syz.8.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 747.506692][T20157] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 747.521339][T20157] FAULT_INJECTION: forcing a failure. [ 747.521339][T20157] name failslab, interval 1, probability 0, space 0, times 0 [ 747.536630][T20157] CPU: 1 UID: 0 PID: 20157 Comm: syz.8.3922 Not tainted syzkaller #0 PREEMPT(full) [ 747.536654][T20157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 747.536722][T20157] Call Trace: [ 747.536777][T20157] [ 747.536786][T20157] __dump_stack+0x1d/0x30 [ 747.536812][T20157] dump_stack_lvl+0x95/0xd0 [ 747.536832][T20157] dump_stack+0x15/0x1b [ 747.536850][T20157] should_fail_ex+0x263/0x280 [ 747.536928][T20157] should_failslab+0x8c/0xb0 [ 747.536949][T20157] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 747.536997][T20157] ? __d_alloc+0x37/0x340 [ 747.537024][T20157] __d_alloc+0x37/0x340 [ 747.537050][T20157] d_alloc_parallel+0x54/0xce0 [ 747.537077][T20157] ? __d_lookup_rcu_op_compare+0x23b/0x270 [ 747.537122][T20157] ? lockref_get_not_dead+0x120/0x1c0 [ 747.537151][T20157] ? __rcu_read_unlock+0x4e/0x70 [ 747.537171][T20157] ? try_to_unlazy+0x39d/0x580 [ 747.537197][T20157] __lookup_slow+0x96/0x260 [ 747.537248][T20157] lookup_slow+0x3c/0x60 [ 747.537271][T20157] path_lookupat+0x2f7/0x500 [ 747.537393][T20157] filename_lookup+0x190/0x390 [ 747.537498][T20157] do_fchmodat+0x85/0x170 [ 747.537526][T20157] __x64_sys_fchmodat+0x42/0x50 [ 747.537570][T20157] x64_sys_call+0x1691/0x3020 [ 747.537594][T20157] do_syscall_64+0x12c/0x370 [ 747.537676][T20157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.537694][T20157] RIP: 0033:0x7f8ffba1c819 [ 747.537710][T20157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.537726][T20157] RSP: 002b:00007f8ffa477028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 747.537744][T20157] RAX: ffffffffffffffda RBX: 00007f8ffbc95fa0 RCX: 00007f8ffba1c819 [ 747.537758][T20157] RDX: 0000000000000171 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 747.537772][T20157] RBP: 00007f8ffa477090 R08: 0000000000000000 R09: 0000000000000000 [ 747.537784][T20157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.537796][T20157] R13: 00007f8ffbc96038 R14: 00007f8ffbc95fa0 R15: 00007ffeaabbcc18 [ 747.537813][T20157] [ 747.561818][ T1626] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 747.612890][T20164] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3924'. [ 747.619688][T20165] syzkaller0: entered promiscuous mode [ 747.659866][T20159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3923'. [ 747.663790][T20165] syzkaller0: entered allmulticast mode [ 747.847636][ T28] audit: type=1400 audit(1775757739.153:71702): avc: denied { mount } for pid=20172 comm="syz.1.3925" name="/" dev="rpc_pipefs" ino=57827 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 747.889721][ T28] audit: type=1400 audit(1775757739.193:71703): avc: denied { read } for pid=20174 comm="syz.0.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 747.909301][T20175] loop0: detected capacity change from 0 to 512 [ 747.989939][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 747.997982][T20178] FAT-fs (loop0): Filesystem has been set read-only [ 748.004768][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.012773][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.020877][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.028959][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.037020][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.045137][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.053143][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.061285][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 748.069290][T20178] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 749.982030][T20141] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 750.024684][T20182] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3927'. [ 750.056961][T20185] loop7: detected capacity change from 0 to 512 [ 750.063887][T20185] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 750.151067][T20194] loop8: detected capacity change from 0 to 128 [ 750.161222][T20195] tipc: Enabled bearer , priority 0 [ 750.173243][T20196] bridge0: entered promiscuous mode [ 750.178292][T20194] FAT-fs (loop8): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 750.189480][T20186] syzkaller0: entered promiscuous mode [ 750.192461][ T28] audit: type=1400 audit(1775757741.493:71704): avc: denied { view } for pid=20189 comm="syz.0.3930" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 750.214202][T20186] syzkaller0: entered allmulticast mode [ 750.325635][T20186] tipc: Resetting bearer [ 750.344913][T20207] loop7: detected capacity change from 0 to 128 [ 750.352003][T20207] msdos: Bad value for 'gid' [ 750.356607][T20207] msdos: Bad value for 'gid' [ 750.432066][T20184] tipc: Resetting bearer [ 750.484685][T20184] tipc: Disabling bearer [ 750.569220][ T28] audit: type=1400 audit(1775757741.873:71705): avc: denied { mac_admin } for pid=20212 comm="syz.8.3937" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 750.591529][T20213] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 750.612019][T20213] loop8: detected capacity change from 0 to 1024 [ 750.942734][ T28] audit: type=1400 audit(1775757742.243:71706): avc: denied { create } for pid=20212 comm="syz.8.3937" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 750.946698][ T28] audit: type=1400 audit(1775757742.253:71707): avc: denied { associate } for pid=20212 comm="syz.8.3937" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 751.049157][T20213] EXT4-fs: Ignoring removed bh option [ 751.551970][ T28] audit: type=1400 audit(1775757742.353:71708): avc: denied { mounton } for pid=20212 comm="syz.8.3937" path="/139/file1" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 751.787522][T20213] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.963317][T17088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.977870][ T28] audit: type=1400 audit(1775757743.283:71709): avc: denied { rmdir } for pid=17088 comm="syz-executor" name="file1" dev="tmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 752.078560][T20235] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 752.176605][ T28] audit: type=1400 audit(1775757743.293:71710): avc: denied { create } for pid=20223 comm="syz.1.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 752.354478][ T28] audit: type=1400 audit(1775757743.293:71711): avc: denied { open } for pid=20223 comm="syz.1.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 752.378871][ T28] audit: type=1400 audit(1775757743.293:71712): avc: denied { kernel } for pid=20223 comm="syz.1.3939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 752.445759][ T28] audit: type=1400 audit(1775757743.753:71713): avc: denied { write } for pid=20236 comm="syz.8.3951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 752.450242][T20239] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3951'. [ 752.492230][T20238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3941'. [ 752.555725][T20242] syzkaller0: entered promiscuous mode [ 752.561250][T20242] syzkaller0: entered allmulticast mode [ 752.600785][T20246] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3943'. [ 753.093613][T20253] loop7: detected capacity change from 0 to 128 [ 753.115776][T20253] syz.7.3945: attempt to access beyond end of device [ 753.115776][T20253] loop7: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 753.129553][T20253] syz.7.3945: attempt to access beyond end of device [ 753.129553][T20253] loop7: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 753.143174][T20253] syz.7.3945: attempt to access beyond end of device [ 753.143174][T20253] loop7: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 753.157037][T20253] syz.7.3945: attempt to access beyond end of device [ 753.157037][T20253] loop7: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 753.170842][T20253] syz.7.3945: attempt to access beyond end of device [ 753.170842][T20253] loop7: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 753.198287][ T9174] kworker/u8:10: attempt to access beyond end of device [ 753.198287][ T9174] loop7: rw=1, sector=138, nr_sectors = 2 limit=128 [ 753.275134][T20258] netlink: 'syz.7.3947': attribute type 29 has an invalid length. [ 753.283206][T20258] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3947'. [ 753.292125][T20258] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 753.896187][T20263] loop7: detected capacity change from 0 to 1024 [ 753.904311][T20263] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 753.916126][T20263] EXT4-fs warning (device loop7): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 753.931331][T20263] EXT4-fs (loop7): mount failed [ 754.386824][T20226] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.418483][T20271] FAULT_INJECTION: forcing a failure. [ 754.418483][T20271] name failslab, interval 1, probability 0, space 0, times 0 [ 754.457889][T20271] CPU: 0 UID: 0 PID: 20271 Comm: syz.1.3950 Not tainted syzkaller #0 PREEMPT(full) [ 754.457915][T20271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 754.457927][T20271] Call Trace: [ 754.458010][T20271] [ 754.458017][T20271] __dump_stack+0x1d/0x30 [ 754.458039][T20271] dump_stack_lvl+0x95/0xd0 [ 754.458058][T20271] dump_stack+0x15/0x1b [ 754.458076][T20271] should_fail_ex+0x263/0x280 [ 754.458103][T20271] should_failslab+0x8c/0xb0 [ 754.458124][T20271] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 754.458147][T20271] ? __alloc_skb+0x2d6/0x690 [ 754.458205][T20271] __alloc_skb+0x2d6/0x690 [ 754.458262][T20271] ? __alloc_skb+0x200/0x690 [ 754.458288][T20271] netlink_alloc_large_skb+0xbf/0xf0 [ 754.458318][T20271] netlink_sendmsg+0x40c/0x6f0 [ 754.458415][T20271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.458435][T20271] ____sys_sendmsg+0x563/0x5b0 [ 754.458456][T20271] ___sys_sendmsg+0x195/0x1e0 [ 754.458481][T20271] __x64_sys_sendmsg+0xd4/0x160 [ 754.458525][T20271] x64_sys_call+0x194c/0x3020 [ 754.458546][T20271] do_syscall_64+0x12c/0x370 [ 754.458571][T20271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.458648][T20271] RIP: 0033:0x7f1d0796c819 [ 754.458703][T20271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.458720][T20271] RSP: 002b:00007f1d063c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.458739][T20271] RAX: ffffffffffffffda RBX: 00007f1d07be5fa0 RCX: 00007f1d0796c819 [ 754.458758][T20271] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 754.458821][T20271] RBP: 00007f1d063c7090 R08: 0000000000000000 R09: 0000000000000000 [ 754.458834][T20271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.458847][T20271] R13: 00007f1d07be6038 R14: 00007f1d07be5fa0 R15: 00007fffe0e59d08 [ 754.458913][T20271] [ 754.674281][T20275] tipc: Enabled bearer , priority 0 [ 754.683752][T20280] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3955'. [ 754.709474][T20275] syzkaller0: entered promiscuous mode [ 754.715202][T20275] syzkaller0: entered allmulticast mode [ 754.746314][T20277] loop0: detected capacity change from 0 to 512 [ 754.767705][T20275] tipc: Resetting bearer [ 754.778754][T20277] EXT4-fs: Ignoring removed nobh option [ 754.792510][T20274] tipc: Resetting bearer [ 754.806008][T20284] loop1: detected capacity change from 0 to 512 [ 754.812885][T20284] EXT4-fs: Ignoring removed mblk_io_submit option [ 754.820422][T20274] tipc: Disabling bearer [ 754.826111][T20286] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 754.835023][T20277] EXT4-fs (loop0): orphan cleanup on readonly fs [ 754.844446][T20284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 754.877031][T20284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.882649][T20290] loop7: detected capacity change from 0 to 128 [ 754.896028][T20277] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.3954: EA inode hash validation failed [ 754.909134][T20284] ext4 filesystem being mounted at /312/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 754.921434][T20277] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 754.934587][T20290] FAT-fs (loop7): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 754.970924][T20277] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.3954: corrupted inode contents [ 754.983612][T20277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 754.984986][T20293] tipc: Enabled bearer , priority 0 [ 754.990064][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 754.999459][T20295] loop7: detected capacity change from 0 to 1024 [ 755.000740][ C1] EXT4-fs (loop0): initial error at time 1775757746: ext4_do_update_inode:5602: inode 15 [ 755.000781][ C1] EXT4-fs (loop0): last error at time 1775757746: ext4_do_update_inode:5602: inode 15 [ 755.001208][T20277] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.3954: mark_inode_dirty error [ 755.011960][T20293] syzkaller0: entered promiscuous mode [ 755.014468][T20277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 755.026223][T20295] EXT4-fs: Ignoring removed bh option [ 755.045196][T20293] syzkaller0: entered allmulticast mode [ 755.071506][T20277] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.3954: corrupted inode contents [ 755.084339][T20277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 755.085609][T20277] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.3954: mark_inode_dirty error [ 755.121107][T20295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 755.142403][T20277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 755.145685][T20277] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3002: inode #15: comm syz.0.3954: mark inode dirty (error -117) [ 755.199361][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 755.199411][ T28] audit: type=1400 audit(1775757746.503:71721): avc: denied { sys_module } for pid=20292 comm="syz.8.3959" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 755.227365][T20277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 755.229548][T20293] tipc: Resetting bearer [ 755.248686][T20292] tipc: Resetting bearer [ 755.255053][T16457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.263798][T20277] EXT4-fs warning (device loop0): ext4_evict_inode:285: xattr delete (err -117) [ 755.274556][T20277] EXT4-fs (loop0): 1 orphan inode deleted [ 755.274987][T20292] tipc: Disabling bearer [ 755.298579][T20277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 755.329756][T20277] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3954'. [ 755.367771][T20308] loop8: detected capacity change from 0 to 512 [ 755.380626][T20308] EXT4-fs: Ignoring removed mblk_io_submit option [ 755.397810][T20308] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 755.424364][T17819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.434551][T20308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.464750][T20308] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 755.506521][T17088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.541018][T20324] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3966'. [ 755.621898][T20333] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 755.632267][T20333] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 755.732150][T20337] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 755.783706][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.795342][T20334] syzkaller0: entered promiscuous mode [ 755.816725][T20334] syzkaller0: entered allmulticast mode [ 755.838125][T20334] FAULT_INJECTION: forcing a failure. [ 755.838125][T20334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.002608][T20334] CPU: 1 UID: 0 PID: 20334 Comm: syz.4.3967 Not tainted syzkaller #0 PREEMPT(full) [ 756.002637][T20334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 756.002650][T20334] Call Trace: [ 756.002658][T20334] [ 756.002667][T20334] __dump_stack+0x1d/0x30 [ 756.002747][T20334] dump_stack_lvl+0x95/0xd0 [ 756.002768][T20334] dump_stack+0x15/0x1b [ 756.002786][T20334] should_fail_ex+0x263/0x280 [ 756.002808][T20334] should_fail+0xb/0x20 [ 756.002835][T20334] should_fail_usercopy+0x1a/0x20 [ 756.002867][T20334] _copy_to_user+0x20/0xa0 [ 756.002904][T20334] simple_read_from_buffer+0xb5/0x130 [ 756.002929][T20334] proc_fail_nth_read+0x10e/0x150 [ 756.002980][T20334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.003008][T20334] vfs_read+0x1ab/0x7f0 [ 756.003025][T20334] ? __rcu_read_unlock+0x4e/0x70 [ 756.003081][T20334] ? __fget_files+0x184/0x1c0 [ 756.003103][T20334] ? mutex_lock+0x57/0x90 [ 756.003120][T20334] ksys_read+0xdc/0x1a0 [ 756.003184][T20334] __x64_sys_read+0x40/0x50 [ 756.003203][T20334] x64_sys_call+0x2886/0x3020 [ 756.003228][T20334] do_syscall_64+0x12c/0x370 [ 756.003250][T20334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.003272][T20334] RIP: 0033:0x7f36aa37d04e [ 756.003303][T20334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 756.003348][T20334] RSP: 002b:00007f36a8dedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 756.003410][T20334] RAX: ffffffffffffffda RBX: 00007f36a8dee6c0 RCX: 00007f36aa37d04e [ 756.003422][T20334] RDX: 000000000000000f RSI: 00007f36a8dee0a0 RDI: 0000000000000006 [ 756.003433][T20334] RBP: 00007f36a8dee090 R08: 0000000000000000 R09: 0000000000000000 [ 756.003444][T20334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.003454][T20334] R13: 00007f36aa636128 R14: 00007f36aa636090 R15: 00007fff23229798 [ 756.003531][T20334] [ 756.426243][ T28] audit: type=1400 audit(1775757747.733:71722): avc: denied { read } for pid=20347 comm="syz.1.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 757.449427][T20503] loop1: detected capacity change from 0 to 512 [ 757.462081][T20503] EXT4-fs: Ignoring removed nobh option [ 757.471788][T20503] EXT4-fs (loop1): orphan cleanup on readonly fs [ 757.480860][T20503] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3975: EA inode hash validation failed [ 757.494892][T20503] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #15: comm syz.1.3975: corrupted inode contents [ 757.507289][T20503] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 757.507693][T20503] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #15: comm syz.1.3975: mark_inode_dirty error [ 757.517158][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 757.517330][ C1] EXT4-fs (loop1): initial error at time 1775757748: ext4_do_update_inode:5602: inode 15 [ 757.517424][ C1] EXT4-fs (loop1): last error at time 1775757748: ext4_do_update_inode:5602: inode 15 [ 757.556226][T20503] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 757.556802][T20503] EXT4-fs error (device loop1): ext4_do_update_inode:5602: inode #15: comm syz.1.3975: corrupted inode contents [ 757.579722][T20503] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 757.581935][T20503] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3975: mark_inode_dirty error [ 757.604259][T20503] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 757.604683][T20503] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.3975: mark inode dirty (error -117) [ 757.627167][T20503] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 757.627610][T20503] EXT4-fs warning (device loop1): ext4_evict_inode:285: xattr delete (err -117) [ 757.646506][T20503] EXT4-fs (loop1): 1 orphan inode deleted [ 757.653850][T20503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 757.723922][T20505] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3975'. [ 758.484966][T20319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.535366][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.547044][T20509] loop0: detected capacity change from 0 to 512 [ 758.558175][T20509] EXT4-fs: Ignoring removed mblk_io_submit option [ 758.569917][T20512] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3978'. [ 758.589615][T20509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 758.602400][T20513] netlink: 164 bytes leftover after parsing attributes in process `syz.7.3979'. [ 758.631359][T20509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.659481][T20509] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 758.730545][T20524] FAULT_INJECTION: forcing a failure. [ 758.730545][T20524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 758.743987][T20524] CPU: 0 UID: 0 PID: 20524 Comm: syz.1.3981 Not tainted syzkaller #0 PREEMPT(full) [ 758.744011][T20524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 758.744022][T20524] Call Trace: [ 758.744092][T20524] [ 758.744101][T20524] __dump_stack+0x1d/0x30 [ 758.744176][T20524] dump_stack_lvl+0x95/0xd0 [ 758.744196][T20524] dump_stack+0x15/0x1b [ 758.744278][T20524] should_fail_ex+0x263/0x280 [ 758.744305][T20524] should_fail+0xb/0x20 [ 758.744323][T20524] should_fail_usercopy+0x1a/0x20 [ 758.744371][T20524] _copy_to_user+0x20/0xa0 [ 758.744402][T20524] simple_read_from_buffer+0xb5/0x130 [ 758.744424][T20524] proc_fail_nth_read+0x10e/0x150 [ 758.744499][T20524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 758.744527][T20524] vfs_read+0x1ab/0x7f0 [ 758.744545][T20524] ? __rcu_read_unlock+0x4e/0x70 [ 758.744707][T20524] ? __fget_files+0x184/0x1c0 [ 758.744808][T20524] ? mutex_lock+0x57/0x90 [ 758.744827][T20524] ksys_read+0xdc/0x1a0 [ 758.744915][T20524] __x64_sys_read+0x40/0x50 [ 758.744931][T20524] x64_sys_call+0x2886/0x3020 [ 758.744964][T20524] do_syscall_64+0x12c/0x370 [ 758.744990][T20524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.745026][T20524] RIP: 0033:0x7f1d0792d04e [ 758.745040][T20524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 758.745056][T20524] RSP: 002b:00007f1d063c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 758.745076][T20524] RAX: ffffffffffffffda RBX: 00007f1d063c76c0 RCX: 00007f1d0792d04e [ 758.745091][T20524] RDX: 000000000000000f RSI: 00007f1d063c70a0 RDI: 0000000000000005 [ 758.745175][T20524] RBP: 00007f1d063c7090 R08: 0000000000000000 R09: 0000000000000000 [ 758.745187][T20524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.745197][T20524] R13: 00007f1d07be6038 R14: 00007f1d07be5fa0 R15: 00007fffe0e59d08 [ 758.745213][T20524] [ 758.948619][T17819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.012825][T20532] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3982'. [ 759.069871][T20534] loop1: detected capacity change from 0 to 1024 [ 759.090280][T20534] EXT4-fs: Ignoring removed orlov option [ 759.105911][T20531] loop7: detected capacity change from 0 to 8192 [ 759.118143][T20531] vfat: Unknown parameter '18446744073709551615˙˙˙˙' [ 759.130653][T20534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 759.139826][T20534] System zones: 0-1, 3-12 [ 759.150542][T20534] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.217120][T20531] loop7: detected capacity change from 0 to 1024 [ 759.224349][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 759.239559][T20531] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 759.273585][T20531] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 2: comm syz.7.3984: lblock 2 mapped to illegal pblock 2 (length 1) [ 759.290054][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 759.296493][ C0] EXT4-fs (loop7): initial error at time 1775757750: ext4_map_blocks:786: inode 3: block 2 [ 759.300070][T20531] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 759.306532][ C0] EXT4-fs (loop7): last error at time 1775757750: ext4_map_blocks:786: inode 3: block 2 [ 759.324733][T20531] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 48: comm syz.7.3984: lblock 0 mapped to illegal pblock 48 (length 1) [ 759.339450][T20531] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 759.348337][T20531] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.3984: Failed to acquire dquot type 0 [ 759.359660][T20531] loop7: lost filesystem error report for type 5 error -117 [ 759.359915][T20531] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 759.376653][T20531] loop7: lost filesystem error report for type 5 error -117 [ 759.377687][T20531] EXT4-fs error (device loop7): ext4_evict_inode:265: inode #11: comm syz.7.3984: mark_inode_dirty error [ 759.396666][T20552] syzkaller0: entered promiscuous mode [ 759.402285][T20531] EXT4-fs warning (device loop7): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 759.416064][T20552] syzkaller0: entered allmulticast mode [ 759.424110][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3986'. [ 759.433318][T20531] EXT4-fs (loop7): 1 orphan inode deleted [ 759.440960][T20531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 760.054130][T16457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.064587][ T47] EXT4-fs error (device loop7): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 760.078925][ T47] fserror_report: 3 callbacks suppressed [ 760.078938][ T47] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 760.084721][ T47] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 760.102245][ T47] EXT4-fs error (device loop7): ext4_release_dquot:7062: comm kworker/u8:3: Failed to release dquot type 0 [ 760.113675][ T47] loop7: lost filesystem error report for type 5 error -117 [ 760.113894][T16457] EXT4-fs error (device loop7): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 760.134534][T16457] loop7: lost filesystem error report for type 5 error -117 [ 760.134759][T16457] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 760.152200][T16457] loop7: lost filesystem error report for type 5 error -117 [ 760.153129][T16457] EXT4-fs error (device loop7): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 760.171644][T16457] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 760.243638][T20569] syzkaller0: entered promiscuous mode [ 760.258218][T20569] syzkaller0: entered allmulticast mode [ 762.271946][T20543] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 762.317227][T20572] loop1: detected capacity change from 0 to 512 [ 762.334090][T20574] tipc: Enabled bearer , priority 0 [ 762.340937][T20577] netlink: 164 bytes leftover after parsing attributes in process `syz.8.3992'. [ 762.347796][T20572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 762.353169][T20574] syzkaller0: entered promiscuous mode [ 762.368679][T20574] syzkaller0: entered allmulticast mode [ 762.382054][T20572] EXT4-fs (loop1): 1 truncate cleaned up [ 762.394715][T20572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.403948][T20583] loop8: detected capacity change from 0 to 512 [ 762.413904][T20579] tipc: Started in network mode [ 762.419069][T20579] tipc: Node identity ba2c086be193, cluster identity 4711 [ 762.427523][T20583] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 762.428193][T20572] FAULT_INJECTION: forcing a failure. [ 762.428193][T20572] name failslab, interval 1, probability 0, space 0, times 0 [ 762.437812][T20579] tipc: Enabled bearer , priority 0 [ 762.450650][T20572] CPU: 0 UID: 0 PID: 20572 Comm: syz.1.3993 Not tainted syzkaller #0 PREEMPT(full) [ 762.450755][T20572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 762.450766][T20572] Call Trace: [ 762.450773][T20572] [ 762.450781][T20572] __dump_stack+0x1d/0x30 [ 762.450806][T20572] dump_stack_lvl+0x95/0xd0 [ 762.450828][T20572] dump_stack+0x15/0x1b [ 762.450925][T20572] should_fail_ex+0x263/0x280 [ 762.451002][T20572] should_failslab+0x8c/0xb0 [ 762.451023][T20572] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 762.451045][T20572] ? __d_alloc+0x37/0x340 [ 762.451078][T20572] __d_alloc+0x37/0x340 [ 762.451140][T20572] d_alloc+0x2e/0x100 [ 762.451165][T20572] lookup_one_qstr_excl+0x99/0x250 [ 762.451192][T20572] filename_create+0x155/0x220 [ 762.451212][T20572] filename_mknodat+0x13e/0x450 [ 762.451280][T20572] __se_sys_mknodat+0x38/0xf0 [ 762.451299][T20572] __x64_sys_mknodat+0x55/0x70 [ 762.451332][T20572] x64_sys_call+0x312/0x3020 [ 762.451356][T20572] do_syscall_64+0x12c/0x370 [ 762.451409][T20572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.451430][T20572] RIP: 0033:0x7f1d0796c819 [ 762.451445][T20572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.451462][T20572] RSP: 002b:00007f1d063c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 762.451481][T20572] RAX: ffffffffffffffda RBX: 00007f1d07be5fa0 RCX: 00007f1d0796c819 [ 762.451521][T20572] RDX: 00000000000081c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 762.451535][T20572] RBP: 00007f1d063c7090 R08: 0000000000000000 R09: 0000000000000000 [ 762.451572][T20572] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 762.451584][T20572] R13: 00007f1d07be6038 R14: 00007f1d07be5fa0 R15: 00007fffe0e59d08 [ 762.451692][T20572] [ 762.590530][T20583] EXT4-fs (loop8): 1 truncate cleaned up [ 762.644621][T20583] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.644687][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.671310][T20587] syzkaller0: entered promiscuous mode [ 762.677110][T20587] syzkaller0: entered allmulticast mode [ 762.695364][T20593] tipc: Resetting bearer [ 762.704259][T20595] loop1: detected capacity change from 0 to 512 [ 762.709455][T20587] tipc: Resetting bearer [ 762.718643][T17088] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.732279][T20592] tipc: Resetting bearer [ 762.744310][T20595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.770745][T20592] tipc: Disabling bearer [ 762.790801][T20595] ext4 filesystem being mounted at /322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.804708][T20595] EXT4-fs (loop1): shut down requested (0) [ 762.810890][T20588] tipc: Resetting bearer [ 762.824943][T20604] loop8: detected capacity change from 0 to 1024 [ 762.836004][T20588] tipc: Disabling bearer [ 762.845445][T20595] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 762.846467][T20604] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 762.854726][T20595] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 762.873788][T20595] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 762.879867][T20604] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 762.902056][T20604] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 762.916994][T20604] EXT4-fs (loop8): mount failed [ 762.941719][T13604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.951097][T20602] tipc: Enabled bearer , priority 0 [ 762.958041][T20609] syzkaller0: entered promiscuous mode [ 762.963753][T20609] syzkaller0: entered allmulticast mode [ 763.039688][T20612] tipc: Enabling of bearer rejected, failed to enable media [ 763.137643][T20623] loop4: detected capacity change from 0 to 1764 [ 763.145347][T20623] iso9660: Unknown parameter 'utF8' [ 764.023960][T20596] tipc: Resetting bearer [ 764.032331][T20596] tipc: Disabling bearer [ 766.040262][T20614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 766.123687][T20647] loop7: detected capacity change from 0 to 512 [ 766.125436][T20645] loop4: detected capacity change from 0 to 512 [ 766.137782][T20645] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 766.147741][T20647] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 766.162662][T20646] loop0: detected capacity change from 0 to 512 [ 766.173337][T20646] EXT4-fs: Ignoring removed mblk_io_submit option [ 766.175039][T20645] EXT4-fs (loop4): 1 truncate cleaned up [ 766.197253][T20647] EXT4-fs (loop7): 1 truncate cleaned up [ 766.200187][T20646] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 766.226341][T20647] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.249407][T20645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.264665][T20646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.290860][T20646] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 766.301770][T20645] FAULT_INJECTION: forcing a failure. [ 766.301770][T20645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.302398][T16457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.320056][T20645] CPU: 1 UID: 0 PID: 20645 Comm: syz.4.4009 Not tainted syzkaller #0 PREEMPT(full) [ 766.320133][T20645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 766.320145][T20645] Call Trace: [ 766.320152][T20645] [ 766.320161][T20645] __dump_stack+0x1d/0x30 [ 766.320186][T20645] dump_stack_lvl+0x95/0xd0 [ 766.320208][T20645] dump_stack+0x15/0x1b [ 766.320243][T20645] should_fail_ex+0x263/0x280 [ 766.320338][T20645] should_fail+0xb/0x20 [ 766.320358][T20645] should_fail_usercopy+0x1a/0x20 [ 766.320381][T20645] _copy_to_user+0x20/0xa0 [ 766.320417][T20645] cp_statx+0x4b8/0x510 [ 766.320449][T20645] __se_sys_statx+0x19f/0x1b0 [ 766.320485][T20645] __x64_sys_statx+0x67/0x80 [ 766.320506][T20645] x64_sys_call+0x1ab/0x3020 [ 766.320530][T20645] do_syscall_64+0x12c/0x370 [ 766.320556][T20645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.320629][T20645] RIP: 0033:0x7f36aa3bc819 [ 766.320645][T20645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.320662][T20645] RSP: 002b:00007f36a8e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 766.320681][T20645] RAX: ffffffffffffffda RBX: 00007f36aa635fa0 RCX: 00007f36aa3bc819 [ 766.320713][T20645] RDX: 0000000000000800 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 766.320743][T20645] RBP: 00007f36a8e0f090 R08: 0000200000002500 R09: 0000000000000000 [ 766.320757][T20645] R10: 56159817211d7953 R11: 0000000000000246 R12: 0000000000000001 [ 766.320769][T20645] R13: 00007f36aa636038 R14: 00007f36aa635fa0 R15: 00007fff23229798 [ 766.320849][T20645] [ 766.490174][T20666] loop8: detected capacity change from 0 to 1024 [ 766.500382][T19186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.506126][T20666] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 766.531401][T17819] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.550971][T20666] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 766.566970][T20666] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 766.614671][T20666] EXT4-fs (loop8): mount failed [ 767.489484][T20694] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4018'. [ 768.178440][T20719] tipc: Enabling of bearer rejected, failed to enable media [ 768.276737][T20723] loop0: detected capacity change from 0 to 1764 [ 768.284064][T20723] iso9660: Unknown parameter 'utF8' [ 768.998365][ T28] audit: type=1400 audit(1775757760.303:71723): avc: denied { setopt } for pid=20742 comm="syz.4.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 769.053309][T20748] tipc: Enabled bearer , priority 0 [ 769.090537][T20748] syzkaller0: entered promiscuous mode [ 769.096112][T20748] syzkaller0: entered allmulticast mode [ 769.112386][T20759] loop4: detected capacity change from 0 to 512 [ 769.138438][T20759] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 769.174707][T20748] tipc: Resetting bearer [ 769.185777][T20759] EXT4-fs (loop4): 1 truncate cleaned up [ 769.199387][T20759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.240787][T20748] tipc: Resetting bearer [ 769.269322][T20759] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4029'. [ 769.404174][T20759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4029'. [ 769.430126][T20759] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4029'. [ 769.449596][T20759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4029'. [ 769.473809][ T28] audit: type=1400 audit(1775757760.783:71724): avc: granted { setsecparam } for pid=20758 comm="syz.4.4029" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 769.497681][T20748] tipc: Disabling bearer [ 769.509513][T20801] tipc: Enabled bearer , priority 0 [ 769.532060][T20794] syzkaller0: entered promiscuous mode [ 769.558945][T19186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.583454][T20794] syzkaller0: entered allmulticast mode [ 769.789266][T20794] tipc: Resetting bearer [ 769.808557][T20793] tipc: Resetting bearer [ 769.819926][T20793] tipc: Disabling bearer [ 769.833313][T20814] loop4: detected capacity change from 0 to 512 [ 769.844915][T20814] EXT4-fs: Ignoring removed mblk_io_submit option [ 769.858621][T20814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 769.903578][T20821] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 769.918711][T20821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.954191][T20814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.972498][T20814] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 770.006695][T19186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.270549][T20836] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20002 [ 770.293788][T20838] loop7: detected capacity change from 0 to 512 [ 770.300939][T20838] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 770.323229][T20838] EXT4-fs (loop7): 1 truncate cleaned up [ 770.334790][T20838] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.353933][T20838] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4042'. [ 770.363196][T20838] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4042'. [ 770.372326][T20838] netlink: 256 bytes leftover after parsing attributes in process `syz.7.4042'. [ 770.381775][T20838] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4042'. [ 770.418504][ T28] audit: type=1400 audit(1775757761.723:71725): avc: granted { setsecparam } for pid=20837 comm="syz.7.4042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 770.519648][T16457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.728616][T20846] syzkaller0: entered promiscuous mode [ 770.734778][T20846] syzkaller0: entered allmulticast mode [ 770.770253][T20848] syzkaller0: entered promiscuous mode [ 770.775826][T20848] syzkaller0: entered allmulticast mode [ 770.783905][ T28] audit: type=1326 audit(1775757762.093:71726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36aa3bc819 code=0x7ffc0000 [ 770.808222][ T28] audit: type=1326 audit(1775757762.093:71727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36aa3bc819 code=0x7ffc0000 [ 770.832532][ T28] audit: type=1326 audit(1775757762.093:71728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36aa3bc819 code=0x7ffc0000 [ 770.856289][ T28] audit: type=1326 audit(1775757762.093:71729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36aa3bc819 code=0x7ffc0000 [ 770.880120][ T28] audit: type=1326 audit(1775757762.093:71730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36aa3bc819 code=0x7ffc0000 [ 770.904025][ T28] audit: type=1326 audit(1775757762.093:71731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36aa3bc819 code=0x7ffc0000 [ 770.927759][ T28] audit: type=1326 audit(1775757762.093:71732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20847 comm="syz.4.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36aa3bc819 code=0x7ffc0000 [ 772.818531][T20812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.897263][T20853] syzkaller1: entered promiscuous mode [ 772.902953][T20853] syzkaller1: entered allmulticast mode [ 772.955128][T20855] tipc: Enabled bearer , priority 0 [ 772.962529][T20855] syzkaller0: entered promiscuous mode [ 772.968019][T20855] syzkaller0: entered allmulticast mode [ 773.009288][T20855] tipc: Resetting bearer [ 773.020445][T20854] tipc: Resetting bearer [ 773.028484][T20854] tipc: Disabling bearer [ 773.109769][T20875] loop1: detected capacity change from 0 to 1764 [ 773.117626][T20875] iso9660: Unknown parameter 'utF8' [ 773.206942][T20876] loop0: detected capacity change from 0 to 2048 [ 773.273283][T20876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 773.364478][T20876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.049311][T14023] tipc: Node number set to 1539246187 [ 774.070094][T20919] FAULT_INJECTION: forcing a failure. [ 774.070094][T20919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.113657][T20919] CPU: 0 UID: 0 PID: 20919 Comm: syz.7.4051 Not tainted syzkaller #0 PREEMPT(full) [ 774.113686][T20919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.113749][T20919] Call Trace: [ 774.113756][T20919] [ 774.113762][T20919] __dump_stack+0x1d/0x30 [ 774.113820][T20919] dump_stack_lvl+0x95/0xd0 [ 774.113839][T20919] dump_stack+0x15/0x1b [ 774.113856][T20919] should_fail_ex+0x263/0x280 [ 774.113914][T20919] should_fail+0xb/0x20 [ 774.113991][T20919] should_fail_usercopy+0x1a/0x20 [ 774.114014][T20919] _copy_to_user+0x20/0xa0 [ 774.114067][T20919] simple_read_from_buffer+0xb5/0x130 [ 774.114086][T20919] proc_fail_nth_read+0x10e/0x150 [ 774.114114][T20919] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 774.114144][T20919] vfs_read+0x1ab/0x7f0 [ 774.114159][T20919] ? __rcu_read_unlock+0x4e/0x70 [ 774.114233][T20919] ? __fget_files+0x184/0x1c0 [ 774.114253][T20919] ? mutex_lock+0x57/0x90 [ 774.114271][T20919] ksys_read+0xdc/0x1a0 [ 774.114293][T20919] __x64_sys_read+0x40/0x50 [ 774.114312][T20919] x64_sys_call+0x2886/0x3020 [ 774.114333][T20919] do_syscall_64+0x12c/0x370 [ 774.114471][T20919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.114574][T20919] RIP: 0033:0x7f3bde65d04e [ 774.114590][T20919] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 774.114608][T20919] RSP: 002b:00007f3bdd0f6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 774.114630][T20919] RAX: ffffffffffffffda RBX: 00007f3bdd0f76c0 RCX: 00007f3bde65d04e [ 774.114644][T20919] RDX: 000000000000000f RSI: 00007f3bdd0f70a0 RDI: 0000000000000004 [ 774.114657][T20919] RBP: 00007f3bdd0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 774.114695][T20919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.114705][T20919] R13: 00007f3bde916038 R14: 00007f3bde915fa0 R15: 00007ffc3719f538 [ 774.114721][T20919] [ 774.815864][T17819] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor: bg 0: block 2: invalid block bitmap [ 775.060572][T17819] EXT4-fs (loop0): Remounting filesystem read-only [ 775.280832][T20868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.845129][T20993] FAULT_INJECTION: forcing a failure. [ 775.845129][T20993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.858467][T20993] CPU: 1 UID: 0 PID: 20993 Comm: syz.4.4064 Not tainted syzkaller #0 PREEMPT(full) [ 775.858574][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 775.858586][T20993] Call Trace: [ 775.858594][T20993] [ 775.858603][T20993] __dump_stack+0x1d/0x30 [ 775.858636][T20993] dump_stack_lvl+0x95/0xd0 [ 775.858726][T20993] dump_stack+0x15/0x1b [ 775.858748][T20993] should_fail_ex+0x263/0x280 [ 775.858777][T20993] should_fail+0xb/0x20 [ 775.858865][T20993] should_fail_usercopy+0x1a/0x20 [ 775.858900][T20993] _copy_from_iter+0xcf/0xea0 [ 775.858974][T20993] ? __alloc_skb+0x4f6/0x690 [ 775.859066][T20993] ? __alloc_skb+0x200/0x690 [ 775.859089][T20993] netlink_sendmsg+0x4ae/0x6f0 [ 775.859112][T20993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 775.859131][T20993] ____sys_sendmsg+0x563/0x5b0 [ 775.859180][T20993] ___sys_sendmsg+0x195/0x1e0 [ 775.859209][T20993] __x64_sys_sendmsg+0xd4/0x160 [ 775.859232][T20993] x64_sys_call+0x194c/0x3020 [ 775.859345][T20993] do_syscall_64+0x12c/0x370 [ 775.859422][T20993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.859443][T20993] RIP: 0033:0x7f36aa3bc819 [ 775.859460][T20993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.859477][T20993] RSP: 002b:00007f36a8e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.859499][T20993] RAX: ffffffffffffffda RBX: 00007f36aa635fa0 RCX: 00007f36aa3bc819 [ 775.859515][T20993] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 775.859576][T20993] RBP: 00007f36a8e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 775.859590][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.859603][T20993] R13: 00007f36aa636038 R14: 00007f36aa635fa0 R15: 00007fff23229798 [ 775.859630][T20993] [ 775.975114][T20990] chnl_net:caif_netlink_parms(): no params data found [ 776.080059][T20990] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.087308][T20990] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.094618][T20990] bridge_slave_0: entered allmulticast mode [ 776.101265][T20990] bridge_slave_0: entered promiscuous mode [ 776.108013][T20990] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.115286][T20990] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.123548][T20990] bridge_slave_1: entered allmulticast mode [ 776.130287][T20990] bridge_slave_1: entered promiscuous mode [ 776.136880][T21010] syzkaller0: entered promiscuous mode [ 776.142431][T21010] syzkaller0: entered allmulticast mode [ 776.160886][T20990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.171320][T20990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.191848][T20990] team0: Port device team_slave_0 added [ 776.198598][T20990] team0: Port device team_slave_1 added [ 776.212836][T20990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.219945][T20990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.246060][T20990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.257247][T20990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.264302][T20990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.264425][ T2989] ================================================================== [ 776.290342][T20990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.298388][ T2989] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 776.315759][ T2989] [ 776.318077][ T2989] write to 0xffffffff86c89730 of 8 bytes by task 20990 on cpu 1: [ 776.325268][T20990] hsr_slave_0: entered promiscuous mode [ 776.325867][ T2989] data_alloc+0x310/0x390 [ 776.325895][ T2989] prb_reserve+0x8d7/0xae0 [ 776.332292][T20990] hsr_slave_1: entered promiscuous mode [ 776.335827][ T2989] vprintk_store+0x54a/0x910 [ 776.335845][ T2989] vprintk_emit+0x1a4/0x600 [ 776.335860][ T2989] vprintk_default+0x26/0x30 [ 776.335875][ T2989] vprintk+0x1d/0x30 [ 776.340727][T20990] debugfs: 'hsr0' already exists in 'hsr' [ 776.345881][ T2989] _printk+0x79/0xa0 [ 776.345900][ T2989] batadv_hardif_enable_interface+0x527/0x660 [ 776.345918][ T2989] batadv_meshif_slave_add+0x66/0xe0 [ 776.345937][ T2989] do_set_master+0x390/0x460 [ 776.345957][ T2989] do_setlink+0x97b/0x2940 [ 776.345974][ T2989] rtnl_newlink+0xfd9/0x1330 [ 776.345993][ T2989] rtnetlink_rcv_msg+0x64b/0x720 [ 776.350687][T20990] Cannot create hsr debugfs directory [ 776.355046][ T2989] netlink_rcv_skb+0x123/0x220 [ 776.413243][ T2989] rtnetlink_rcv+0x1c/0x30 [ 776.417660][ T2989] netlink_unicast+0x5c0/0x690 [ 776.422422][ T2989] netlink_sendmsg+0x5c8/0x6f0 [ 776.427262][ T2989] __sys_sendto+0x42e/0x490 [ 776.431758][ T2989] __x64_sys_sendto+0x76/0x90 [ 776.436440][ T2989] x64_sys_call+0x2d35/0x3020 [ 776.441109][ T2989] do_syscall_64+0x12c/0x370 [ 776.445695][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.451575][ T2989] [ 776.453887][ T2989] read to 0xffffffff86c89730 of 16 bytes by task 2989 on cpu 0: [ 776.461502][ T2989] _prb_read_valid+0x1bc/0x950 [ 776.466263][ T2989] prb_read_valid+0x3c/0x60 [ 776.470760][ T2989] syslog_print+0x258/0x560 [ 776.475267][ T2989] do_syslog+0x52b/0x7f0 [ 776.479592][ T2989] __x64_sys_syslog+0x41/0x50 [ 776.484265][ T2989] x64_sys_call+0x2b9e/0x3020 [ 776.488938][ T2989] do_syscall_64+0x12c/0x370 [ 776.493519][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.499405][ T2989] [ 776.501712][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 776.507846][ T2989] CPU: 0 UID: 0 PID: 2989 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 776.516773][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 776.526814][ T2989] ================================================================== [ 778.548200][T20974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 778.567461][T20990] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 778.598160][T20990] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 778.607842][T20990] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 778.616413][T20990] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 778.649621][T20990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.662323][T20990] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.672087][T20789] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.679201][T20789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.690176][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.697286][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.754029][T20990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.845634][T20990] veth0_vlan: entered promiscuous mode [ 778.853564][T20990] veth1_vlan: entered promiscuous mode [ 778.868157][T20990] veth0_macvtap: entered promiscuous mode [ 778.876329][T20990] veth1_macvtap: entered promiscuous mode [ 778.886861][T20990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.898159][T20990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.909113][T20927] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.918260][T20927] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.928104][T20927] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.937174][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0