last executing test programs: 15m53.568117307s ago: executing program 32 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x66080, 0x0) 15m48.094151963s ago: executing program 33 (id=169): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 15m43.669789043s ago: executing program 34 (id=280): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0x2) mkdir(0x0, 0x1ff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) 15m9.323777237s ago: executing program 35 (id=382): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYRES32=0x0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000000000007f00000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000a07b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m10.306602242s ago: executing program 36 (id=2655): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xffff}, {0x0, 0x9, 0xff, 0x7fff0000}]}) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x40080) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000480)={0x0, 0x0}) prlimit64(r4, 0x7, 0x0, &(0x7f00000002c0)) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='B\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d022bbd7000fedbdf2501000000050006000200000005000500040000000800"], 0x30}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) write(r1, &(0x7f0000000200)='md0', 0x3) close(r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r5, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000002300)) ioctl(r5, 0x40140921, 0x0) ioctl(r5, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r5, 0x400c0930, &(0x7f0000000500)='\x00'/12) ioctl(r5, 0x40140921, &(0x7f0000000440)="02000000010000000200") r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r7, &(0x7f0000000600)='3\n', 0x2) r8 = memfd_create(&(0x7f00000001c0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA/h\xea\xab\xa9\x02l\"\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\xfce\xf1z$\xcd\xf8\xe1\xff\xe6\nQ=\x99\xb7\xe7Ab\f\x80\xde\x91H\xf8+\xf3\xf8Q\xd0\xe2\xc2\x1a\xa1\xac\xc8i\xd6\xabv\x11H\xb9\xef\xe7\x81:C{\xaa\xb4\xf5\xef\x8e\xd2dc$\r!c\xdfel\xdf\xcc\nU\xecC\x19[\x82\xc0\x97\xa3c\xdfz\xea\xeer\x81c\x8b\x15o+\x03U\x04-RN\x95\\|jy\nj', 0x6) fcntl$addseals(r8, 0x409, 0xe) ftruncate(r8, 0x8000000) 8m45.262250786s ago: executing program 37 (id=2801): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000001000010000000100e3ffffff7a000000b59df1cb0941300ce946c928d08bcf42c44bfc5d4cb3eab718fc838c7e2288836a4ce73f115f94d12fb2d390ce375c2e94be3ffe1789f1c2952687c52b3a5a45c9560b18ea31b0865da661287fa7f466b84c49a1830060a2224197007a9cb4edc78ac7", @ANYRES32=0x0, @ANYBLOB="0000000018100200300012800b00010067656e65766500002000028008000200e00000021400"], 0x64}}, 0x80) mq_open(&(0x7f0000000080)='\x00', 0x800, 0x104, &(0x7f00000000c0)={0x0, 0x16a4336c, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) socket$unix(0x1, 0x5, 0x0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b0000000031400032dbd7000fbdbdf250900020073797a31000000000800410073697700140033006e657464657673696d300000000000000900020073797a30000000000800410073697700140033006e657464657673696d300000000000000900020073797a3000000000080041007278657468305f766972745f77696669000900020073797a310000000008004100736977001400330076657468305f766c616e000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044080}, 0x8054) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2, 0x3}}, 0x20) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@allocspi={0x24c, 0x16, 0x8, 0x70bd29, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x0, 0x4e24, 0x3, 0xa, 0x80, 0x80, 0x1d, r3}, {@in=@remote, 0x4d6, 0x2b}, @in=@private=0xa010101, {0xb, 0x6f, 0xff, 0x4, 0x3, 0x7, 0x2, 0x10000}, {0x4, 0x8, 0xfffffffffffffff8, 0x5}, {0xfffffff9, 0xc4, 0x100}, 0x70bd28, 0x3504, 0xa, 0x2, 0x8, 0x1}, 0x8, 0xff8}, [@sa_dir={0x5, 0x21, 0x3}, @tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x2, 0x2, 0x40, 0x8, 0x6, 0x6ba}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in=@private=0xa010101, 0x0, 0x1, 0x0, 0x6, 0x2, 0xbb1f}, {{@in=@remote, 0x4d3, 0xff}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x3, 0x8, 0x2, 0x1c76}, {{@in6=@mcast2, 0x4d5, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x0, 0x3, 0xd0, 0x7fffffff, 0x1, 0x5}, {{@in6=@mcast1, 0x6, 0xff}, 0x2, @in6=@private2, 0x3501, 0x2, 0x1, 0x2, 0x263, 0xfff, 0x4}]}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r8) socket$pptp(0x18, 0x1, 0x2) 8m29.158615466s ago: executing program 38 (id=2889): r0 = eventfd2(0x8, 0x0) futex(&(0x7f0000000140)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}, {0x85, 0x0, 0x0, 0x4b}}]}, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r3) setns(0xc9, 0x0) bind(r3, &(0x7f0000000180)=@l2={0x1f, 0x1, @none, 0x6}, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x80e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0x9, 0xffffffffffffffff, 0x1) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) r4 = socket(0x1d, 0x2, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0xf}) read(r0, &(0x7f0000000480)=""/82, 0x52) 6m44.014939844s ago: executing program 39 (id=3549): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff0000000071102700000000009500000000000000c379149f062c57a18fb9"], &(0x7f0000000480)='GPL\x00'}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x181300) ppoll(&(0x7f00000004c0)=[{r3, 0x7010}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x2, r5, &(0x7f0000000040), 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) 6m40.703141756s ago: executing program 40 (id=3560): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000001000010000000100e3ffffff7a000000b59df1cb0941300ce946c928d08bcf42c44bfc5d4cb3eab718fc838c7e2288836a4ce73f115f94d12fb2d390ce375c2e94be3ffe1789f1c2952687c52b3a5a45c9560b18ea31b0865da661287fa7f466b84c49a1830060a2224197007a9cb4edc78ac7", @ANYRES32=0x0, @ANYBLOB="0000000018100200300012800b00010067656e65766500002000028008000200e000000214000700ff0100000000000000000000000000011400030067656e65766530000000000000000000"], 0x64}}, 0x80) mq_open(&(0x7f0000000080)='\x00', 0x800, 0x104, &(0x7f00000000c0)={0x0, 0x16a4336c, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) socket$unix(0x1, 0x5, 0x0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b0000000031400032dbd7000fbdbdf250900020073797a31000000000800410073697700140033006e657464657673696d300000000000000900020073797a30000000000800410073697700140033006e657464657673696d300000000000000900020073797a3000000000080041007278657468305f766972745f77696669000900020073797a310000000008004100736977001400330076657468305f766c616e000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044080}, 0x8054) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2, 0x3}}, 0x20) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@allocspi={0x24c, 0x16, 0x8, 0x70bd29, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x0, 0x4e24, 0x3, 0xa, 0x80, 0x80, 0x1d, r3}, {@in=@remote, 0x4d6, 0x2b}, @in=@private=0xa010101, {0xb, 0x6f, 0xff, 0x4, 0x3, 0x7, 0x2, 0x10000}, {0x4, 0x8, 0xfffffffffffffff8, 0x5}, {0xfffffff9, 0xc4, 0x100}, 0x70bd28, 0x3504, 0xa, 0x2, 0x8, 0x1}, 0x8, 0xff8}, [@sa_dir={0x5, 0x21, 0x3}, @tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x2, 0x2, 0x40, 0x8, 0x6, 0x6ba}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in=@private=0xa010101, 0x0, 0x1, 0x0, 0x6, 0x2, 0xbb1f}, {{@in=@remote, 0x4d3, 0xff}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x3, 0x8, 0x2, 0x1c76}, {{@in6=@mcast2, 0x4d5, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x0, 0x3, 0xd0, 0x7fffffff, 0x1, 0x5}, {{@in6=@mcast1, 0x6, 0xff}, 0x2, @in6=@private2, 0x3501, 0x2, 0x1, 0x2, 0x263, 0xfff, 0x4}]}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r8) socket$pptp(0x18, 0x1, 0x2) 6m34.278912196s ago: executing program 41 (id=3590): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05", 0x4c}) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000140)={&(0x7f0000000580)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0547f05841e00000000000000c6bf2e8b412e7d4c00", 0x30}) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f00000003c0)={r3}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4) fstat(r6, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0), 0x8000, &(0x7f0000001180)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e21,version=9p2000,permit_directio,fowner>', @ANYRESDEC=r8, @ANYBLOB="2c7375626a5f007365075c02ef39"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x3, r4}, {0x2, 0x3, r5}, {0x2, 0x1, 0xffffffffffffffff}, {}, {0x2, 0x5, r8}], {0x4, 0x2}, [{0x8, 0x5}, {0x8, 0x5, r9}], {0x10, 0x6}}, 0x5c, 0x3) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r12) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000007c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, 0xfffffffffffffffc, 0x0, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r9}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {r3, r13, r14}}}], 0x98, 0x800}}], 0x1, 0x4000053) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r15, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r16, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @remote}}}, 0x118) 5m18.653430968s ago: executing program 42 (id=3995): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x2c43) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020f00001400000000000000fcdb010005000500002000000a0001040000c0b100000000000000000000ffff640101020300000000000000080012000000010000000000030000000600000000020000000000000000000000000000000000000000000000000000fc0200000000000000000000000000ff05000600008000000a004e2300000001000000000000000000000000000000000800000000000000"], 0xa0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0xf5}], 0x1, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) getpid() r2 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="180000001f1401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') 5m12.363834515s ago: executing program 43 (id=4020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) shutdown(r3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 5m11.929500416s ago: executing program 44 (id=4024): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000240)={{0x67, @loopback, 0x4e21, 0x4, 'dh\x00', 0x4, 0xfffffffd, 0x75}, {@multicast1, 0x4e21, 0x2000, 0x9, 0x1, 0x5}}, 0x44) io_setup(0x3, &(0x7f0000000180)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r5, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r6, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 5m6.562221309s ago: executing program 45 (id=4042): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000240)={{0x67, @loopback, 0x4e21, 0x4, 'dh\x00', 0x4, 0xfffffffd, 0x75}, {@multicast1, 0x4e21, 0x2000, 0x9, 0x1, 0x5}}, 0x44) io_setup(0x3, &(0x7f0000000180)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r5, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r6, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 5m2.570269578s ago: executing program 46 (id=4056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="abddd1b7", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780), 0x0, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r5, 0xa, 0x11) fcntl$setlease(r5, 0x400, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m58.07922565s ago: executing program 47 (id=4078): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x2c43) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020f00001400000000000000fcdb010005000500002000000a0001040000c0b100000000000000000000ffff640101020300000000000000080012000000010000000000030000000600000000020000000000000000000000000000000000000000000000000000fc0200000000000000000000000000ff05000600008000000a004e2300000001000000000000000000000000000000000800000000000000"], 0xa0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0xf5}], 0x1, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="180000001f1401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 4m56.096290039s ago: executing program 48 (id=4082): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0x4a, 0x2dc, &(0x7f0000000780)="$eJzs3T+LXFUUAPDzdmffvGgxU1iJkAemsApuOrGZRTYQnMowRbTQxSQgO4OQwIJ/cExla2Nh4ScQBBu/RRq/gWAr2Bkh8OT9y7wZZzc7momY/H7Nnr33nHfvfXt35m0xdz94ZXZ8M4/b9z7/JbIsiZ1RjOJBEsPYidaXsWT0dQAA/2cPiiJ+L2qb1CURkW1vWgDAFp3y/r/y1t5bhD8+takBAFty/ca7bx+Mx4fvZJHF1dlXJ5PyL/vya91/cDs+imncitdjEA8jqueE5umgjK8WRTHv5aVhXJrNTyZl5ez9+831D36LqOr3YxDDR2XV00ZVf218uF+V5/1O/bycxwvN+KOy/koM4qVHxUv1V+r6vFsfkzRee7Uz/8sxiJ8/jI9jGjerSdT1e9fGh1/s5/lbxTd/fPZeOb2yPpmfTPpV3kKx+zR/LgAAAAAAAAAAAAAAAAAAAAAAPNsu5+3hO/nFuDQrm5rzd3Yfpk1OkzJcVJX9dZS0TZ3zgUrzIr6rjxTcWxpvcb5PL17udQ8WBAAAAAAAAAAAAAAAAAAAgOfX3U8+PT6aTm/deSJBexpALyL+vB7xT68z6rRcjLOT+82YR9PpThMu5dxPuy2x2+YkEWdOo1zEE7otjwsuZCtzboPvfygXuMkFs07LG+sXuPe4dd3o/9u90e6u46Nk/Vj9aFuyZpN8m0YsctI451jpaV1FdLff2iVfWNyfdO0Qg43Xnr5YBfNTc4pkzRbtBG/+Wvc3LUms/BKl1V1dO/peE3TKV/bGufZzZHX5318rkuq0jv42XoYAAAAAAAAAAAAAAAAAAIClz3iX3/203HnvzNKdwkeBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhGLP7//wbBvCk+R3Iad+7+x0sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBXAAAA//9ETkvG") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000240)={{0x67, @loopback, 0x4e21, 0x4, 'dh\x00', 0x4, 0xfffffffd, 0x75}, {@multicast1, 0x4e21, 0x2000, 0x9, 0x1, 0x5}}, 0x44) io_setup(0x3, &(0x7f0000000180)=0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r5, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r6, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m52.616221826s ago: executing program 49 (id=4089): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000240)={{0x67, @loopback, 0x4e21, 0x4, 'dh\x00', 0x4, 0xfffffffd, 0x75}, {@multicast1, 0x4e21, 0x2000, 0x9, 0x1, 0x5}}, 0x44) io_setup(0x3, &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m52.259300715s ago: executing program 50 (id=4092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) shutdown(r3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 4m46.070969299s ago: executing program 1 (id=4113): r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) timer_create(0x1, &(0x7f0000000340)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0xa, 0x40, 0x7fff0000}]}) 4m45.734724978s ago: executing program 1 (id=4116): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYRESHEX, @ANYRESHEX=r0], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff00000000711027000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x181300) ppoll(&(0x7f00000004c0)=[{r1, 0x7010}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x2, r3, &(0x7f0000000040), 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) 4m45.534661382s ago: executing program 51 (id=4116): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64, @ANYRESHEX, @ANYRESHEX=r0], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff00000000711027000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x181300) ppoll(&(0x7f00000004c0)=[{r1, 0x7010}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x2, r3, &(0x7f0000000040), 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) 4m42.997699036s ago: executing program 0 (id=4126): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x2c43) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020f00001400000000000000fcdb010005000500002000000a0001040000c0b100000000000000000000ffff640101020300000000000000080012000000010000000000030000000600000000020000000000000000000000000000000000000000000000000000fc0200000000000000000000000000ff05000600008000000a004e2300000001000000000000000000000000000000000800000000000000"], 0xa0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0xf5}], 0x1, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) getpid() r2 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="180000001f1401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 4m42.614508835s ago: executing program 0 (id=4127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) shutdown(r2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 4m42.614289715s ago: executing program 52 (id=4127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) shutdown(r2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 4m42.317478313s ago: executing program 53 (id=4130): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCSUSAGES(r4, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r5, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r7 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m38.460776658s ago: executing program 54 (id=4139): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x2c43) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) getpid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="180000001f1401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 4m37.093769633s ago: executing program 55 (id=4143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="fa5cf2e9f531fb0969f9185e70e92cdc9c578dfad370ac8bf37435a70fd07e734b398c2615a9cd7a34ee41cc51b26e2829bf8dc17401669862766a05bf9a9c9c175d2e9c2de6f5b8b77a38e616fca1db5a2c1d4f69b8d64b5d4ce3a9bde53e5c3e6103421a38ad276686161286b64996b09b5d09f78cfb7e27c38be8e0e7346f8ba3453065c6d01bcece056fb93efd3997d82531970613a7c7e55d0e22f3b107774ca1bb35", 0xa5}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc0000001800018014000200"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 4m34.088655887s ago: executing program 6 (id=4155): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) shutdown(r3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 4m33.377176815s ago: executing program 56 (id=4157): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff0000000071102700000000009500000000000000c379149f062c57a18fb9"], &(0x7f0000000480)='GPL\x00'}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x181300) ppoll(&(0x7f00000004c0), 0x0, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x2, r4, &(0x7f0000000040), 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) 4m33.092542082s ago: executing program 6 (id=4160): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff0000000071102700000000009500000000000000c379149f062c57a18fb9"], &(0x7f0000000480)='GPL\x00'}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x181300) ppoll(&(0x7f00000004c0)=[{r3, 0x7010}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x2, r5, &(0x7f0000000040), 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) 4m29.55664655s ago: executing program 6 (id=4167): eventfd2(0x8, 0x0) futex(&(0x7f0000000140)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(0xffffffffffffffff, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 4m28.474583767s ago: executing program 6 (id=4170): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$eJzs3T+LXFUUAPDzdmffvGgxU1iJkAemsApuOrGZRTYQnMowRbTQxSQgO4OQwIJ/cExla2Nh4ScQBBu/RRq/gWAr2Bkh8OT9y7wZZzc7momY/H7Nnr33nHfvfXt35m0xdz94ZXZ8M4/b9z7/JbIsiZ1RjOJBEsPYidaXsWT0dQAA/2cPiiJ+L2qb1CURkW1vWgDAFp3y/r/y1t5bhD8+takBAFty/ca7bx+Mx4fvZJHF1dlXJ5PyL/vya91/cDs+imncitdjEA8jqueE5umgjK8WRTHv5aVhXJrNTyZl5ez9+831D36LqOr3YxDDR2XV00ZVf218uF+V5/1O/bycxwvN+KOy/koM4qVHxUv1V+r6vFsfkzRee7Uz/8sxiJ8/jI9jGjerSdT1e9fGh1/s5/lbxTd/fPZeOb2yPpmfTPpV3kKx+zR/LgAAAAAAAAAAAAAAAAAAAAAAPNsu5+3hO/nFuDQrm5rzd3Yfpk1OkzJcVJX9dZS0TZ3zgUrzIr6rjxTcWxpvcb5PL17udQ8WBAAAAAAAAAAAAAAAAAAAgOfX3U8+PT6aTm/deSJBexpALyL+vB7xT68z6rRcjLOT+82YR9PpThMu5dxPuy2x2+YkEWdOo1zEE7otjwsuZCtzboPvfygXuMkFs07LG+sXuPe4dd3o/9u90e6u46Nk/Vj9aFuyZpN8m0YsctI451jpaV1FdLff2iVfWNyfdO0Qg43Xnr5YBfNTc4pkzRbtBG/+Wvc3LUms/BKl1V1dO/peE3TKV/bGufZzZHX5318rkuq0jv42XoYAAAAAAAAAAAAAAAAAAIClz3iX3/203HnvzNKdwkeBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhGLP7//wbBvCk+R3Iad+7+x0sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBXAAAA//9ETkvG") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r4, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m28.195078314s ago: executing program 1 (id=4158): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x']) 4m27.766203755s ago: executing program 1 (id=4172): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r4, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m26.538782905s ago: executing program 57 (id=4174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="abddd1b711", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r4, 0xa, 0x11) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m26.444735748s ago: executing program 58 (id=4176): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) getpid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="180000001f1401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 4m25.893863291s ago: executing program 1 (id=4178): socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) getpid() r0 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="180000001f1401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 4m25.834055993s ago: executing program 6 (id=4179): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000c40), 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) getpid() r1 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="180000001f1401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 4m25.592478479s ago: executing program 6 (id=4180): eventfd2(0x8, 0x0) futex(&(0x7f0000000140)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 4m25.592337459s ago: executing program 59 (id=4180): eventfd2(0x8, 0x0) futex(&(0x7f0000000140)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) 4m25.591869959s ago: executing program 1 (id=4182): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$eJzs3T+LXFUUAPDzdmffvGgxU1iJkAemsApuOrGZRTYQnMowRbTQxSQgO4OQwIJ/cExla2Nh4ScQBBu/RRq/gWAr2Bkh8OT9y7wZZzc7momY/H7Nnr33nHfvfXt35m0xdz94ZXZ8M4/b9z7/JbIsiZ1RjOJBEsPYidaXsWT0dQAA/2cPiiJ+L2qb1CURkW1vWgDAFp3y/r/y1t5bhD8+takBAFty/ca7bx+Mx4fvZJHF1dlXJ5PyL/vya91/cDs+imncitdjEA8jqueE5umgjK8WRTHv5aVhXJrNTyZl5ez9+831D36LqOr3YxDDR2XV00ZVf218uF+V5/1O/bycxwvN+KOy/koM4qVHxUv1V+r6vFsfkzRee7Uz/8sxiJ8/jI9jGjerSdT1e9fGh1/s5/lbxTd/fPZeOb2yPpmfTPpV3kKx+zR/LgAAAAAAAAAAAAAAAAAAAAAAPNsu5+3hO/nFuDQrm5rzd3Yfpk1OkzJcVJX9dZS0TZ3zgUrzIr6rjxTcWxpvcb5PL17udQ8WBAAAAAAAAAAAAAAAAAAAgOfX3U8+PT6aTm/deSJBexpALyL+vB7xT68z6rRcjLOT+82YR9PpThMu5dxPuy2x2+YkEWdOo1zEE7otjwsuZCtzboPvfygXuMkFs07LG+sXuPe4dd3o/9u90e6u46Nk/Vj9aFuyZpN8m0YsctI451jpaV1FdLff2iVfWNyfdO0Qg43Xnr5YBfNTc4pkzRbtBG/+Wvc3LUms/BKl1V1dO/peE3TKV/bGufZzZHX5318rkuq0jv42XoYAAAAAAAAAAAAAAAAAAIClz3iX3/203HnvzNKdwkeBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhGLP7//wbBvCk+R3Iad+7+x0sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBXAAAA//9ETkvG") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r3, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m25.569633239s ago: executing program 60 (id=4182): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$eJzs3T+LXFUUAPDzdmffvGgxU1iJkAemsApuOrGZRTYQnMowRbTQxSQgO4OQwIJ/cExla2Nh4ScQBBu/RRq/gWAr2Bkh8OT9y7wZZzc7momY/H7Nnr33nHfvfXt35m0xdz94ZXZ8M4/b9z7/JbIsiZ1RjOJBEsPYidaXsWT0dQAA/2cPiiJ+L2qb1CURkW1vWgDAFp3y/r/y1t5bhD8+takBAFty/ca7bx+Mx4fvZJHF1dlXJ5PyL/vya91/cDs+imncitdjEA8jqueE5umgjK8WRTHv5aVhXJrNTyZl5ez9+831D36LqOr3YxDDR2XV00ZVf218uF+V5/1O/bycxwvN+KOy/koM4qVHxUv1V+r6vFsfkzRee7Uz/8sxiJ8/jI9jGjerSdT1e9fGh1/s5/lbxTd/fPZeOb2yPpmfTPpV3kKx+zR/LgAAAAAAAAAAAAAAAAAAAAAAPNsu5+3hO/nFuDQrm5rzd3Yfpk1OkzJcVJX9dZS0TZ3zgUrzIr6rjxTcWxpvcb5PL17udQ8WBAAAAAAAAAAAAAAAAAAAgOfX3U8+PT6aTm/deSJBexpALyL+vB7xT68z6rRcjLOT+82YR9PpThMu5dxPuy2x2+YkEWdOo1zEE7otjwsuZCtzboPvfygXuMkFs07LG+sXuPe4dd3o/9u90e6u46Nk/Vj9aFuyZpN8m0YsctI451jpaV1FdLff2iVfWNyfdO0Qg43Xnr5YBfNTc4pkzRbtBG/+Wvc3LUms/BKl1V1dO/peE3TKV/bGufZzZHX5318rkuq0jv42XoYAAAAAAAAAAAAAAAAAAIClz3iX3/203HnvzNKdwkeBAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhGLP7//wbBvCk+R3Iad+7+x0sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgOfBXAAAA//9ETkvG") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r3, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m19.950628109s ago: executing program 9 (id=4177): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000001000010000000100e3ffffff7a000000b59df1cb0941300ce946c928d08bcf42c44bfc5d4cb3eab718fc838c7e2288836a4ce73f115f94d12fb2d390ce375c2e94be3ffe1789f1c2952687c52b3a5a45c9560b18ea31b0865da661287fa7f466b84c49a1830060a2224197007a9cb4edc78ac7", @ANYRES32=0x0, @ANYBLOB="0000000018100200300012800b00010067656e65766500002000028008000200e000000214000700ff0100000000000000000000000000011400030067656e65766530000000000000000000"], 0x64}}, 0x80) mq_open(&(0x7f0000000080)='\x00', 0x800, 0x104, &(0x7f00000000c0)={0x0, 0x16a4336c, 0x10, 0x1}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet(0x2, 0x3, 0x2) mkdir(&(0x7f0000000150)='./config\x00', 0x1ff) socket$unix(0x1, 0x5, 0x0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g_syz\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g_syz/functions/ecm.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_syz/functions/ecm.usb0/ifname\x00', 0x1, 0x0) pwritev(r5, &(0x7f0000002180)=[{&(0x7f0000000b40)="35330fa233927534c65872ad16d4f5a4c5", 0x11}], 0x1, 0xe, 0x6) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x400) lseek(0xffffffffffffffff, 0x9, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="b0000000031400032dbd7000fbdbdf250900020073797a31000000000800410073697700140033006e657464657673696d300000000000000900020073797a30000000000800410073697700140033006e657464657673696d300000000000000900020073797a3000000000080041007278657468305f766972745f77696669000900020073797a310000000008004100736977001400330076657468305f766c616e000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044080}, 0x8054) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x2, 0x3}}, 0x20) splice(r0, 0x0, r6, 0x0, 0x4ffe6, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@allocspi={0x24c, 0x16, 0x8, 0x70bd29, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e23, 0x0, 0x4e24, 0x3, 0xa, 0x80, 0x80, 0x1d, r3}, {@in=@remote, 0x4d6, 0x2b}, @in=@private=0xa010101, {0xb, 0x6f, 0xff, 0x4, 0x3, 0x7, 0x2, 0x10000}, {0x4, 0x8, 0xfffffffffffffff8, 0x5}, {0xfffffff9, 0xc4, 0x100}, 0x70bd28, 0x3504, 0xa, 0x2, 0x8, 0x1}, 0x8, 0xff8}, [@sa_dir={0x5, 0x21, 0x3}, @tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x34ff, 0x2, 0x2, 0x40, 0x8, 0x6, 0x6ba}, {{@in6=@local, 0x4d2, 0x2b}, 0x2, @in=@private=0xa010101, 0x0, 0x1, 0x0, 0x6, 0x2, 0xbb1f}, {{@in=@remote, 0x4d3, 0xff}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x3, 0x8, 0x2, 0x1c76}, {{@in6=@mcast2, 0x4d5, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x0, 0x3, 0xd0, 0x7fffffff, 0x1, 0x5}, {{@in6=@mcast1, 0x6, 0xff}, 0x2, @in6=@private2, 0x3501, 0x2, 0x1, 0x2, 0x263, 0xfff, 0x4}]}, @replay_thresh={0x8, 0xb, 0x1}]}, 0x24c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, r8) socket$pptp(0x18, 0x1, 0x2) 4m19.538268039s ago: executing program 0 (id=4175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="abddd1b7", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000280)=""/122, 0x7a}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r5, 0xa, 0x11) fcntl$setlease(r5, 0x400, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m18.584185433s ago: executing program 9 (id=4194): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a", 0x8}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4m18.483281726s ago: executing program 0 (id=4195): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r4, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m17.841468212s ago: executing program 9 (id=4197): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r4, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m16.72621817s ago: executing program 0 (id=4200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="abddd1b711", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) fcntl$setsig(r3, 0xa, 0x11) fcntl$setlease(r3, 0x400, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m16.70800963s ago: executing program 9 (id=4201): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mq_getsetattr(r3, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r4, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 4m16.391954938s ago: executing program 0 (id=4203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) shutdown(r3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 4m16.368989738s ago: executing program 61 (id=4203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) gettimeofday(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x1) shutdown(r3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) 4m15.052358821s ago: executing program 9 (id=4209): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r2, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff0000000071102700000000009500000000000000c379149f062c57a18f"], &(0x7f0000000480)='GPL\x00'}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x181300) ppoll(&(0x7f00000004c0)=[{r3, 0x7010}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000f, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x2, r5, &(0x7f0000000040), 0xfffffffffffffffe) socket$packet(0x11, 0x3, 0x300) 4m14.30254355s ago: executing program 9 (id=4212): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4m14.240812941s ago: executing program 62 (id=4212): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 3m26.116607139s ago: executing program 4 (id=4516): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m26.044229191s ago: executing program 4 (id=4517): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x3, 0x8, 0x407, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x13}]}, 0x50}, 0x1, 0x0, 0x0, 0x18404}, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x1b, 0x2}, 0xfe24) creat(&(0x7f0000000080)='./file0\x00', 0xdafbe5d6891b6e0) 3m25.979106373s ago: executing program 4 (id=4518): bpf$MAP_CREATE(0x0, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./bus\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2dc, &(0x7f0000000780)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mq_getsetattr(r2, &(0x7f0000000040)={0x3, 0x8000000000000000, 0x80, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001080)={{0x1, 0x1, 0x5d95, 0xbcd, 0x1ff, 0x7}, 0x19d, [0x9, 0x9, 0x9a5, 0x514e, 0x0, 0x8, 0x0, 0x9, 0x9, 0xd71, 0x2, 0x20d, 0x9, 0xe0d, 0x100, 0x3, 0xd3, 0x4, 0xc623, 0x2, 0x8, 0x832e, 0x1, 0x2, 0xb, 0x5, 0xfffffff8, 0x1, 0x40, 0x7, 0xffff, 0x4, 0x6, 0x0, 0x1, 0x8, 0xb77a, 0x6, 0x0, 0x400, 0x1, 0x101, 0xa, 0x3, 0x9, 0xa0, 0x100, 0x9, 0xfffffffc, 0x0, 0xffffffff, 0x34, 0x4, 0x6, 0x4, 0xffffff88, 0x8, 0x5, 0x1, 0x7ff, 0x200, 0x400, 0xb5, 0x5, 0x9, 0xabc, 0x800, 0x289c, 0xffffffff, 0x4, 0x0, 0x0, 0x5, 0x2, 0x1, 0xa, 0x9651, 0x5a15aa15, 0x3, 0xdfd, 0x14000, 0x1, 0x7, 0x5, 0x3, 0x0, 0xffffff65, 0x7, 0x6, 0xba, 0x5, 0x4, 0x80000001, 0x8, 0x3ff, 0x83, 0xffffffff, 0x4, 0x1, 0xb04d, 0xfffffc01, 0x5, 0x2, 0x8001, 0x199e048f, 0x0, 0xf, 0x400, 0x3, 0x7, 0x8, 0x7, 0x10001, 0x5, 0x1, 0x9, 0x100, 0x2ce9, 0x8, 0x5, 0x7, 0x8, 0x6, 0x1, 0x4, 0x5, 0x81, 0x6, 0x6, 0x1000, 0xffffffff, 0x8, 0x2, 0x8, 0x43, 0x10000, 0x7f, 0x5, 0x2, 0x3, 0x2bf976e2, 0x6e38, 0x7, 0x401, 0x9b72, 0x3, 0x9, 0x2, 0xa, 0x2a2, 0x3, 0x2, 0xde5b, 0x4, 0x64, 0x9d, 0x6, 0x4, 0xf53, 0x0, 0x8, 0x3, 0x4, 0x200, 0x72, 0x8d9d, 0xe, 0x6, 0x4, 0x1, 0x4, 0x10001, 0x5, 0x0, 0x1, 0x0, 0x3ff, 0x7546, 0xfff, 0xfffffffa, 0x0, 0xa9, 0x401, 0x5, 0x40, 0x10001, 0x7f, 0x340, 0x4, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1, 0x5, 0x2, 0x2, 0x8, 0xcb8, 0x7, 0xffffffff, 0x6, 0xfff, 0x6, 0x4, 0x9b, 0x0, 0xff, 0xfff, 0x430de3e7, 0xe99e, 0xfffff800, 0x8ed1, 0x2, 0x5, 0x0, 0x400, 0x7f, 0x65b, 0x1, 0xea, 0xfffffffa, 0x1000, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3, 0x4fae, 0x1, 0x3, 0x8, 0x2, 0x1, 0xfffffffe, 0x0, 0x400, 0xed, 0x25, 0xa9, 0xa, 0xfffffffe, 0x10001, 0x7, 0x7ff, 0x746, 0x6, 0x20, 0x2, 0x62, 0x6, 0x1, 0x7f, 0x1, 0x6, 0x401, 0x10001, 0x6, 0x1, 0x4, 0x9, 0xa, 0x400000, 0x8, 0x1, 0x5, 0x200, 0x8, 0x0, 0xe, 0x2, 0xff, 0x8, 0x5, 0x9, 0x4, 0x3ff, 0x8, 0x2, 0x33, 0x1e480000, 0x1, 0x5, 0xaa, 0x2631244e, 0x0, 0x727, 0x8000, 0x9, 0x6, 0x4, 0x0, 0x97e, 0x0, 0x6, 0xffffff7f, 0x8, 0xde00000, 0xce5, 0xd, 0x80000000, 0x0, 0x4, 0x8000, 0xccc4, 0x5, 0x10001, 0x8, 0x81, 0x4, 0x6, 0x6, 0x8001, 0xff, 0x9, 0x0, 0x7, 0x9, 0x8, 0x1cd, 0xc, 0x7c, 0x7, 0x13, 0xab, 0x9, 0x10, 0x8, 0x70d6, 0x9, 0x6, 0x2, 0x9, 0x8001, 0xffffffff, 0x64, 0x380, 0xfffff208, 0xa73b, 0xfffeffff, 0x7fffffff, 0x8, 0x2, 0x4, 0xd, 0x4, 0x7fffffff, 0x7, 0xfffffff7, 0xa, 0xc9, 0x240, 0x8, 0x8, 0x7, 0x1, 0x7f, 0x8001, 0xf, 0x7, 0x1db, 0x9, 0xfffffff9, 0x0, 0x4, 0xff, 0x7, 0x1, 0x2, 0x0, 0x0, 0xe35, 0x6, 0x9, 0x0, 0x3, 0x225f, 0x5, 0x400, 0x5c2, 0x5, 0x7, 0x401, 0x4, 0x7f, 0x1, 0x5, 0x6, 0x5, 0x9, 0x6, 0x5, 0x8, 0x2, 0x401, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1, 0x80, 0x6, 0x4, 0x7, 0x8, 0x5, 0xe, 0x3, 0x1, 0x1, 0x8001, 0x0, 0x372, 0x10000, 0x7, 0x3, 0x9, 0x7d69, 0x10000, 0x5, 0x40, 0x40, 0xcc00000, 0x6, 0x1, 0x5, 0x40, 0xf, 0x1, 0x0, 0x5, 0x8601, 0xb, 0x7fffffff, 0x10001, 0x2, 0x81, 0x4, 0x5, 0x9, 0x1, 0x5, 0x4, 0xf5f, 0x7, 0x9, 0x2, 0x5, 0x8001, 0x4, 0x5, 0x9, 0x1, 0x101, 0x8, 0x5, 0x8, 0x1, 0x9, 0x8, 0x7, 0x401, 0x7, 0xbf7, 0x7, 0xfffffff8, 0x63f, 0x293, 0x5, 0xffff8001, 0x74, 0x5, 0x10001, 0x7fff, 0x10001, 0x6, 0xfffffffb, 0x80000000, 0x7, 0x5, 0x0, 0xffff, 0x7, 0x8, 0x5, 0xa9, 0x3bf9, 0x7, 0x86, 0x393c, 0xf04, 0x7f, 0x6, 0xffffffff, 0x8, 0xe, 0x1, 0x1, 0x0, 0x10, 0x7, 0x3f7, 0x2, 0xf, 0x9, 0x7fff, 0x1, 0x4, 0x3, 0x8, 0x4, 0xffff, 0x597a, 0x3, 0x6, 0x1c6, 0x200, 0x5, 0x4, 0x9, 0x7fff, 0x1, 0x2, 0x0, 0xcae, 0x8, 0xb25, 0x2, 0x2, 0x8000, 0x3ff, 0x9a0, 0x2, 0x10000, 0x3e, 0x3cd8, 0x7, 0x9, 0x2, 0x0, 0x8, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x13, 0x1c, 0x7, 0x800, 0x2, 0x4, 0x9, 0x3, 0xffffffff, 0xe, 0x7922, 0x7ff, 0xd9, 0x8000, 0x1c, 0x4, 0x4, 0x2, 0x0, 0x9, 0x7, 0x6f1d8b7, 0x8, 0x9, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x4, 0x8, 0xa5, 0xfffffff7, 0x1000, 0x9, 0x2, 0x7fffffff, 0xfffffff9, 0xd, 0xfffffb11, 0x2, 0xfffffffc, 0xcc66, 0x53, 0x8c, 0x5, 0xc2e, 0x9, 0x3, 0x2, 0x2, 0x6, 0xbd5e, 0x6, 0x2, 0x18, 0x10dac513, 0xfffffffa, 0xf84, 0x400, 0x3, 0x0, 0x2, 0x0, 0x8, 0x7, 0x47, 0x679a, 0x1f723c99, 0xb4, 0x1, 0x6, 0xffffffff, 0xf, 0xc, 0x7fffffff, 0x3, 0x0, 0x0, 0x6, 0x80, 0xe, 0x3, 0x8, 0x1, 0x8, 0x7, 0x2, 0xf, 0x0, 0x49c, 0x5, 0x2, 0x4, 0x8, 0x8, 0x8, 0x0, 0x4, 0x5, 0x7fffffff, 0x10, 0x8, 0x4, 0xff27, 0x10000, 0x2, 0x6, 0x3800000, 0x2be7, 0x8, 0x5, 0x100, 0x3, 0x80000001, 0x7, 0x8, 0x3b29, 0x3, 0x7, 0xfffff257, 0x1000, 0xfffffffa, 0x1, 0x7, 0x0, 0x4, 0x4, 0x8, 0x5, 0xfffffffc, 0x8, 0x200, 0x7, 0x0, 0xc, 0x4, 0x8e, 0xb0, 0x3, 0x3, 0x7fffffff, 0xc1b0, 0xe, 0x6a44, 0x10001, 0x8, 0x6, 0x658, 0x3, 0x2, 0xffffffff, 0x6f3, 0x9, 0x0, 0x0, 0x5, 0x4, 0x80, 0x8, 0xaf, 0xba, 0xfffffff0, 0x5, 0x4, 0x2, 0x80000001, 0x8, 0x4, 0xf6, 0x7ff, 0xff, 0x80, 0xb6b, 0x7f, 0x4, 0x800, 0x8000, 0x6, 0x8, 0x7ff, 0xfffffff7, 0x8, 0xa, 0x5, 0xa8, 0x83, 0x536, 0x9, 0x800, 0x1, 0x7fff, 0x1a, 0x2, 0xf, 0xfffffffc, 0x100, 0x8, 0xa20, 0x1, 0x5, 0x8, 0x0, 0x7, 0x0, 0xf7dd, 0x1a63, 0x5, 0xe3e, 0x9943, 0x5, 0x21e, 0xb7, 0x5, 0x8d4, 0x8, 0x5, 0x855, 0x1, 0xa, 0x5, 0x5344, 0xffffffff, 0x5, 0x3ff, 0x7, 0x9, 0xa, 0x95, 0x2b1, 0x4, 0x5, 0x7, 0x3ff, 0x80000001, 0x3a984fa4, 0x71af89d5, 0x0, 0x6, 0x8, 0x5f91, 0x4, 0x8, 0x5, 0x2, 0x5, 0x7, 0x37, 0x5, 0x4, 0x9, 0x5, 0x7f, 0x1, 0x1, 0x100, 0x7, 0x7, 0x4, 0x5127, 0x3, 0xc7, 0xd, 0x17eb592f, 0x800, 0xf0, 0x47af, 0xfff, 0x0, 0x3, 0x100, 0x4, 0xdd8a, 0xc, 0x3, 0x6, 0x2, 0x3, 0x3, 0x5, 0x7, 0x7fff, 0x66, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x5, 0x0, 0xf05f, 0x8001, 0xe, 0x9, 0xade, 0xf80, 0x1, 0x10, 0x5, 0x7, 0x3, 0x101edbaf, 0x7, 0x401, 0x1ff, 0x7, 0x3148, 0x8, 0x9, 0x100, 0xaac9, 0xfffffffa, 0x8, 0x47, 0x81, 0xfffff5df, 0x0, 0x3, 0xffffffee, 0xf51c, 0x1000, 0x2000000, 0x2, 0xd5da, 0xffffffff, 0x48, 0x4, 0x8, 0x80000000, 0x100, 0xfffff801, 0x81, 0x8001, 0x2c, 0x2, 0x6, 0xe3e6, 0xffffffff, 0x3, 0x5, 0x1, 0x2, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x9, 0x8, 0x9, 0x9814, 0x906, 0x5, 0xf, 0x8001, 0x2, 0x2, 0x2, 0xfffffff8, 0x5, 0x10001, 0xb32, 0x3, 0x40, 0xe, 0xfcd, 0x6, 0x7, 0x8, 0x9, 0x0, 0x75b, 0x5544, 0x7, 0x1, 0x8, 0x7ff, 0x3, 0x9, 0xfffffeff, 0xe, 0xfffffff7, 0x8000, 0x7, 0x8, 0x2b6, 0x3ff, 0x100, 0x7, 0x40000, 0x6a, 0x2, 0x1, 0x7f, 0x6, 0x4, 0x6, 0x2, 0x6, 0x5, 0x1, 0x7, 0xffffffff, 0x0, 0x80, 0x2af, 0x7, 0x3, 0x10001, 0x814, 0xa2f6, 0xf1, 0x4, 0x5, 0x8, 0x2, 0x8, 0x46, 0x9, 0x3, 0x9, 0x8, 0x3ff, 0x7, 0xbdbc, 0x1, 0x3ff, 0x3, 0xffffffff, 0x2, 0x1ff, 0x3, 0x1, 0x0, 0xa4, 0x8, 0x3e5, 0x6, 0xaec, 0x0, 0xfffffffa, 0x4, 0x2, 0x3, 0x8, 0x10, 0x400, 0x8, 0x4, 0x7, 0x8001, 0x1, 0xfffffffb, 0x0, 0xfffffffe, 0x6, 0x3, 0x4, 0xfffffffc, 0x1, 0x5, 0x200, 0x9, 0x1000, 0x0, 0x8000, 0x8594f3d, 0x101, 0x6, 0x8, 0x4, 0xfff80000, 0x1, 0x80000000, 0x5]}) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(0x0, 0x1, &(0x7f0000001040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xc, r3, 0x0, 0x0, 0x6}]) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000080)={@random="3bc84979b05b", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "000100", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x9, '\x00', {0x7, 0x6, "9aef12", 0x3fff, 0x11, 0xff, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [@hopopts={0x16, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x558, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x488, 0xffffffff, 0xffffffff, 0x488, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62, 0x0, 0x5}, 0x0, 0x358, 0x398, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f4, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'macvlan0\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5b8) 3m24.454311371s ago: executing program 4 (id=4530): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x10, 0x80000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'ip6gretap0\x00', {0x2, 0x4e23, @multicast1}}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x5, 0x51c, &(0x7f0000000680)="$eJzs3M9vFNcdAPDvrL3YhlJcSpFwaWugVa1KtcHQwqEXKlXqoZWq0kM5WvaCXBaosA8FWWWRKnpGas9Vj1FuiZRrcoxyyh9ADjlESpBQwgWIFGmj2Z1Z7+8fjmXH9ucjrf3e/Hrvzby382bezgRwYM2mf5KI70TE04g4Vo+2LjBb//fqxcby6xcby1GpVq99ntSWe5nGM/l6R7LIXCGi8K+kbYN1a/cf3Foql0v3olKLL6zf/vvC2v0Hv1y9vXSzdLN0Z/HKlUsXL1z+9eKvWrYdEZMDC9UlvbRcL2f+eff0qd9ff/LH5fH2jTWXo6d8rS8qAxeNfN/28LPm7e0DR5vCSWe5Hu5oZhjaZFYNi2n73yifvb7bGQJ2TLVarU70nl2ptnvUMQXYs5LY7RwAuyM/0afXv/mnPqW4E92PXff8av0C6OWLjerDGF9+1Sj/eBSyZYpt17epPn2mkcxGxF8rX/4v/US/+xAfb1OCAMCB997VrBuYRFv/rxAnm5b7bjaGMh0R34uI4xHx/Yg4ERE/iGhZtkUSUe2T/on2CY30385GEQrPtlq2YaT9v99kY1v5J0s3X2R6LIsdjcg7zKXz2T6Zi+LEjdVy6UKP7R8akH5z/y/9pOnnfcEsH8/G2zqbK0vrS1srbafnjyJmxtvLn4ynBy4fxkki4lREzIyw3emm8Oov3jjdiLRdVgwuf021y5DetoyfVf8f8fP68a9Eo/xTLYOISfP4ZKFjfHJhMsql8wtpLTjfNZMffPj4T73SH1j+dz5pX+V3l9+99s0LnkmP/+Gm+h/5+O1m+aeTiKQxXrsWUR0bLY3HH/27tt3Zc53ztlr/DyV/qYXz9vWPpfX1exciDiV/6Jy+uLluHs+XT8s/d657+z+erZPuiR9GRFqJfxQRP44Yy/N+JiLORkSXojW8/9uf/q3XvCHrf4vP/ttv7mjS8q90/f5LsnpQO/6b4/VDBvLtp1PGbp15+nqm+8B9Vv5j/Y//pVpoLpvS/fsvafmKGDan27ALAQAA4FuvELXf/hfmG+FCYX6+fg/oRBwulO+urf8kIu6s1J8RmI5i4cZquZTfkJuOYpLf/5xuii+2xS9m943/MzZVi88v3y2v7Hbh4YA7UmvzSUf7T3064n1eYA/aR8+hASMa1P5PPtmhjAA7zvkfDq6m9l/Z/N1ji4pfysD+5PwPB1e39v8w3uz77ILvDNj7qp1tueuzNsD+1P9cPvh9m8DeNR5/boRrt//0AODAaJz/O37w5yof9rHBD8lPjPzs/2agOtF91mR0eWPA5JaSGBiY6pLWrgTSntUoa032X6YYEcOlPrWVPOddwN5veCiMtsGJ6Jw1Fv3WSrq/xyEiKj3XSvfKwPzcPDls5S/dS17XX5Q5oID5O1G2u9q8tdlOi0Me7h6Br4atfq73AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAfeXrAAAA///jGtFa") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000100)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10000010000000, 0x8}}) 3m24.022836582s ago: executing program 4 (id=4532): syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaa619953e03d700e567fc43053fd3ab136aaaaaabbbbbbbbbbbb08004500005800000000002f90780000000000000000248081000000001010000800000086dd080088be00000000100060001c00000000000000080022ebfffffffc2000000002000000"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@i_version}, {@block_validity}], [{@obj_user={'obj_user', 0x3d, '\xff\xff\xff\xff\xff\xff'}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'bond0\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$TCSBRKP(r3, 0x5425, 0x0) 3m23.722944649s ago: executing program 4 (id=4537): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000480), &(0x7f00000004c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfffffffffffffef9, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x38, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='[', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x100000}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 3m23.722709189s ago: executing program 63 (id=4537): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x5, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0x3cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000480), &(0x7f00000004c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x20a00, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000180)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000005c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfffffffffffffef9, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x38, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)='[', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x100000}], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 5.765936566s ago: executing program 8 (id=6669): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x6, 0x0) read$watch_queue(r3, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3]) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1d, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @generic={0x2, 0x7, 0x5, 0x6, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x3, 0x6, 0x5db2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x2, 0x4, 0x2}, {0x2, 0x5, 0x0, 0x4}, {0x1, 0x3, 0x7, 0x5}, {0x5, 0x1, 0x3, 0xb}, {0x0, 0x1, 0x10, 0x7}, {0x0, 0x4, 0x1, 0x6}], 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000005c0)={0xffffffffffffffff, r5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000028000000000a01040000000000000000030014000900010073797a300000000008000240000000012c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000000110001"], 0x9c}}, 0x0) 5.647482549s ago: executing program 8 (id=6672): mmap(&(0x7f0000b0e000/0x4000)=nil, 0x4000, 0x2000009, 0x3b071, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.633360349s ago: executing program 5 (id=6674): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) readv(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1512, @empty, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) r4 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r5, 0xcd2e8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r6) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x33, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_generic(r4, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000000000008500000097000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}, 0x4048043) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x6ae, 0x0, 0xb3, 0x0, 0x2}) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@loopback, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x100000, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 4.712237102s ago: executing program 5 (id=6679): prlimit64(0x0, 0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000340)="dcab94706c7e295c2b84860188a86a4e0800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4a}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xfc, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x24de63cd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2000}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x41}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14000000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1009}]}, 0xfc}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 4.335333861s ago: executing program 7 (id=6688): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/141) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 3.754685986s ago: executing program 7 (id=6692): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x8, 0x4, 0x8, 0x80, 0x0, 0x100000001, 0x1000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0xc69, 0x0, 0x0, 0x6, 0x3, 0x8, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1228, 0x8, 0x6, 0x7, 0x20005, 0x0, 0x0, 0x10, 0x0, 0x2000001020000001}, 0x0, 0x0, r1, 0x8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000640)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000680)=""/261, 0x105) 2.870938148s ago: executing program 3 (id=6696): prlimit64(0x0, 0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000340)="dcab94706c7e295c2b84860188a86a4e0800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4a}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xfc, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x24de63cd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2000}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x41}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14000000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1009}]}, 0xfc}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000016c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0), 0x1000000000000247, 0x28b1d35c834f09d7, 0xffffffff00000005}}], 0x48, 0x8004}, 0x4000040) 2.753458271s ago: executing program 7 (id=6697): prlimit64(0x0, 0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000340)="dcab94706c7e295c2b84860188a86a4e0800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4a}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xfc, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x24de63cd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2000}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x41}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14000000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1009}]}, 0xfc}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 2.515517937s ago: executing program 2 (id=6699): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x3, 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) sendfile(r4, r5, &(0x7f0000000100)=0x1010, 0x10001) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18420000060000000000000000000000b703000000000000b7040000000000008500000019000000b70000001600000095000000008004009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.419617889s ago: executing program 2 (id=6700): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1228, 0x8, 0x6, 0x7, 0x20005, 0x0, 0x0, 0x10, 0x0, 0x2000001020000001}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000640)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[], 0x5c, 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000680)=""/261, 0x105) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.306238372s ago: executing program 8 (id=6701): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1511}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="020f00001400000000000000fcdb010005000500002000000a0001040000c0b100000000000000000000ffff640101020300000000000000080012000000010000000000030000000600000000020000000000000000000000000000000000000000000000000000fc0200000000000000000000000000ff05000600008000000a004e2300000001000000000000000000000000000000000800000000000000"], 0xa0}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}, 0xf5}], 0x1, 0x4000000) syz_open_dev$loop(&(0x7f0000000040), 0x5, 0xa0040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getitimer(0x2, 0x0) futex_waitv(&(0x7f0000000400), 0x0, 0x0, 0x0, 0x1) r2 = socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x85, 0xc}, {0x0, 0x88, 0xc, 0x6}]}) epoll_create1(0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000600000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB, @ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) memfd_secret(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 2.190332015s ago: executing program 5 (id=6702): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/141) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 2.174287586s ago: executing program 2 (id=6703): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r1 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000885}, 0x24000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000400), &(0x7f0000000400)=@tcp=r1, 0x2}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) socket$pptp(0x18, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000300)={0x6, 0x3, 0x9, 0x10}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0xc800, &(0x7f0000000300)={[{@utf8}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0xffffffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@cruft}, {@map_off}]}, 0x41, 0x543, &(0x7f00000004c0)="$eJzs3V9v09YbwPHHpf0R5SdV05gQqgocyiYVqQQngaCIK885SQ8kdmQ7qL1CFU1RRQoTZdLaG8YN26TtRXC7F7F3hPYSNtlO+oc2MdA/qbrvJ4JzYh/7PCdYfnAbHwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdl20ZKm8TpLaji3Fvit3bf9rQ8skFv7ihH9iljxH8nl5Eq66Mo3u6svx3/NyWz6blZycZGT7f9f/urBpcmJwfYjAj4Vm1vbz1d6ve6rcQdygq5eHL6uoT0T+qblNLQyoa+qlYp9Z7Eeqrpp6nA5jHRLuYF2Ij9Q8+4tVaxWy0oXlv2O16g5TT1YeP92ybYr6mGhrZ0g9L07Dwuhu2iaTeM1kjbx6rjN/fhAfGQiFWmnpdTaeq9bzhpA3Kj4KY1KWY1KdqlULJZKxcq96r37tj15YIH9ETnQYvwHLcbrGM/ewNFM9PO/NMWIJx1ZEnXoy5WaBOJLa8j6vkH+/+6OHtnv3vw/yPJXdlfPSJL/r6Xvrg3L/0NiOb3XpmzJtjyXFelJT7ryauwRne6rIVo8MRKKL0Za4iRLVH+JkqpUpCK2PJFFqUsoSupipClaQlmWUCLRyRHlSiBaHInEl0CUzIsrt0RJUapSlbIo0VKQZfGlI540pCZOspc1WU8+97Ioa1iMO42KQ4eRHxx3XSmNGO3x5v/pff+Bxn/FsZ6/gaP4Z5D/AQAAAADAuWUlP32Pr/+n5GpSq5umtscdFgAAAAAAOEbJb/5n42Iqrl0Vi+t/AAAAAADOGyu5x84SkbxcT2trYiW3S/FDAAAAAAAAzonk9//X4iKZA+W6WDvTpXD9DwAAAADAOfFr5hz7Yfui9dffEgRT1tv20rfWRjI3r7NxId3uwsd7jOoz1nR/J0lRSYvJSVfPWrm00c4kmB/6xVpWHNZuAM5OAD9/TgCXJuV3uZG2ubGalquDNWkv+bpp6oLrNx8UxXGmJyK9FP34Yv0nSYb/m9eatnKy3usWnr7srSaxvI338najP4HigXkUR8TyOplvIbnn4tARTyU3YvT7zVuytt7r2nvHP5FuPrG/xzfTI/p8J3Npq7n+jLf5/ePPxX0WC8NG34+ieMSRv5ObaZub8zfT4pAoSllRlPZGcfhncfQoyllRlI8YBQCMy1pGFrLkQN79grPcl2V3+czs/k7m0zbzM8mJdXLmkDO6nXVGt4+Y3f488AykYTk27vePj7Lq+3iD90P7DZslK/4IL7ze+EEub25t317fWHnWfdZ9USqVK/Zd275XkqlkGP2C3AMAOET2M3YyW1h3M66qv975SkFBnspL6cmqLCR3GyTfODh0r/k9X0NYyLhqzSdpMn3Cy8KIq7r/JXc5DPZbGtl2fwzlk/+HAADgFM1l5OFPyf8LGdfd+3P56Kvj/J6ntQEAgJOhgw9WPvrFCgLTflKsVotOtKhV4LuPVGBqDa2MF+nAXXS8hlbtwI9812/GlcempkMVdtptP4hU3Q9U2w/NUjJ9oOo/+j3ULceLjBu2m9oJtXJ9L3LcSNVM6Kp25/umCRd1kGwctrVr6sZ1IuN7KvQ7gasLSoVa72loatqLTN3EVU+1A9Nygpx67Dc7La1qOnQD0478dIeDvoxX94NWstvCuD9sAADOiM2t7ecrvV731QlWxj1GAACwH1kaAAAAAAAAAAAAAAAAAAAAAICz7zTu/6PyRRXpz9B7VuIZXhlMBX1W4qFyHIdfljcne2YCcNL+DQAA//86i0tB") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) 2.065675668s ago: executing program 2 (id=6704): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) readv(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1512, @empty, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) r4 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r5, 0xcd2e8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r6) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x33, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_generic(r4, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000000000008500000097000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}, 0x4048043) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x6ae, 0x0, 0xb3, 0x0, 0x2}) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@loopback, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x100000, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 1.98587715s ago: executing program 3 (id=6705): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 1.842643684s ago: executing program 7 (id=6706): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) readv(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1512, @empty, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) r3 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r4, 0xcd2e8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000001000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x33, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_generic(r3, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000000000008500000097000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}, 0x4048043) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x6ae, 0x0, 0xb3, 0x0, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@loopback, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x100000, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) 1.841600184s ago: executing program 3 (id=6716): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) readv(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1512, @empty, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x4) r3 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r4, 0xcd2e8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000001000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000000800034000000010400000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010000080"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x33, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_generic(r3, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000000000008500000097000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}, 0x4048043) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x6ae, 0x0, 0xb3, 0x0, 0x2}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@loopback, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x100000, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0xffe0) 1.616107109s ago: executing program 5 (id=6707): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x8, 0x4, 0x8, 0x80, 0x0, 0x100000001, 0x1000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0xc69, 0x0, 0x0, 0x6, 0x3, 0x8, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1228, 0x8, 0x6, 0x7, 0x20005, 0x0, 0x0, 0x10, 0x0, 0x2000001020000001}, 0x0, 0x0, r1, 0x8) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000640)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000680)=""/261, 0x105) 1.149676591s ago: executing program 2 (id=6708): syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a2160000302b00"], 0x0) 1.131450341s ago: executing program 8 (id=6709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "3ebe4dd909f3c312"}, 0x28) sendfile(r4, r5, &(0x7f0000000100)=0x1010, 0x10001) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.113038322s ago: executing program 7 (id=6710): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0xc800, &(0x7f0000000300)={[{@utf8}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0xffffffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@cruft}, {@map_off}]}, 0x41, 0x543, &(0x7f00000004c0)="$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") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) getsockname$packet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffdffb) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) 1.110118522s ago: executing program 2 (id=6711): mmap(&(0x7f0000b0e000/0x4000)=nil, 0x4000, 0x2000009, 0x3b071, 0xffffffffffffffff, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.099479542s ago: executing program 3 (id=6712): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x8, 0x4, 0x8, 0x80, 0x0, 0x100000001, 0x1000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0xc69, 0x0, 0x0, 0x6, 0x3, 0x8, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1228, 0x8, 0x6, 0x7, 0x20005, 0x0, 0x0, 0x10, 0x0, 0x2000001020000001}, 0x0, 0x0, r1, 0x8) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000640)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000680)=""/261, 0x105) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000240)=')}-\x00', &(0x7f00000003c0)="d78f8ddc8d43c40231f0487462ddf09143983cf4ff236524fb2e5b0a2826a9c240558816d32fa672d1e5be188edbd0fa86239a679a511eb24965ab39c8d25b0079938bba69aeb4638c4462aa69f3f33022a04ed3f347c4c3bfb0fdf2d6e742b63c10f685cb8205a862b16b4a6d427230cf184a88149d1148638ffd644d9700e9399f7ed899bfb223d6cd992e1bcfcc48c6c1c48ba1719bf922eb30f5d26ef1b9c42704d61518f7e7019a54c8607af291c872f87bfd915b73e2b548fa60baf1094367e65e5faabec88a311cd7d6ede3c9320b9d9b42dfb7b8c7d6d082e4a01c94", 0xe0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000200)={[{@prjquota}, {@nogrpid}, {@discard}, {@errors_remount}, {@init_itable, 0x0}, {@usrjquota}, {@jqfmt_vfsv1}, {@nolazytime}, {@nobh}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0/../file0/../file0'}}], [], 0x2c}, 0xfe, 0x50a, &(0x7f00000010c0)="$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") io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000600)={0x1, 0x0, 0x0, &(0x7f00000003c0)=[{0x0}]}, 0x20) fsmount(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000100), 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0\x00'}) 727.270572ms ago: executing program 3 (id=6713): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x1228, 0x8, 0x6, 0x7, 0x20005, 0x0, 0x0, 0x10, 0x0, 0x2000001020000001}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) lsetxattr$system_posix_acl(&(0x7f0000000640)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[], 0x5c, 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000680)=""/261, 0x105) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 603.779485ms ago: executing program 7 (id=6714): prlimit64(0x0, 0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x12, 0x0, &(0x7f0000000340)="dcab94706c7e295c2b84860188a86a4e0800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000000c0)=0x102, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4a}}, './file1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xfc, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x24de63cd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2000}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x41}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x14000000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1009}]}, 0xfc}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 578.284755ms ago: executing program 8 (id=6715): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) unshare(0xa000200) r0 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/141) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write$cgroup_pid(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 471.909288ms ago: executing program 3 (id=6717): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_config_ext={0x6}, 0x0, 0x2000000000, 0x7fffffff, 0x0, 0x4, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f0000000740)=ANY=[@ANYBLOB="24000000147d00000000251e6e5553d431f7075b8029e9e020ee6fcd6058c67fd058f602844760dcadd1087413143ebcb68dfd5881fa0000000000000000000000000026161e9c47310f14b8a09878335347bef8d7fe7b0b1d637c786ae27e1e4c3e1866170e81a950b1369de327e51ad8b8ba3095967c9da10357e2dba3bbf06c3d8bf112213fbbf7e02c1c1475db41e13314a60bcabaf96df97707ea210a5928"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008) syncfs(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001080)='mounts\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) flock(r6, 0x1) fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x200000000}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r8, &(0x7f0000000040)=""/17, 0x11, 0x1) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x6c, 0x2, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11002, 0x9, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 448.498418ms ago: executing program 5 (id=6718): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) socket(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0xc800, &(0x7f0000000300)={[{@utf8}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0xffffffeb}}, {@session={'session', 0x3d, 0x21}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@cruft}, {@map_off}]}, 0x41, 0x543, &(0x7f00000004c0)="$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") ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000100)) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffdffb) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) 310.396502ms ago: executing program 5 (id=6719): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x3, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) readv(r0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x1512, @empty, 0x7}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0), 0x4) r4 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r5, 0xcd2e8000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r6) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x33, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_generic(r4, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000000000008500000097000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000380)="8a", 0x1}], 0x1}, 0x4048043) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x1, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x6ae, 0x0, 0xb3, 0x0, 0x2}) r8 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0xa, @in=@loopback, 0xfffffffe, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x100000, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 0s ago: executing program 8 (id=6720): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000280)=""/161) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socket$inet6(0xa, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044081}, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): inode 1792 [ 929.342755][T32191] Cannot find set identified by id 0 to match [ 929.383253][T32195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32195 comm=syz.3.5997 [ 929.412555][T32197] EXT4-fs: Ignoring removed i_version option [ 929.438380][T32197] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 929.533056][ T29] audit: type=1400 audit(1788425468.408:101103): avc: denied { write } for pid=32196 comm="syz.8.5998" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 929.602042][T32194] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 929.631515][T32202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32202 comm=syz.3.5999 [ 929.677667][T32204] __nla_validate_parse: 5 callbacks suppressed [ 929.677692][T32204] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6000'. [ 929.698262][T32204] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 929.698297][T32204] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 929.698357][T32204] vhci_hcd vhci_hcd.0: Device attached [ 929.735358][T32204] lo speed is unknown, defaulting to 1000 [ 929.737168][T32204] lo speed is unknown, defaulting to 1000 [ 929.790239][T32211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6002'. [ 929.832826][T32205] vhci_hcd: connection closed [ 929.833235][T21215] vhci_hcd vhci_hcd.7: stop threads [ 929.833267][T21215] vhci_hcd vhci_hcd.7: release socket [ 929.833319][T21215] vhci_hcd vhci_hcd.7: disconnect device [ 929.870001][T32212] Cannot find set identified by id 0 to match [ 929.885277][T11604] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 930.392083][T32214] set_capacity_and_notify: 18 callbacks suppressed [ 930.392127][T32214] loop7: detected capacity change from 0 to 512 [ 930.405796][T32214] EXT4-fs: Ignoring removed i_version option [ 930.431690][T32214] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 930.460289][ T29] audit: type=1400 audit(1788425469.278:101104): avc: denied { write } for pid=32213 comm="syz.7.6003" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 930.805177][T32224] siw: device registration error -23 [ 930.806972][T32221] siw: device registration error -23 [ 930.857526][T32228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32228 comm=syz.3.6008 [ 930.875059][T32228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6008'. [ 930.875090][T32228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6008'. [ 931.038810][T32234] siw: device registration error -23 [ 931.085553][T32238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32238 comm=syz.8.6012 [ 931.145590][T32240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32240 comm=syz.3.6013 [ 931.157091][T32240] loop3: detected capacity change from 0 to 164 [ 931.188744][T32240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6013'. [ 931.188915][T32240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6013'. [ 931.251065][T32243] loop8: detected capacity change from 0 to 512 [ 931.261114][T32243] EXT4-fs: Ignoring removed i_version option [ 931.296822][T32243] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.344475][ T29] audit: type=1400 audit(1788425470.111:101105): avc: denied { write } for pid=32242 comm="syz.8.6014" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 931.395893][T32249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32249 comm=syz.3.6018 [ 931.467920][T32249] loop3: detected capacity change from 0 to 164 [ 931.503284][T32249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6018'. [ 931.503403][T32249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6018'. [ 931.643224][T32252] siw: device registration error -23 [ 931.731384][T32254] siw: device registration error -23 [ 931.747270][T32260] loop3: detected capacity change from 0 to 512 [ 931.754184][T32260] EXT4-fs: Ignoring removed i_version option [ 931.778033][T32260] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.818394][ T29] audit: type=1400 audit(1788425470.551:101106): avc: denied { write } for pid=32259 comm="syz.3.6022" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 931.952606][T32268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6025'. [ 931.967198][T32269] Cannot find set identified by id 0 to match [ 932.025439][T32275] Cannot find set identified by id 0 to match [ 932.198022][T32278] loop7: detected capacity change from 0 to 164 [ 932.236806][T32283] selinux_netlink_send: 2 callbacks suppressed [ 932.236879][T32283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32283 comm=syz.8.6029 [ 932.254151][T32283] loop8: detected capacity change from 0 to 164 [ 932.281925][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6028'. [ 932.667914][T32292] siw: device registration error -23 [ 932.750911][T32296] loop7: detected capacity change from 0 to 512 [ 932.760514][T32296] EXT4-fs: Ignoring removed i_version option [ 932.772316][T32296] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 932.819058][ T29] audit: type=1400 audit(1788425471.477:101107): avc: denied { write } for pid=32295 comm="syz.7.6035" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 932.846368][T32299] Cannot find set identified by id 0 to match [ 933.172588][T32304] loop2: detected capacity change from 0 to 164 [ 933.219853][T32304] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 933.231295][T32307] xt_NFQUEUE: number of total queues is 0 [ 933.678943][T32309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32309 comm=syz.2.6039 [ 933.692078][T32311] loop7: detected capacity change from 0 to 512 [ 933.693044][T32311] EXT4-fs: Ignoring removed i_version option [ 933.717583][T32311] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.721083][ T3424] Bluetooth: hci0: Frame reassembly failed (-84) [ 933.737064][T32314] EXT4-fs: Ignoring removed i_version option [ 933.745978][ T29] audit: type=1400 audit(1788425472.356:101108): avc: denied { write } for pid=32310 comm="syz.7.6040" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 933.780817][T32314] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.829989][T32317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32317 comm=syz.8.6041 [ 933.876126][ T29] audit: type=1400 audit(1788425472.468:101109): avc: denied { write } for pid=32312 comm="syz.5.6042" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 934.052153][T32325] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 934.052177][T32325] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 934.052219][T32325] vhci_hcd vhci_hcd.0: Device attached [ 934.080859][T32325] lo speed is unknown, defaulting to 1000 [ 934.081743][T32325] lo speed is unknown, defaulting to 1000 [ 934.164431][T32326] vhci_hcd: connection closed [ 934.164806][ T3424] vhci_hcd vhci_hcd.5: stop threads [ 934.164837][ T3424] vhci_hcd vhci_hcd.5: release socket [ 934.164862][ T3424] vhci_hcd vhci_hcd.5: disconnect device [ 934.234857][ T24] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 934.586136][T32329] EXT4-fs: Ignoring removed i_version option [ 934.611102][T32329] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.623707][ T29] audit: type=1400 audit(1788425473.179:101110): avc: denied { write } for pid=32328 comm="syz.7.6044" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 935.451956][T32342] EXT4-fs: Ignoring removed i_version option [ 935.471009][T32342] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.502592][ T29] audit: type=1400 audit(1788425473.993:101111): avc: denied { write } for pid=32341 comm="syz.3.6046" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 935.712318][T32355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32355 comm=syz.3.6050 [ 935.724643][ T3424] Bluetooth: hci1: Frame reassembly failed (-84) [ 935.902627][ T4877] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 935.940051][T32359] set_capacity_and_notify: 4 callbacks suppressed [ 935.940081][T32359] loop2: detected capacity change from 0 to 512 [ 935.947145][T32359] EXT4-fs: Ignoring removed i_version option [ 935.970587][T32359] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.999057][ T29] audit: type=1400 audit(1788425474.460:101112): avc: denied { write } for pid=32358 comm="syz.2.6052" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 936.026664][T32362] Cannot find set identified by id 0 to match [ 936.489933][T32365] __nla_validate_parse: 6 callbacks suppressed [ 936.490066][T32365] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6053'. [ 936.541426][T32365] Cannot find set identified by id 0 to match [ 936.882315][T32369] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6055'. [ 936.891633][T32371] loop2: detected capacity change from 0 to 512 [ 936.898816][T32371] EXT4-fs: Ignoring removed i_version option [ 936.910152][T32371] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.925136][ T29] audit: type=1400 audit(1788425475.330:101113): avc: denied { write } for pid=32370 comm="syz.2.6057" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 937.038926][T32376] Cannot find set identified by id 0 to match [ 937.839775][T32383] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6060'. [ 937.849194][T32383] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 937.849273][T32383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 937.849439][T32383] vhci_hcd vhci_hcd.0: Device attached [ 937.870560][T10076] Bluetooth: hci1: command 0x1003 tx timeout [ 937.870584][ T9243] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 937.916170][T32383] lo speed is unknown, defaulting to 1000 [ 937.923533][T32383] lo speed is unknown, defaulting to 1000 [ 938.105482][ T1044] usb 17-1: new high-speed USB device number 9 using vhci_hcd [ 938.131554][T32384] vhci_hcd: connection reset by peer [ 938.132132][ T61] vhci_hcd vhci_hcd.8: stop threads [ 938.132271][ T61] vhci_hcd vhci_hcd.8: release socket [ 938.132307][ T61] vhci_hcd vhci_hcd.8: disconnect device [ 938.133773][T32393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32393 comm=syz.2.6063 [ 938.152873][T32393] loop2: detected capacity change from 0 to 164 [ 938.245519][T32393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6063'. [ 938.245698][T32393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6063'. [ 938.338791][T32397] Cannot find set identified by id 0 to match [ 938.391055][T32400] Cannot find set identified by id 0 to match [ 938.528850][T32403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6068'. [ 938.551776][T32403] Cannot find set identified by id 0 to match [ 938.767598][T32409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32409 comm=syz.8.6070 [ 938.851985][T32409] loop8: detected capacity change from 0 to 164 [ 938.907619][T32409] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6070'. [ 938.908310][T32409] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6070'. [ 939.293594][T32418] loop5: detected capacity change from 0 to 512 [ 939.300622][T32418] EXT4-fs: Ignoring removed i_version option [ 939.334743][T32413] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6072'. [ 939.345129][T32418] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 939.452638][ T29] audit: type=1400 audit(1788425477.697:101114): avc: denied { write } for pid=32416 comm="syz.5.6074" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 939.475905][T32427] Cannot find set identified by id 0 to match [ 939.529885][T32428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6077'. [ 939.612365][T32417] loop2: detected capacity change from 0 to 164 [ 939.692725][T32428] Cannot find set identified by id 0 to match [ 939.933571][T32437] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 939.933682][T32437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 939.933725][T32437] vhci_hcd vhci_hcd.0: Device attached [ 939.948154][T32442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32442 comm=syz.5.6080 [ 939.960603][T32442] loop5: detected capacity change from 0 to 164 [ 940.005016][T32437] lo speed is unknown, defaulting to 1000 [ 940.005377][T32437] lo speed is unknown, defaulting to 1000 [ 940.189739][ T3398] usb 15-1: new high-speed USB device number 10 using vhci_hcd [ 940.220058][T32440] vhci_hcd: connection reset by peer [ 940.220509][ T5680] vhci_hcd vhci_hcd.7: stop threads [ 940.220570][ T5680] vhci_hcd vhci_hcd.7: release socket [ 940.220640][ T5680] vhci_hcd vhci_hcd.7: disconnect device [ 940.299273][T32447] Cannot find set identified by id 0 to match [ 940.319976][T32449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32449 comm=syz.5.6083 [ 940.337261][T32449] loop5: detected capacity change from 0 to 164 [ 940.516449][T32452] Cannot find set identified by id 0 to match [ 940.808495][T32454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32454 comm=syz.8.6085 [ 940.881326][ T5680] Bluetooth: hci0: Frame reassembly failed (-84) [ 941.525335][T32460] loop5: detected capacity change from 0 to 164 [ 941.605089][T32465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32465 comm=syz.7.6089 [ 941.628167][T32465] loop7: detected capacity change from 0 to 164 [ 941.684948][T32468] loop5: detected capacity change from 0 to 512 [ 941.690449][T32468] EXT4-fs: Ignoring removed i_version option [ 941.698965][T32469] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 941.698991][T32469] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 941.699054][T32469] vhci_hcd vhci_hcd.0: Device attached [ 941.724704][T32468] EXT4-fs mount: 30 callbacks suppressed [ 941.724741][T32468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.724810][T32468] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.771856][ T29] audit: type=1400 audit(1788425479.858:101115): avc: denied { write } for pid=32466 comm="syz.5.6090" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 941.778888][T32469] lo speed is unknown, defaulting to 1000 [ 941.779849][T32469] lo speed is unknown, defaulting to 1000 [ 941.944556][T32470] vhci_hcd: connection closed [ 941.944826][ T3424] vhci_hcd vhci_hcd.2: stop threads [ 941.944855][ T3424] vhci_hcd vhci_hcd.2: release socket [ 941.944958][ T3424] vhci_hcd vhci_hcd.2: disconnect device [ 941.964238][T14555] usb 5-1: new high-speed USB device number 11 using vhci_hcd [ 941.964365][T14555] usb 5-1: enqueue for inactive port 0 [ 941.964490][T14555] usb 5-1: enqueue for inactive port 0 [ 941.964553][T14555] usb 5-1: enqueue for inactive port 0 [ 942.021752][T32479] __nla_validate_parse: 7 callbacks suppressed [ 942.021823][T32479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6093'. [ 942.039108][T14555] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 942.070562][T32479] Cannot find set identified by id 0 to match [ 942.107946][T32481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32481 comm=syz.7.6094 [ 942.127719][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 942.143471][T32481] loop7: detected capacity change from 0 to 164 [ 942.183536][T32483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32483 comm=syz.5.6095 [ 942.197557][T32483] loop5: detected capacity change from 0 to 164 [ 942.237065][T32481] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6094'. [ 942.237353][T32481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6094'. [ 942.253767][T32483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6095'. [ 942.253838][T32483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6095'. [ 942.411926][T32489] xt_NFQUEUE: number of total queues is 0 [ 942.761711][T32492] loop2: detected capacity change from 0 to 512 [ 942.762139][T32492] EXT4-fs: Ignoring removed i_version option [ 942.790428][T32492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.790582][T32492] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 942.813827][ T29] audit: type=1400 audit(1788425480.831:101116): avc: denied { write } for pid=32491 comm="syz.2.6100" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 943.085139][T32498] loop3: detected capacity change from 0 to 164 [ 943.097542][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 943.429539][T32509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6105'. [ 943.452553][T32509] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 943.452654][T32509] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.452789][T32509] vhci_hcd vhci_hcd.0: Device attached [ 943.456998][T32500] loop3: detected capacity change from 0 to 164 [ 943.501646][T32502] loop8: detected capacity change from 0 to 164 [ 943.545230][T32509] lo speed is unknown, defaulting to 1000 [ 943.554848][T32509] lo speed is unknown, defaulting to 1000 [ 943.590491][ T1044] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 943.597870][T32513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32513 comm=syz.7.6106 [ 943.657731][T32513] loop7: detected capacity change from 0 to 164 [ 943.707300][T14555] usb 11-1: new high-speed USB device number 11 using vhci_hcd [ 943.720419][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.792580][T32510] vhci_hcd: connection reset by peer [ 943.793003][ T5680] vhci_hcd vhci_hcd.5: stop threads [ 943.793105][ T5680] vhci_hcd vhci_hcd.5: release socket [ 943.793206][ T5680] vhci_hcd vhci_hcd.5: disconnect device [ 943.806859][T32517] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 943.806945][T32517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 943.807029][T32517] vhci_hcd vhci_hcd.0: Device attached [ 943.810147][T32519] EXT4-fs: Ignoring removed i_version option [ 943.840803][T32519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 943.840875][T32519] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.885820][T32517] lo speed is unknown, defaulting to 1000 [ 943.886306][T32517] lo speed is unknown, defaulting to 1000 [ 943.939202][T32525] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6110'. [ 943.977896][T32525] Cannot find set identified by id 0 to match [ 944.016795][ T29] audit: type=1400 audit(1788425481.962:101117): avc: denied { write } for pid=32518 comm="syz.2.6109" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 944.178453][ T1044] usb 17-1: device descriptor read/64, error -110 [ 944.193126][T32533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6112'. [ 944.193164][T32533] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6112'. [ 944.217966][T32535] Cannot find set identified by id 0 to match [ 944.293910][T32520] vhci_hcd: connection closed [ 944.294368][ T5650] vhci_hcd vhci_hcd.8: stop threads [ 944.294399][ T5650] vhci_hcd vhci_hcd.8: release socket [ 944.294428][ T5650] vhci_hcd vhci_hcd.8: disconnect device [ 944.295964][ T1044] usb 17-1: enqueue for inactive port 0 [ 944.295991][ T1044] usb 17-1: enqueue for inactive port 0 [ 944.296028][ T1044] usb 17-1: enqueue for inactive port 0 [ 944.371157][ T1044] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 944.849657][T32539] FAULT_INJECTION: forcing a failure. [ 944.849657][T32539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.849698][T32539] CPU: 0 UID: 0 PID: 32539 Comm: syz.8.6115 Not tainted syzkaller #0 PREEMPT(lazy) [ 944.849734][T32539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.849821][T32539] Call Trace: [ 944.849828][T32539] [ 944.849836][T32539] __dump_stack+0x1d/0x30 [ 944.849863][T32539] dump_stack_lvl+0x95/0xd0 [ 944.849894][T32539] dump_stack+0x15/0x1b [ 944.849924][T32539] should_fail_ex+0x262/0x280 [ 944.849990][T32539] should_fail+0xb/0x20 [ 944.850013][T32539] should_fail_usercopy+0x1a/0x20 [ 944.850054][T32539] _copy_from_user+0x1c/0xb0 [ 944.850088][T32539] ucma_write+0xd8/0x260 [ 944.850276][T32539] ? __pfx_ucma_write+0x10/0x10 [ 944.850318][T32539] vfs_write+0x254/0x9a0 [ 944.850357][T32539] ? __fget_files+0x184/0x1c0 [ 944.850447][T32539] ksys_write+0xdc/0x1a0 [ 944.850494][T32539] __x64_sys_write+0x40/0x50 [ 944.850532][T32539] x64_sys_call+0x154e/0x2550 [ 944.850567][T32539] do_syscall_64+0x112/0x360 [ 944.850627][T32539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.850652][T32539] RIP: 0033:0x7f09a48be159 [ 944.850713][T32539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.850740][T32539] RSP: 002b:00007f09a3317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 944.850764][T32539] RAX: ffffffffffffffda RBX: 00007f09a4b45fa0 RCX: 00007f09a48be159 [ 944.850785][T32539] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000003 [ 944.850803][T32539] RBP: 00007f09a3317090 R08: 0000000000000000 R09: 0000000000000000 [ 944.850823][T32539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.850841][T32539] R13: 00007f09a4b46038 R14: 00007f09a4b45fa0 R15: 00007ffd81792928 [ 944.850933][T32539] [ 945.097809][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.148976][T32549] netlink: 288 bytes leftover after parsing attributes in process `syz.7.6116'. [ 945.171663][T32545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32545 comm=syz.8.6120 [ 945.184288][ T29] audit: type=1400 audit(1788425483.047:101118): avc: denied { mount } for pid=32546 comm="syz.7.6116" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 945.256416][ T29] audit: type=1400 audit(1788425483.122:101119): avc: denied { unmount } for pid=24414 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 945.523832][ T3424] Bluetooth: hci0: Frame reassembly failed (-84) [ 945.583701][T32561] Cannot find set identified by id 0 to match [ 945.644011][ T3398] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 945.744046][T32570] EXT4-fs: Ignoring removed i_version option [ 945.765004][T32570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 945.765149][T32570] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 945.796267][ T29] audit: type=1400 audit(1788425483.627:101120): avc: denied { write } for pid=32569 comm="syz.8.6128" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 945.884058][T32576] Cannot find set identified by id 0 to match [ 946.680994][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.712225][T32581] FAULT_INJECTION: forcing a failure. [ 946.712225][T32581] name failslab, interval 1, probability 0, space 0, times 0 [ 946.712366][T32581] CPU: 1 UID: 0 PID: 32581 Comm: syz.5.6132 Not tainted syzkaller #0 PREEMPT(lazy) [ 946.712429][T32581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.712480][T32581] Call Trace: [ 946.712526][T32581] [ 946.712543][T32581] __dump_stack+0x1d/0x30 [ 946.712631][T32581] dump_stack_lvl+0x95/0xd0 [ 946.712720][T32581] dump_stack+0x15/0x1b [ 946.712834][T32581] should_fail_ex+0x262/0x280 [ 946.712903][T32581] ? __alloc_skb+0x2e0/0x6f0 [ 946.712991][T32581] should_failslab+0x8c/0xb0 [ 946.713141][T32581] kmem_cache_alloc_node_noprof+0x82/0x400 [ 946.713245][T32581] ? netlink_insert+0x684/0x900 [ 946.713371][T32581] ? __alloc_skb+0x2e0/0x6f0 [ 946.713422][T32581] __alloc_skb+0x2e0/0x6f0 [ 946.713560][T32581] ? __alloc_skb+0x209/0x6f0 [ 946.713663][T32581] netlink_alloc_large_skb+0xbf/0xf0 [ 946.713732][T32581] netlink_sendmsg+0x40c/0x6f0 [ 946.713836][T32581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 946.713937][T32581] ____sys_sendmsg+0x532/0x580 [ 946.714138][T32581] ___sys_sendmsg+0x195/0x1e0 [ 946.714289][T32581] __sys_sendmmsg+0x185/0x320 [ 946.714447][T32581] __x64_sys_sendmmsg+0x57/0x70 [ 946.714555][T32581] x64_sys_call+0x1fb4/0x2550 [ 946.714719][T32581] do_syscall_64+0x112/0x360 [ 946.714837][T32581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.714916][T32581] RIP: 0033:0x7f4f8743e159 [ 946.714978][T32581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.715112][T32581] RSP: 002b:00007f4f85e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 946.715185][T32581] RAX: ffffffffffffffda RBX: 00007f4f876c5fa0 RCX: 00007f4f8743e159 [ 946.715240][T32581] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 946.715292][T32581] RBP: 00007f4f85e97090 R08: 0000000000000000 R09: 0000000000000000 [ 946.715409][T32581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.715460][T32581] R13: 00007f4f876c6038 R14: 00007f4f876c5fa0 R15: 00007ffe9d763448 [ 946.715577][T32581] [ 946.841581][T32584] EXT4-fs: Ignoring removed i_version option [ 946.873291][T32584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.873532][T32584] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 946.958363][ T29] audit: type=1400 audit(1788425484.703:101121): avc: denied { write } for pid=32583 comm="syz.5.6135" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 946.991829][ T29] audit: type=1400 audit(1788425484.750:101122): avc: denied { mounton } for pid=32589 comm="syz.2.6133" path="/380/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 947.080799][T32595] set_capacity_and_notify: 7 callbacks suppressed [ 947.080915][T32595] loop2: detected capacity change from 0 to 512 [ 947.084713][T32595] EXT4-fs: Ignoring removed i_version option [ 947.123736][T32595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.123843][T32595] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 947.202803][ T29] audit: type=1400 audit(1788425484.937:101123): avc: denied { write } for pid=32594 comm="syz.2.6137" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 947.364553][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.705066][ T9243] Bluetooth: hci0: command 0x1003 tx timeout [ 947.705115][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 947.814509][T32610] Cannot find set identified by id 0 to match [ 947.965473][ T29] audit: type=1400 audit(1788425485.657:101124): avc: denied { mounton } for pid=32608 comm="syz.7.6140" path="/403/bus" dev="tmpfs" ino=2187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 948.299175][T32617] __nla_validate_parse: 5 callbacks suppressed [ 948.299215][T32617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6143'. [ 948.680349][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.829165][T32633] FAULT_INJECTION: forcing a failure. [ 948.829165][T32633] name failslab, interval 1, probability 0, space 0, times 0 [ 948.829206][T32633] CPU: 0 UID: 0 PID: 32633 Comm: syz.8.6150 Not tainted syzkaller #0 PREEMPT(lazy) [ 948.829318][T32633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.829411][T32633] Call Trace: [ 948.829427][T32633] [ 948.829458][T32633] __dump_stack+0x1d/0x30 [ 948.829548][T32633] dump_stack_lvl+0x95/0xd0 [ 948.829698][T32633] dump_stack+0x15/0x1b [ 948.829772][T32633] should_fail_ex+0x262/0x280 [ 948.829906][T32633] ? __alloc_skb+0x2e0/0x6f0 [ 948.829998][T32633] should_failslab+0x8c/0xb0 [ 948.830094][T32633] kmem_cache_alloc_node_noprof+0x82/0x400 [ 948.830261][T32633] ? netlink_insert+0x684/0x900 [ 948.830343][T32633] ? __alloc_skb+0x2e0/0x6f0 [ 948.830481][T32633] __alloc_skb+0x2e0/0x6f0 [ 948.830574][T32633] ? __alloc_skb+0x209/0x6f0 [ 948.830747][T32633] netlink_alloc_large_skb+0xbf/0xf0 [ 948.830844][T32633] netlink_sendmsg+0x40c/0x6f0 [ 948.830955][T32633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 948.831066][T32633] ____sys_sendmsg+0x532/0x580 [ 948.831168][T32633] ___sys_sendmsg+0x195/0x1e0 [ 948.831311][T32633] __sys_sendmmsg+0x185/0x320 [ 948.831545][T32633] __x64_sys_sendmmsg+0x57/0x70 [ 948.831792][T32633] x64_sys_call+0x1fb4/0x2550 [ 948.831883][T32633] do_syscall_64+0x112/0x360 [ 948.831983][T32633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.832252][T32633] RIP: 0033:0x7f09a48be159 [ 948.832323][T32633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.832386][T32633] RSP: 002b:00007f09a3317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 948.832495][T32633] RAX: ffffffffffffffda RBX: 00007f09a4b45fa0 RCX: 00007f09a48be159 [ 948.832627][T32633] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 948.832689][T32633] RBP: 00007f09a3317090 R08: 0000000000000000 R09: 0000000000000000 [ 948.832732][T32633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.832780][T32633] R13: 00007f09a4b46038 R14: 00007f09a4b45fa0 R15: 00007ffd81792928 [ 948.832844][T32633] [ 948.883406][T32634] loop7: detected capacity change from 0 to 164 [ 948.937152][T32634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6151'. [ 948.937271][T32634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6151'. [ 949.088599][T32640] loop8: detected capacity change from 0 to 512 [ 949.095449][T32640] EXT4-fs: Ignoring removed i_version option [ 949.119778][T32640] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.119863][T32640] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.159020][T14555] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 949.180661][T32648] loop7: detected capacity change from 0 to 512 [ 949.191688][T32648] EXT4-fs: Ignoring removed i_version option [ 949.207986][T32650] loop2: detected capacity change from 0 to 512 [ 949.213577][ T29] audit: type=1400 audit(1788425486.817:101125): avc: denied { write } for pid=32639 comm="syz.8.6153" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 949.237179][T32650] EXT4-fs: Ignoring removed i_version option [ 949.246835][T32648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.246959][T32648] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.283377][T32650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.283455][T32650] ext4 filesystem being mounted at /386/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.326364][T32657] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 949.326395][T32657] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 949.326440][T32657] vhci_hcd vhci_hcd.0: Device attached [ 949.345067][ T29] audit: type=1400 audit(1788425486.948:101126): avc: denied { write } for pid=32646 comm="syz.7.6155" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 949.386697][ T29] audit: type=1400 audit(1788425486.986:101127): avc: denied { write } for pid=32649 comm="syz.2.6156" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 949.390436][T32657] lo speed is unknown, defaulting to 1000 [ 949.401775][T32657] lo speed is unknown, defaulting to 1000 [ 949.497570][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.520743][T32663] loop7: detected capacity change from 0 to 512 [ 949.527771][T32663] EXT4-fs: Ignoring removed i_version option [ 949.548934][T32663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 949.549018][T32663] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 949.575930][ T3398] usb 7-1: new high-speed USB device number 8 using vhci_hcd [ 949.582468][T32658] vhci_hcd: connection reset by peer [ 949.583129][ T61] vhci_hcd vhci_hcd.3: stop threads [ 949.583192][ T61] vhci_hcd vhci_hcd.3: release socket [ 949.583267][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 949.594317][ T29] audit: type=1400 audit(1788425487.182:101128): avc: denied { write } for pid=32662 comm="syz.7.6158" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 949.966977][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.042118][T32671] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6160'. [ 950.097861][T32668] loop5: detected capacity change from 0 to 512 [ 950.100719][T32668] EXT4-fs (loop5): bad s_min_extra_isize: 65535 [ 950.131703][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.330011][ T29] audit: type=1400 audit(1788425487.865:101129): avc: denied { watch watch_reads } for pid=32676 comm="syz.5.6163" path="/380/file0" dev="tmpfs" ino=2064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 950.431219][T32685] loop8: detected capacity change from 0 to 164 [ 950.450793][T32687] loop5: detected capacity change from 0 to 512 [ 950.452332][T32674] FAULT_INJECTION: forcing a failure. [ 950.452332][T32674] name failslab, interval 1, probability 0, space 0, times 0 [ 950.452403][T32674] CPU: 1 UID: 0 PID: 32674 Comm: syz.2.6161 Not tainted syzkaller #0 PREEMPT(lazy) [ 950.452501][T32674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.452551][T32674] Call Trace: [ 950.452581][T32674] [ 950.452612][T32674] __dump_stack+0x1d/0x30 [ 950.452735][T32674] dump_stack_lvl+0x95/0xd0 [ 950.452816][T32674] dump_stack+0x15/0x1b [ 950.452891][T32674] should_fail_ex+0x262/0x280 [ 950.453032][T32674] ? __alloc_skb+0x2e0/0x6f0 [ 950.453116][T32674] should_failslab+0x8c/0xb0 [ 950.453218][T32674] kmem_cache_alloc_node_noprof+0x82/0x400 [ 950.453302][T32674] ? netlink_insert+0x684/0x900 [ 950.453385][T32674] ? __alloc_skb+0x2e0/0x6f0 [ 950.453475][T32674] __alloc_skb+0x2e0/0x6f0 [ 950.453558][T32674] ? __alloc_skb+0x209/0x6f0 [ 950.453691][T32674] netlink_alloc_large_skb+0xbf/0xf0 [ 950.453774][T32674] netlink_sendmsg+0x40c/0x6f0 [ 950.453891][T32674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.453992][T32674] ____sys_sendmsg+0x532/0x580 [ 950.454117][T32674] ___sys_sendmsg+0x195/0x1e0 [ 950.454261][T32674] __x64_sys_sendmsg+0xd4/0x160 [ 950.454549][T32674] x64_sys_call+0x22ab/0x2550 [ 950.454642][T32674] do_syscall_64+0x112/0x360 [ 950.454744][T32674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.454921][T32674] RIP: 0033:0x7fb0ba1ae159 [ 950.454974][T32674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.455117][T32674] RSP: 002b:00007fb0b8c07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.455183][T32674] RAX: ffffffffffffffda RBX: 00007fb0ba435fa0 RCX: 00007fb0ba1ae159 [ 950.455280][T32674] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000a [ 950.455381][T32674] RBP: 00007fb0b8c07090 R08: 0000000000000000 R09: 0000000000000000 [ 950.455418][T32674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.455461][T32674] R13: 00007fb0ba436038 R14: 00007fb0ba435fa0 R15: 00007ffea1f87fe8 [ 950.455527][T32674] [ 950.471982][T32687] EXT4-fs: Ignoring removed i_version option [ 950.479729][ T3424] Bluetooth: hci0: Frame reassembly failed (-84) [ 950.508375][T32687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.508556][T32687] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.558865][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.578438][T32685] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6165'. [ 950.578457][T32685] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6165'. [ 950.660725][ T29] audit: type=1400 audit(1788425488.173:101130): avc: denied { write } for pid=32686 comm="syz.5.6167" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 950.802631][T32691] loop7: detected capacity change from 0 to 256 [ 950.821726][T32691] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6168'. [ 950.882644][T32696] rock: directory entry would overflow storage [ 950.882725][T32696] rock: sig=0x5245, size=8, remaining=5 [ 951.081005][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.257497][T32705] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6172'. [ 951.306028][T32708] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 951.306061][T32708] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 951.306174][T32708] vhci_hcd vhci_hcd.0: Device attached [ 951.340134][T32708] lo speed is unknown, defaulting to 1000 [ 951.346383][T32708] lo speed is unknown, defaulting to 1000 [ 951.414573][T32709] vhci_hcd: connection closed [ 951.415113][T21215] vhci_hcd vhci_hcd.7: stop threads [ 951.415137][T21215] vhci_hcd vhci_hcd.7: release socket [ 951.415162][T21215] vhci_hcd vhci_hcd.7: disconnect device [ 951.489529][T13683] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 951.949994][T32720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6178'. [ 951.962621][T32720] Cannot find set identified by id 0 to match [ 951.985165][ T29] audit: type=1400 audit(1788425489.418:101131): avc: denied { read } for pid=32721 comm="syz.7.6179" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 951.985239][ T29] audit: type=1400 audit(1788425489.418:101132): avc: denied { open } for pid=32721 comm="syz.7.6179" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 952.149421][T32729] EXT4-fs: Ignoring removed i_version option [ 952.167956][T32729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.168039][T32729] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.512118][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 952.641314][T32748] set_capacity_and_notify: 3 callbacks suppressed [ 952.641357][T32748] loop5: detected capacity change from 0 to 764 [ 952.651828][T32748] rock: directory entry would overflow storage [ 952.651859][T32748] rock: sig=0x5245, size=8, remaining=5 [ 952.669417][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 952.844230][T32760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6190'. [ 952.914322][T32765] Cannot find set identified by id 0 to match [ 952.950381][T32766] Cannot find set identified by id 0 to match [ 953.143701][ T300] loop3: detected capacity change from 0 to 164 [ 953.235009][ T302] loop8: detected capacity change from 0 to 2048 [ 953.275031][ T305] loop3: detected capacity change from 0 to 512 [ 953.278020][ T305] EXT4-fs: Ignoring removed i_version option [ 953.291690][ T302] loop8: p2 p3 p7 [ 953.313240][ T305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.313388][ T305] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.337084][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 953.337123][ T29] audit: type=1400 audit(1788425490.662:101135): avc: denied { write } for pid=301 comm="syz.8.6195" name="loop8p2" dev="devtmpfs" ino=4618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 953.389925][ T6679] udevd[6679]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 953.391340][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 953.396865][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 953.422686][ T29] audit: type=1400 audit(1788425490.755:101136): avc: denied { write } for pid=304 comm="syz.3.6196" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 953.703632][ T5680] Bluetooth: hci0: Frame reassembly failed (-84) [ 953.833010][ T314] loop2: detected capacity change from 0 to 164 [ 954.008195][ T314] __nla_validate_parse: 2 callbacks suppressed [ 954.008391][ T314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6199'. [ 954.008734][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6199'. [ 954.135858][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.282493][ T332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=332 comm=syz.5.6205 [ 954.292964][ T332] loop5: detected capacity change from 0 to 164 [ 954.333971][ T330] loop3: detected capacity change from 0 to 256 [ 954.386420][ T330] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6204'. [ 954.515562][ T334] loop5: detected capacity change from 0 to 164 [ 954.593382][ T29] audit: type=1400 audit(1788425491.859:101137): avc: denied { read } for pid=337 comm="syz.5.6207" name="trace_pipe_raw" dev="tracefs" ino=2205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 954.638382][ T340] FAULT_INJECTION: forcing a failure. [ 954.638382][ T340] name failslab, interval 1, probability 0, space 0, times 0 [ 954.638485][ T340] CPU: 1 UID: 0 PID: 340 Comm: syz.3.6208 Not tainted syzkaller #0 PREEMPT(lazy) [ 954.638520][ T340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.638539][ T340] Call Trace: [ 954.638548][ T340] [ 954.638557][ T340] __dump_stack+0x1d/0x30 [ 954.638592][ T340] dump_stack_lvl+0x95/0xd0 [ 954.638624][ T340] dump_stack+0x15/0x1b [ 954.638671][ T340] should_fail_ex+0x262/0x280 [ 954.638693][ T340] ? __alloc_skb+0x2e0/0x6f0 [ 954.638725][ T340] should_failslab+0x8c/0xb0 [ 954.638773][ T340] kmem_cache_alloc_node_noprof+0x82/0x400 [ 954.638814][ T340] ? __alloc_skb+0x2e0/0x6f0 [ 954.638853][ T340] __alloc_skb+0x2e0/0x6f0 [ 954.638882][ T340] ? __alloc_skb+0x209/0x6f0 [ 954.639006][ T340] netlink_alloc_large_skb+0xbf/0xf0 [ 954.639038][ T340] netlink_sendmsg+0x40c/0x6f0 [ 954.639075][ T340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.639144][ T340] ____sys_sendmsg+0x532/0x580 [ 954.639184][ T340] ___sys_sendmsg+0x195/0x1e0 [ 954.639253][ T340] ? fdget+0xd1/0x110 [ 954.639280][ T340] __x64_sys_sendmsg+0xd4/0x160 [ 954.639354][ T340] x64_sys_call+0x22ab/0x2550 [ 954.639410][ T340] do_syscall_64+0x112/0x360 [ 954.639479][ T340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.639511][ T340] RIP: 0033:0x7f001845e159 [ 954.639533][ T340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.639561][ T340] RSP: 002b:00007f0016eb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.639654][ T340] RAX: ffffffffffffffda RBX: 00007f00186e5fa0 RCX: 00007f001845e159 [ 954.639670][ T340] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 954.639684][ T340] RBP: 00007f0016eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 954.639700][ T340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.639713][ T340] R13: 00007f00186e6038 R14: 00007f00186e5fa0 R15: 00007ffcd06b1538 [ 954.639780][ T340] [ 954.861041][ T342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6209'. [ 954.889609][ T342] Cannot find set identified by id 0 to match [ 954.928186][ T345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6210'. [ 954.962304][ T347] loop3: detected capacity change from 0 to 512 [ 954.962625][ T347] EXT4-fs: Ignoring removed i_version option [ 955.001214][ T347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.001255][ T349] loop5: detected capacity change from 0 to 512 [ 955.001303][ T347] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.031427][ T349] EXT4-fs: Ignoring removed i_version option [ 955.040930][ T349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.041014][ T349] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.047290][ T29] audit: type=1400 audit(1788425492.280:101138): avc: denied { write } for pid=346 comm="syz.3.6211" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 955.053795][ T3398] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 955.095020][ T29] audit: type=1400 audit(1788425492.327:101139): avc: denied { write } for pid=348 comm="syz.5.6212" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 955.143110][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.191678][ T357] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 955.191708][ T357] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 955.191794][ T357] vhci_hcd vhci_hcd.0: Device attached [ 955.215812][ T357] lo speed is unknown, defaulting to 1000 [ 955.216533][ T357] lo speed is unknown, defaulting to 1000 [ 955.297694][ T358] vhci_hcd: connection closed [ 955.297853][ T5650] vhci_hcd vhci_hcd.3: stop threads [ 955.297936][ T5650] vhci_hcd vhci_hcd.3: release socket [ 955.297964][ T5650] vhci_hcd vhci_hcd.3: disconnect device [ 955.904335][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.916875][T10076] Bluetooth: hci0: command 0x1003 tx timeout [ 955.949348][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 956.019191][ T365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=365 comm=syz.5.6216 [ 956.088981][ T371] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 956.166028][ T371] EXT4-fs (loop3): 1 truncate cleaned up [ 956.166827][ T371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 956.187591][ T371] selection: kmalloc() failed [ 956.625911][ T383] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6221'. [ 956.681062][ T386] EXT4-fs: Ignoring removed i_version option [ 956.708110][ T386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.708196][ T386] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.797502][ T29] audit: type=1400 audit(1788425493.889:101140): avc: denied { write } for pid=385 comm="syz.5.6222" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 956.819046][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.870912][ T390] can: request_module (can-proto-0) failed. [ 956.971384][ T396] EXT4-fs: Ignoring removed nobh option [ 956.991487][ T396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.991588][ T396] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.018236][ T29] audit: type=1400 audit(1788425494.132:101141): avc: denied { read } for pid=397 comm="syz.2.6226" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 957.018436][ T29] audit: type=1400 audit(1788425494.132:101142): avc: denied { read open } for pid=397 comm="syz.2.6226" path="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 957.073687][ T29] audit: type=1400 audit(1788425494.179:101143): avc: denied { connect } for pid=395 comm="syz.8.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 957.096304][ T29] audit: type=1400 audit(1788425494.197:101144): avc: denied { write } for pid=397 comm="syz.2.6226" name="/" dev="configfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 957.122269][ T396] netlink: 14 bytes leftover after parsing attributes in process `syz.8.6225'. [ 957.122347][ T396] openvswitch: netlink: Message has 6 unknown bytes. [ 957.133037][ T396] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 957.159194][ T396] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 957.195008][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.218002][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.280173][ T414] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 957.280208][ T414] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 957.280311][ T414] vhci_hcd vhci_hcd.0: Device attached [ 957.310879][ T410] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6228'. [ 957.310996][ T410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6228'. [ 957.340674][ T414] lo speed is unknown, defaulting to 1000 [ 957.342852][ T414] lo speed is unknown, defaulting to 1000 [ 957.423369][ T415] vhci_hcd: connection closed [ 957.425282][ T5680] vhci_hcd vhci_hcd.2: stop threads [ 957.425310][ T5680] vhci_hcd vhci_hcd.2: release socket [ 957.425373][ T5680] vhci_hcd vhci_hcd.2: disconnect device [ 957.447658][ T419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=419 comm=syz.8.6231 [ 957.488404][T22894] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 957.501823][ T421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6232'. [ 957.523530][ T421] Cannot find set identified by id 0 to match [ 957.751673][ T191] Bluetooth: hci0: Frame reassembly failed (-84) [ 957.793152][ T430] EXT4-fs: Ignoring removed i_version option [ 957.811822][ T430] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.811961][ T430] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.348991][ T444] set_capacity_and_notify: 10 callbacks suppressed [ 958.349020][ T444] loop2: detected capacity change from 0 to 512 [ 958.354496][ T442] FAULT_INJECTION: forcing a failure. [ 958.354496][ T442] name failslab, interval 1, probability 0, space 0, times 0 [ 958.354542][ T442] CPU: 1 UID: 0 PID: 442 Comm: syz.3.6248 Not tainted syzkaller #0 PREEMPT(lazy) [ 958.354628][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.354671][ T442] Call Trace: [ 958.354725][ T442] [ 958.354756][ T442] __dump_stack+0x1d/0x30 [ 958.354843][ T442] dump_stack_lvl+0x95/0xd0 [ 958.354931][ T442] dump_stack+0x15/0x1b [ 958.355005][ T442] should_fail_ex+0x262/0x280 [ 958.355078][ T442] ? __alloc_skb+0x2e0/0x6f0 [ 958.355233][ T442] should_failslab+0x8c/0xb0 [ 958.355446][ T442] kmem_cache_alloc_node_noprof+0x82/0x400 [ 958.355551][ T442] ? netlink_insert+0x684/0x900 [ 958.355634][ T442] ? __alloc_skb+0x2e0/0x6f0 [ 958.355731][ T442] __alloc_skb+0x2e0/0x6f0 [ 958.355811][ T442] ? __alloc_skb+0x209/0x6f0 [ 958.355845][ T442] netlink_alloc_large_skb+0xbf/0xf0 [ 958.355877][ T442] netlink_sendmsg+0x40c/0x6f0 [ 958.355914][ T442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.355999][ T442] ____sys_sendmsg+0x532/0x580 [ 958.356035][ T442] ___sys_sendmsg+0x195/0x1e0 [ 958.356088][ T442] __sys_sendmmsg+0x185/0x320 [ 958.356209][ T442] __x64_sys_sendmmsg+0x57/0x70 [ 958.356327][ T442] x64_sys_call+0x1fb4/0x2550 [ 958.356395][ T442] do_syscall_64+0x112/0x360 [ 958.356434][ T442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.356474][ T442] RIP: 0033:0x7f001845e159 [ 958.356522][ T442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.356541][ T442] RSP: 002b:00007f0016eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.356692][ T442] RAX: ffffffffffffffda RBX: 00007f00186e5fa0 RCX: 00007f001845e159 [ 958.356708][ T442] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 958.356738][ T442] RBP: 00007f0016eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 958.356791][ T442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.356885][ T442] R13: 00007f00186e6038 R14: 00007f00186e5fa0 R15: 00007ffcd06b1538 [ 958.356949][ T442] [ 958.474943][ T444] EXT4-fs: Ignoring removed i_version option [ 958.519509][ T444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.519718][ T444] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.703279][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.857012][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 958.857040][ T29] audit: type=1400 audit(1788425495.844:101155): avc: denied { setopt } for pid=450 comm="syz.3.6241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 958.942400][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.120742][ T457] loop2: detected capacity change from 0 to 164 [ 959.356644][ T462] loop3: detected capacity change from 0 to 512 [ 959.357768][ T462] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 959.444199][ T462] EXT4-fs (loop3): 1 truncate cleaned up [ 959.445013][ T462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.823689][ T468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=468 comm=syz.8.6244 [ 959.899008][ T470] __nla_validate_parse: 3 callbacks suppressed [ 959.899108][ T470] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6245'. [ 959.906289][ T468] loop8: detected capacity change from 0 to 164 [ 959.935104][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 960.057842][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.100163][ T476] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 960.100198][ T476] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 960.100267][ T476] vhci_hcd vhci_hcd.0: Device attached [ 960.113964][ T476] lo speed is unknown, defaulting to 1000 [ 960.114425][ T476] lo speed is unknown, defaulting to 1000 [ 960.140221][ T482] FAULT_INJECTION: forcing a failure. [ 960.140221][ T482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 960.140264][ T482] CPU: 0 UID: 0 PID: 482 Comm: syz.3.6250 Not tainted syzkaller #0 PREEMPT(lazy) [ 960.140353][ T482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 960.140372][ T482] Call Trace: [ 960.140384][ T482] [ 960.140395][ T482] __dump_stack+0x1d/0x30 [ 960.140449][ T482] dump_stack_lvl+0x95/0xd0 [ 960.140476][ T482] dump_stack+0x15/0x1b [ 960.140500][ T482] should_fail_ex+0x262/0x280 [ 960.140531][ T482] should_fail+0xb/0x20 [ 960.140556][ T482] should_fail_usercopy+0x1a/0x20 [ 960.140617][ T482] _copy_from_user+0x1c/0xb0 [ 960.140645][ T482] load_msg+0x172/0x2f0 [ 960.140703][ T482] do_msgsnd+0xe4/0xb50 [ 960.140746][ T482] ? mutex_lock+0x57/0x90 [ 960.140768][ T482] ? mutex_unlock+0x4e/0x90 [ 960.140810][ T482] ? fput+0x91/0xc0 [ 960.140838][ T482] __x64_sys_msgsnd+0xa8/0xc0 [ 960.140960][ T482] x64_sys_call+0x227f/0x2550 [ 960.140996][ T482] do_syscall_64+0x112/0x360 [ 960.141029][ T482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.141114][ T482] RIP: 0033:0x7f001845e159 [ 960.141130][ T482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.141150][ T482] RSP: 002b:00007f0016e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 960.141174][ T482] RAX: ffffffffffffffda RBX: 00007f00186e6090 RCX: 00007f001845e159 [ 960.141194][ T482] RDX: 0000000000000008 RSI: 0000200000000240 RDI: 0000000000000000 [ 960.141286][ T482] RBP: 00007f0016e96090 R08: 0000000000000000 R09: 0000000000000000 [ 960.141305][ T482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.141318][ T482] R13: 00007f00186e6128 R14: 00007f00186e6090 R15: 00007ffcd06b1538 [ 960.141338][ T482] [ 960.281983][ T479] vhci_hcd: connection closed [ 960.282278][T21215] vhci_hcd vhci_hcd.2: stop threads [ 960.282314][T21215] vhci_hcd vhci_hcd.2: release socket [ 960.282341][T21215] vhci_hcd vhci_hcd.2: disconnect device [ 960.291980][T22894] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 960.529221][T14555] lo speed is unknown, defaulting to 1000 [ 960.529252][T14555] syz2: Port: 1 Link ACTIVE [ 960.536973][ T5680] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.537119][ T5680] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.537244][ T5680] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.537351][ T5680] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 960.831586][ T485] loop5: detected capacity change from 0 to 512 [ 960.831951][ T485] EXT4-fs: Ignoring removed i_version option [ 960.850347][ T485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 960.850514][ T485] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.888884][ T29] audit: type=1400 audit(1788425497.752:101156): avc: denied { write } for pid=484 comm="syz.5.6251" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 961.041997][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.123185][ T491] loop8: detected capacity change from 0 to 512 [ 961.130157][ T491] EXT4-fs (loop8): bad s_min_extra_isize: 65535 [ 961.263791][ T509] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6258'. [ 961.279006][ T510] loop8: detected capacity change from 0 to 164 [ 961.358659][ T5650] Bluetooth: hci0: Frame reassembly failed (-84) [ 961.373186][ T510] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6257'. [ 961.373369][ T510] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6257'. [ 961.398885][ T515] loop7: detected capacity change from 0 to 164 [ 961.486101][ T515] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 961.533235][ T518] loop7: detected capacity change from 0 to 164 [ 961.567123][ T518] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 961.626692][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6262'. [ 961.665099][ T520] Cannot find set identified by id 0 to match [ 961.699766][ T522] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 961.699859][ T522] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 961.699926][ T522] vhci_hcd vhci_hcd.0: Device attached [ 961.725722][ T522] lo speed is unknown, defaulting to 1000 [ 961.726214][ T522] lo speed is unknown, defaulting to 1000 [ 961.803553][ T523] vhci_hcd: connection closed [ 961.803893][ T3424] vhci_hcd vhci_hcd.7: stop threads [ 961.803919][ T3424] vhci_hcd vhci_hcd.7: release socket [ 961.803971][ T3424] vhci_hcd vhci_hcd.7: disconnect device [ 962.021779][ T528] loop3: detected capacity change from 0 to 512 [ 962.030983][ T528] EXT4-fs: Ignoring removed i_version option [ 962.046043][ T528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.046204][ T528] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.075103][ T29] audit: type=1400 audit(1788425498.856:101157): avc: denied { write } for pid=527 comm="syz.3.6265" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 962.131253][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 962.163585][ T533] FAULT_INJECTION: forcing a failure. [ 962.163585][ T533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.163624][ T533] CPU: 1 UID: 0 PID: 533 Comm: syz.3.6266 Not tainted syzkaller #0 PREEMPT(lazy) [ 962.163678][ T533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.163696][ T533] Call Trace: [ 962.163706][ T533] [ 962.163717][ T533] __dump_stack+0x1d/0x30 [ 962.163751][ T533] dump_stack_lvl+0x95/0xd0 [ 962.163820][ T533] dump_stack+0x15/0x1b [ 962.163843][ T533] should_fail_ex+0x262/0x280 [ 962.163873][ T533] should_fail+0xb/0x20 [ 962.163898][ T533] should_fail_usercopy+0x1a/0x20 [ 962.164034][ T533] _copy_to_user+0x20/0xa0 [ 962.164061][ T533] simple_read_from_buffer+0xb5/0x130 [ 962.164126][ T533] proc_fail_nth_read+0x10e/0x150 [ 962.164175][ T533] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 962.164287][ T533] vfs_read+0x18e/0x7c0 [ 962.164324][ T533] ? __rcu_read_unlock+0x4e/0x70 [ 962.164492][ T533] ? __fget_files+0x184/0x1c0 [ 962.164546][ T533] ? mutex_lock+0x57/0x90 [ 962.164577][ T533] ksys_read+0xdc/0x1a0 [ 962.164606][ T533] __x64_sys_read+0x40/0x50 [ 962.164710][ T533] x64_sys_call+0x2135/0x2550 [ 962.164814][ T533] do_syscall_64+0x112/0x360 [ 962.164846][ T533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.164877][ T533] RIP: 0033:0x7f001841e98e [ 962.164904][ T533] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 962.164929][ T533] RSP: 002b:00007f0016eb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.164958][ T533] RAX: ffffffffffffffda RBX: 00007f0016eb76c0 RCX: 00007f001841e98e [ 962.164995][ T533] RDX: 000000000000000f RSI: 00007f0016eb70a0 RDI: 0000000000000007 [ 962.165010][ T533] RBP: 00007f0016eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 962.165023][ T533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.165036][ T533] R13: 00007f00186e6038 R14: 00007f00186e5fa0 R15: 00007ffcd06b1538 [ 962.165077][ T533] [ 962.421993][ T535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6267'. [ 962.494385][ T538] Cannot find set identified by id 0 to match [ 962.731079][ T537] EXT4-fs (loop7): bad s_min_extra_isize: 65535 [ 962.838921][ T541] EXT4-fs: Ignoring removed i_version option [ 962.839020][ T541] EXT4-fs: Ignoring removed mblk_io_submit option [ 962.861534][ T541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 962.876358][ T29] audit: type=1400 audit(1788425499.613:101158): avc: denied { write } for pid=540 comm="syz.7.6269" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 962.924058][ T29] audit: type=1400 audit(1788425499.651:101159): avc: denied { ioctl } for pid=540 comm="syz.7.6269" path="/423/file1/file1" dev="loop7" ino=15 ioctlcmd=0x4b61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 963.280118][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.527133][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 963.623101][ T561] EXT4-fs: Ignoring removed i_version option [ 963.640733][ T563] FAULT_INJECTION: forcing a failure. [ 963.640733][ T563] name failslab, interval 1, probability 0, space 0, times 0 [ 963.640777][ T563] CPU: 1 UID: 0 PID: 563 Comm: syz.8.6275 Not tainted syzkaller #0 PREEMPT(lazy) [ 963.640810][ T563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.640829][ T563] Call Trace: [ 963.640838][ T563] [ 963.640849][ T563] __dump_stack+0x1d/0x30 [ 963.640935][ T563] dump_stack_lvl+0x95/0xd0 [ 963.640959][ T563] dump_stack+0x15/0x1b [ 963.640982][ T563] should_fail_ex+0x262/0x280 [ 963.641016][ T563] ? sock_kmalloc+0x85/0xc0 [ 963.641060][ T563] should_failslab+0x8c/0xb0 [ 963.641100][ T563] __kmalloc_noprof+0xd0/0x4d0 [ 963.641215][ T563] ? sock_kmalloc+0x85/0xc0 [ 963.641262][ T563] sock_kmalloc+0x85/0xc0 [ 963.641338][ T563] ____sys_sendmsg+0xf0/0x580 [ 963.641444][ T563] ___sys_sendmsg+0x195/0x1e0 [ 963.641490][ T563] __sys_sendmmsg+0x185/0x320 [ 963.641587][ T563] __x64_sys_sendmmsg+0x57/0x70 [ 963.641629][ T563] x64_sys_call+0x1fb4/0x2550 [ 963.641725][ T563] do_syscall_64+0x112/0x360 [ 963.641805][ T563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.641837][ T563] RIP: 0033:0x7f09a48be159 [ 963.641860][ T563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.641885][ T563] RSP: 002b:00007f09a3317028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 963.641951][ T563] RAX: ffffffffffffffda RBX: 00007f09a4b45fa0 RCX: 00007f09a48be159 [ 963.641971][ T563] RDX: 0000000000000002 RSI: 0000200000002280 RDI: 0000000000000003 [ 963.641985][ T563] RBP: 00007f09a3317090 R08: 0000000000000000 R09: 0000000000000000 [ 963.642004][ T563] R10: 0000000004000045 R11: 0000000000000246 R12: 0000000000000001 [ 963.642023][ T563] R13: 00007f09a4b46038 R14: 00007f09a4b45fa0 R15: 00007ffd81792928 [ 963.642051][ T563] [ 963.682991][ T561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.683202][ T561] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.825155][ T29] audit: type=1400 audit(1788425500.493:101160): avc: denied { write } for pid=560 comm="syz.2.6276" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 963.957764][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.990434][ T29] audit: type=1400 audit(1788425500.652:101161): avc: denied { ioctl } for pid=571 comm="syz.8.6279" path="socket:[123809]" dev="sockfs" ino=123809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 964.042275][ T29] audit: type=1400 audit(1788425500.698:101162): avc: denied { bind } for pid=571 comm="syz.8.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 964.045721][ T29] audit: type=1326 audit(1788425500.698:101163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=577 comm="syz.2.6280" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ba1ae159 code=0x0 [ 964.048825][ T572] syz.8.6279 (572): /proc/571/oom_adj is deprecated, please use /proc/571/oom_score_adj instead. [ 964.050967][ T29] audit: type=1400 audit(1788425500.698:101164): avc: denied { write } for pid=571 comm="syz.8.6279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 964.102915][ T583] FAULT_INJECTION: forcing a failure. [ 964.102915][ T583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.103029][ T583] CPU: 0 UID: 0 PID: 583 Comm: syz.3.6281 Not tainted syzkaller #0 PREEMPT(lazy) [ 964.103114][ T583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 964.103156][ T583] Call Trace: [ 964.103183][ T583] [ 964.103206][ T583] __dump_stack+0x1d/0x30 [ 964.103295][ T583] dump_stack_lvl+0x95/0xd0 [ 964.103425][ T583] dump_stack+0x15/0x1b [ 964.103515][ T583] should_fail_ex+0x262/0x280 [ 964.103594][ T583] should_fail+0xb/0x20 [ 964.103738][ T583] should_fail_usercopy+0x1a/0x20 [ 964.103813][ T583] _copy_from_user+0x1c/0xb0 [ 964.103905][ T583] ____sys_sendmsg+0x1c1/0x580 [ 964.104035][ T583] ___sys_sendmsg+0x195/0x1e0 [ 964.104125][ T583] __sys_sendmmsg+0x185/0x320 [ 964.104328][ T583] __x64_sys_sendmmsg+0x57/0x70 [ 964.104445][ T583] x64_sys_call+0x1fb4/0x2550 [ 964.104534][ T583] do_syscall_64+0x112/0x360 [ 964.104696][ T583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.104770][ T583] RIP: 0033:0x7f001845e159 [ 964.104897][ T583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.104991][ T583] RSP: 002b:00007f0016eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 964.105064][ T583] RAX: ffffffffffffffda RBX: 00007f00186e5fa0 RCX: 00007f001845e159 [ 964.105109][ T583] RDX: 0000000000000001 RSI: 0000200000002280 RDI: 0000000000000003 [ 964.105159][ T583] RBP: 00007f0016eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 964.105222][ T583] R10: 0000000004000045 R11: 0000000000000246 R12: 0000000000000001 [ 964.105272][ T583] R13: 00007f00186e6038 R14: 00007f00186e5fa0 R15: 00007ffcd06b1538 [ 964.105332][ T583] [ 964.392344][ T586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6282'. [ 964.452533][ T590] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 964.452594][ T590] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 964.452638][ T590] vhci_hcd vhci_hcd.0: Device attached [ 964.484648][ T590] lo speed is unknown, defaulting to 1000 [ 964.485058][ T590] lo speed is unknown, defaulting to 1000 [ 964.570668][ T591] vhci_hcd: connection closed [ 964.571090][T21215] vhci_hcd vhci_hcd.3: stop threads [ 964.571115][T21215] vhci_hcd vhci_hcd.3: release socket [ 964.571133][T21215] vhci_hcd vhci_hcd.3: disconnect device [ 964.662546][ T596] set_capacity_and_notify: 3 callbacks suppressed [ 964.662794][ T596] loop8: detected capacity change from 0 to 164 [ 964.707834][ T596] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6285'. [ 964.717967][ T596] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6285'. [ 964.910905][ T4489] Bluetooth: hci0: Frame reassembly failed (-84) [ 965.322116][ T606] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 965.322147][ T606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 965.322298][ T606] vhci_hcd vhci_hcd.0: Device attached [ 965.356629][ T606] lo speed is unknown, defaulting to 1000 [ 965.362801][ T606] lo speed is unknown, defaulting to 1000 [ 965.374321][ T593] xt_NFQUEUE: number of total queues is 0 [ 965.441685][ T612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=612 comm=syz.5.6290 [ 965.467917][ T612] loop5: detected capacity change from 0 to 164 [ 965.569608][T23989] usb 5-1: new high-speed USB device number 14 using vhci_hcd [ 965.614583][ T607] vhci_hcd: connection reset by peer [ 965.623016][ T3424] vhci_hcd vhci_hcd.2: stop threads [ 965.623046][ T3424] vhci_hcd vhci_hcd.2: release socket [ 965.623072][ T3424] vhci_hcd vhci_hcd.2: disconnect device [ 965.656873][ T617] loop3: detected capacity change from 0 to 164 [ 965.701826][ T617] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 965.793396][ T618] loop7: detected capacity change from 0 to 512 [ 965.801429][ T618] EXT4-fs (loop7): bad s_min_extra_isize: 65535 [ 966.022906][ T623] loop3: detected capacity change from 0 to 512 [ 966.030093][ T623] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 966.123666][ T626] loop7: detected capacity change from 0 to 512 [ 966.184919][ T626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.187075][ T626] ext4 filesystem being mounted at /429/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.200319][ T626] Quota error (device loop7): do_check_range: Getting block 4128768 out of range 0-5 [ 966.229833][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.373472][ T638] xt_NFQUEUE: number of total queues is 0 [ 967.020636][ T652] loop7: detected capacity change from 0 to 512 [ 967.021012][ T652] EXT4-fs: Ignoring removed i_version option [ 967.046948][ T652] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 967.047034][ T652] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.072191][ T29] audit: type=1400 audit(1788425503.505:101165): avc: denied { write } for pid=651 comm="syz.7.6306" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 967.120937][T10076] Bluetooth: hci0: command 0x1003 tx timeout [ 967.120976][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 967.128491][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.219143][ T658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6307'. [ 967.288738][ T658] xt_NFQUEUE: number of total queues is 0 [ 967.312437][ T668] loop5: detected capacity change from 0 to 164 [ 967.352400][ T670] xt_NFQUEUE: number of total queues is 0 [ 967.386725][ T668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6311'. [ 967.386763][ T668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6311'. [ 967.460433][ T29] audit: type=1400 audit(1788425503.888:101166): avc: denied { create } for pid=673 comm="syz.7.6314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 967.485984][ T29] audit: type=1400 audit(1788425503.916:101167): avc: denied { ioctl } for pid=673 comm="syz.7.6314" path="socket:[124808]" dev="sockfs" ino=124808 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 967.531362][ T29] audit: type=1400 audit(1788425503.963:101168): avc: denied { connect } for pid=676 comm="syz.5.6315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 967.573699][ T679] loop7: detected capacity change from 0 to 164 [ 967.638932][ T679] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 967.750683][ T688] loop3: detected capacity change from 0 to 164 [ 967.801299][ T688] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 967.862535][ T29] audit: type=1400 audit(1788425504.262:101169): avc: denied { ioctl } for pid=680 comm="syz.5.6317" path="socket:[124856]" dev="sockfs" ino=124856 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 967.887329][ T3424] Bluetooth: hci0: Frame reassembly failed (-84) [ 967.905290][ T695] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=695 comm=syz.7.6320 [ 967.988773][ T699] EXT4-fs: Ignoring removed i_version option [ 968.023623][ T699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.023704][ T699] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.054529][ T29] audit: type=1400 audit(1788425504.449:101170): avc: denied { write } for pid=698 comm="syz.5.6322" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 968.368459][ T715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6326'. [ 968.369134][ T715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6326'. [ 968.867127][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.946156][ T719] FAULT_INJECTION: forcing a failure. [ 968.946156][ T719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.946701][ T719] CPU: 1 UID: 0 PID: 719 Comm: syz.5.6330 Not tainted syzkaller #0 PREEMPT(lazy) [ 968.946782][ T719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 968.946824][ T719] Call Trace: [ 968.946851][ T719] [ 968.946873][ T719] __dump_stack+0x1d/0x30 [ 968.947032][ T719] dump_stack_lvl+0x95/0xd0 [ 968.947123][ T719] dump_stack+0x15/0x1b [ 968.947202][ T719] should_fail_ex+0x262/0x280 [ 968.947271][ T719] should_fail+0xb/0x20 [ 968.947331][ T719] should_fail_usercopy+0x1a/0x20 [ 968.947479][ T719] _copy_from_user+0x1c/0xb0 [ 968.947559][ T719] do_ip6t_set_ctl+0x434/0x990 [ 968.947592][ T719] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 968.947620][ T719] nf_setsockopt+0x199/0x1b0 [ 968.947655][ T719] ipv6_setsockopt+0x11a/0x130 [ 968.947769][ T719] tcp_setsockopt+0x98/0xb0 [ 968.947842][ T719] sock_common_setsockopt+0x69/0x80 [ 968.947933][ T719] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 968.948016][ T719] __sys_setsockopt+0x184/0x200 [ 968.948135][ T719] __x64_sys_setsockopt+0x64/0x80 [ 968.948242][ T719] x64_sys_call+0x248f/0x2550 [ 968.948326][ T719] do_syscall_64+0x112/0x360 [ 968.948508][ T719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.948585][ T719] RIP: 0033:0x7f4f8743e159 [ 968.948644][ T719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.948709][ T719] RSP: 002b:00007f4f85e97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 968.948752][ T719] RAX: ffffffffffffffda RBX: 00007f4f876c5fa0 RCX: 00007f4f8743e159 [ 968.948812][ T719] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 968.948922][ T719] RBP: 00007f4f85e97090 R08: 00000000000005a8 R09: 0000000000000000 [ 968.948966][ T719] R10: 0000200000001840 R11: 0000000000000246 R12: 0000000000000001 [ 968.949019][ T719] R13: 00007f4f876c6038 R14: 00007f4f876c5fa0 R15: 00007ffe9d763448 [ 968.949102][ T719] [ 969.197584][ T722] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 969.354929][ T723] EXT4-fs (loop8): bad s_min_extra_isize: 65535 [ 969.574315][ T731] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6335'. [ 969.574945][ T731] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6335'. [ 969.694808][ T740] EXT4-fs: Ignoring removed i_version option [ 969.711331][ T740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.711469][ T740] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 969.719579][ T737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6338'. [ 969.719642][ T737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6338'. [ 969.791235][ T744] EXT4-fs: Ignoring removed i_version option [ 969.804181][ T744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 969.804265][ T744] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 969.817206][ T29] audit: type=1400 audit(1788425506.086:101171): avc: denied { write } for pid=743 comm="syz.5.6340" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 969.850502][ T29] audit: type=1400 audit(1788425506.114:101172): avc: denied { write } for pid=739 comm="syz.8.6339" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 970.027040][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 970.027049][T10076] Bluetooth: hci0: command 0x1003 tx timeout [ 970.106791][ T754] set_capacity_and_notify: 9 callbacks suppressed [ 970.106818][ T754] loop7: detected capacity change from 0 to 512 [ 970.122025][ T754] EXT4-fs: Ignoring removed i_version option [ 970.262281][ T755] loop2: detected capacity change from 0 to 164 [ 970.277180][ T751] loop3: detected capacity change from 0 to 512 [ 970.282027][ T751] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 970.294586][ T754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.294670][ T754] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 970.358892][ T29] audit: type=1400 audit(1788425506.610:101173): avc: denied { write } for pid=752 comm="syz.7.6342" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 970.387860][ T755] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 970.695590][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.729945][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.801892][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.901212][ T773] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 970.901238][ T773] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 970.901289][ T773] vhci_hcd vhci_hcd.0: Device attached [ 970.936232][ T773] lo speed is unknown, defaulting to 1000 [ 970.936654][ T773] lo speed is unknown, defaulting to 1000 [ 971.040265][ T771] loop8: detected capacity change from 0 to 512 [ 971.042117][ T771] EXT4-fs (loop8): bad s_min_extra_isize: 65535 [ 971.081303][ T774] vhci_hcd: connection reset by peer [ 971.102877][ T3424] vhci_hcd vhci_hcd.2: stop threads [ 971.158840][ T3424] vhci_hcd vhci_hcd.2: release socket [ 971.158882][ T3424] vhci_hcd vhci_hcd.2: disconnect device [ 971.226092][T23989] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 971.228514][ T782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=782 comm=syz.5.6352 [ 971.245867][ T782] loop5: detected capacity change from 0 to 164 [ 971.248274][ T3424] Bluetooth: hci0: Frame reassembly failed (-84) [ 971.267961][ T780] loop7: detected capacity change from 0 to 164 [ 971.298328][ T780] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6348'. [ 971.425252][ T790] loop3: detected capacity change from 0 to 164 [ 971.439498][ T790] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 971.470136][ T792] loop3: detected capacity change from 0 to 512 [ 971.472000][ T792] EXT4-fs: Ignoring removed i_version option [ 971.484652][ T792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 971.484730][ T792] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 971.820537][ T801] loop2: detected capacity change from 0 to 164 [ 971.840606][ T801] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 972.369682][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.569650][ T811] loop3: detected capacity change from 0 to 164 [ 972.586635][ T811] __nla_validate_parse: 1 callbacks suppressed [ 972.586675][ T811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6361'. [ 972.586748][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6361'. [ 972.630770][ T813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6362'. [ 972.646674][ T813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.712710][ T815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6362'. [ 972.712767][ T815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6362'. [ 972.798138][ T821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6365'. [ 972.820079][ T821] xt_NFQUEUE: number of total queues is 0 [ 973.448006][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 973.574948][ T827] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 973.842027][ T844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6374'. [ 973.873113][ T844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 973.930041][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6374'. [ 973.930167][ T844] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6374'. [ 973.957641][ T847] xt_NFQUEUE: number of total queues is 0 [ 974.031303][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 974.207955][ T849] EXT4-fs (loop5): bad s_min_extra_isize: 65535 [ 974.211385][ T853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6378'. [ 974.212744][ T841] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 974.280653][ T856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=856 comm=syz.8.6379 [ 976.076483][ T861] set_capacity_and_notify: 5 callbacks suppressed [ 976.076625][ T861] loop3: detected capacity change from 0 to 164 [ 976.095761][ T861] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 976.184833][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 976.293034][ T872] loop5: detected capacity change from 0 to 512 [ 976.299709][ T872] EXT4-fs: Ignoring removed i_version option [ 976.427463][ T872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.427560][ T872] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.483893][ T883] loop8: detected capacity change from 0 to 512 [ 976.485330][ T883] EXT4-fs: Ignoring removed i_version option [ 976.522548][ T883] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.522654][ T883] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.547534][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 976.547553][ T29] audit: type=1400 audit(1788425512.391:101175): avc: denied { write } for pid=882 comm="syz.8.6389" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 976.597683][ T29] audit: type=1400 audit(1788425512.438:101176): avc: denied { write } for pid=870 comm="syz.5.6386" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 976.599982][ T892] loop2: detected capacity change from 0 to 512 [ 976.604231][ T892] EXT4-fs: Ignoring removed i_version option [ 976.620602][ T890] loop7: detected capacity change from 0 to 164 [ 976.650371][ T892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.650470][ T892] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.780461][ T29] audit: type=1400 audit(1788425512.606:101177): avc: denied { write } for pid=891 comm="syz.2.6392" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 976.888823][ T4489] Bluetooth: hci0: Frame reassembly failed (-84) [ 976.949195][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.052946][ T904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=904 comm=syz.3.6395 [ 977.103749][ T904] loop3: detected capacity change from 0 to 164 [ 977.178580][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.377631][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.410928][ T911] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 977.411023][ T911] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 977.411103][ T911] vhci_hcd vhci_hcd.0: Device attached [ 977.449782][ T911] lo speed is unknown, defaulting to 1000 [ 977.450739][ T911] lo speed is unknown, defaulting to 1000 [ 977.504786][ T913] loop8: detected capacity change from 0 to 164 [ 977.573144][ T914] vhci_hcd: connection closed [ 977.573544][ T38] vhci_hcd vhci_hcd.5: stop threads [ 977.573575][ T38] vhci_hcd vhci_hcd.5: release socket [ 977.573605][ T38] vhci_hcd vhci_hcd.5: disconnect device [ 977.596880][T23989] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 978.388567][ T925] loop5: detected capacity change from 0 to 512 [ 978.394626][ T925] EXT4-fs (loop5): bad s_min_extra_isize: 65535 [ 978.524952][ T930] siw: device registration error -23 [ 978.549443][ T932] loop5: detected capacity change from 0 to 512 [ 978.550239][ T932] EXT4-fs: Ignoring removed i_version option [ 978.572062][ T932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.572219][ T932] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 978.584429][ T29] audit: type=1400 audit(1788425514.290:101178): avc: denied { write } for pid=931 comm="syz.5.6406" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 978.645229][T24974] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.092657][T10076] Bluetooth: hci0: command 0x1003 tx timeout [ 979.092662][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 979.162601][ T5680] Bluetooth: hci0: Frame reassembly failed (-84) [ 979.174597][ T942] loop3: detected capacity change from 0 to 512 [ 979.183414][ T942] EXT4-fs: Ignoring removed i_version option [ 979.196476][ T944] __nla_validate_parse: 7 callbacks suppressed [ 979.196570][ T944] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6410'. [ 979.196592][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6410'. [ 979.258341][ T942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 979.258438][ T942] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 979.315073][ T29] audit: type=1400 audit(1788425514.973:101179): avc: denied { write } for pid=940 comm="syz.3.6409" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 979.448230][ T941] EXT4-fs (loop7): bad s_min_extra_isize: 65535 [ 979.543960][ T950] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 979.544001][ T950] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 979.544147][ T950] vhci_hcd vhci_hcd.0: Device attached [ 979.567394][ T950] lo speed is unknown, defaulting to 1000 [ 979.568221][ T950] lo speed is unknown, defaulting to 1000 [ 979.649935][ T951] vhci_hcd: connection closed [ 979.650239][ T4489] vhci_hcd vhci_hcd.7: stop threads [ 979.650275][ T4489] vhci_hcd vhci_hcd.7: release socket [ 979.650296][ T4489] vhci_hcd vhci_hcd.7: disconnect device [ 980.069269][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.139298][ T956] EXT4-fs: Ignoring removed i_version option [ 980.152938][ T956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 980.153078][ T956] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 980.165665][ T29] audit: type=1400 audit(1788425515.768:101180): avc: denied { write } for pid=955 comm="syz.3.6413" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 980.555173][ T965] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6415'. [ 981.040964][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.092599][ T967] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 981.121099][ T969] EXT4-fs: Ignoring removed i_version option [ 981.136508][ T969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 981.136632][ T969] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 981.171792][ T29] audit: type=1400 audit(1788425516.722:101181): avc: denied { write } for pid=968 comm="syz.3.6417" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 981.316661][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 981.441873][ T975] set_capacity_and_notify: 5 callbacks suppressed [ 981.441950][ T975] loop2: detected capacity change from 0 to 164 [ 981.715041][ T993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6426'. [ 981.868751][ T996] xt_NFQUEUE: number of total queues is 0 [ 981.875232][ T984] loop7: detected capacity change from 0 to 512 [ 981.879013][ T984] EXT4-fs (loop7): bad s_min_extra_isize: 65535 [ 982.071464][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.133030][ T1002] loop8: detected capacity change from 0 to 512 [ 982.133396][ T1002] EXT4-fs: Ignoring removed i_version option [ 982.164138][ T1002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.164261][ T1002] ext4 filesystem being mounted at /392/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.177155][ T1007] loop7: detected capacity change from 0 to 512 [ 982.177634][ T1007] EXT4-fs: Ignoring removed i_version option [ 982.217426][ T29] audit: type=1400 audit(1788425517.695:101182): avc: denied { write } for pid=1001 comm="syz.8.6430" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 982.240475][ T1007] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.240572][ T1007] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 982.310626][ T29] audit: type=1400 audit(1788425517.779:101183): avc: denied { write } for pid=1004 comm="syz.7.6431" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 982.431964][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 982.450292][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.620649][ T1018] loop5: detected capacity change from 0 to 164 [ 983.034685][ T1028] loop7: detected capacity change from 0 to 512 [ 983.041593][ T1028] EXT4-fs (loop7): bad s_min_extra_isize: 65535 [ 983.051918][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.072643][ T1031] loop2: detected capacity change from 0 to 512 [ 983.079752][ T1031] EXT4-fs: Ignoring removed i_version option [ 983.152448][ T1031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.152545][ T1031] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.180260][ T1035] loop8: detected capacity change from 0 to 164 [ 983.185699][ T1035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6439'. [ 983.185753][ T1035] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6439'. [ 983.236189][ T1037] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6441'. [ 983.280116][ T1037] xt_NFQUEUE: number of total queues is 0 [ 983.315474][ T29] audit: type=1400 audit(1788425518.658:101184): avc: denied { write } for pid=1030 comm="syz.2.6440" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 983.412689][ T1042] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 983.412719][ T1042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 983.412827][ T1042] vhci_hcd vhci_hcd.0: Device attached [ 983.441310][ T1039] loop8: detected capacity change from 0 to 512 [ 983.444127][ T1039] EXT4-fs (loop8): bad s_min_extra_isize: 65535 [ 983.461555][ T1042] lo speed is unknown, defaulting to 1000 [ 983.468739][ T1042] lo speed is unknown, defaulting to 1000 [ 983.580319][ T1051] loop8: detected capacity change from 0 to 512 [ 983.580600][ T1051] EXT4-fs: Ignoring removed i_version option [ 983.599304][ T1051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.599448][ T1051] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.631470][ T1045] vhci_hcd: connection closed [ 983.631908][ T38] vhci_hcd vhci_hcd.7: stop threads [ 983.631936][ T38] vhci_hcd vhci_hcd.7: release socket [ 983.632046][ T38] vhci_hcd vhci_hcd.7: disconnect device [ 983.666095][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.689722][ T3398] usb 15-1: new high-speed USB device number 12 using vhci_hcd [ 983.689771][ T3398] usb 15-1: enqueue for inactive port 0 [ 983.689802][ T3398] usb 15-1: enqueue for inactive port 0 [ 983.689827][ T3398] usb 15-1: enqueue for inactive port 0 [ 983.702614][ T1055] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 983.740998][ T1057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6447'. [ 983.741022][ T1057] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6447'. [ 983.775260][ T3398] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 983.801258][ T1061] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 983.801349][ T1061] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 983.801409][ T1061] vhci_hcd vhci_hcd.0: Device attached [ 983.824513][ T1061] lo speed is unknown, defaulting to 1000 [ 983.825305][ T1061] lo speed is unknown, defaulting to 1000 [ 983.905950][ T1062] vhci_hcd: connection closed [ 983.906322][ T5680] vhci_hcd vhci_hcd.8: stop threads [ 983.906359][ T5680] vhci_hcd vhci_hcd.8: release socket [ 983.906394][ T5680] vhci_hcd vhci_hcd.8: disconnect device [ 983.974606][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.998391][ T1065] EXT4-fs: Ignoring removed i_version option [ 984.012618][ T1065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.012767][ T1065] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.652329][ T9243] Bluetooth: hci0: command 0x1003 tx timeout [ 984.659195][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 984.708386][ T1075] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6451'. [ 984.960781][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.075548][ T1077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6453'. [ 985.086379][ T1077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6453'. [ 985.233993][ T1085] EXT4-fs: Ignoring removed i_version option [ 985.251796][ T1087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6458'. [ 985.251824][ T1087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6458'. [ 985.275714][ T1085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.275792][ T1085] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.318007][ T29] audit: type=1400 audit(1788425520.604:101185): avc: denied { write } for pid=1084 comm="syz.2.6457" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 985.586783][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.605997][ T4489] Bluetooth: hci0: Frame reassembly failed (-84) [ 985.922642][ T1115] EXT4-fs: Ignoring removed i_version option [ 985.940522][ T1115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.940588][ T1115] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 985.993127][ T1120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6470'. [ 985.993158][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6470'. [ 986.050871][T27540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.340149][ T1130] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 986.632307][ T1143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6480'. [ 986.717776][ T1139] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 986.735067][ T1144] xt_NFQUEUE: number of total queues is 0 [ 986.942017][ T1146] siw: device registration error -23 [ 986.960736][ T1148] set_capacity_and_notify: 11 callbacks suppressed [ 986.960772][ T1148] loop2: detected capacity change from 0 to 512 [ 986.965969][ T1148] EXT4-fs: Ignoring removed i_version option [ 986.984415][ T1148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 986.984524][ T1148] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.031991][ T29] audit: type=1400 audit(1788425522.203:101186): avc: denied { write } for pid=1147 comm="syz.2.6482" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 987.100703][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.816256][ T9243] Bluetooth: hci0: command 0x1003 tx timeout [ 987.816268][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 987.875518][ T1175] loop8: detected capacity change from 0 to 512 [ 987.878624][ T1176] siw: device registration error -23 [ 987.888292][ T1175] EXT4-fs: Ignoring removed i_version option [ 987.906307][ T1175] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 987.906404][ T1175] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 987.925310][ T29] audit: type=1400 audit(1788425523.036:101187): avc: denied { write } for pid=1172 comm="syz.8.6494" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 987.977554][T24417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.049385][ T1186] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 988.049469][ T1186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 988.049520][ T1186] vhci_hcd vhci_hcd.0: Device attached [ 988.076006][ T1186] lo speed is unknown, defaulting to 1000 [ 988.076571][ T1186] lo speed is unknown, defaulting to 1000 [ 988.209879][ T1193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6500'. [ 988.209905][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6500'. [ 988.249766][ T29] audit: type=1400 audit(1788425523.335:101188): avc: denied { read } for pid=24892 comm="syz-executor" name="loop2" dev="devtmpfs" ino=5093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 988.249847][ T29] audit: type=1400 audit(1788425523.335:101189): avc: denied { open } for pid=24892 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=5093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 988.250645][ T29] audit: type=1400 audit(1788425523.335:101190): avc: denied { ioctl } for pid=24892 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=5093 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 988.297832][T13683] usb 17-1: new high-speed USB device number 10 using vhci_hcd [ 988.405997][ T1199] loop2: detected capacity change from 0 to 164 [ 988.511930][ T1187] vhci_hcd: connection reset by peer [ 988.514032][ T3424] vhci_hcd vhci_hcd.8: stop threads [ 988.514085][ T3424] vhci_hcd vhci_hcd.8: release socket [ 988.514157][ T3424] vhci_hcd vhci_hcd.8: disconnect device [ 988.522087][ T3424] Bluetooth: hci0: Frame reassembly failed (-84) [ 988.552850][ T1199] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 988.565971][ T1204] loop5: detected capacity change from 0 to 164 [ 988.918960][ T1208] loop7: detected capacity change from 0 to 512 [ 988.919890][ T1208] EXT4-fs: Ignoring removed i_version option [ 988.935563][ T1208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.935658][ T1208] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 988.966433][ T29] audit: type=1400 audit(1788425524.009:101191): avc: denied { write } for pid=1207 comm="syz.7.6506" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 988.998620][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.620515][ T1235] xt_NFQUEUE: number of total queues is 0 [ 989.926478][ T1241] siw: device registration error -23 [ 990.371732][ T1248] loop8: detected capacity change from 0 to 512 [ 990.391393][ T1248] EXT4-fs (loop8): bad s_min_extra_isize: 65535 [ 990.412942][ T1246] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 990.412975][ T1246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 990.413023][ T1246] vhci_hcd vhci_hcd.0: Device attached [ 990.516667][ T1246] lo speed is unknown, defaulting to 1000 [ 990.517167][ T1246] lo speed is unknown, defaulting to 1000 [ 990.600326][ T1250] vhci_hcd: connection closed [ 990.600548][ T5680] vhci_hcd vhci_hcd.2: stop threads [ 990.600582][ T5680] vhci_hcd vhci_hcd.2: release socket [ 990.600610][ T5680] vhci_hcd vhci_hcd.2: disconnect device [ 990.665200][ T3398] usb 5-1: new high-speed USB device number 15 using vhci_hcd [ 990.665250][ T3398] usb 5-1: enqueue for inactive port 0 [ 990.665279][ T3398] usb 5-1: enqueue for inactive port 0 [ 990.665301][ T3398] usb 5-1: enqueue for inactive port 0 [ 990.728525][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 990.734845][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 991.065696][ T1271] siw: device registration error -23 [ 991.195451][ T1261] loop5: detected capacity change from 0 to 512 [ 991.213691][ T1261] EXT4-fs (loop5): bad s_min_extra_isize: 65535 [ 992.106272][ T1315] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 992.106350][ T1315] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.106398][ T1315] vhci_hcd vhci_hcd.0: Device attached [ 992.147568][ T1324] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 992.147601][ T1324] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.147647][ T1324] vhci_hcd vhci_hcd.0: Device attached [ 992.167167][ T1315] lo speed is unknown, defaulting to 1000 [ 992.175860][ T1315] lo speed is unknown, defaulting to 1000 [ 992.187775][ T1324] lo speed is unknown, defaulting to 1000 [ 992.240230][ T1324] lo speed is unknown, defaulting to 1000 [ 992.303757][ T1322] vhci_hcd: connection closed [ 992.303995][ T38] vhci_hcd vhci_hcd.3: stop threads [ 992.304032][ T38] vhci_hcd vhci_hcd.3: release socket [ 992.304061][ T38] vhci_hcd vhci_hcd.3: disconnect device [ 992.359734][ T37] usb 7-1: new high-speed USB device number 9 using vhci_hcd [ 992.359773][ T37] usb 7-1: enqueue for inactive port 0 [ 992.359832][ T37] usb 7-1: enqueue for inactive port 0 [ 992.359855][ T37] usb 7-1: enqueue for inactive port 0 [ 992.393312][ T1325] vhci_hcd: connection closed [ 992.393579][ T38] vhci_hcd vhci_hcd.5: stop threads [ 992.393609][ T38] vhci_hcd vhci_hcd.5: release socket [ 992.393690][ T38] vhci_hcd vhci_hcd.5: disconnect device [ 992.436024][ T37] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 992.445249][ T3398] usb 11-1: new high-speed USB device number 13 using vhci_hcd [ 992.445291][ T3398] usb 11-1: enqueue for inactive port 0 [ 992.445318][ T3398] usb 11-1: enqueue for inactive port 0 [ 992.445343][ T3398] usb 11-1: enqueue for inactive port 0 [ 992.532235][ T3398] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 993.655743][ T1356] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 993.655770][ T1356] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 993.655859][ T1356] vhci_hcd vhci_hcd.0: Device attached [ 993.689247][ T1356] lo speed is unknown, defaulting to 1000 [ 993.689526][ T1356] lo speed is unknown, defaulting to 1000 [ 993.714747][ T1361] __nla_validate_parse: 3 callbacks suppressed [ 993.714786][ T1361] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6559'. [ 993.792274][T13683] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 993.857148][ T1364] xt_NFQUEUE: number of total queues is 0 [ 993.867193][ T1357] vhci_hcd: connection closed [ 993.867518][ T5650] vhci_hcd vhci_hcd.2: stop threads [ 993.867547][ T5650] vhci_hcd vhci_hcd.2: release socket [ 993.867579][ T5650] vhci_hcd vhci_hcd.2: disconnect device [ 993.922492][ T37] usb 5-1: new high-speed USB device number 16 using vhci_hcd [ 993.922553][ T37] usb 5-1: enqueue for inactive port 0 [ 993.922585][ T37] usb 5-1: enqueue for inactive port 0 [ 993.922609][ T37] usb 5-1: enqueue for inactive port 0 [ 994.018247][ T37] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 994.317454][T10076] Bluetooth: hci0: command 0x1003 tx timeout [ 994.318339][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 995.085006][ T1384] loop8: detected capacity change from 0 to 512 [ 995.093818][ T1384] EXT4-fs (loop8): bad s_min_extra_isize: 65535 [ 995.357732][ T1397] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 995.357765][ T1397] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 995.357822][ T1397] vhci_hcd vhci_hcd.0: Device attached [ 995.413639][ T1397] lo speed is unknown, defaulting to 1000 [ 995.418614][ T1397] lo speed is unknown, defaulting to 1000 [ 995.576806][ T5680] Bluetooth: hci0: Frame reassembly failed (-84) [ 995.673772][ T1398] vhci_hcd: connection closed [ 995.675513][ T5650] vhci_hcd vhci_hcd.3: stop threads [ 995.675543][ T5650] vhci_hcd vhci_hcd.3: release socket [ 995.675683][ T5650] vhci_hcd vhci_hcd.3: disconnect device [ 995.696332][ T37] usb 7-1: new high-speed USB device number 10 using vhci_hcd [ 995.696444][ T37] usb 7-1: enqueue for inactive port 0 [ 995.696506][ T37] usb 7-1: enqueue for inactive port 0 [ 995.696561][ T37] usb 7-1: enqueue for inactive port 0 [ 995.771510][ T37] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 997.227449][ T1424] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 997.227591][ T1424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 997.227635][ T1424] vhci_hcd vhci_hcd.0: Device attached [ 997.257883][ T1424] lo speed is unknown, defaulting to 1000 [ 997.258309][ T1424] lo speed is unknown, defaulting to 1000 [ 997.365306][ T1425] vhci_hcd: connection closed [ 997.367029][ T38] vhci_hcd vhci_hcd.2: stop threads [ 997.367107][ T38] vhci_hcd vhci_hcd.2: release socket [ 997.367135][ T38] vhci_hcd vhci_hcd.2: disconnect device [ 997.417834][ T37] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 997.607778][ T1434] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 997.607813][ T1434] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 997.607857][ T1434] vhci_hcd vhci_hcd.0: Device attached [ 997.641737][ T1434] lo speed is unknown, defaulting to 1000 [ 997.642066][ T1434] lo speed is unknown, defaulting to 1000 [ 997.737176][T10076] Bluetooth: hci0: command 0x1003 tx timeout [ 997.740956][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 997.764429][ T1435] vhci_hcd: connection closed [ 997.766096][ T38] vhci_hcd vhci_hcd.5: stop threads [ 997.766163][ T38] vhci_hcd vhci_hcd.5: release socket [ 997.766194][ T38] vhci_hcd vhci_hcd.5: disconnect device [ 997.823994][ T3398] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 998.876378][ T5650] Bluetooth: hci0: Frame reassembly failed (-84) [ 999.389630][ T1476] siw: device registration error -23 [ 999.536200][ T1483] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 999.536234][ T1483] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 999.536280][ T1483] vhci_hcd vhci_hcd.0: Device attached [ 999.585180][ T1483] lo speed is unknown, defaulting to 1000 [ 999.585604][ T1483] lo speed is unknown, defaulting to 1000 [ 999.843578][ T3398] usb 7-1: new high-speed USB device number 11 using vhci_hcd [ 999.861443][ T1484] vhci_hcd: connection reset by peer [ 999.867619][ T61] vhci_hcd vhci_hcd.3: stop threads [ 999.867643][ T61] vhci_hcd vhci_hcd.3: release socket [ 999.867708][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 1000.101285][ T1490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6609'. [ 1000.101627][ T1490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6609'. [ 1000.372237][ T1494] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6611'. [ 1000.372366][ T1494] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6611'. [ 1000.456657][ T1500] xt_NFQUEUE: number of total queues is 0 [ 1000.888525][ T1515] loop2: detected capacity change from 0 to 164 [ 1000.894892][ T1515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6620'. [ 1000.894914][ T1515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6620'. [ 1001.072553][ T9243] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1001.191703][ T1523] loop2: detected capacity change from 0 to 512 [ 1001.197974][ T1523] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 1001.354212][ T1537] loop2: detected capacity change from 0 to 164 [ 1001.445961][ T1537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1001.446454][ T1537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1001.542009][ T1539] loop2: detected capacity change from 0 to 512 [ 1001.550654][ T1539] EXT4-fs: Ignoring removed i_version option [ 1001.568118][ T1539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.568196][ T1539] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1001.627284][ T29] audit: type=1400 audit(1788425535.851:101192): avc: denied { write } for pid=1538 comm="syz.2.6628" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1002.168561][ T1558] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6631'. [ 1002.178445][ T1558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6631'. [ 1002.444824][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.366593][ T5650] Bluetooth: hci0: Frame reassembly failed (-84) [ 1003.430629][ T1571] loop5: detected capacity change from 0 to 164 [ 1004.982015][ T1573] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1004.982047][ T1573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1004.982191][ T1573] vhci_hcd vhci_hcd.0: Device attached [ 1005.006031][ T1573] lo speed is unknown, defaulting to 1000 [ 1005.011973][ T1573] lo speed is unknown, defaulting to 1000 [ 1005.086263][ T1574] vhci_hcd: connection closed [ 1005.086505][ T61] vhci_hcd vhci_hcd.7: stop threads [ 1005.086587][ T61] vhci_hcd vhci_hcd.7: release socket [ 1005.086609][ T61] vhci_hcd vhci_hcd.7: disconnect device [ 1005.338118][ T3398] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1005.519860][ T9243] Bluetooth: hci0: command 0x1003 tx timeout [ 1005.519901][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1005.817418][ T1589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6643'. [ 1005.904474][ T1590] xt_NFQUEUE: number of total queues is 0 [ 1006.996542][ T1597] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6646'. [ 1006.996703][ T1597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6646'. [ 1007.291040][ T5680] Bluetooth: hci0: Frame reassembly failed (-84) [ 1007.525688][ T1611] loop2: detected capacity change from 0 to 164 [ 1007.547708][ T1611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1007.551742][ T1611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6652'. [ 1007.635150][ T1613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1613 comm=syz.8.6653 [ 1007.695779][ T1615] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1007.695815][ T1615] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1007.695869][ T1615] vhci_hcd vhci_hcd.0: Device attached [ 1007.720455][ T1615] lo speed is unknown, defaulting to 1000 [ 1007.720800][ T1615] lo speed is unknown, defaulting to 1000 [ 1007.827126][ T1616] vhci_hcd: connection closed [ 1007.827548][ T61] vhci_hcd vhci_hcd.3: stop threads [ 1007.827573][ T61] vhci_hcd vhci_hcd.3: release socket [ 1007.827597][ T61] vhci_hcd vhci_hcd.3: disconnect device [ 1007.903867][ T1044] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1009.454420][T10076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1009.502449][ T1630] loop2: detected capacity change from 0 to 512 [ 1009.504302][ T1630] EXT4-fs: Ignoring removed i_version option [ 1009.527695][ T1630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1009.527788][ T1630] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.545089][ T29] audit: type=1400 audit(1788425543.250:101193): avc: denied { write } for pid=1628 comm="syz.2.6658" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1009.759205][ T1640] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 1009.759241][ T1640] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1009.759288][ T1640] vhci_hcd vhci_hcd.0: Device attached [ 1009.811321][ T1640] lo speed is unknown, defaulting to 1000 [ 1009.813741][ T1640] lo speed is unknown, defaulting to 1000 [ 1010.013265][T23989] usb 17-1: new high-speed USB device number 11 using vhci_hcd [ 1010.200552][ T1641] vhci_hcd: connection reset by peer [ 1010.201948][ T5680] vhci_hcd vhci_hcd.8: stop threads [ 1010.202018][ T5680] vhci_hcd vhci_hcd.8: release socket [ 1010.202083][ T5680] vhci_hcd vhci_hcd.8: disconnect device [ 1010.403553][T24892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.837895][ T1666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6671'. [ 1010.860990][ T1666] xt_NFQUEUE: number of total queues is 0 [ 1010.912058][ T1672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6674'. [ 1010.997489][ T1675] xt_NFQUEUE: number of total queues is 0 [ 1011.219548][ T1680] loop7: detected capacity change from 0 to 512 [ 1011.231070][ T1680] EXT4-fs: Ignoring removed i_version option [ 1011.265691][ T1680] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1011.265771][ T1680] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.319082][ T29] audit: type=1400 audit(1788425544.915:101194): avc: denied { write } for pid=1679 comm="syz.7.6676" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1011.826253][ T1688] siw: device registration error -23 [ 1011.856680][ T1692] siw: device registration error -23 [ 1011.906371][ T1697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6682'. [ 1011.919861][ T1697] xt_NFQUEUE: number of total queues is 0 [ 1011.993188][ T1699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6683'. [ 1011.993221][ T1699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6683'. [ 1012.120335][T24414] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1012.490114][ T1712] siw: device registration error -23 [ 1012.530941][ T1714] siw: device registration error -23 [ 1012.574991][ T1716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6691'. [ 1012.659972][ T1717] xt_NFQUEUE: number of total queues is 0 [ 1013.139561][ T1719] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1013.139638][ T1719] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1013.139686][ T1719] vhci_hcd vhci_hcd.0: Device attached [ 1013.188130][ T1719] lo speed is unknown, defaulting to 1000 [ 1013.188575][ T1719] lo speed is unknown, defaulting to 1000 [ 1013.389689][ T3398] usb 5-1: new high-speed USB device number 18 using vhci_hcd [ 1013.429003][ T1720] vhci_hcd: connection reset by peer [ 1013.436000][ T38] vhci_hcd vhci_hcd.2: stop threads [ 1013.436025][ T38] vhci_hcd vhci_hcd.2: release socket [ 1013.436074][ T38] vhci_hcd vhci_hcd.2: disconnect device [ 1013.495999][ T1725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6694'. [ 1013.510838][ T1725] xt_NFQUEUE: number of total queues is 0 [ 1014.366270][ T1745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1745 comm=syz.2.6703 [ 1014.472342][ T1747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6704'. [ 1014.510572][ T1749] siw: device registration error -23 [ 1014.596786][ T1753] xt_NFQUEUE: number of total queues is 0 [ 1014.701219][ T1755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6716'. [ 1014.701376][ T1755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6716'. [ 1014.725683][ T1757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6706'. [ 1014.756116][ T1758] xt_NFQUEUE: number of total queues is 0 [ 1014.781828][ T1759] xt_NFQUEUE: number of total queues is 0 [ 1015.507655][ T1772] loop7: detected capacity change from 0 to 164 [ 1015.571712][T23989] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1016.258743][ T1791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6719'. [ 1016.363579][ T1792] xt_NFQUEUE: number of total queues is 0 [ 1016.680905][ T1791] ================================================================== [ 1016.680952][ T1791] BUG: KCSAN: data-race in ktime_get_mono_fast_ns / update_fast_timekeeper [ 1016.681008][ T1791] [ 1016.681015][ T1791] write to 0xffffffff86f4fcc8 of 56 bytes by interrupt on cpu 1: [ 1016.681039][ T1791] update_fast_timekeeper+0x38/0x70 [ 1016.681080][ T1791] timekeeping_update_from_shadow+0x3c0/0x480 [ 1016.681120][ T1791] __timekeeping_advance+0xb36/0xcf0 [ 1016.681156][ T1791] update_wall_time+0x21/0x50 [ 1016.681192][ T1791] tick_do_update_jiffies64+0x169/0x1c0 [ 1016.681227][ T1791] tick_nohz_handler+0x88/0x380 [ 1016.681262][ T1791] __hrtimer_run_queues+0x1f8/0x510 [ 1016.681290][ T1791] hrtimer_interrupt+0x27b/0x860 [ 1016.681317][ T1791] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1016.681353][ T1791] sysvec_apic_timer_interrupt+0x6f/0x80 [ 1016.681383][ T1791] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1016.681411][ T1791] ____sys_recvmsg+0x229/0x280 [ 1016.681461][ T1791] ___sys_recvmsg+0x11f/0x3a0 [ 1016.681504][ T1791] do_recvmmsg+0x1e5/0x560 [ 1016.681546][ T1791] __x64_sys_recvmmsg+0xe5/0x170 [ 1016.681590][ T1791] x64_sys_call+0x77f/0x2550 [ 1016.681621][ T1791] do_syscall_64+0x112/0x360 [ 1016.681658][ T1791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.681687][ T1791] [ 1016.681695][ T1791] read to 0xffffffff86f4fce8 of 8 bytes by task 1791 on cpu 0: [ 1016.681718][ T1791] ktime_get_mono_fast_ns+0xdf/0x1a0 [ 1016.681752][ T1791] ktime_get_boot_fast_ns+0xf/0x40 [ 1016.681786][ T1791] bpf_ktime_get_boot_ns+0xe/0x20 [ 1016.681815][ T1791] bpf_prog_a2f5654eba260afc+0x23/0x29 [ 1016.681834][ T1791] bpf_test_run+0x29b/0x620 [ 1016.681867][ T1791] bpf_prog_test_run_skb+0xe67/0x11b0 [ 1016.681900][ T1791] bpf_prog_test_run+0x208/0x340 [ 1016.681935][ T1791] __sys_bpf+0x8da/0xc30 [ 1016.681964][ T1791] __x64_sys_bpf+0x69/0x80 [ 1016.681990][ T1791] x64_sys_call+0xf26/0x2550 [ 1016.682023][ T1791] do_syscall_64+0x112/0x360 [ 1016.682058][ T1791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.682087][ T1791] [ 1016.682094][ T1791] value changed: 0x0037606e274a0082 -> 0x0037ef2936cff5fb [ 1016.682111][ T1791] [ 1016.682117][ T1791] Reported by Kernel Concurrency Sanitizer on: [ 1016.682133][ T1791] CPU: 0 UID: 0 PID: 1791 Comm: syz.5.6719 Not tainted syzkaller #0 PREEMPT(lazy) [ 1016.682167][ T1791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1016.682185][ T1791] ================================================================== [ 1017.347280][ T1796] FAULT_INJECTION: forcing a failure. [ 1017.347280][ T1796] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.347329][ T1796] CPU: 0 UID: 0 PID: 1796 Comm: syz.8.6720 Not tainted syzkaller #0 PREEMPT(lazy) [ 1017.347431][ T1796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1017.347445][ T1796] Call Trace: [ 1017.347452][ T1796] [ 1017.347460][ T1796] __dump_stack+0x1d/0x30 [ 1017.347495][ T1796] dump_stack_lvl+0x95/0xd0 [ 1017.347521][ T1796] dump_stack+0x15/0x1b [ 1017.347551][ T1796] should_fail_ex+0x262/0x280 [ 1017.347576][ T1796] ? __alloc_skb+0x2e0/0x6f0 [ 1017.347616][ T1796] should_failslab+0x8c/0xb0 [ 1017.347649][ T1796] kmem_cache_alloc_node_noprof+0x82/0x400 [ 1017.347812][ T1796] ? netlink_insert+0x684/0x900 [ 1017.347845][ T1796] ? __alloc_skb+0x2e0/0x6f0 [ 1017.347881][ T1796] __alloc_skb+0x2e0/0x6f0 [ 1017.347914][ T1796] ? __alloc_skb+0x209/0x6f0 [ 1017.347975][ T1796] netlink_alloc_large_skb+0xbf/0xf0 [ 1017.348007][ T1796] netlink_sendmsg+0x40c/0x6f0 [ 1017.348108][ T1796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1017.348135][ T1796] ____sys_sendmsg+0x532/0x580 [ 1017.348173][ T1796] ___sys_sendmsg+0x195/0x1e0 [ 1017.348293][ T1796] __x64_sys_sendmsg+0xd4/0x160 [ 1017.348394][ T1796] x64_sys_call+0x22ab/0x2550 [ 1017.348564][ T1796] do_syscall_64+0x112/0x360 [ 1017.348596][ T1796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.348627][ T1796] RIP: 0033:0x7f09a48be159 [ 1017.348647][ T1796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.348666][ T1796] RSP: 002b:00007f09a32d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.348747][ T1796] RAX: ffffffffffffffda RBX: 00007f09a4b46180 RCX: 00007f09a48be159 [ 1017.348767][ T1796] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1017.348782][ T1796] RBP: 00007f09a32d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.348802][ T1796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.348882][ T1796] R13: 00007f09a4b46218 R14: 00007f09a4b46180 R15: 00007ffd81792928 [ 1017.348903][ T1796] [ 1018.861861][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set