last executing test programs: 8m51.995518709s ago: executing program 32 (id=2947): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000200)=0x182c, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xd, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x409, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x23) fcntl$notify(r3, 0x402, 0x8000001c) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xc0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000580)=0xc) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f00000005c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x44, r8, 0x1, 0x0, 0xffffffff, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0xa0}, @ldst={0x3, 0x0, 0x4, 0x7, 0x7, 0xffffffffffffffc0, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x8, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x2, 0xa, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000400)=[r2, r2, r2, r2], &(0x7f0000000440)=[{0x2, 0x4, 0x8, 0x6}, {0x2, 0x1, 0x9, 0x8}], 0x10, 0x4}, 0x94) r9 = syz_open_procfs(r4, &(0x7f0000000180)='net/ip6_mr_vif\x00') ioctl$EVIOCGBITSW(r9, 0x80404525, 0x0) ioctl$SIOCGETSGCNT(r9, 0x89e1, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}) 8m44.356752004s ago: executing program 33 (id=2910): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x106200, 0x10003, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r2, &(0x7f00000001c0)=0x7, 0x7) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) 7m5.7108662s ago: executing program 34 (id=3571): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000580)={0x0, 0x10, 0x1, [0x5, 0x3, 0x4, 0x7ff, 0xa2], [0x8000000000000001, 0x998, 0xba58, 0xdf2, 0x5bd3, 0xcdb, 0x1, 0x3, 0x7, 0x0, 0x8, 0x2, 0x7, 0x7, 0x6, 0x7, 0x338d800000, 0x35, 0x8, 0x7fffffffffffffff, 0xce71, 0xab6, 0x10000, 0x100, 0x292c, 0x9, 0x2, 0x2, 0x3, 0x7fff, 0x80000000, 0x1, 0x9, 0xffffffff00000000, 0x99e2, 0x6, 0x2, 0x3, 0xcb4, 0xfffffffffffffff4, 0x2, 0x8000, 0xd1b4, 0x5, 0x0, 0x5, 0x6, 0x5, 0x3, 0x0, 0x7, 0x9, 0x8000000000000000, 0x5, 0x0, 0xd56, 0x4, 0xf, 0x0, 0x9, 0x1, 0x0, 0x2, 0x0, 0x5, 0x101, 0x100000000, 0x1, 0x1, 0x1, 0x2bf1, 0x3, 0x5, 0x98, 0x2, 0x77, 0x7f, 0x7fff, 0x4, 0x7f, 0x7, 0x9, 0x1, 0x7, 0x101, 0x629, 0x401, 0x9, 0xce5, 0x88, 0xfffffffffffffffa, 0x7cd56c8, 0x2, 0x54d, 0x7, 0x3, 0x6, 0x3, 0x80, 0x3, 0xff, 0x3, 0x7, 0x8, 0x3, 0x0, 0x7, 0x8, 0x1, 0x7ff, 0xed, 0x5, 0x4a2, 0x6, 0x2, 0x9, 0x5, 0xb, 0x7, 0x0, 0x7]}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000040)={{r3}, {@val={r4}, @max}}) getpgid(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) 6m46.386417861s ago: executing program 35 (id=3712): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m21.344349028s ago: executing program 36 (id=3901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x28, "4eba653be23b1231f3c5b921dda5f4029cf9866f4de99314a9c97d255edda7d62847e1cac3413285"}, &(0x7f0000000180)=0x30) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) 5m57.725814415s ago: executing program 7 (id=4049): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48) r0 = socket$rds(0x15, 0x5, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) 5m57.598500241s ago: executing program 7 (id=4051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async, rerun: 32) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000040)='./file1\x00', 0x1024001, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x1, 0x81c, &(0x7f0000001540)="$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") (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001000000050010008000000005001b00df020000080007000200000008003a"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) 5m57.564913546s ago: executing program 7 (id=4053): unshare(0x2c020400) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shmdt(0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c000004008c8014000180060006408807000008003900", @ANYRESHEX, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$kcm(0xa, 0x2, 0x88) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) pread64(r3, &(0x7f0000002500)=""/233, 0xe9, 0x7ffffffeffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) unshare(0x22020400) unshare(0x60400) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000000400000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5m56.098686168s ago: executing program 7 (id=4059): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad0000"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0xffcb, 0x1000002, 0x37, 0x0, 0x0) 5m55.245842062s ago: executing program 7 (id=4066): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) close(r2) (async) close(r2) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (async) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xc1b0}) (async) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x2, 0xc1b0}) fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x8, 0x3}) recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x60000}], 0x1, 0x0, 0x0) 5m54.946366487s ago: executing program 7 (id=4068): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x7}, 0x6a2b, 0x4005, 0xb, 0x3, 0x6, 0x1, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pidfd_getfd(r2, r0, 0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) (async) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 5m39.657010945s ago: executing program 37 (id=4068): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x7}, 0x6a2b, 0x4005, 0xb, 0x3, 0x6, 0x1, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x2}, [@NHA_ID={0x8}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pidfd_getfd(r2, r0, 0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) (async) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}]}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) 5m7.602577692s ago: executing program 8 (id=4369): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad0000"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0xffcb, 0x1000002, 0x37, 0x0, 0x0) 5m6.026324854s ago: executing program 8 (id=4378): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x17}]}, {0x0, [0x0, 0x0, 0x61, 0x2e, 0x2e]}}, &(0x7f0000005bc0)=""/239, 0x2b, 0xef, 0x9, 0xfff}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x10000, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffbffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) flistxattr(r2, &(0x7f0000003440)=""/24, 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, 0xfffffffffffffffd, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, 0x0, 0x10) write$9p(r3, &(0x7f0000000100)="d5c0e9", 0x3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000003480)=@v1={0x0, @aes256, 0x4, @desc1}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r0, 0x0, 0x0, 0x8, 0x7f) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) sendmmsg$sock(r1, &(0x7f0000003040)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x7fff}, 0x80, &(0x7f0000000000)=[{&(0x7f0000003200)="c71f01fa8596adf17a4c8193fe908dde6cfdf7ed87cfb469698a364729ce6c935056b44838bda11c299b92e69c84ab3dd6126ca16233c7b11fb446f3ada0c1df2714760bdb4c36d14d71fd848977c8e293bdb2055b6540587e5a1e04e2aad49117919108e290e0c2990cd6ba697bfb19e76909fb4bd41c001f5ca2c6c66ed279822f0c7c5eeeae4575a7da70408cf58d0f376da8c4391b8f06f4210bbd5aea3323a533d8c8f1676c921ca7f0f110ee8e488ccf1a42c9a13f1360f8bf2555733c46e490cb233c", 0xc6}], 0x1, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x563a2d2f}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xf0}}, {{&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000003c0)="6c14a439f4542c2bc1a7774bd444142f378461536c1b010c4fc6686f17e1c8e27d65cc2459428fed76a8770af1548b1780fa0359a8b5d3951caa998a1938a424c917f900e3d85af2241cdc233a667573db6e5dbfb5e3ad799ce6a7bf269d965f9ad325ccad1c34d0f141c131d879d663f04080e7e333f01a47", 0x79}, {&(0x7f0000000440)="8cf2044cb6eea1b2deb01a68f652a5b1fc7f8e315c7645e091f8386674ad358a3a5bd9507c6aa23408431f3b35c9da2d634f5f95b33d589f2f16202ef273c1b3ecb6a000a3f8dfc8fba346ab94c3a0e8d7357a7d97d8fe55dae285e4fbc5814c9ea9d1249219ebc7c53a7dc2ebc1d391b34ab3bd952c06b5fce2ecaeb581178aa2cc33f03431abef6458b2ed3fa5cb43f9c83502c18e9f6b1802930cf482bdbeadfbd832acc568ad59bb5897a0eac30f62ae1534e8543323ba98c8a683b31bf713", 0xc1}, {&(0x7f0000000540)="8f0eccb2d725cbdbb79d5a7a7ec6c2b4c4d8dc87b8d49b5d5486499c7eb7c4d7b4a0ec580b71008e57a70a416ec54ef81e527993343a6b9e2ea0242e73bb7a6b48787a52a5b5ecd783609be808d3fb6d37976354555a513aa1f999d7f9cf1f4333271ff4f81f016b45d36d6ca0b38e8b5d3e645c2c07672a493167a778fef8997747b963d7407592191ee50bd17241ae9e7c995ee78d062ddc4e0237e8bcd7e5b0430a7f9dcaf1acbe65e7d96f303b7f99a9e4e658cf5a308193d455a93e262db317609e6850ff589f9e23abdd82edb86556d19f0f2c57a6a890b62138826c9c8c0ea6e6293bf130c9f2fd38e7de2d41adfbd4f3a5d5146e9d", 0xf9}, {&(0x7f0000000740)="13630a64323650dda0d70fd555e871332864d072a71b0e148e50e0ffc4281aca49ee3f2fc96812d1dce5005d05ccd21ee192e6fc5b15f359730d7d4f55c016212336a7cb5eeb76d2d6c328e246a5aa1683fed3fb654cd12308784b09811deab420adf8c4843097462cb04d75567e1cd33d6e43fab190e7d4d7a6999d52ec9394093613295e830b117861d8586b0b6240214f61e9daf82e9d97c85bbcd374df71fed6bff89d3f2e770e01f6fc8082ffffb676ed345bf5239c77d530655af3ef22354880b7e93bddec2a780b8ffa5bc138a409d4d96b0bb690b588", 0xda}, {&(0x7f0000000840)="605210627d8391b1441fcd4255d8eb6949788e57b2ff03748b6380c8ae1fecf64b3f9be1b802bf5b98c39a2d2298ff30712b2924c7219f9039ec4cbf8d85c4576d7214005c5504a4520b736d413d1fa58f6c14927ef001be69d32bd46ff1f5dfc38b7f19bac592c1c4c24c15cba41d3a19cf78d0386a901f910e316b9e6aab95629dbdf940f8620a32fea948d35403a6db98687be361bd9d61b8501bc70da1fca01b9b8a0246f79a9ee9f245d835f1455d2d0159572f317bd8173f4ce40006f99039d5fb9cbaa961554bd4", 0xcb}, {&(0x7f0000000a00)="de1c6f5ce745f943f78f009383d2603c98f51959f8ced5ba205b7ae91cbb79417539c86090d6c3d4def64d970af491a354c1610339369da24b21256f8ed02a1a9710b06c2383a42c210d4aa2075a4883b53a6b80614a2e97b0467e0a004ab95bde52de24aecc1d389b69407f1c6987521a9204c6d5674bf5d4b6f1d7549cbfe525637a185097ed14ba5a76f11aa0c4e7e6b05bb1a496fe1b7c0f644ffd66c69f", 0xa0}], 0x6, &(0x7f0000000b40)=[@mark={{0x14, 0x1, 0x24, 0xe69}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000bc0)="bf940796c622c9b39f7e18478dfa28d3182bc1a5e156ba122a25b03394351b25126ecebefc2e71fea20c8ef85dffc2288ab15c7e503801238e1cf1abed0374c646aca4a6bcd4ce9720f53278534d9f8c21fc07247d943ebec8272747bf3420d6921612ed976612d06cb1434fc1c354169461cd", 0x73}, {&(0x7f0000000c40)="eaed3262025f0f6cccea0e6023a1248897867c4450c306572be6ee0cf0226af9429cca613bc2b10950450437396b37d83862f3a56a1a82d67b1fb5d2410059f74dd521d6472ca99574174d76543c6ade3b2560e06d818cdd1bb1b085b58b7acd1a7ec6ff7a43347079b0502f29ea085696028f0873e517ac86b395062779dd2a6006570b522fe58abb2a6ab3e3d918aafe7a2dd5b4bc2e3c8d3fca2c061c962277ce58f2898cb4ce384878a898d5386047bcd193f9db0803271105d5f94ed8b6f304c066cfdb0e", 0xc7}, {&(0x7f0000000d40)="62a380d54f89a29243202b22168b6e205ca94961a0fdcd30a153f4dcc127a1a233fd946f9f60f6fb5b2ae077628741c2d23231ad7799ad096a0a9b359499f9455cf18fceb6c1f61c680b7942acf36cd3e49e99f89dc14341e7d18f24168af709035d68d868633d392bcbf5bf951245e83a1e90323a0c9259be6d8f87d6fb17f0597d32d2d71dcb2bcc6f6e51213b38c9d9ae798d7207808746864ffb51b6f8b3c161f1d90e1ffa3c8b11a2819e7df32eeabcb08a3536ee46490e137430d1076405732bd546fb62fc6f988a6e996dddd6bd6f79b841649fd3301ead0859ee21b3", 0xe0}, {&(0x7f0000000e40)="56b383373228cfe3a42d78b61ef8d45a3c6c377cc3cb35e3f642cea3e3f9e2d16bac1fb26692561e37fe3863e598139764b229253f59b38fda2b91ff2eb4643f0f8369b16c", 0x45}, {&(0x7f0000000ec0)="82d6e9fbbacef4a276c6597320200c5e75ad7eac5430a1f12edbe9984f16f903f83557c283f6b870e006b8e5853859b6664520bab37f884556cd6b5863371a4ae272b51719060a81e56da62205615312b5f4b5e8d7ff4d0b27994cdcff0a01bc504b2a12ab5226da9c99c10afe8dcecf7ebeed254629fc509e150a8dfdcb974956527c9de6bfb1845cd250bbc59ec7d3548aefc2f7662427e763", 0x9a}, {&(0x7f0000000f80)="ebb328954aabf1bc36477484cc93d084d3b7c434030e852a4c11ace3977d8900b39d9f39e6759fd23958d0c024ce01fd31a2131814a728064e22be629302390ccc3f1afaa3c88238e9215caf960d250a71e58603c2b963ce987cecaf0fb0a353150e70bd16b8d0ca5bbb80d531fb380a5f38474f510e32736366cadbd70d1544b41ae76678d58fb12a29f0c9e4cfed59b5e6d41121d9372527778ebf69a94a28a5647cccf1b440175cc8eae5549a9cf9b62bf60b0a13584a169a7a204663a17d3041ca743c3677bb0a31fa83c146564709a53751ea44706e9de1f5905e90dd7209", 0xe1}, {&(0x7f0000001080)="722ac00ae5c3f5ee5f584b75cf5abc60e14a86a0442789ecc00f8ae79093876866cfd8fd16f65662f4f6c6574f7b3bff90629c4b3a69194ba297be9df34109e66f3cd85ed9c69e1feb1704d0860399f1efde2861332b31dfdf1f0a8d0ed324b19508d513c2ffadf3998148821adfb34bccaa2c87ac15f7a2aaf909", 0x7b}, {&(0x7f0000001100)="531f719f8f203e12352d13af83d471c217caac376c7310a0113358692d60d943dc75c8072d2b48bda2361253d1e17a971129351bb88994fc959ce8973580afd31dd34a85bfd038bedc40e98fe9a4db343ea75ef1e2f47b9bd76e4f05074bb451aecdf505ce263fb911417ab984c2898eb778f2e98aa75cfc5fd66c5a956d410d9e6ca8acc867270dc2fc48431516ccbf6d569b2cde40922a1ac25ab8bc828f193d2e16f8638dabc60df692e215eb3aa3487b1d4ea7d74a211ef0afd1f5d1580ccb8629a30eee721505b20dac964c6bc3bfc7d49583025a2a65b4297915d067d05aec6e8dc5e713b787042f9be5a854e227aea158003b37eae7106132", 0xfc}], 0x8, &(0x7f0000001280)=[@txtime={{0x18, 0x1, 0x3d, 0xfffffffeffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0x8b1}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x99}}], 0xa8}}, {{&(0x7f0000001340)=@nfc={0x27, r7, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000013c0)="e43e8e7664febfecf7b0d34d4aa6f7ca63d0c076400f384133c9549b1e11df1952149af92f0552b83f009472291902e800fca840bb3fa40b74e4a3e53ad15fe53d1f8a116afcbc5384f81db5c795f09dc2d5880dd74657de72455309cf76d0731677dca14deec10a471056874774f7f86c17ab027fba8074afb7d2c0d21da59d3a05b3870b5cc6b88d5386357e44d97c8992b906401ebec0f02e2e564b68c0f60c277a46bbb898b8", 0xa8}, {&(0x7f0000001480)="34cc3ca7161490a170706899efe18fd5941915c2a6e0ce63ae945f0a2304ac1e0b1f162278d3733927f5cd0f2fe68b6d0386c5", 0x33}], 0x2, &(0x7f0000001500)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x69}}, @timestamping={{0x14, 0x1, 0x25, 0x99}}], 0xa8}}, {{&(0x7f00000015c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x80, &(0x7f0000002840)=[{&(0x7f0000001640)="a558446527e92b24a6e2174e2f3b3db82b7966d16966349db6c8b3d4ea240ec222577a0930d2894e64a73cd30fc946c20a282828dc47e816f34eaeb9ee617562615422f017bbe05a946544bc360fc1bbe7bf73f6de1eb2b73b434c9e1ecc56451df09bb94904e912eb9bf2dda53e504e0fc773dc224261de2044d8001ff27fc66b6dc69117c2211da5cdef8e2a8ba90aa372b258867e4b3b29382ad81e7aefc31d42108ae3407b3787e730dad0220f141347f6ffeb56aa7ab7ce509368402c0c385596ef0ae8d75fc34180977e4f8a4ec2834c21b067501a711db97f33075b13c78f40068759ae612a5b0b66e70437e3359746e6a7a9c8da4a60ddec386bb3e28ab3d23e56c5bf13280052fabc5a0024ddf632d040a6302d87fc59ec4129824550356c0af84a4d7d909ea9e538137219500c005e47bf48ee4c23933384e316916801f28cf89dbe28252b8fe28342fc9474406d7504b1b40f5fe71e83bcca81ead5e9a774f3875f6ef6e04ec083c1b191177dd5d8d9d415530ea7ee77d5c2f418e3ff6436b2ab50382578224a4573fb4f3d3be1dc09f3646f0c66d7379f8113f17e9a6b1e6f3181caf5aaadda8ff13bc2e1c2df4a8f96c786944da0be2e57578e58ecc38091a55ceb99758e40c196977775f94ba316852e93185cfac746b183568b699961b252d8c1820b0c9b0f089b7428893520d4ea0742c1347e1013061056fa58101a59e1d1bea8598fc477a56e3aa7583eb0d1889e1902f27bd3078a745fb2dbbdc15d0cd1b87019f0347646adc3e6a023e4a820b465dbbd758b68784e1a427a57bc2b3a4daa2875c136bee2c9fe46c1c7470f817757ba988b3a6b4a01a2ecb9a5955f30d65bf177354ebffa83ad633bbb10da28241636aab438e59184d4e9918606aa62227afa4a7afe401b85fe400c28417e9ac14386d43210abbbd65ca3602cf898e94df8d550220e46603cfab0f291493d21e9bc0d4148cba6e63758b27c7b294e79a9b221862b45fc7fa56755ccc9e6c2f2847d2f7176ae33415c02e53b8b636637a2d46008eb2452efbc27c93ec120e0fd8d01f9ade32b16ffcbb8b63813196050228f29f20e4f32231a239df157fb70045b888df8edf804a3b2a78f3e474898a9e7625a828af92391d937e3fffd6e28ae2742d52a99233cd15a745226a7ab3d5682dec0e6245d909f5c84b28960fe66f414970a0562faa272c454b119ff1e0cce94a0580d9348946b6fde981f8ae53b905d5e574b6376774240d3e2d046b35b28a5b4b4e090ec4c58aad5e1e9efcec5f2506e9d8e7effe157adee00339920de3cc2e76f16b7b652a84f4b9d11d530aa4cf9addff3d4dfd9c84a12e4576785d19c8fe09c5b02cb8d58774ed5885454fe64cdb85910fd0008f1978966ba027b91132ba9f652bbbb222e90993dc6189457caa6af3b383f8aa666e03bc2345c315261c782aba788731c51c1ac7b9683a3af28d6b7dcc9b03da689b173106171e9a0cdeff4fe1c38af8e9b1b27a0dbe15dcdc63c00be544ad0aba6e864a07d61b0c00170aa4ee2c6a92cd74682fe88467c96459843123ff63763a0f656dcc2a4bae037b3bdf19ac9d9a011ac6cacefc9d1a6abe79793d4e19bd209cb22ba56e1e8f20d48ce774780dabd2505267405b4eed40f8d81722a6cf8659a73ed5039a51b08139d78e45fc53de2ab55f4afc77aa8a256937d80fa502200544a3c0542a6356180a8eb24154194da5c75ae4d9f6842adf5b3c68b5194e75c122d60df5b8efeb720dec703d40f3e1c8ef0d7968ffc80155356b17e29626777f98b33f969bfb07da5c37bff5e4685ebe360912e537e99523b1ed5c3f4722e5a54a97429f7c0d21c59daf83d080fadbc4cf00640d94734dc254b1f6674cb6cf0eb9e00632c3e4895709a9d08aa799cc068cdb1a3629d41ad4d026958310edca8f890fdbb11a1a7ccb8d4c235218f295a7ec4944734bd14be3bbf40b5de92ce7d52b83cabf338617a8e0d411a1dcd042cab40ae21b8c409971a501ef9116bbcab179a584c1cb0f24556ee4e679788fc97c21f2577b1380c101caba77d465967afa7ff070dafe6877637f6eb8a1342e58e6f32e35b8f27e2c5bedeff36888cb9d61a30577f9453c46b53aa68a61b3ee04007e70e4acf2a54f1078f7c5681d4f095ca7cf00a2fb0dabdd83ac5c835dfb50fc6442845cf9a69fd7752a36fd43d1f4d36f545e895d94f36e21bba30c6bf0087d1a27ffd7d4cbe37e91134093b08189e53d657c14255d94707ce42722130ed9a8184dbc77bc096133c1fd5d548351f02a0a38fe5ff93efa275cfae11e0a52a2e6aa50b933fb551cfa370b18be65e36b20bf2d5f5b91d5ee2ae30be5cee8d2069987a59188d510628b68ecb9564ed79aa1410e02b8368840b07c59e01bfba9893f29a98e093994637dd9a008d5eceec9d8e18fbe71b6b1843c3da9c414620fa785c13acf7d7818c325dce8abf6baf14ee5991ec393c771aef0e8d5647b6624adedc41a55c338227d4f8d41d931313a47bb3f43748f0eb32678e8074dc1bbfb69cebbe2cb885d852315156babf1858df095a02496beb05fbeaa56277b9b168187cc2e543e551d88745e9a9a60cc5ad1c13b43282db8c7c03df16b11409187925a68e2a6ce6bdc36b2c9eb94d6bd488a7e626b57e45862b3e3bd6b81f331ccd20026331d1e36399e62ac14a93a3840fff7ed8dfce025412d2aaaa9badb99b931a82a31232af3dedfa832ece9632275a7e0b0899dd8557d5e677c35497750e00ade178c6b343c8c416d10d711dd00f9c639024ef56aa823b66ff0ba0d0211c87296a6122602fa530295403038f7bd3149e4d3099bfa02f39fb1a409fe8a78d70dbbf2e08b3a4fd460e35402d8668b3720e6278348ec20d25c87dc2463cb41b0fab669ad96be880fcfb4f1236fdbb36826f5d9cf2ccdc9e0d4f89283de0ce02fde74f3c3d5ed992cecabac9a49800466a3f33ac1a64d7381643daf0514fc14ba5ee23fac37c5205e06e0b6e930796dd080fef237f359c96988043676382834a8a986d2b4ffa4edfef28b58e7a27f4713b1b57f7a91a67bdb3cfc9467c7b59628496d12157dc4b4e124abbbcdfa4e9c2b4316e58fbd37504173502527040b86214f5ff90e3605946ede823969929dfaa2e034e8508abb2d7b8678ba1bc82fe753acacd352f82955fd40a096fbc2bb680533a345d3718194d0413d784c15f7e09f47e36c78ab14cf13661b2a90b344c95071af0cf0f33360d825116fade2f45224b0600fd1015225b545da517c3d49a8307ad397f96c187549840be29ae7744db30facc7148e9a35d2b40ad57b2fc4c7d16ec40e128769b50adbed9471fec4f6291481b745276985a60ea3caf0ee462d5ef21a218320b6c3e3747fd8be36f235593a5fbae4f38bb75e9c9d19921239adb2a93f27075bae553dbdacd180534d85c8ab8de3c3a8e6c4044f8b972ec8840077f974b04a43369c752f1606dd0e8bc63e75ac099c5e290396f44d3bca0dc15400afb1cb40f29e6848528bfdbb6cd46adcb30678057eb0f4bbde228d6355f060d74b9a3ac0332d6a8317fb5a51d75c7499ad5dd478fe65607488841a61bf486d887ff87d0a5100821d8ad25064081434d43e993b68253fcfb23535f8718ae3ee285db2aef53ba985dc2546845e7e5f121ac710f5cdfc667b77dec43c2b92a4a597a7d2b6530e819dc5845804c40598abc59d51a4895cd74e25fe2fe06cd88a0c271f3c04f021484bd22ddad83ebc200728156bb7b841b8b6939865933899ea5a5c5f141ed7a2bd7c8c472f10f7af02598c27acf2fcf4e4db41e95a372b1057b439bbd65f8a012c783831fe90bc2aed3e6f6a2920f80f63849355d60f47567c5c572d77d3fce627928bab3ab373e23279fd878276bae5d08d6ac3bb63a03aa3f81c82228109bbea8c31b8728a4528ec28ba446dafa894e81e9f2ed3b944a07377b7b092ed91a05ea6d3c4bdbb2e6d3579ace87906a30fe57f50afb44be30202c7151926e9b62352ab463aff51c09162479ad53115a72e9196c67ccc424719e65445be1cf4674f9146cca5571052137333ed8b144b6177cda503e0bee8c818def92d74aa52a7cccdbf63475dddd3513aaebc971f0d1652470d91bc8f570578645071fbbd5523d0b6f24a9f8b008aacd7ad5a091628ad71d88020871caa30bc76e3c84035bf8a66b9ffa72f7ddc35f00680c8bb631b76f386d276dc0cef7ef2584c30798bbc41aed34709132e8436398bd596b6e85cd7889d762f28c4dcd5ad9fe5233cbe89c2594b1e4b07a53bc6edc07c93aa65f639f08ffedbcd4f9152d92964122ef4a7f2ef216d3db535b0c7c076a1fd63ca2f4bbab3e5ab10f077b8efb146196ea3b9f931782dc1ec9d7fa8c76cdf8a2b912c6867280e8978b862a7b0f2498325000148d49914beb1d71e19a39e7001a39285e2cca005cf40cfb8cf9a710bb3e5f81eac7209eb3fd63112f0ec4db327c6a01287d79c7fe4a94fcf58b74f530c7f361448bfd82322d830edd5548a8f2792f17b518a4c3ed10ecba6933f527f453ccf79272f1fae14888be0bfd9684c7129f4cf1c61a4dffdd71feaa4bffc3d9004c0634cbf3f68f051b43babaef980519c3143fe0a6566ef7eb6671e2093e824bac5b00f84f519cd5e39bc7bd8071c1cc03fab8eb7349cf7a54ed04c1ea1fa2869f9f0075678b820ca5dfbcc301798ce3b5fecb75663c4c313c47d07342cdddf6547b705634d4f80d5c46459eb59aedd9bd56eafd9cee2f17d404dba5cbf8951bcacaae842f359c6fbf30d8b93e9bc8df0d4b89630e32843926b1bce8d2b463094812426317383da7d0bee2605042de42cfcab2e81e15a8ae4222424f3b362dc5eb05645da82d2bae3fb0060cafeda384d84ed32da569e9fef1a8807bbb8d03d348758baf2c108d4382f2dba0663400a597820e0f4d4138ec36153f98ed295b12b7cac9bda1118274bb4e34bef5ea8c4af11d6c593bcd1158fb8b9a4100f7b7c0ef15514b4fca0067a7f4103f5cdfde13ad36331d81515a0d9f87a78f2bbcf6c528fba0248b6ebbc757174c052af6aa59b8560e38e28ef843db9dcfe147c480259e7a19b8aad7ce7f197fab69319c384b7c21f3fa2d96c6855a29a11e9d08ceb8c25a7c7fae819faa6b9073b7ac94323c7a2d69b6831cf17169d45e6b4f7fbdb8298c797c79e20ed794332ec353f18b9fab3ccdeea271e94daf4b4ddd75b1d9c97e6f5ec96bfa3372863daeb81c33d8e6d7b18cd6de90c4b635692c16314820f384eddb1cbff1540770d343b963bba73dfba7a256b089059a3f0feb83b121735f2782492ead003f9cfe662303741fa5c613df474285a05b1671b1d9a9b326b280ab35a969db6efa9566d9e1e3e9f270e7d8a52df50e3cdbed22112706665132ab0a40a924186299e3cbab843e13f3ce961219c2bb728a4c2dc601624bc803f6f760ed22022f729413869657bf794dde4339de5abf0f19ceb9e58b62b4a7b3e7e5a77c1a434cc96baa2022e722905fd4d1b37b46efc87efbf3976f525dd64f1bd1db7aa3d1410629975025985fe5dc6373b7f402dfb9c5134a1e64a7709130e8df1b1c9202c39b7f4693f4ea0378638b971f686cfbb89b12087761e27ab1b24ea3b08536bc0c7a0084e70d226ab1f9272d3e0e50ea4f432a7bb82cbc156ec7c4ef4f3e0bb98eed31d558216f3cc59064422ad96a684456af81bf40b55e3aa1e590cc773cef70b04e9ac678bd899656aa8bce7f634ed3c56cec3ee7549c70edc5b95c64545a06", 0x1000}, {&(0x7f0000002640)="dffeb18e3a67f7ca2e194ff766514fd0f80b4471676f068660dbd663ccf4ff077bfbbf5836554ee714cd465ecf41ca8f9f21d757b6310ece598b29a98a108176aef6cabf9386c7951bda9a9b94a7d70b31c7b113de8724fccc549fd15d", 0x5d}, {&(0x7f00000026c0)="0ae4757c5481a9d328eab3865f394a04342007df24650202edd0adadb787442dcac9cdd80dc97c64000f16c0988920d9703513880b461c4df19be81b7c57457d99ea198f0fe3efc9d11a3cbad8feeb695845", 0x52}, {&(0x7f0000002740)="6fb251bab78ac9cd5d1bbeaee6f01006f967702c1d2dad2a783ae021a5ffe5ee9e59e2b188a3d66278c936be6ef8d2911388bc41584e1b8034668403f38eeed2b64a2f78aa9b233f27ccdcc081a0b857182ac160feba04e40b36bf6cca8162b0adc61e4c7847fdf7a5ee4d371c0fb8910c351965a81d5b03270a70b855a4737ee9d5fa1dbd3622cccad731688005c04a2718e673878137e665fda387d6fc3111c531d1d5c5ffb3fe2e8aa3b6b605c407ad1d37158f10115ba9b10d546c303d804a790ac14aece2f9f44dd09a8bdf812d03a93be04790bdc785412ab82c7d758bf4ae23e11a52638a", 0xe8}], 0x4}}, {{&(0x7f0000002880)=@un=@abs={0x6bb0f0e7cb64fdfa, 0x0, 0x4e21}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002900)="eb48f0de2ab5cb4474eb7dc001953c8ff1a45e4f4de26945bc97438fe0a7392255578140efd8828cbe1ff048aabeced50ca877487935794a1d835b7175804097a1e8a985e0b6384277145a9580b84e91265d3fe8fae4883dc895ea666aa385097d960f801c077a006bb849f115e08ee0dc0747f314eff1f7b7e08b54a627ad8dec7a495a769d0291a2988e0b52c1d1e876de3bca2974a479800c09e838b71518bd1d76ad10e1754ac8e187d466c2dca139643698088f5fea25bc66044dff83aefa286d340d337e12ebf2dc055ab02c0814c46693ce328dd708a8bb24c484edf271e396b23bd103c70af01acd48", 0xed}, {&(0x7f0000002a00)="82eb11fb538acafd7bb6e70a62106508ad6b362c0cdbe4246709e835e0ca55c2", 0x20}, {&(0x7f0000002a40)="7288fedeb5f7fb4bb60b06c95d97d1c9c4514fcf3af3694ecbd40e7103f02e654abc54d992a37fb87969842f04e894b4be64c727153339ffb3b7f2192bb030f78d74aa87537e31ed5881ea11930b9847af9a4b9e3fc89262478128516cf98d9d09e78d34972d19e2c12cf60234dfc1f5e64cf7a1799b8d43031ddde61c86bf0c5ce233de5adfbd18c272d6c5c47765b1f21458ec4f15a34c31b51577", 0x9c}, {&(0x7f0000002b00)="748ed7d1427305ccc5920a252ea6229c15e35f26dbd73222b40bf29b369fbdb3ba7a692699263046f60410cb6981ad88434f68c94f4b0d2a7586fbf5ec6df7312ebecb21458a4842d77fcaeb83c61cb3fcd62c255f90fd2eb4169505c61b0e7272e44943f1733478", 0x68}, {&(0x7f0000002b80)="3f04dca0553d18fecc6e8d3016cab030d40dfec69e8165ba5af9df35f3e50709bcadaa80865c8d7c93d5348f5fa0e3d277fe95df0573a10f224340eefc3efbf2efeebe7a03386ae7949104915ad70c2143efbb4ba7c47acd8ce26a1af3b71d628d80fbcb0edd570a6e1bc641bffdf7feb8845e7487043045ed121b76566f3a53997bc068eb21b74dabd69d95b5e4000ab6d53b1ff52dc9f6919651d1ad2b4fbedb7399060aad6a8f29d3501e92b8be775b32a028231a070d31176cb83cbfbe5149c6e1b4df60e9536cc40d43d0571713ae3d100eaa8a6ddf3ea0406c0d6bcf163d42a78cbc2a524b05668c10854c6333021518b4", 0xf4}, {&(0x7f0000002c80)="a67f18c856dc66107ec04213f634875933b7197869c7d15dfeb9c3f1ce1239d4cb399e71543a07e57e79d0fd1f498992600de4c4ddb1a9cd116bcc13b22df193b9886fba58f7698819b3425457416e1013972021f5e5f88ab2fdf5b81b11d4022e39e3613e84c425d7f65160be3bd529c58ae0bbfdbd726f97cb11", 0x7b}], 0x6, &(0x7f0000002d80)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x12d}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xa8}}, {{&(0x7f0000002e40)=@l2={0x1f, 0xc76, @any, 0x2, 0x3}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002ec0)="a62b4511db68c5b05c5874a349c9c3b5a7c820fffbb610e2b472da31622063704daf583f36ab2c426442a7016f269d4bb87274fef510a6b2ef86235d148e8bac95a4bccaa99b8169c377f246e4faaeb05fc5436793975be4fb9d7cde65496453c33bfc86698d324454dbe05ee3a671932ec19f647703cc602e8c70ce1bffa161164ae156f7fe29e04a97c0", 0x8b}], 0x1, &(0x7f0000002fc0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0x78}}], 0x7, 0x800) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m5.594811015s ago: executing program 8 (id=4381): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="143512b58c83936196290faa22e31afb1393854ccec6a0eaa72de34452e4aed1398bd292e42b41832eb281ffaddbc4dd2fe9d14701db8b986440895b95ace62ff819a7ea223ff4a0627fb6ed67512807b901f6e645d86c8e51f1a0023fb64e3183898b026406f525b767a7804c12b63215c4e448114d6dc2c7dfad35f74fbdc85eee86a5ffbdb707c277d227efe2d30730da5877f0c5", 0x96}, {&(0x7f0000000640)="ac29836de47a4b5477583c96014de8c8a55536e82a8b19f405f5472572117823903d9e95e69f1b0dcecec516448be9784e2ed12cc4b7d4804d6bdbd922fa9d8589c1288bbb73d6ad3f0c8e2dd93cb86199c56e039c96da03bc3e140e29047a0b65e6e74f", 0x64}], 0x2}, 0x24000015) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x9, 0x802) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, 0x0, &(0x7f00000000c0)) pread64(r4, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x44000) accept4$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x80000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000feeeffff0000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x40000000}, 0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r3, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000130001002cbd7000fcdbdf250000fff03375e9d3e513150a746a4b495ce220f3a755df809402daf82b0fc0a21477170b6264e6c37e25878f95428c94119e812696210af802111e76d6bc88bd342eec30b92d2dbcf1bca2c1040cfe6b34d6671d949075c40cc73db77ed1cf3373a051edbfa92e83e98c5f6039bfd8af0a83cf1a530afc35f5dc7fdc0dc1f6b55971725074e42ba3136ca5d243e53f2396c2afbcc05232e57b5f6192811b025f41ccf063c2875d22a180b1c7bbf9687240dd68d816f06c9a09c3588af9838ef4ccd5eba25bc8385c5fde09235a09586e", @ANYRES32=r3, @ANYRES32=r2], 0x28}}, 0x20040000) 5m2.738801764s ago: executing program 8 (id=4391): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsold}, {@resuid}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f00000001c0)=""/237, 0x46, 0xed, 0x8}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x46}, 0x28) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0xfff7, 0x1000}, {0x1, 0xfb3f, 0x800}, {0x4, 0x3, 0x1800}, {0x4, 0x22d1, 0x3400}, {0x2, 0x4, 0x1000}], 0x5, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800700, &(0x7f0000000380)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@usrjquota}, {@jqfmt_vfsold}, {@resuid}, {@noquota}]}, 0x3, 0x47b, &(0x7f0000000bc0)="$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") (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) (async) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) (async) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) (async) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e0000000000000003000010070000003d0000ca75ffffff00000000000000002e"], &(0x7f00000001c0)=""/237, 0x46, 0xed, 0x8}, 0x28) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x46}, 0x28) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) (async) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) semtimedop(0x0, &(0x7f0000000040)=[{0x1, 0xfff7, 0x1000}, {0x1, 0xfb3f, 0x800}, {0x4, 0x3, 0x1800}, {0x4, 0x22d1, 0x3400}, {0x2, 0x4, 0x1000}], 0x5, &(0x7f0000000100)) (async) 5m1.938424257s ago: executing program 8 (id=4396): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000000c4c0), 0xa8000, 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x67, 0x0, r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r4}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x1ff, 0x5, 0xfff, 0xffffffffffffffff, 0x6, 0x1, 0x8}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) write$binfmt_misc(r1, &(0x7f0000000200)="e502", 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0xd7f, 0x4, 0xff, 0x2010, 0x1, 0xbc3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x44891) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f000000c500)={{0x1, 0x1, 0x1d, r0}, './file0\x00'}) 4m59.454666964s ago: executing program 8 (id=4410): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2b, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) 4m59.454532194s ago: executing program 38 (id=4410): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0x1}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2b, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) 4m30.817156764s ago: executing program 9 (id=4542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0x4a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0002}]}) capset(0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21060, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f00000001c0)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r8 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r8, &(0x7f0000000000)=[{0x4, 0xc, 0x800}, {0x2, 0x9830}], 0x2, 0x0) 4m28.884593981s ago: executing program 9 (id=4549): mkdir(&(0x7f0000000280)='./file0\x00', 0x304) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000240)="3dcc207f6409121b3e81d17bcf2e64c69221e3537026bcf192152719e6fb9b1a", 0x0}, 0x20) 4m28.694400967s ago: executing program 9 (id=4551): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000000c4c0), 0xa8000, 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x67, 0x0, r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r4}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x1ff, 0x5, 0xfff, 0xffffffffffffffff, 0x6, 0x1, 0x8}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) write$binfmt_misc(r1, &(0x7f0000000200)="e502", 0x2) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1a, 0xd7f, 0x4, 0xff, 0x2010, 0x1, 0xbc3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) sendmsg$inet_sctp(r6, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x44891) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f000000c500)={{0x1, 0x1, 0x1d, r0}, './file0\x00'}) 4m26.316259422s ago: executing program 9 (id=4557): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@user_xattr}, {@jqfmt_vfsv1}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$netlink(0x10, 0x3, 0xf) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r5 = getuid() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r6) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r7, 0x311, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x54) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000080)=@sr0, r5, &(0x7f0000000100)) 4m25.110437472s ago: executing program 9 (id=4567): creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401800}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x12, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) unshare(0x8040600) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semop(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 4m22.96645738s ago: executing program 9 (id=4581): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m22.774632206s ago: executing program 39 (id=4581): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m21.655612905s ago: executing program 0 (id=4937): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, &(0x7f0000000000), &(0x7f0000000180)) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) set_mempolicy(0x6005, 0x0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008000000000000", @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001000"/27], 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000001c0)='./bus/file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32=0x0], 0x41, 0x2bd, &(0x7f0000001c00)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xa4000061) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x54) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xb9, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000cc1300800c00054000000000000000000c00054000000000000000000c0004400000"], 0x14b0}}, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000280)={0x44, 0x11, 0x306, 0xfffe, 0x0, 0xffffc, 0x0}) 3m20.579451008s ago: executing program 0 (id=4939): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) 3m20.560984115s ago: executing program 0 (id=4940): syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m19.781857762s ago: executing program 0 (id=4944): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.size\x00', 0x0, 0x0) 3m19.533163817s ago: executing program 0 (id=4948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 3m18.227549809s ago: executing program 0 (id=4952): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff0000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xd8, &(0x7f0000000000)=""/216}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r2, &(0x7f0000000180)='./file0\x00') 3m18.160061656s ago: executing program 40 (id=4952): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000079100000000000006900e0ff0000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xd8, &(0x7f0000000000)=""/216}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, r2, &(0x7f0000000180)='./file0\x00') 3m12.767520101s ago: executing program 6 (id=4969): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x20, 0xf5ff, 0x0}, &(0x7f00000003c0)="938828b74ea9", 0x0, 0x100004, 0x26, 0x3, 0x0}) 3m12.714478162s ago: executing program 6 (id=4970): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x20, 0xf5ff, 0x0}, &(0x7f00000003c0)="938828b74ea9", 0x0, 0x100004, 0x26, 0x3, 0x0}) (fail_nth: 1) 3m12.226567162s ago: executing program 6 (id=4971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) 3m10.880484997s ago: executing program 6 (id=4975): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket(0xa, 0x1, 0x0) listen(r8, 0x7f) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3m10.549339786s ago: executing program 6 (id=4980): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x168d, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="0167b2bc4930cbe9c83c8f02f601", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000001080)={0x2, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x43}}}}, 0x108) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xbab047, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a84821, &(0x7f00000000c0)=ANY=[@ANYBLOB="e1c6c7de9f406e25ce53dbcdeb0b45cca89d6d21b0d2c20c86eabdfdaac0496a67eaee38bf19635e0a429eda008fd61ffc3d6e0204e95a4f83f1e05e19dc2381a559c5fbfd0f4f590c6af869e26d010000805fa951f795cb2bdf718b22f333532e2de612ecd5610b3c9a575df8153147043236ddd7c18a239577f51882e5c46bb614b6062d24fbfcc6aa4593272f1c524a5048e49380d79da0a73892f517792a7d05feb7bc72c0e9c015c67436a72d1c952ac21b6a38f0b72c3a6ca1334eb8ed3d6903b2866a7427ce7439b90602bc2cb410205906885d", @ANYBLOB=',']) mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='memory_recursiveprot,memory_recursiveprot,nsdelegate,memory_recursiveprot,nsdelegate,memory_localevents']) r3 = getgid() stat(&(0x7f0000000200)='./file0/../file0/file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0/../file0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x3, &(0x7f0000000300)=[r9, r9, r9]) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0)=0x0, &(0x7f0000001000)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="3b4dc441fe5d10712c954669588dd30a06324886702aa5903842c7ee7660f4ff47d42f72dfadb2654b895009238a8bfd3feb284e1efcc2ac3fb30139503b34b23a24fc13e05be8428c8b6c48586d5de8d1a29b6dd3c87fa81026114ec0440dc078d025982c1ff86d448121e530ac87d2b59b1835df22", @ANYRESDEC=r10, @ANYBLOB=',dont_measure,audit,seclabel']) getresuid(&(0x7f0000000440), &(0x7f0000000500), &(0x7f0000000540)=0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000580)={[{@gid={'gid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0xed5a}}, {@gid={'gid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0xb}}, {@uid={'uid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x1}}, {@gid={'gid', 0x3d, r4}}], [{@smackfsroot}, {@flag='posixacl'}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@pcr={'pcr', 0x3d, 0x37}}, {@euid_gt={'euid>', r10}}, {@euid_gt={'euid>', r11}}]}) 3m10.34990106s ago: executing program 6 (id=4983): unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = syz_io_uring_setup(0x1a50, &(0x7f0000000280)={0x0, 0x38fa, 0x1, 0x0, 0x361}, &(0x7f0000000300), &(0x7f0000000340)) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x8, 0xe3e1, 0xcfe}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000000)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x200001, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000980)={0x1ff, r4, 0x2, {0x2, 0x258}, 0xf}, 0x1) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1fd, 0x2820, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000480)) write(0xffffffffffffffff, 0x0, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r7, &(0x7f00000000c0)=[{0x2}], 0x1) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) semtimedop(r7, &(0x7f0000000080)=[{0x3, 0x8, 0x1000}, {0x0, 0xa, 0x800}], 0x2, 0x0) semop(r7, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHu72U2bFDhAJUqhRdkVrJ00tI16KEVCcKoElPsSEieK4sRR7LSbqIKsOHBEQgiQOJULFyROnJBQJS4cEVIlOIMAgRBs4YAEdCrb43Q3GSfZjWNn4++TJvPmeeb97zma8byZp5kARtZTEfFyRLybpun1iJjM8gvZFHudqbXeO3feWGxNSaTpq/9IIsnyumWlbY/E1WyzyxHxlS9GfD05HLexs7u2UKtVt7LlSnN9s9LY2b2xur6wUl2pbszNzT4//8L8c/MzfWnnRES89Pm/fP87P/nCS7/89Ot/vPm3a99Isvw40I77VDzqw07TS+3v4u4Nth4w2HlUbLcwM563xtihnNtnXCcAAHr7QER8IiKux2SMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiSqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y8/e2B5LiIej4jvTY63l8uL9drSsC9+AAAAwIi4eqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXnmlNaXd918vvbazvVZ/7cZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyrNaqNZaezs3lyvb280b67e8wpsAAAAYIAe/9hbv08iYu/F8fbUculkm55wNeC8Ku6nkmyes1v/4bHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/oj+ff/j78uuFcYQPWAM+T+H4wu+z+MrvZ5/klH8jrjhwul5AwARt6p7/8fK03vq0IAAEDfTbSnpFDOLu9NRKFQLkc82n4tQClZXq1VZyLisYj43WTpkdbybHvL5Ng+AwAAAAAAAAAAAAAAAAAAAAAAAADQkaZJpAAAAMCFFlH4a/KrzrP8pyefmTh4feBS8p/JyF4R+vqPXv3BrYVmc2u2lf/P/fzmD7P8Z4dxBQMAAABGQvF+Vu7207v9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADop3fuvLHYnQYZ9++fi4ipvPjFuNyeX45SRFz5VxLFu7ZLImKsD/HHW38+nBc/aVVrP2Re/PE3Tx9/7/aR8WMq+xby4l89fXgYaW+1jj8v5+1/hXiqPc/f/4oR9yw/qN7Hv9g//o312P8fPWGMJ97+WaVn/NsRTxTzjz/d+EmP+E/nFfjzbx/K+tpXd3d7xU/fjJjO/f1J7olVaa5vVho7uzdW1xdWqivVjbm52efnX5h/bn6msrxaq2Z/c2N896O/ePeo9l/pEX/qmPY/k1PepZy8/799684HO8lSXvxrT+fE//WPszUOxy9kv32fzNKtz6e76b1O+m5P/vS3Tx7V/qUe7T/u/3+tV6EHXP/yt/50wlUBgAFo7OyuLdRq1a3zkXgx+l5yq4c/9HY9fIn/pueiGmeb+GZfC0zTNG3tU6coJ4nBfQnJ0VUd9pEJAADot/dP+oddEwAAAAAAAAAAAAAAAAAAABhdg3jS2MGYe/uppB+P0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Iv3AgAA//8ZWuAG") r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r8, r8, 0x0, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) 2m55.247690862s ago: executing program 41 (id=4983): unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = syz_io_uring_setup(0x1a50, &(0x7f0000000280)={0x0, 0x38fa, 0x1, 0x0, 0x361}, &(0x7f0000000300), &(0x7f0000000340)) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x7a, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x8, 0xe3e1, 0xcfe}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, &(0x7f0000000000)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x200001, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000980)={0x1ff, r4, 0x2, {0x2, 0x258}, 0xf}, 0x1) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1fd, 0x2820, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, &(0x7f0000000480)) write(0xffffffffffffffff, 0x0, 0x0) r7 = semget$private(0x0, 0x6, 0x0) semtimedop(r7, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r7, &(0x7f00000000c0)=[{0x2}], 0x1) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff8000/0x3000)=nil) semtimedop(r7, &(0x7f0000000080)=[{0x3, 0x8, 0x1000}, {0x0, 0xa, 0x800}], 0x2, 0x0) semop(r7, &(0x7f0000000000)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1000}], 0x2) semctl$GETZCNT(r7, 0x2, 0xf, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r8, r8, 0x0, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) 4.952687024s ago: executing program 5 (id=6167): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x14, 0x30, 0xffff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) socket(0x0, 0x9, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x6, 0x0, 0x200, 0x24031, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xffffffffffffffff, 0x800}, 0x106020, 0x3, 0x0, 0x5, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_settime(0x0, 0x0, 0x0, 0x0) unshare(0x6a000200) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r7 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) unshare(0x22020600) r8 = syz_open_dev$usbmon(&(0x7f0000000140), 0x10000, 0x104) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x1) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0xa) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x5800}, 0x500) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") 3.793137902s ago: executing program 3 (id=6179): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x8001, 0x400, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb0000"], 0x68}}, 0x64000004) 3.713455558s ago: executing program 4 (id=6181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x99aa9292e1813b63, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = timerfd_create(0x9, 0x80000) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xffff, 0x2}, 0x4, 0x0, 0x1, 0x8, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000080)=0x40007, 0x4) recvmmsg(r6, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) fsetxattr(r2, &(0x7f00000004c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000500)='\xa3\xce\\),\"*(]#)]@+\x00', 0xf, 0x0) sendto(r5, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) open(&(0x7f0000000200)='./bus\x00', 0x14507c, 0x1) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0xffffffffffffffda) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) move_mount(r7, &(0x7f0000000180)='.\x00', r7, 0x0, 0x72) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x270, 0x270, 0xffffffff, 0x118, 0x3b8, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, ':+', 0x5}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@mcast1, @icmp_id=0x67, @port=0x4e22}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff000000, 0x0, 0xff000000], 'wg2\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@local, @ipv4=@local, @ipv6=@mcast2, @ipv4=@rand_addr=0x64010101}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv4=@local, @ipv4=@empty, @gre_key=0x28f, @port=0x4e20}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x41}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], 'vlan1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x84, 0x7, 0x1, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x1, 0xa9f2, 0x9, 0x894, 0x400, 0x4, 0xffffffff, 0x78, 0x78}, {0x3}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@remote, @gre_key=0x2bd, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4=@local, @icmp_id=0x68, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) connect$inet(r4, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) 3.674038911s ago: executing program 3 (id=6183): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 3.588715095s ago: executing program 3 (id=6185): r0 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(0xffffffffffffffff, r0, &(0x7f00000007c0)=0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000023896) socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x404, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xf8, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x5c, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="000000002200000429bd7000ffdbdf250a0000f7070000011880000069fd99f676a5d0ce335575e23b54513c3e5c5b387e8e7b355491d42c3acf7cbdd4fd48725f62e7ed6d62a742e2fc2618e2037ecc6b9888bd445af2818fca6d975d1246402e17ec1804c6b7c3d3e03e00d457227032e1cb6857020db4e9c78706d28511c205cf5d88527bbe"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) 3.577487653s ago: executing program 2 (id=6186): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0xc17, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff1}, {0x9, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x220c) listen(0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket(0xa, 0x1, 0x0) listen(r6, 0x7f) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x9) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.538474646s ago: executing program 5 (id=6187): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x32600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)=""/180, &(0x7f00000006c0)=0xb4) tee(r1, r3, 0x7, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x9, 0x40, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, 0x0, 0x40, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000280)=""/199, 0x0, 0x0, '\x00', r4, @fallback=0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 3.302372973s ago: executing program 5 (id=6188): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x4, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x302}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xa0}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x1280, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x40000008, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}, {}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000040)=""/2, 0x53, 0x2, 0x1}, 0x28) r5 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 2.783836458s ago: executing program 4 (id=6191): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000001228290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x10, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.698929312s ago: executing program 3 (id=6192): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x2, r4) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000100)="800000001d001f4d154a817393278b000080a578020000000404840014000100ac1414bb0542d6401051a2f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dca040000000000000058ba86c9d2896c6d3bca2d0000000b0015009e49a6560641a63da4de1df32c1739d7fbee9aa241731ae9e0b3909d", 0x80, 0xcc31c0580a2a50b8, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e20, 0x2, @local, 0x9b}}}, 0xa0) 2.662911396s ago: executing program 1 (id=6193): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x8001, 0x400, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb0000"], 0x68}}, 0x64000004) 2.617613108s ago: executing program 2 (id=6194): socket$netlink(0x10, 0x3, 0xf) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/158, 0x9e}], 0x1, &(0x7f00000003c0)=""/152, 0x98}, 0x1}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/251, 0xfb}], 0x3, &(0x7f0000001840)=""/255, 0xff}, 0x9}, {{&(0x7f0000000480)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/65, 0x41}, {&(0x7f0000001a40)=""/234, 0xea}, {&(0x7f0000000280)=""/14, 0xe}], 0x4, &(0x7f0000001b40)=""/223, 0xdf}, 0x5}, {{&(0x7f0000001c40)=@nfc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000001cc0)=""/106, 0x6a}, {&(0x7f0000001d40)=""/218, 0xda}, {&(0x7f0000001e40)=""/4096, 0x1000}], 0x3, &(0x7f0000002e40)=""/28, 0x1c}, 0xda7f}], 0x4, 0x2, &(0x7f0000002f80)={0x0, 0x989680}) 2.522720511s ago: executing program 4 (id=6195): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$RTC_PIE_OFF(r0, 0x7006) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7000000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x20) 2.52052907s ago: executing program 2 (id=6196): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f000048b000/0x2000)=nil, 0x2000, 0x2, 0xc3072, 0xffffffffffffffff, 0xb2ff2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b800000004000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4) 2.486336464s ago: executing program 1 (id=6197): socket(0x10, 0x3, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000750200060030000008000100ac1414ff"], 0x24}}, 0x0) 2.450674737s ago: executing program 2 (id=6198): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x32600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)=""/180, &(0x7f00000006c0)=0xb4) tee(r1, r3, 0x7, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x9, 0x40, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, 0x0, 0x40, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000280)=""/199, 0x0, 0x0, '\x00', r4, @fallback=0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 2.352343759s ago: executing program 2 (id=6199): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x20, 0x4, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, 0x0, 0xfd, 0x0, 0xa8, 0x2}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000005000000fd0900008400000002000000", @ANYRES32, @ANYBLOB="feffffff00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r2}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500090e00000000000000ffdbdf25050006de6a7150f723203bc300000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a004e200000000100000000000000000000ffffac1414bbb22d000000"], 0x70}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r5 = memfd_create(&(0x7f0000001440)='\x9d#\x00\xe6Z\x00\xafq%\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6\xd0r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\xa1\xc0\xc9\x8b3I9N\xa9(`y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xbd\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xe6\v56,\\D\x91T\xfd\x9c\xca\xa8\xa5\"\xf0ezy\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtW\x17H\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\xbfru\xe9\xdd\xfa\xe5\xe1\xc9=W\xbd\x14.\x8a\xba\x99\xc9\x9d\xb72\n\xf7K\xe1\x8du\xbd\x03\xb3N\xcd\xfat\xa7\r|\xa2\xc6\x88\xbe\xf7\x81\xdd\xc3\x1c\xd36Ix\x97\xdf\x17\x85W\xd1\x87\x83\xea\x17\x14r\xbe\xb9\xe5z>\xd5\x83\xce\x88\xf5.(\xe6;-kp/\xbb\xf7\x9c\xdc\xdcx\xc9\xe0em\xf2\x8a\xc2g\xd2\x88!\xf6f\xde\xdb\xbet\xdbFMm\xbd;\xb4\xb1\x8e\a\xea\xe1\xb3\xb2\xa5AF&dQ\xce\xf2\'\xce\x1dB[\aND\xbdc\xabgau\\*T\x92', 0x7) ioctl$FS_IOC_RESVSP(r5, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x200000, 0x100000001}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'lo\x00', 0x1a003}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6_vti0\x00'}) getrlimit(0x6, &(0x7f00000000c0)) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x4004010) r6 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r6, &(0x7f0000006080)=[{{0x0, 0xfe, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000000114"], 0x5c}}, 0x0) 2.351307459s ago: executing program 5 (id=6200): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x4, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x302}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xa0}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r4], 0x22c}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x1280, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x40000008, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}, {}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000040)=""/2, 0x53, 0x2, 0x1}, 0x28) r5 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x1225, 0x100, 0x2, 0x7f}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 2.096329923s ago: executing program 3 (id=6201): syz_emit_ethernet(0x104a, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) close(0x3) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @empty, 0x4}, {0xa, 0x4e24, 0xa1, @private1, 0x1}, 0xffffffffffffffff, 0x4}}, 0x48) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 1.704121931s ago: executing program 4 (id=6202): r0 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(0xffffffffffffffff, r0, &(0x7f00000007c0)=0x3, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x20000023896) socket$inet6_icmp(0xa, 0x2, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x404, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xf8, 0x0, 0x0, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x5c, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="000000002200000429bd7000ffdbdf250a0000f7070000011880000069fd99f676a5d0ce335575e23b54513c3e5c5b387e8e7b355491d42c3acf7cbdd4fd48725f62e7ed6d62a742e2fc2618e2037ecc6b9888bd445af2818fca6d975d1246402e17ec1804c6b7c3d3e03e00d457227032e1cb6857020db4e9c78706d28511c205cf5d88527bbe"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) 385.73585ms ago: executing program 1 (id=6203): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newchain={0x214, 0x64, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x11, 0x3}, {0x8, 0xfff2}, {0xfff2, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x87}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}, @filter_kind_options=@f_route={{0xa}, {0x194, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x7}}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_ACT={0x170, 0x6, [@m_ct={0x118, 0x2, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "5602bcf7647488b0125879f4821775bf"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_ZONE={0x6, 0x4, 0x1}, @TCA_CT_LABELS={0x14, 0x7, "d1e57c0cd45a1cf351b452fbb0cecbc0"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast1}]}, {0xa1, 0x6, "0d3bc1203e18334799898944f92a4165bc109f253bcf0dce8bfa30424fa54b2283c74fcddfbd4a132a8268d09d1a290bfd9bb1d1c3629cf73d3188b40d98221058b9998e179a29f0e1c45e6b8c5e28a059c6a9c8448ddde899992fdcc37321002a5fa7557d51846a0571a97a68937fff26605688d23548ca330b1c2e6022d9d142d0ca78beb53c7b75545c53efb6988453a08af72958a30e6d6bf06e97"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x54, 0x1b, 0x0, 0x0, {{0x7}, {0x4}, {0x2c, 0x6, "271748778e4f04434254dfa04a5c4a704616a5c18f121e588a016af5bcbb0db6ef975033940d547a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x94}, @TCA_ROUTE4_TO={0x8, 0x2, 0xec}]}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xff}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x6c1}]}}]}, 0x214}}, 0x4840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000090000000400000003000093010000000700000001000000ffffff0001000000020001000500000007000000010001000300000000615f5f2e5f005f"], &(0x7f0000001f40)=""/4096, 0x51, 0x1000, 0x9}, 0x28) 309.121656ms ago: executing program 2 (id=6204): syz_emit_ethernet(0x104a, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) close(0x3) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @empty, 0x4}, {0xa, 0x4e24, 0xa1, @private1, 0x1}, 0xffffffffffffffff, 0x4}}, 0x48) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 307.259776ms ago: executing program 3 (id=6205): socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x100, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953ed", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) (async) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0xb97e8e946f9f2f19, 0x32, 0x43a1bd76, 0x1, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x1, 0xfffff034}, {0x48, 0x0, 0x40, 0x3}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004698002c0308000000000000ac1414ff0a01010007020000fffd0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02000090780000"], 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)) 299.192585ms ago: executing program 1 (id=6206): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x1401, 0x1, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x200008c4}, 0x4000000) 247.566975ms ago: executing program 1 (id=6207): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7, 0x20, 0x8001, 0x400, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x64, 0x0, 0x40, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000001000030400"/20, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb0000"], 0x68}}, 0x64000004) 217.373529ms ago: executing program 4 (id=6208): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f000048b000/0x2000)=nil, 0x2000, 0x2, 0xc3072, 0xffffffffffffffff, 0xb2ff2000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b800000004000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4) 168.371851ms ago: executing program 5 (id=6209): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x1, 0x334, &(0x7f0000000880)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x32600) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100040, 0x4, &(0x7f0000006680)) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_newnexthop={0x28, 0x68, 0x1, 0x70bd2d, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x1}}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4004) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000600)=""/180, &(0x7f00000006c0)=0xb4) tee(r1, r3, 0x7, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x5, 0x9, 0x40, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, 0x0, 0x40, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='syzkaller\x00', 0x1, 0xc7, &(0x7f0000000280)=""/199, 0x0, 0x0, '\x00', r4, @fallback=0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) 165.06246ms ago: executing program 1 (id=6210): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x4, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x302}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xa0}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x1280, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x40000008, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}, {}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000040)=""/2, 0x53, 0x2, 0x1}, 0x28) r5 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 135.545074ms ago: executing program 4 (id=6211): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x3c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x4, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x302}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xa0}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r4], 0x22c}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x1280, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x40000008, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}, {}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000040)=""/2, 0x53, 0x2, 0x1}, 0x28) r5 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x1225, 0x100, 0x2, 0x7f}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {0x9}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) 0s ago: executing program 5 (id=6212): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): 00000000000. [ 821.684339][T23619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.706197][T23619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.752557][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 822.012953][ T28] audit: type=1400 audit(2000001538.917:9168): avc: denied { bind } for pid=23628 comm="syz.4.5595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 822.106120][T23638] netlink: 'syz.4.5598': attribute type 3 has an invalid length. [ 822.119360][T23642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=23642 comm=syz.1.5600 [ 822.132612][T23642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=23642 comm=syz.1.5600 [ 822.144269][T23640] netlink: 'syz.2.5599': attribute type 3 has an invalid length. [ 822.167491][ T28] audit: type=1400 audit(2000001539.077:9169): avc: denied { setattr } for pid=23641 comm="syz.1.5600" name="tun" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 822.218151][T23644] FAULT_INJECTION: forcing a failure. [ 822.218151][T23644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.224848][T23640] loop2: detected capacity change from 0 to 512 [ 822.250169][T23644] CPU: 1 UID: 0 PID: 23644 Comm: syz.1.5601 Tainted: G W syzkaller #0 PREEMPT(full) [ 822.250270][T23644] Tainted: [W]=WARN [ 822.250279][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.250296][T23644] Call Trace: [ 822.250304][T23644] [ 822.250314][T23644] __dump_stack+0x1d/0x30 [ 822.250347][T23644] dump_stack_lvl+0x95/0xd0 [ 822.250379][T23644] dump_stack+0x15/0x1b [ 822.250485][T23644] should_fail_ex+0x263/0x280 [ 822.250524][T23644] should_fail+0xb/0x20 [ 822.250559][T23644] should_fail_usercopy+0x1a/0x20 [ 822.250592][T23644] _copy_from_user+0x1c/0xb0 [ 822.250664][T23644] copy_from_sockptr+0x48/0x70 [ 822.250704][T23644] ip6_mroute_setsockopt+0x560/0xa80 [ 822.250787][T23644] do_ipv6_setsockopt+0x21d/0x21d0 [ 822.250818][T23644] ? _parse_integer+0x27/0x40 [ 822.250842][T23644] ? kstrtoull+0x111/0x140 [ 822.250867][T23644] ? __rcu_read_unlock+0x4e/0x70 [ 822.250896][T23644] ? avc_has_perm_noaudit+0xab/0x130 [ 822.250933][T23644] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 822.250984][T23644] ipv6_setsockopt+0x59/0x130 [ 822.251095][T23644] rawv6_setsockopt+0x1d2/0x410 [ 822.251134][T23644] sock_common_setsockopt+0x69/0x80 [ 822.251161][T23644] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 822.251187][T23644] __sys_setsockopt+0x184/0x200 [ 822.251256][T23644] __x64_sys_setsockopt+0x64/0x80 [ 822.251291][T23644] x64_sys_call+0x2327/0x3020 [ 822.251400][T23644] do_syscall_64+0x12c/0x370 [ 822.251487][T23644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.251510][T23644] RIP: 0033:0x7f1791f7c799 [ 822.251531][T23644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.251562][T23644] RSP: 002b:00007f17909d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 822.251591][T23644] RAX: ffffffffffffffda RBX: 00007f17921f5fa0 RCX: 00007f1791f7c799 [ 822.251609][T23644] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003 [ 822.251625][T23644] RBP: 00007f17909d7090 R08: 0000000000000004 R09: 0000000000000000 [ 822.251642][T23644] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 822.251658][T23644] R13: 00007f17921f6038 R14: 00007f17921f5fa0 R15: 00007ffcb7989d08 [ 822.251686][T23644] [ 822.551866][T23638] loop4: detected capacity change from 0 to 512 [ 822.604899][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5602'. [ 822.633004][T23640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.661244][T23640] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.834821][T23640] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 822.913149][T23638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 823.032092][T23638] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.502584][T23671] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 823.747122][T23677] FAULT_INJECTION: forcing a failure. [ 823.747122][T23677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.770712][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.828289][T23677] CPU: 1 UID: 0 PID: 23677 Comm: syz.1.5608 Tainted: G W syzkaller #0 PREEMPT(full) [ 823.828324][T23677] Tainted: [W]=WARN [ 823.828334][T23677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 823.828356][T23677] Call Trace: [ 823.828364][T23677] [ 823.828372][T23677] __dump_stack+0x1d/0x30 [ 823.828419][T23677] dump_stack_lvl+0x95/0xd0 [ 823.828444][T23677] dump_stack+0x15/0x1b [ 823.828465][T23677] should_fail_ex+0x263/0x280 [ 823.828488][T23677] should_fail+0xb/0x20 [ 823.828578][T23677] should_fail_usercopy+0x1a/0x20 [ 823.828603][T23677] _copy_from_user+0x1c/0xb0 [ 823.828631][T23677] __sys_connect+0xd0/0x2a0 [ 823.828663][T23677] __x64_sys_connect+0x3f/0x50 [ 823.828770][T23677] x64_sys_call+0x2df0/0x3020 [ 823.828804][T23677] do_syscall_64+0x12c/0x370 [ 823.828832][T23677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.828861][T23677] RIP: 0033:0x7f1791f7c799 [ 823.828940][T23677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.828964][T23677] RSP: 002b:00007f17909d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 823.829000][T23677] RAX: ffffffffffffffda RBX: 00007f17921f5fa0 RCX: 00007f1791f7c799 [ 823.829016][T23677] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 823.829033][T23677] RBP: 00007f17909d7090 R08: 0000000000000000 R09: 0000000000000000 [ 823.829053][T23677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.829143][T23677] R13: 00007f17921f6038 R14: 00007f17921f5fa0 R15: 00007ffcb7989d08 [ 823.829170][T23677] [ 824.154292][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.286643][ T28] audit: type=1400 audit(2000001541.196:9170): avc: denied { getopt } for pid=23681 comm="syz.1.5611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 824.436503][T23680] loop4: detected capacity change from 0 to 512 [ 824.509236][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5610'. [ 824.523566][T23689] v: renamed from ip6_vti0 (while UP) [ 824.535580][T23680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.565364][T23690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5610'. [ 824.602517][T23680] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.785124][ T28] audit: type=1400 audit(2000001541.615:9171): avc: denied { view } for pid=23699 comm="syz.1.5615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 824.901081][T23707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5616'. [ 825.098412][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.130793][T23722] loop3: detected capacity change from 0 to 1024 [ 825.149505][T23722] EXT4-fs: Ignoring removed bh option [ 825.155184][T23722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 825.163288][T23724] loop4: detected capacity change from 0 to 1024 [ 825.176607][T23724] EXT4-fs: Ignoring removed bh option [ 825.182083][T23724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 825.201048][T23722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 825.214086][T23722] System zones: 0-1, 3-36 [ 825.214327][T23724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 825.231843][T23724] System zones: 0-1, 3-36 [ 825.242303][T23722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.322563][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.332068][T23724] [ 825.335410][T23724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.392120][T23733] loop3: detected capacity change from 0 to 512 [ 825.410872][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.426917][T23733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 825.440493][T23733] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.457067][T23733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.468911][T23733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.592843][T23737] vlan2: entered promiscuous mode [ 825.626841][ T28] audit: type=1400 audit(2000001542.395:9172): avc: denied { firmware_load } for pid=23726 comm="syz.1.5624" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 825.707393][T23737] bridge0: entered promiscuous mode [ 825.767457][ T28] audit: type=1400 audit(2000001542.645:9173): avc: denied { relabelto } for pid=23740 comm="syz.2.5627" name="217" dev="tmpfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 825.880219][ T28] audit: type=1400 audit(2000001542.645:9174): avc: denied { associate } for pid=23740 comm="syz.2.5627" name="217" dev="tmpfs" ino=1162 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 826.093826][T23749] loop4: detected capacity change from 0 to 512 [ 826.160744][T23749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.222595][T23749] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.305959][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.331025][T23751] loop5: detected capacity change from 0 to 512 [ 826.395818][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 826.472121][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5636'. [ 826.488185][T23774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.562548][T23751] EXT4-fs (loop5): 1 orphan inode deleted [ 826.595028][T23751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.666714][T23764] loop4: detected capacity change from 0 to 512 [ 826.674729][T23776] netlink: 'syz.3.5637': attribute type 3 has an invalid length. [ 826.697008][T23764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.725558][T23764] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.755877][T23776] loop3: detected capacity change from 0 to 512 [ 826.873333][T23776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.915748][T23776] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.035233][T23786] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 827.036573][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.044781][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.101954][T23793] loop4: detected capacity change from 0 to 1024 [ 827.130174][T23793] EXT4-fs: inline encryption not supported [ 827.149081][T23793] EXT4-fs: Ignoring removed nobh option [ 827.166625][T23793] EXT4-fs: Ignoring removed bh option [ 827.219291][T23793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.294669][ T28] audit: type=1400 audit(2000001544.193:9175): avc: denied { execute } for pid=23791 comm="syz.4.5639" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=77049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 827.392008][T23793] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.5639: Allocating blocks 497-513 which overlap fs metadata [ 827.433042][ T28] audit: type=1400 audit(2000001544.333:9176): avc: denied { map } for pid=23791 comm="syz.4.5639" path="/198/file1/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 827.457541][T23793] EXT4-fs (loop4): pa ffff8881071ce540: logic 256, phys. 385, len 8 [ 827.465650][T23793] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 827.489207][T23803] netlink: 'syz.1.5642': attribute type 29 has an invalid length. [ 827.531899][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.569644][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.732374][T23792] loop5: detected capacity change from 0 to 32768 [ 828.519804][T23816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5647'. [ 828.656735][T23822] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5645'. [ 828.693173][T23823] netlink: 'syz.1.5649': attribute type 3 has an invalid length. [ 828.719175][T23817] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5645'. [ 828.858781][T23820] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5645'. [ 828.880176][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5651'. [ 828.906435][T23829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.010653][T23840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 829.044752][T23840] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 829.274603][T23851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.299351][T23851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.338875][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.736315][T23859] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5659'. [ 829.821998][T23861] set_capacity_and_notify: 1 callbacks suppressed [ 829.822019][T23861] loop2: detected capacity change from 0 to 512 [ 829.865086][T23861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 829.906968][ T28] audit: type=1400 audit(2000001546.802:9177): avc: denied { create } for pid=23853 comm="syz.3.5657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 829.912914][T23862] xfrm0 speed is unknown, defaulting to 1000 [ 829.948399][T23855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23855 comm=syz.3.5657 [ 829.950887][T23861] EXT4-fs (loop2): 1 truncate cleaned up [ 830.024820][T23861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.980189][T23871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.007507][T23871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.227548][T23873] loop3: detected capacity change from 0 to 512 [ 831.246965][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.270426][T23873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 831.316979][T23873] EXT4-fs (loop3): 1 truncate cleaned up [ 831.352552][T23873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.515198][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.034893][T23880] loop3: detected capacity change from 0 to 1024 [ 832.066194][T23880] EXT4-fs: Ignoring removed bh option [ 832.071800][T23880] EXT4-fs: inline encryption not supported [ 832.078142][T23880] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 832.606340][T23880] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 832.632946][T23880] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.5665: lblock 2 mapped to illegal pblock 2 (length 1) [ 832.651819][T23880] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 832.654743][T23880] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 832.663835][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 832.663867][ C0] EXT4-fs (loop3): initial error at time 2000001549: ext4_map_blocks:776: inode 3: block 2 [ 832.663904][ C0] EXT4-fs (loop3): last error at time 2000001549: ext4_map_blocks:776: inode 3: block 2 [ 832.721532][T23886] netlink: 'syz.5.5667': attribute type 3 has an invalid length. [ 832.783487][T23880] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.5665: lblock 0 mapped to illegal pblock 48 (length 1) [ 832.799290][T23886] loop5: detected capacity change from 0 to 512 [ 832.827875][T23880] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 832.842360][T23880] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 832.911720][ T28] audit: type=1400 audit(2000001549.800:9178): avc: denied { append } for pid=23887 comm="syz.1.5668" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 832.936319][T23888] usb usb1: usbfs: process 23888 (syz.1.5668) did not claim interface 0 before use [ 832.940780][T23880] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.5665: Failed to acquire dquot type 0 [ 832.964663][T23880] loop3: lost filesystem error report for type 5 error -117 [ 832.973401][T23880] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 832.998595][T23880] loop3: lost filesystem error report for type 5 error -117 [ 832.998707][T23880] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.5665: mark_inode_dirty error [ 833.001435][T23886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.038220][T23880] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 833.038413][T23880] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 833.038485][T23880] EXT4-fs (loop3): 1 orphan inode deleted [ 833.038877][T23880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.041719][T23880] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm syz.3.5665: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.042486][T23880] Quota error (device loop3): find_next_id: Can't read quota tree block 1 [ 833.047725][T23880] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5665'. [ 833.057012][T23886] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.065428][ T59] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 833.065580][ T59] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 833.065602][ T59] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 833.066303][ T28] audit: type=1400 audit(2000001549.940:9179): avc: denied { nlmsg_read } for pid=23879 comm="syz.3.5665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 833.212896][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.222445][T21740] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 833.242401][T23886] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 833.252029][T21740] loop3: lost filesystem error report for type 5 error -117 [ 833.252199][T21740] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 833.282043][T21740] loop3: lost filesystem error report for type 5 error -117 [ 833.282208][T21740] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 833.312142][T21740] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 833.693304][T23913] xfrm0 speed is unknown, defaulting to 1000 [ 833.710453][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.873258][T23912] loop4: detected capacity change from 0 to 512 [ 833.881953][T23919] loop2: detected capacity change from 0 to 512 [ 833.932999][T23919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 833.964973][T23919] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.987474][T23919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.007126][T23919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.082656][T23919] vlan2: entered promiscuous mode [ 834.122190][T23912] EXT4-fs (loop4): 1 orphan inode deleted [ 834.148830][T23912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.324925][T23915] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5674'. [ 834.469557][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.605052][ T28] audit: type=1400 audit(2000001551.489:9180): avc: denied { read write } for pid=23937 comm="syz.3.5680" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 834.753434][ T28] audit: type=1400 audit(2000001551.489:9181): avc: denied { open } for pid=23937 comm="syz.3.5680" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 834.845080][T23942] loop3: detected capacity change from 0 to 512 [ 834.995035][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 835.013268][ T28] audit: type=1326 audit(2000001551.698:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.3.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 835.088859][ T28] audit: type=1326 audit(2000001551.698:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23937 comm="syz.3.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 835.390354][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5683'. [ 835.506915][T23954] loop4: detected capacity change from 0 to 128 [ 835.688423][T23957] loop4: detected capacity change from 0 to 2048 [ 835.747312][T23960] sctp: [Deprecated]: syz.3.5688 (pid 23960) Use of int in maxseg socket option. [ 835.747312][T23960] Use struct sctp_assoc_value instead [ 835.813667][T23957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.872606][T23957] FAULT_INJECTION: forcing a failure. [ 835.872606][T23957] name failslab, interval 1, probability 0, space 0, times 0 [ 835.951680][T23957] CPU: 0 UID: 0 PID: 23957 Comm: syz.4.5687 Tainted: G W syzkaller #0 PREEMPT(full) [ 835.951750][T23957] Tainted: [W]=WARN [ 835.951758][T23957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.951775][T23957] Call Trace: [ 835.951781][T23957] [ 835.951824][T23957] __dump_stack+0x1d/0x30 [ 835.951859][T23957] dump_stack_lvl+0x95/0xd0 [ 835.951887][T23957] dump_stack+0x15/0x1b [ 835.951996][T23957] should_fail_ex+0x263/0x280 [ 835.952022][T23957] should_failslab+0x8c/0xb0 [ 835.952129][T23957] kmem_cache_alloc_noprof+0x66/0x400 [ 835.952154][T23957] ? do_getname+0x2e/0x1c0 [ 835.952186][T23957] do_getname+0x2e/0x1c0 [ 835.952216][T23957] getname_flags+0x1d/0x30 [ 835.952272][T23957] do_sys_openat2+0x60/0x130 [ 835.952310][T23957] __x64_sys_creat+0x65/0x90 [ 835.952343][T23957] x64_sys_call+0x2ea0/0x3020 [ 835.952378][T23957] do_syscall_64+0x12c/0x370 [ 835.952409][T23957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.952438][T23957] RIP: 0033:0x7f86e1d4c799 [ 835.952459][T23957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.952483][T23957] RSP: 002b:00007f86e07a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 835.952515][T23957] RAX: ffffffffffffffda RBX: 00007f86e1fc5fa0 RCX: 00007f86e1d4c799 [ 835.952529][T23957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 835.952542][T23957] RBP: 00007f86e07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 835.952563][T23957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.952579][T23957] R13: 00007f86e1fc6038 R14: 00007f86e1fc5fa0 R15: 00007fffe2412ed8 [ 835.952604][T23957] [ 836.204854][T23966] loop3: detected capacity change from 0 to 512 [ 836.306862][T23957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.429452][T23971] netlink: 5028 bytes leftover after parsing attributes in process `syz.1.5690'. [ 836.438690][T23971] netlink: 5028 bytes leftover after parsing attributes in process `syz.1.5690'. [ 836.638186][T23966] EXT4-fs (loop3): 1 orphan inode deleted [ 836.671179][T23966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.867157][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.988135][T23981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.015332][T23981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.178854][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5696'. [ 837.200458][T23989] loop4: detected capacity change from 0 to 512 [ 837.236488][T23989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.282299][T23989] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.853397][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 837.853412][ T28] audit: type=1400 audit(2000001554.747:9282): avc: denied { bind } for pid=24005 comm="syz.3.5702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 838.015963][ T28] audit: type=1400 audit(2000001554.806:9283): avc: denied { listen } for pid=24005 comm="syz.3.5702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 838.236762][ T28] audit: type=1400 audit(2000001554.826:9284): avc: denied { accept } for pid=24005 comm="syz.3.5702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 838.398631][T24012] loop3: detected capacity change from 0 to 512 [ 838.446955][T24012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 838.512015][T24012] EXT4-fs (loop3): 1 truncate cleaned up [ 838.522098][T24012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.663962][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.720709][ T28] audit: type=1326 audit(2000001555.616:9285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.3.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 838.814380][T24018] loop5: detected capacity change from 0 to 512 [ 838.843604][T24018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 838.910247][ T28] audit: type=1326 audit(2000001555.616:9286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.3.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 838.934123][T24018] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 839.079181][T24018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.095679][ T28] audit: type=1326 audit(2000001555.646:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.3.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 839.226231][ T28] audit: type=1326 audit(2000001555.646:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.3.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 839.412446][T24024] loop3: detected capacity change from 0 to 128 [ 839.421371][T24024] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.5706'. [ 839.430766][T24024] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.5706'. [ 839.477345][T24025] vhci_hcd vhci_hcd.4: invalid port number 254 [ 839.483633][T24025] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 839.552425][T24018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.729100][T24029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5701'. [ 839.825320][ T28] audit: type=1326 audit(2000001555.646:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.3.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 839.840200][T24030] netlink: 'syz.1.5708': attribute type 3 has an invalid length. [ 839.849019][ T28] audit: type=1326 audit(2000001555.676:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.3.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 839.849060][ T28] audit: type=1326 audit(2000001555.676:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.3.5705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cd14bc799 code=0x7ffc0000 [ 839.913550][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.968370][T24033] loop4: detected capacity change from 0 to 128 [ 839.990149][T24035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5710'. [ 840.002382][T24035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5710'. [ 840.399330][T24057] loop2: detected capacity change from 0 to 1024 [ 840.406890][T24057] EXT4-fs: Ignoring removed bh option [ 840.416233][T24057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 840.427946][T24057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 840.451521][T24057] System zones: 0-1, 3-36 [ 840.463094][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 840.467875][T24057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.539967][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.856133][T24070] loop2: detected capacity change from 0 to 128 [ 840.869169][T24070] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5720'. [ 840.878675][T24070] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5720'. [ 840.888807][T24070] vhci_hcd vhci_hcd.4: invalid port number 254 [ 840.895022][T24070] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 841.026557][T24069] loop5: detected capacity change from 0 to 512 [ 841.123059][T24069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.305966][T24069] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.361968][T24078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5723'. [ 841.397127][T24078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5723'. [ 841.601724][T24090] loop2: detected capacity change from 0 to 1024 [ 841.625877][T24090] EXT4-fs: Ignoring removed bh option [ 841.637931][T24090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 841.673825][T24093] loop4: detected capacity change from 0 to 1024 [ 841.682744][T24090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 841.709293][T24090] System zones: 0-1, 3-36 [ 841.716451][T24093] EXT4-fs: Ignoring removed bh option [ 841.736550][T24090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.756451][T24093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 841.789908][T24093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 841.818695][T24093] System zones: 0-1, 3-36 [ 841.951332][T24106] loop4: detected capacity change from 0 to 128 [ 841.978084][T24106] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 841.997083][T24106] FAT-fs (loop4): Filesystem has been set read-only [ 842.058172][T24103] loop2: detected capacity change from 0 to 512 [ 842.075543][T24103] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 842.104192][T24103] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 842.225283][T24114] loop2: detected capacity change from 0 to 128 [ 842.293251][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5736'. [ 842.302638][T24118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5736'. [ 842.318833][T24116] xfrm0 speed is unknown, defaulting to 1000 [ 842.339944][T24120] loop5: detected capacity change from 0 to 1024 [ 842.376735][T24120] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 842.392244][T24120] EXT4-fs (loop5): mount failed [ 842.403977][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5735'. [ 843.093536][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5740'. [ 843.491262][T24149] netlink: 'syz.1.5747': attribute type 3 has an invalid length. [ 843.683952][T24155] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 843.766351][T24155] FAT-fs (loop4): Filesystem has been set read-only [ 844.454576][T24165] netlink: 'syz.5.5750': attribute type 3 has an invalid length. [ 844.490197][T24166] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.516648][T24159] kthread_run failed with err -4 [ 844.629906][T24165] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 845.432120][T24190] FAULT_INJECTION: forcing a failure. [ 845.432120][T24190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.551307][T24190] CPU: 1 UID: 0 PID: 24190 Comm: syz.2.5756 Tainted: G W syzkaller #0 PREEMPT(full) [ 845.551343][T24190] Tainted: [W]=WARN [ 845.551352][T24190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 845.551369][T24190] Call Trace: [ 845.551378][T24190] [ 845.551388][T24190] __dump_stack+0x1d/0x30 [ 845.551476][T24190] dump_stack_lvl+0x95/0xd0 [ 845.551503][T24190] dump_stack+0x15/0x1b [ 845.551532][T24190] should_fail_ex+0x263/0x280 [ 845.551564][T24190] should_fail+0xb/0x20 [ 845.551616][T24190] should_fail_usercopy+0x1a/0x20 [ 845.551649][T24190] _copy_to_user+0x20/0xa0 [ 845.551729][T24190] simple_read_from_buffer+0xb5/0x130 [ 845.551762][T24190] proc_fail_nth_read+0x10e/0x150 [ 845.551803][T24190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.551873][T24190] vfs_read+0x1ab/0x7f0 [ 845.551942][T24190] ? _raw_spin_unlock+0x9/0x30 [ 845.551973][T24190] ? finish_task_switch+0x7d/0x280 [ 845.552020][T24190] ? xfd_validate_state+0x45/0xf0 [ 845.552098][T24190] ksys_read+0xdc/0x1a0 [ 845.552220][T24190] __x64_sys_read+0x40/0x50 [ 845.552263][T24190] x64_sys_call+0x2886/0x3020 [ 845.552300][T24190] do_syscall_64+0x12c/0x370 [ 845.552328][T24190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.552391][T24190] RIP: 0033:0x7f50bdedcfce [ 845.552469][T24190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 845.552493][T24190] RSP: 002b:00007f50bc976fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.552519][T24190] RAX: ffffffffffffffda RBX: 00007f50bc9776c0 RCX: 00007f50bdedcfce [ 845.552553][T24190] RDX: 000000000000000f RSI: 00007f50bc9770a0 RDI: 0000000000000005 [ 845.552570][T24190] RBP: 00007f50bc977090 R08: 0000000000000000 R09: 0000000000000000 [ 845.552657][T24190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.552674][T24190] R13: 00007f50be196038 R14: 00007f50be195fa0 R15: 00007ffebf257468 [ 845.552728][T24190] [ 845.817661][T21053] EXT4-fs unmount: 9 callbacks suppressed [ 845.817680][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.829080][T24194] set_capacity_and_notify: 5 callbacks suppressed [ 845.829141][T24194] loop2: detected capacity change from 0 to 512 [ 845.910884][T24194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 845.926417][T24194] ext4 filesystem being mounted at /240/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 845.939376][T24194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.948668][T24194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.977946][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5758'. [ 845.994472][T24194] vlan2: entered promiscuous mode [ 846.384551][T24210] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5764'. [ 846.783953][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 846.794532][T24219] loop3: detected capacity change from 0 to 512 [ 846.805668][T24219] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 846.818396][T24219] EXT4-fs (loop3): 1 truncate cleaned up [ 846.827745][T24219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.864293][T24219] netlink: 'syz.3.5766': attribute type 3 has an invalid length. [ 846.877924][T24219] netlink: 'syz.3.5766': attribute type 3 has an invalid length. [ 846.886084][T24219] netlink: 199656 bytes leftover after parsing attributes in process `syz.3.5766'. [ 846.896883][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 846.896896][ T28] audit: type=1400 audit(2000001563.791:9326): avc: denied { watch } for pid=24218 comm="syz.3.5766" path="/132/file2" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 847.101617][ T28] audit: type=1400 audit(2000001563.981:9327): avc: denied { write } for pid=24222 comm="syz.2.5767" name="file0" dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.230447][ T28] audit: type=1400 audit(2000001563.981:9328): avc: denied { open } for pid=24222 comm="syz.2.5767" path="/241/file0" dev="tmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 847.833826][T24230] loop4: detected capacity change from 0 to 128 [ 847.994342][T24233] loop5: detected capacity change from 0 to 128 [ 848.084788][ T28] audit: type=1400 audit(2000001563.981:9329): avc: denied { ioctl } for pid=24222 comm="syz.2.5767" path="/241/file0" dev="tmpfs" ino=1297 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 848.104375][T24233] /dev/loop5: Can't open blockdev [ 848.312082][T24246] netlink: 'syz.4.5777': attribute type 3 has an invalid length. [ 848.366091][T24248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.381964][T24246] loop4: detected capacity change from 0 to 512 [ 848.395430][T24248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.453975][T24219] __vm_enough_memory: pid: 24219, comm: syz.3.5766, bytes: 11727193600000 not enough memory for the allocation [ 848.469628][T24219] IPv6: NLM_F_CREATE should be specified when creating new route [ 848.477599][T24219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.481622][T24246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 848.484843][T24219] IPv6: NLM_F_CREATE should be set when creating new route [ 848.516415][T24246] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 848.531453][T24250] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5779'. [ 848.613037][T24246] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 848.693730][ T28] audit: type=1400 audit(2000001565.570:9330): avc: denied { ioctl } for pid=24259 comm="syz.2.5780" path="socket:[78104]" dev="sockfs" ino=78104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 848.757310][ T28] audit: type=1400 audit(2000001565.630:9331): avc: denied { getopt } for pid=24259 comm="syz.2.5780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 848.799666][ T28] audit: type=1400 audit(2000001565.630:9332): avc: denied { ioctl } for pid=24259 comm="syz.2.5780" path="socket:[78982]" dev="sockfs" ino=78982 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 849.030715][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.178856][T24274] loop3: detected capacity change from 0 to 128 [ 849.304791][ T28] audit: type=1400 audit(2000001566.160:9333): avc: denied { bind } for pid=24265 comm="syz.1.5781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 849.744052][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.873073][T24282] netlink: 'syz.1.5784': attribute type 3 has an invalid length. [ 851.793820][ T28] audit: type=1400 audit(2000001568.319:9334): avc: denied { append } for pid=24293 comm="syz.5.5788" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 853.095811][T24299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5790'. [ 853.146129][T24301] xfrm0 speed is unknown, defaulting to 1000 [ 853.515287][ T28] audit: type=1400 audit(2000001570.378:9335): avc: denied { checkpoint_restore } for pid=24300 comm="syz.2.5791" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 853.522782][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 853.554500][ T28] audit: type=1400 audit(2000001570.398:9336): avc: denied { setattr } for pid=24300 comm="syz.2.5791" name="TIPC" dev="sockfs" ino=79095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 853.585843][T24306] loop5: detected capacity change from 0 to 512 [ 853.689372][T24307] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 853.747773][T24306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 853.766417][T24313] xfrm0 speed is unknown, defaulting to 1000 [ 853.793479][T24306] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.801692][ T28] audit: type=1400 audit(2000001570.678:9337): avc: denied { wake_alarm } for pid=24310 comm="syz.1.5795" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 853.846419][T24306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 853.888251][T24306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.918897][T24324] loop3: detected capacity change from 0 to 512 [ 853.922910][ T28] audit: type=1400 audit(2000001570.727:9338): avc: denied { bind } for pid=24310 comm="syz.1.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 853.941871][T24324] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.5798: inode has both inline data and extents flags [ 853.974113][T24324] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 853.981847][T24324] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.5798: couldn't read orphan inode 15 (err -117) [ 853.991077][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 853.991100][ C1] EXT4-fs (loop3): initial error at time 2000001570: ext4_orphan_get:1391: inode 15 [ 853.991129][ C1] EXT4-fs (loop3): last error at time 2000001570: ext4_orphan_get:1391: inode 15 [ 854.028798][T24330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5793'. [ 854.038484][T24324] loop3: lost filesystem error report for type 5 error -117 [ 854.039512][T24324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000070000 r/w without journal. Quota mode: writeback. [ 854.049181][T24330] vlan2: entered promiscuous mode [ 854.076679][ T28] audit: type=1400 audit(2000001570.957:9339): avc: denied { setattr } for pid=24323 comm="syz.3.5798" name="cpuset.memory_pressure_enabled" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 854.126219][T24334] FAULT_INJECTION: forcing a failure. [ 854.126219][T24334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.139489][T24334] CPU: 1 UID: 0 PID: 24334 Comm: syz.4.5800 Tainted: G W syzkaller #0 PREEMPT(full) [ 854.139586][T24334] Tainted: [W]=WARN [ 854.139593][T24334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 854.139606][T24334] Call Trace: [ 854.139612][T24334] [ 854.139619][T24334] __dump_stack+0x1d/0x30 [ 854.139651][T24334] dump_stack_lvl+0x95/0xd0 [ 854.139755][T24334] dump_stack+0x15/0x1b [ 854.139815][T24334] should_fail_ex+0x263/0x280 [ 854.139845][T24334] should_fail+0xb/0x20 [ 854.139864][T24334] should_fail_usercopy+0x1a/0x20 [ 854.139948][T24334] _copy_from_iter+0xcf/0xea0 [ 854.139979][T24334] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 854.140057][T24334] ? __build_skb+0x43/0x220 [ 854.140131][T24334] ? __build_skb+0x1b3/0x220 [ 854.140155][T24334] ? is_vmalloc_addr+0x37/0x90 [ 854.140176][T24334] netlink_sendmsg+0x4ae/0x6f0 [ 854.140262][T24334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.140296][T24334] __sys_sendto+0x470/0x4d0 [ 854.140383][T24334] __x64_sys_sendto+0x76/0x90 [ 854.140485][T24334] x64_sys_call+0x2d35/0x3020 [ 854.140526][T24334] do_syscall_64+0x12c/0x370 [ 854.140554][T24334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.140583][T24334] RIP: 0033:0x7f86e1d4c799 [ 854.140658][T24334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.140677][T24334] RSP: 002b:00007f86e07a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 854.140699][T24334] RAX: ffffffffffffffda RBX: 00007f86e1fc5fa0 RCX: 00007f86e1d4c799 [ 854.140715][T24334] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000006 [ 854.140750][T24334] RBP: 00007f86e07a7090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 854.140763][T24334] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 854.140777][T24334] R13: 00007f86e1fc6038 R14: 00007f86e1fc5fa0 R15: 00007fffe2412ed8 [ 854.140802][T24334] [ 854.365800][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000070000. [ 854.404824][T24339] xfrm0 speed is unknown, defaulting to 1000 [ 854.938127][T24342] loop3: detected capacity change from 0 to 128 [ 854.948098][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 854.966235][ T28] audit: type=1400 audit(2000001571.847:9340): avc: denied { mounton } for pid=24345 comm="syz.1.5804" path="/373/file0" dev="tmpfs" ino=1963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 855.030834][T24350] netlink: 'syz.5.5805': attribute type 3 has an invalid length. [ 855.056346][T24346] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 855.112690][T24350] loop5: detected capacity change from 0 to 512 [ 855.133245][ T36] Bluetooth: hci1: Frame reassembly failed (-84) [ 855.179668][T24354] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 855.271274][T24350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.300239][T24360] loop3: detected capacity change from 0 to 4096 [ 855.315481][T24350] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.350809][T24360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.373562][ T28] audit: type=1400 audit(2000001572.257:9341): avc: denied { setattr } for pid=24359 comm="syz.3.5807" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 855.410144][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.465511][T24369] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 855.555152][ T3559] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 855.589965][T24377] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5811'. [ 855.606240][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.945607][T24390] xfrm0 speed is unknown, defaulting to 1000 [ 855.953743][T24379] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5812'. [ 855.997815][T24391] 9p: Bad value for 'rfdno' [ 856.105667][T24392] xfrm0 speed is unknown, defaulting to 1000 [ 856.586685][T24403] loop2: detected capacity change from 0 to 512 [ 856.606406][T24403] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 856.626154][T24403] EXT4-fs (loop2): 1 truncate cleaned up [ 856.639821][T24403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.685829][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.737436][T24409] netlink: 'syz.2.5820': attribute type 3 has an invalid length. [ 856.810639][T24409] loop2: detected capacity change from 0 to 512 [ 856.873639][T24409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.886965][T24409] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 856.932375][T24409] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 856.967354][T24418] loop3: detected capacity change from 0 to 128 [ 856.980104][T24418] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.5822'. [ 856.989453][T24418] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.5822'. [ 857.003804][T24418] vhci_hcd vhci_hcd.4: invalid port number 254 [ 857.010129][T24418] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 857.155738][T24353] Bluetooth: hci1: command 0x1003 tx timeout [ 857.162165][ T3821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 857.255915][T24422] loop5: detected capacity change from 0 to 512 [ 857.361799][T24422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 857.422707][T24422] ext4 filesystem being mounted at /171/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.441878][T24422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.465603][T24422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.551448][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.571420][T24431] loop4: detected capacity change from 0 to 1024 [ 857.601928][T24431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.689115][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.762375][T24438] netlink: 5028 bytes leftover after parsing attributes in process `syz.1.5824'. [ 857.772259][T24438] netlink: 5028 bytes leftover after parsing attributes in process `syz.1.5824'. [ 857.789445][ T28] audit: type=1400 audit(2000001574.665:9342): avc: denied { bind } for pid=24434 comm="syz.2.5827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 857.816125][T24441] vhci_hcd vhci_hcd.4: invalid port number 254 [ 857.822359][T24441] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 858.231993][T24446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 858.252395][T24446] EXT4-fs (loop2): 1 truncate cleaned up [ 858.258955][T24446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.280806][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 858.418866][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.428702][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5835'. [ 858.455699][T24455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 858.532279][T24466] netlink: 'syz.5.5839': attribute type 3 has an invalid length. [ 858.632161][T24466] set_capacity_and_notify: 4 callbacks suppressed [ 858.632209][T24466] loop5: detected capacity change from 0 to 512 [ 858.722851][T24474] loop2: detected capacity change from 0 to 128 [ 858.735296][T24474] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5838'. [ 858.744685][T24474] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5838'. [ 858.790657][T24475] vhci_hcd vhci_hcd.4: invalid port number 254 [ 858.797010][T24475] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 858.929020][T24478] loop3: detected capacity change from 0 to 128 [ 859.053957][T24466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 859.149804][T24479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 859.172534][T24466] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.213396][T24479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 859.286122][T24488] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 859.454354][T24487] loop3: detected capacity change from 0 to 512 [ 859.501052][T24495] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5846'. [ 859.510648][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.510670][T24495] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.5846'. [ 859.796532][T24505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24505 comm=syz.5.5850 [ 859.877311][T24507] loop2: detected capacity change from 0 to 128 [ 859.884679][T24507] ext4: Unknown parameter 'func' [ 859.925979][T24507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5849'. [ 859.964295][ T28] audit: type=1400 audit(2000001576.844:9343): avc: denied { execute_no_trans } for pid=24501 comm="syz.2.5849" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=78492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 860.050757][T24487] EXT4-fs (loop3): 1 orphan inode deleted [ 860.112941][T24487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 860.288556][T24511] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5851'. [ 860.323185][ T28] audit: type=1400 audit(2000001577.204:9344): avc: denied { write } for pid=24512 comm="syz.1.5852" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 860.515564][T24518] loop5: detected capacity change from 0 to 128 [ 860.618049][T24524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5855'. [ 860.639388][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.705984][T24532] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.5858'. [ 860.728109][T24532] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.5858'. [ 860.738268][T24529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.746767][T24529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.806463][T24534] netlink: 'syz.5.5861': attribute type 2 has an invalid length. [ 860.844148][T24538] vlan2: entered promiscuous mode [ 860.897695][ T28] audit: type=1400 audit(2000001577.774:9345): avc: denied { read write } for pid=24541 comm="syz.3.5864" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 860.924414][ T28] audit: type=1400 audit(2000001577.774:9346): avc: denied { open } for pid=24541 comm="syz.3.5864" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 861.074166][T24548] loop2: detected capacity change from 0 to 128 [ 861.097701][T24548] vhci_hcd vhci_hcd.4: invalid port number 254 [ 861.112455][T24548] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 861.133578][T24550] loop3: detected capacity change from 0 to 128 [ 861.323954][T24565] loop3: detected capacity change from 0 to 128 [ 861.583248][T24592] loop3: detected capacity change from 0 to 128 [ 861.661103][T24597] netlink: 'syz.1.5882': attribute type 9 has an invalid length. [ 861.721088][ T28] audit: type=1326 audit(2000001578.593:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791f7c799 code=0x7ffc0000 [ 861.765894][ T28] audit: type=1326 audit(2000001578.593:9348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791f7c799 code=0x7ffc0000 [ 861.799014][T24599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 861.830559][ T28] audit: type=1326 audit(2000001578.593:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1791f7c799 code=0x7ffc0000 [ 861.843927][T24599] ext4 filesystem being mounted at /163/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 861.854458][ T28] audit: type=1326 audit(2000001578.593:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791f7c799 code=0x7ffc0000 [ 861.854498][ T28] audit: type=1326 audit(2000001578.593:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1791f7c799 code=0x7ffc0000 [ 861.854605][ T28] audit: type=1326 audit(2000001578.593:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz.1.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1791f7c799 code=0x7ffc0000 [ 861.950166][T24589] EXT4-fs (loop4): 1 orphan inode deleted [ 861.950694][T24599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.952221][T24599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.972915][T24589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.008897][T24599] vlan3: entered promiscuous mode [ 862.237440][T24628] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 862.314454][T24629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.378832][T24629] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.420554][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.547106][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 862.634520][T24641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 862.660599][T24641] ext4 filesystem being mounted at /164/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 862.682709][T24641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.692903][T24641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.731767][T24641] vlan4: entered promiscuous mode [ 862.765900][T24641] ip6gretap0: entered promiscuous mode [ 862.916792][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.017049][T24658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 863.039117][T24656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 863.061572][T24658] EXT4-fs (loop2): 1 truncate cleaned up [ 863.077517][T24656] ext4 filesystem being mounted at /249/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.090976][T24658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.114053][T24656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.133285][T24656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.168437][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.233945][T24656] vlan2: entered promiscuous mode [ 863.290359][T24666] netlink: 'syz.2.5903': attribute type 3 has an invalid length. [ 863.389101][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 863.447130][T24666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.473453][T24672] __nla_validate_parse: 14 callbacks suppressed [ 863.473469][T24672] netlink: 5028 bytes leftover after parsing attributes in process `syz.5.5898'. [ 863.511836][T24666] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 863.537008][T24673] vhci_hcd vhci_hcd.4: invalid port number 254 [ 863.549686][T24672] netlink: 5028 bytes leftover after parsing attributes in process `syz.5.5898'. [ 863.556944][T24673] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 863.620016][T24666] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 863.805217][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 863.872498][T24688] xt_CT: You must specify a L4 protocol and not use inversions on it [ 865.014341][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 865.475844][T24701] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5911'. [ 865.745124][T24695] set_capacity_and_notify: 10 callbacks suppressed [ 865.745143][T24695] loop3: detected capacity change from 0 to 512 [ 865.828077][T24695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 865.892189][T24695] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 865.944868][T24713] loop5: detected capacity change from 0 to 128 [ 866.083620][T24719] netlink: 'syz.5.5916': attribute type 3 has an invalid length. [ 866.240766][T24723] loop2: detected capacity change from 0 to 128 [ 866.573144][T24719] loop5: detected capacity change from 0 to 512 [ 866.603095][T24725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5913'. [ 866.705603][T24719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.736192][T24719] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.783726][T24719] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 867.069778][T24740] loop2: detected capacity change from 0 to 512 [ 867.102517][T24740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 867.135670][T24740] EXT4-fs (loop2): 1 truncate cleaned up [ 867.150676][T24740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.273132][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.283968][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.294256][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.344977][T24746] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5922'. [ 867.366698][T24747] loop3: detected capacity change from 0 to 512 [ 867.397904][T24750] FAULT_INJECTION: forcing a failure. [ 867.397904][T24750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.413459][T24750] CPU: 1 UID: 0 PID: 24750 Comm: syz.4.5924 Tainted: G W syzkaller #0 PREEMPT(full) [ 867.413537][T24750] Tainted: [W]=WARN [ 867.413547][T24750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 867.413562][T24750] Call Trace: [ 867.413570][T24750] [ 867.413624][T24750] __dump_stack+0x1d/0x30 [ 867.413673][T24750] dump_stack_lvl+0x95/0xd0 [ 867.413696][T24750] dump_stack+0x15/0x1b [ 867.413721][T24750] should_fail_ex+0x263/0x280 [ 867.413751][T24750] should_fail+0xb/0x20 [ 867.413898][T24750] should_fail_usercopy+0x1a/0x20 [ 867.413925][T24750] _copy_from_user+0x1c/0xb0 [ 867.413953][T24750] ___sys_sendmsg+0xc1/0x1e0 [ 867.414053][T24750] __x64_sys_sendmsg+0xd4/0x160 [ 867.414099][T24750] x64_sys_call+0x194c/0x3020 [ 867.414196][T24750] do_syscall_64+0x12c/0x370 [ 867.414224][T24750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.414253][T24750] RIP: 0033:0x7f86e1d4c799 [ 867.414274][T24750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.414346][T24750] RSP: 002b:00007f86e07a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.414373][T24750] RAX: ffffffffffffffda RBX: 00007f86e1fc5fa0 RCX: 00007f86e1d4c799 [ 867.414422][T24750] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 867.414441][T24750] RBP: 00007f86e07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 867.414458][T24750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.414474][T24750] R13: 00007f86e1fc6038 R14: 00007f86e1fc5fa0 R15: 00007fffe2412ed8 [ 867.414500][T24750] [ 867.420719][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 867.420736][ T28] audit: type=1326 audit(2000001584.290:9398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.614097][ T28] audit: type=1326 audit(2000001584.390:9399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.644673][T24747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 867.657488][ T28] audit: type=1326 audit(2000001584.470:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.681598][ T28] audit: type=1326 audit(2000001584.470:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.693967][T24747] ext4 filesystem being mounted at /169/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 867.705374][ T28] audit: type=1326 audit(2000001584.470:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.738765][T24743] loop2: detected capacity change from 0 to 512 [ 867.745737][ T28] audit: type=1326 audit(2000001584.470:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.801488][ T28] audit: type=1326 audit(2000001584.470:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.825475][T24754] loop4: detected capacity change from 0 to 512 [ 867.839327][T24747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 867.851814][ T28] audit: type=1326 audit(2000001584.470:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.880027][T24747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 867.905990][ T28] audit: type=1326 audit(2000001584.470:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.930330][ T28] audit: type=1326 audit(2000001584.470:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.5.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 867.962833][T24747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5923'. [ 867.987183][T24747] vlan4: entered promiscuous mode [ 867.993145][T24754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 868.032612][T24754] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 868.060852][T24743] EXT4-fs (loop2): 1 orphan inode deleted [ 868.133606][T24743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.157682][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.259242][T24764] SELinux: policydb version -1405755658 does not match my version range 15-35 [ 868.278566][T24764] SELinux: failed to load policy [ 868.323999][T24766] loop4: detected capacity change from 0 to 512 [ 868.345025][T24766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 868.380473][T24766] EXT4-fs (loop4): 1 truncate cleaned up [ 868.389590][T24766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 868.430380][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.492676][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.679894][T24773] loop2: detected capacity change from 0 to 128 [ 869.079751][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 869.926717][T24777] netlink: 'syz.3.5932': attribute type 3 has an invalid length. [ 870.155697][T24780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.195454][T24780] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 870.650650][T24780] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 870.758297][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 870.769526][T24797] set_capacity_and_notify: 1 callbacks suppressed [ 870.769547][T24797] loop5: detected capacity change from 0 to 4096 [ 870.819478][T24802] loop3: detected capacity change from 0 to 128 [ 870.832526][T24797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.986157][T24808] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 871.037860][T24808] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 871.114202][T24807] loop2: detected capacity change from 0 to 512 [ 871.259703][T24822] loop3: detected capacity change from 0 to 128 [ 871.316985][T24807] EXT4-fs (loop2): 1 orphan inode deleted [ 871.341953][T24807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 871.596702][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.864438][T24830] loop5: detected capacity change from 0 to 128 [ 872.867455][T24833] loop3: detected capacity change from 0 to 512 [ 872.876216][T24833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 873.169452][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.201707][T24833] EXT4-fs (loop3): 1 truncate cleaned up [ 873.220911][T24836] loop5: detected capacity change from 0 to 512 [ 873.228433][T24833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 873.251285][T24836] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.295970][T24836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.315576][T24836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.352104][T24836] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5947'. [ 873.363904][T24836] vlan2: entered promiscuous mode [ 873.414741][T24840] loop3: detected capacity change from 0 to 128 [ 873.460819][T24842] netlink: 'syz.2.5946': attribute type 3 has an invalid length. [ 873.518739][T24843] loop2: detected capacity change from 0 to 512 [ 873.554545][T24843] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.697857][T24842] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 874.056079][T24861] loop5: detected capacity change from 0 to 512 [ 874.139448][T24861] ext4 filesystem being mounted at /193/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 874.178464][T24861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.200187][T24861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.217735][T24866] syzkaller1: entered promiscuous mode [ 874.223692][T24866] syzkaller1: entered allmulticast mode [ 874.287199][T24870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5953'. [ 874.341101][T24870] vlan3: entered promiscuous mode [ 874.493505][T24878] netlink: 'syz.1.5958': attribute type 3 has an invalid length. [ 874.804446][T24889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=24889 comm=syz.4.5962 [ 875.662432][T24872] EXT4-fs (loop2): 1 orphan inode deleted [ 876.099702][T21053] EXT4-fs unmount: 6 callbacks suppressed [ 876.099790][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 876.124551][T24872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 876.894256][T24908] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5966'. [ 876.905204][T24911] FAULT_INJECTION: forcing a failure. [ 876.905204][T24911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.942246][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.971735][T24911] CPU: 1 UID: 0 PID: 24911 Comm: syz.3.5969 Tainted: G W syzkaller #0 PREEMPT(full) [ 876.971826][T24911] Tainted: [W]=WARN [ 876.971835][T24911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 876.971852][T24911] Call Trace: [ 876.971862][T24911] [ 876.971869][T24911] __dump_stack+0x1d/0x30 [ 876.971909][T24911] dump_stack_lvl+0x95/0xd0 [ 876.971936][T24911] dump_stack+0x15/0x1b [ 876.971958][T24911] should_fail_ex+0x263/0x280 [ 876.971982][T24911] should_fail+0xb/0x20 [ 876.972021][T24911] should_fail_usercopy+0x1a/0x20 [ 876.972070][T24911] _copy_to_user+0x20/0xa0 [ 876.972107][T24911] simple_read_from_buffer+0xb5/0x130 [ 876.972165][T24911] proc_fail_nth_read+0x10e/0x150 [ 876.972245][T24911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 876.972280][T24911] vfs_read+0x1ab/0x7f0 [ 876.972385][T24911] ? sock_common_getsockopt+0x60/0x70 [ 876.972412][T24911] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 876.972452][T24911] ? do_sock_getsockopt+0x1c4/0x210 [ 876.972481][T24911] ksys_read+0xdc/0x1a0 [ 876.972524][T24911] __x64_sys_read+0x40/0x50 [ 876.972620][T24911] x64_sys_call+0x2886/0x3020 [ 876.972696][T24911] do_syscall_64+0x12c/0x370 [ 876.972735][T24911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.972759][T24911] RIP: 0033:0x7f3cd147cfce [ 876.972779][T24911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 876.972802][T24911] RSP: 002b:00007f3ccff0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 876.972845][T24911] RAX: ffffffffffffffda RBX: 00007f3ccff0f6c0 RCX: 00007f3cd147cfce [ 876.972864][T24911] RDX: 000000000000000f RSI: 00007f3ccff0f0a0 RDI: 0000000000000004 [ 876.972880][T24911] RBP: 00007f3ccff0f090 R08: 0000000000000000 R09: 0000000000000000 [ 876.972896][T24911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.972992][T24911] R13: 00007f3cd1736038 R14: 00007f3cd1735fa0 R15: 00007fff01daf718 [ 876.973071][T24911] [ 877.540226][T24919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5970'. [ 877.566950][T24919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 877.621293][T24923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=24923 comm=syz.3.5973 [ 877.851310][ T7124] Process accounting resumed [ 877.907951][T24931] set_capacity_and_notify: 1 callbacks suppressed [ 877.907971][T24931] loop3: detected capacity change from 0 to 512 [ 877.989239][T24931] EXT4-fs (loop3): 1 truncate cleaned up [ 878.090772][T24931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 878.145846][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.222502][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 878.222520][ T28] audit: type=1400 audit(2000001595.095:9462): avc: denied { bind } for pid=24943 comm="syz.3.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 878.345480][ T59] Bluetooth: hci0: Frame reassembly failed (-84) [ 878.360772][ T28] audit: type=1400 audit(2000001595.145:9463): avc: denied { setopt } for pid=24943 comm="syz.3.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 878.509035][T24946] loop4: detected capacity change from 0 to 512 [ 878.562777][T24946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.585721][T24946] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.994788][T24956] xfrm0 speed is unknown, defaulting to 1000 [ 879.112593][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.368499][T24353] Bluetooth: hci0: command 0x1003 tx timeout [ 880.374641][ T3821] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 880.400630][T24966] netlink: 'syz.2.5985': attribute type 3 has an invalid length. [ 880.453642][T24972] xfrm0 speed is unknown, defaulting to 1000 [ 880.472834][T24974] loop2: detected capacity change from 0 to 512 [ 880.567922][ T28] audit: type=1400 audit(2000001597.434:9464): avc: denied { watch watch_reads } for pid=24973 comm="syz.1.5988" path="/405/file1" dev="tmpfs" ino=2130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 880.601888][T24977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5988'. [ 880.639450][T24974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 880.733052][T24974] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.855949][T24988] tmpfs: Bad value for 'mpol' [ 880.945419][T24966] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 881.090618][T25000] loop5: detected capacity change from 0 to 128 [ 881.103681][T25002] loop4: detected capacity change from 0 to 512 [ 881.141725][T25000] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 881.166264][T24997] loop3: detected capacity change from 0 to 512 [ 881.168188][T25000] FAT-fs (loop5): Filesystem has been set read-only [ 881.185894][T25002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 881.203609][T25002] ext4 filesystem being mounted at /270/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.259054][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.288661][T25002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.303603][ T28] audit: type=1400 audit(2000001598.173:9465): avc: denied { connect } for pid=25008 comm="syz.5.5997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 881.308568][T25002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.438825][T25015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5996'. [ 881.467064][ T28] audit: type=1400 audit(2000001598.333:9466): avc: denied { bind } for pid=25012 comm="syz.2.5998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 881.484133][T25018] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 881.505341][T24997] EXT4-fs (loop3): 1 orphan inode deleted [ 881.513314][ T28] audit: type=1326 audit(2000001598.353:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25016 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 881.513350][ T28] audit: type=1326 audit(2000001598.353:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25016 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89febec799 code=0x7ffc0000 [ 881.513423][ T28] audit: type=1326 audit(2000001598.353:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25016 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89febacfce code=0x7ffc0000 [ 881.513503][ T28] audit: type=1326 audit(2000001598.353:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25016 comm="syz.5.5999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89febacfce code=0x7ffc0000 [ 881.650861][T24997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.688892][T25020] loop5: detected capacity change from 0 to 128 [ 881.891644][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.968220][T25029] bridge_slave_0: left allmulticast mode [ 881.981447][T25029] bridge_slave_0: left promiscuous mode [ 881.994358][T25029] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.017763][T25029] bridge_slave_1: left allmulticast mode [ 882.031300][T25029] bridge_slave_1: left promiscuous mode [ 882.043864][T25029] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.067017][T25029] bond0: (slave bond_slave_0): Releasing backup interface [ 882.085272][T25029] bond0: (slave bond_slave_1): Releasing backup interface [ 882.117241][T25029] team0: Port device team_slave_0 removed [ 882.215624][T25029] team0: Port device team_slave_1 removed [ 882.224047][T25029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 882.231677][T25029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.270801][T25038] netlink: 'syz.2.6006': attribute type 1 has an invalid length. [ 882.280574][T25029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.282197][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 882.288008][T25029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.307552][T25029] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 882.547894][T25038] bond1: entered promiscuous mode [ 882.590850][T25038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 882.717981][T25045] bond1: (slave bridge1): making interface the new active one [ 882.788011][T25045] bridge1: entered promiscuous mode [ 882.854292][T25045] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 882.867881][T25055] loop5: detected capacity change from 0 to 128 [ 883.056203][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6014'. [ 883.078235][T25061] netlink: 'syz.5.6013': attribute type 3 has an invalid length. [ 883.099810][T25059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.156417][T25047] syz_tun: entered allmulticast mode [ 883.194728][T25061] loop5: detected capacity change from 0 to 512 [ 883.229744][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 883.229761][ T28] audit: type=1326 audit(2000001600.102:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.298243][T25065] netlink: 'syz.4.6015': attribute type 2 has an invalid length. [ 883.346616][ T28] audit: type=1326 audit(2000001600.132:9491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.371286][ T28] audit: type=1326 audit(2000001600.142:9492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.400117][ T28] audit: type=1326 audit(2000001600.142:9493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.428767][ T28] audit: type=1326 audit(2000001600.142:9494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.463066][T25046] syz_tun: left allmulticast mode [ 883.480661][T25061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.512262][ T28] audit: type=1326 audit(2000001600.152:9495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.537799][T25061] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.591542][ T28] audit: type=1326 audit(2000001600.152:9496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.640951][ T28] audit: type=1326 audit(2000001600.152:9497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.645070][T25073] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 883.681705][ T28] audit: type=1326 audit(2000001600.152:9498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.749698][ T28] audit: type=1326 audit(2000001600.152:9499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25064 comm="syz.4.6015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 883.908157][T25082] loop3: detected capacity change from 0 to 512 [ 883.954912][T25082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 883.992386][T25082] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.078949][T25082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6017'. [ 884.104475][T25082] vlan4: entered promiscuous mode [ 884.191101][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 884.240902][T25070] loop2: detected capacity change from 0 to 512 [ 884.277634][T25070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 884.290550][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.325158][T25091] loop3: detected capacity change from 0 to 1024 [ 884.336010][T25070] ext4 filesystem being mounted at /286/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.371358][T25091] EXT4-fs: Ignoring removed bh option [ 884.377002][T25091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 884.390883][T25070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.410855][T25070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.437969][T25091] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 884.460507][T25091] System zones: 0-1, 3-36 [ 884.484657][T25091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 884.521442][T25070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6016'. [ 884.538507][T25070] vlan2: entered promiscuous mode [ 884.586422][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 884.629166][T25101] loop3: detected capacity change from 0 to 128 [ 884.670432][T25105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6025'. [ 884.681455][T25105] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.756155][T25108] netlink: 'syz.1.6026': attribute type 3 has an invalid length. [ 884.829546][T25113] FAULT_INJECTION: forcing a failure. [ 884.829546][T25113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.878238][T25113] CPU: 1 UID: 0 PID: 25113 Comm: syz.4.6028 Tainted: G W syzkaller #0 PREEMPT(full) [ 884.878329][T25113] Tainted: [W]=WARN [ 884.878338][T25113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.878355][T25113] Call Trace: [ 884.878363][T25113] [ 884.878373][T25113] __dump_stack+0x1d/0x30 [ 884.878408][T25113] dump_stack_lvl+0x95/0xd0 [ 884.878441][T25113] dump_stack+0x15/0x1b [ 884.878528][T25113] should_fail_ex+0x263/0x280 [ 884.878561][T25113] should_fail+0xb/0x20 [ 884.878587][T25113] should_fail_usercopy+0x1a/0x20 [ 884.878656][T25113] _copy_from_user+0x1c/0xb0 [ 884.878703][T25113] comm_write+0x74/0x1e0 [ 884.878738][T25113] ? __pfx_comm_write+0x10/0x10 [ 884.878769][T25113] vfs_write+0x269/0x9f0 [ 884.878839][T25113] ? __rcu_read_unlock+0x4e/0x70 [ 884.878873][T25113] ? __fget_files+0x184/0x1c0 [ 884.878905][T25113] ? mutex_lock+0x57/0x90 [ 884.878942][T25113] ksys_write+0xdc/0x1a0 [ 884.879005][T25113] __x64_sys_write+0x40/0x50 [ 884.879025][T25113] x64_sys_call+0x27e1/0x3020 [ 884.879061][T25113] do_syscall_64+0x12c/0x370 [ 884.879088][T25113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.879132][T25113] RIP: 0033:0x7f86e1d4c799 [ 884.879151][T25113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.879169][T25113] RSP: 002b:00007f86e07a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 884.879192][T25113] RAX: ffffffffffffffda RBX: 00007f86e1fc5fa0 RCX: 00007f86e1d4c799 [ 884.879211][T25113] RDX: 000000000000000b RSI: 0000200000000040 RDI: 0000000000000003 [ 884.879281][T25113] RBP: 00007f86e07a7090 R08: 0000000000000000 R09: 0000000000000000 [ 884.879294][T25113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.879310][T25113] R13: 00007f86e1fc6038 R14: 00007f86e1fc5fa0 R15: 00007fffe2412ed8 [ 884.879336][T25113] [ 885.338341][T25125] loop4: detected capacity change from 0 to 1024 [ 885.412895][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 885.426208][T25125] EXT4-fs: Ignoring removed bh option [ 885.463593][T25125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 885.598719][T25125] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 885.683585][T25125] System zones: 0-1, 3-36 [ 885.749709][T25125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.167351][T25148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.190282][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 886.228757][T25148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.332265][T25154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6041'. [ 886.429003][T25158] loop4: detected capacity change from 0 to 512 [ 887.029147][T25164] loop2: detected capacity change from 0 to 128 [ 887.176601][T25167] loop3: detected capacity change from 0 to 128 [ 887.352817][T25172] loop2: detected capacity change from 0 to 128 [ 887.380372][T25158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 887.475087][T25158] ext4 filesystem being mounted at /284/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 887.487962][T25158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.496785][T25158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.552260][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6045'. [ 887.687154][T25195] xfrm0 speed is unknown, defaulting to 1000 [ 887.721112][T25194] netlink: 'syz.2.6055': attribute type 2 has an invalid length. [ 887.745035][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6055'. [ 888.170766][T25212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.224930][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 888.286850][T25212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.783740][T25231] set_capacity_and_notify: 2 callbacks suppressed [ 888.783761][T25231] loop2: detected capacity change from 0 to 256 [ 888.815328][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 888.815344][ T28] audit: type=1400 audit(2000001605.679:9632): avc: denied { write } for pid=25223 comm="syz.4.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 888.905256][ T28] audit: type=1400 audit(2000001605.709:9633): avc: denied { read } for pid=25223 comm="syz.4.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 888.990542][ T28] audit: type=1400 audit(2000001605.759:9634): avc: denied { setopt } for pid=25239 comm="syz.3.6073" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 889.021588][T25242] loop3: detected capacity change from 0 to 512 [ 889.072412][T25242] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 889.078470][ T28] audit: type=1400 audit(2000001605.939:9635): avc: denied { create } for pid=25245 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 889.104164][T25242] EXT4-fs (loop3): 1 truncate cleaned up [ 889.105964][T25246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.119867][T25242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 889.144480][T25246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.161601][ T28] audit: type=1400 audit(2000001605.969:9636): avc: denied { setopt } for pid=25245 comm="syz.1.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 889.236739][ T28] audit: type=1400 audit(2000001606.069:9637): avc: denied { create } for pid=25249 comm="syz.4.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 889.291694][ T28] audit: type=1400 audit(2000001606.069:9638): avc: denied { setopt } for pid=25249 comm="syz.4.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 889.312822][ T28] audit: type=1400 audit(2000001606.069:9639): avc: denied { add_name } for pid=25239 comm="syz.3.6073" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 889.358380][ T28] audit: type=1400 audit(2000001606.069:9640): avc: denied { create } for pid=25239 comm="syz.3.6073" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 889.385668][ T28] audit: type=1400 audit(2000001606.079:9642): avc: denied { read } for pid=25249 comm="syz.4.6076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 889.609900][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.651221][T25261] FAULT_INJECTION: forcing a failure. [ 889.651221][T25261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 889.674813][T25261] CPU: 0 UID: 0 PID: 25261 Comm: syz.3.6079 Tainted: G W syzkaller #0 PREEMPT(full) [ 889.674916][T25261] Tainted: [W]=WARN [ 889.674993][T25261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 889.675006][T25261] Call Trace: [ 889.675013][T25261] [ 889.675022][T25261] __dump_stack+0x1d/0x30 [ 889.675081][T25261] dump_stack_lvl+0x95/0xd0 [ 889.675143][T25261] dump_stack+0x15/0x1b [ 889.675195][T25261] should_fail_ex+0x263/0x280 [ 889.675226][T25261] should_fail+0xb/0x20 [ 889.675251][T25261] should_fail_usercopy+0x1a/0x20 [ 889.675285][T25261] _copy_from_user+0x1c/0xb0 [ 889.675377][T25261] __sys_bpf+0x183/0x7e0 [ 889.675406][T25261] __x64_sys_bpf+0x41/0x50 [ 889.675524][T25261] x64_sys_call+0x10cb/0x3020 [ 889.675558][T25261] do_syscall_64+0x12c/0x370 [ 889.675587][T25261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.675741][T25261] RIP: 0033:0x7f3cd14bc799 [ 889.675757][T25261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.675788][T25261] RSP: 002b:00007f3ccff0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 889.675876][T25261] RAX: ffffffffffffffda RBX: 00007f3cd1735fa0 RCX: 00007f3cd14bc799 [ 889.675892][T25261] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 889.675960][T25261] RBP: 00007f3ccff0f090 R08: 0000000000000000 R09: 0000000000000000 [ 889.675978][T25261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.675994][T25261] R13: 00007f3cd1736038 R14: 00007f3cd1735fa0 R15: 00007fff01daf718 [ 889.676035][T25261] [ 890.462041][T25278] loop5: detected capacity change from 0 to 256 [ 890.469192][T25277] netlink: 'syz.4.6085': attribute type 3 has an invalid length. [ 890.511045][T25279] loop3: detected capacity change from 0 to 512 [ 890.565634][T25279] EXT4-fs (loop3): 1 orphan inode deleted [ 890.571883][T25279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.607389][T25277] loop4: detected capacity change from 0 to 512 [ 890.720683][T25277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.745152][T25277] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 890.761518][T25287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.770743][T25287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.840744][T25292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6088'. [ 890.853381][T25293] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 890.872714][T25292] vlan2: entered promiscuous mode [ 890.926160][T25295] xfrm0 speed is unknown, defaulting to 1000 [ 891.138022][T25301] loop2: detected capacity change from 0 to 128 [ 891.150739][T25301] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.6090'. [ 891.160185][T25301] netlink: 5028 bytes leftover after parsing attributes in process `syz.2.6090'. [ 891.206231][T25302] vhci_hcd vhci_hcd.4: invalid port number 254 [ 891.212528][T25302] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 891.582610][T25304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 891.605004][T25304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.619924][T25304] ip6gre1: entered promiscuous mode [ 891.629122][T25304] ip6gre1: entered allmulticast mode [ 891.671644][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.716446][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.844916][T25311] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 893.901465][T25325] loop2: detected capacity change from 0 to 128 [ 893.901732][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 893.901780][ T28] audit: type=1400 audit(2000001610.767:9664): avc: denied { sqpoll } for pid=25328 comm="syz.4.6099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 894.050651][ T28] audit: type=1326 audit(2000001610.907:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.144992][ T28] audit: type=1326 audit(2000001610.917:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.185139][T25338] netlink: 'syz.2.6102': attribute type 3 has an invalid length. [ 894.194148][T25333] sg_read: process 857 (syz.4.6099) changed security contexts after opening file descriptor, this is not allowed. [ 894.216969][T25341] loop3: detected capacity change from 0 to 128 [ 894.243760][ T28] audit: type=1326 audit(2000001610.917:9667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.314865][T25341] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.6100'. [ 894.337468][T25341] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.6100'. [ 894.355377][ T28] audit: type=1326 audit(2000001610.917:9668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.397210][T25342] vhci_hcd vhci_hcd.4: invalid port number 254 [ 894.403434][T25342] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 894.429765][ T28] audit: type=1400 audit(2000001610.917:9669): avc: denied { create } for pid=25328 comm="syz.4.6099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 894.431619][T25338] loop2: detected capacity change from 0 to 512 [ 894.487606][ T28] audit: type=1326 audit(2000001610.917:9670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.563795][ T28] audit: type=1326 audit(2000001610.967:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.639068][ T28] audit: type=1326 audit(2000001610.967:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.669202][ T28] audit: type=1326 audit(2000001610.967:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25328 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86e1d4c799 code=0x7ffc0000 [ 894.676787][T25338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.803261][T25346] xfrm0 speed is unknown, defaulting to 1000 [ 894.825523][T25338] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.977185][T25338] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 895.131017][T25351] loop4: detected capacity change from 0 to 512 [ 895.327945][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.353440][T25357] loop2: detected capacity change from 0 to 512 [ 895.362995][T25351] EXT4-fs (loop4): 1 orphan inode deleted [ 895.378477][T25357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 895.410776][T25357] ext4 filesystem being mounted at /303/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.424982][T25351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.450416][T25357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.485614][T25357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.567181][T25361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6104'. [ 895.591211][T25361] vlan3: entered promiscuous mode [ 895.601911][T25361] syz_tun: entered promiscuous mode [ 895.636050][T25363] netlink: 'syz.5.6105': attribute type 3 has an invalid length. [ 895.711401][T25363] loop5: detected capacity change from 0 to 512 [ 895.794188][T25363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.814694][T25369] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6107'. [ 895.825008][T25363] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.875745][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.889420][T25371] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6108'. [ 895.949403][T25363] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 895.963071][T25373] syzkaller0: entered promiscuous mode [ 895.969937][T25373] syzkaller0: entered allmulticast mode [ 897.230791][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 897.950821][T25392] netlink: 'syz.2.6113': attribute type 3 has an invalid length. [ 897.977656][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.009605][T25390] loop3: detected capacity change from 0 to 512 [ 898.021736][T25388] loop4: detected capacity change from 0 to 128 [ 898.056403][T25390] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 898.076431][T25392] loop2: detected capacity change from 0 to 512 [ 898.132084][T25390] EXT4-fs (loop3): 1 truncate cleaned up [ 898.171891][T25390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.278201][T25392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 898.308082][T25392] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 898.425562][T25403] loop4: detected capacity change from 0 to 256 [ 898.475550][T25407] xfrm0 speed is unknown, defaulting to 1000 [ 898.498574][T25392] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 898.526858][T25409] netlink: 'syz.3.6114': attribute type 10 has an invalid length. [ 898.567565][T25412] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6118'. [ 898.616606][T25409] veth0_vlan: left promiscuous mode [ 898.636571][T25409] veth0_vlan: entered promiscuous mode [ 898.688362][T25409] team0: Device veth0_vlan failed to register rx_handler [ 898.761478][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.848661][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.905915][T25414] EXT4-fs (loop4): 1 orphan inode deleted [ 898.930126][T25420] set_capacity_and_notify: 1 callbacks suppressed [ 898.930148][T25420] loop2: detected capacity change from 0 to 1024 [ 898.960563][T25414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.991665][T25420] EXT4-fs: Ignoring removed bh option [ 899.000025][T25420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 899.031294][T25420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 899.041839][T25420] System zones: 0-1, 3-36 [ 899.052739][T25420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.106137][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 899.106155][ T28] audit: type=1400 audit(2000001615.964:9700): avc: denied { execute } for pid=25419 comm="syz.2.6121" dev="tmpfs" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 899.156052][ T28] audit: type=1400 audit(2000001615.964:9701): avc: denied { execute_no_trans } for pid=25419 comm="syz.2.6121" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 899.247575][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 899.332663][T25434] loop2: detected capacity change from 0 to 512 [ 899.510904][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.126290][T25434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 900.328907][T25434] ext4 filesystem being mounted at /306/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 900.341599][T25434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.357130][T25434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.348424][ T28] audit: type=1400 audit(2000001618.203:9702): avc: denied { create } for pid=25451 comm="syz.4.6130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 901.813334][T25456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6123'. [ 901.900406][T25456] vlan3: entered promiscuous mode [ 901.926880][T25454] xfrm0 speed is unknown, defaulting to 1000 [ 903.139377][T25472] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6129'. [ 903.157388][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 903.231578][T25478] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6138'. [ 903.281260][T25480] loop2: detected capacity change from 0 to 128 [ 903.321207][T25480] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 903.358478][T25474] loop5: detected capacity change from 0 to 512 [ 903.469541][T25480] ext4 filesystem being mounted at /308/ supports timestamps until 2038-01-19 (0x7fffffff) [ 904.531796][T25493] loop4: detected capacity change from 0 to 128 [ 904.627707][T25474] EXT4-fs (loop5): 1 orphan inode deleted [ 904.741219][T25474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 905.153471][T25501] loop4: detected capacity change from 0 to 128 [ 905.216029][T25504] netlink: 5028 bytes leftover after parsing attributes in process `syz.4.6143'. [ 905.226195][T25504] netlink: 5028 bytes leftover after parsing attributes in process `syz.4.6143'. [ 905.236198][T25504] vhci_hcd vhci_hcd.4: invalid port number 254 [ 905.242518][T25504] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 905.591017][T19448] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 905.648692][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.722593][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 905.741123][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 905.748879][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 905.789144][T25517] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6148'. [ 905.888189][T25511] infiniband syz2: set down [ 905.892822][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 905.928466][T25511] infiniband syz2: added ip6_vti0 [ 905.966212][T25511] RDS/IB: syz2: added [ 905.968321][T25526] loop5: detected capacity change from 0 to 128 [ 905.977893][T25511] smc: adding ib device syz2 with port count 1 [ 905.987821][T25511] smc: ib device syz2 port 1 has no pnetid [ 906.000760][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 906.017243][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 906.065797][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 906.122198][ T28] audit: type=1400 audit(2000001622.981:9703): avc: denied { create } for pid=25528 comm="syz.5.6153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 906.176033][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 906.310838][ T28] audit: type=1400 audit(2000001623.001:9704): avc: denied { write } for pid=25528 comm="syz.5.6153" path="socket:[82225]" dev="sockfs" ino=82225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 907.072809][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 907.113998][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 907.125444][T25542] loop3: detected capacity change from 0 to 512 [ 907.167514][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 907.218993][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 907.235461][T25542] EXT4-fs (loop3): 1 orphan inode deleted [ 907.242886][T25542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.286374][T25511] ip6_vti0 speed is unknown, defaulting to 1000 [ 907.410300][T25547] loop4: detected capacity change from 0 to 1024 [ 907.450990][T25547] EXT4-fs: Ignoring removed bh option [ 907.472127][T25547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 907.739748][T25547] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 907.763078][T25547] System zones: 0-1, 3-36 [ 907.788763][T25547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.826878][T25549] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6159'. [ 907.966431][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6165'. [ 908.082620][T21740] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.143953][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.264171][T25582] loop2: detected capacity change from 0 to 128 [ 908.268419][T25581] loop4: detected capacity change from 0 to 512 [ 908.269111][T25581] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 908.317634][ T28] audit: type=1400 audit(2000001625.170:9705): avc: denied { read } for pid=25569 comm="syz.5.6167" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 908.317690][ T28] audit: type=1400 audit(2000001625.170:9706): avc: denied { open } for pid=25569 comm="syz.5.6167" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 908.317719][ T28] audit: type=1400 audit(2000001625.170:9707): avc: denied { ioctl } for pid=25569 comm="syz.5.6167" path="/dev/usbmon6" dev="devtmpfs" ino=160 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 908.506495][T25583] loop5: detected capacity change from 0 to 2048 [ 908.562157][T25583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.810358][T25592] netlink: 'syz.1.6173': attribute type 3 has an invalid length. [ 908.868184][ T28] audit: type=1400 audit(2000001625.729:9708): avc: denied { remount } for pid=25588 comm="syz.1.6173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 908.932086][ T28] audit: type=1400 audit(2000001625.779:9709): avc: denied { bind } for pid=25589 comm="syz.4.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 908.941259][T25583] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.948910][T25570] xfrm0 speed is unknown, defaulting to 1000 [ 909.003814][T25591] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6174'. [ 909.009919][T25596] loop2: detected capacity change from 0 to 128 [ 909.090734][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6176'. [ 909.173942][T25604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6177'. [ 909.185581][T25570] ip6_vti0 speed is unknown, defaulting to 1000 [ 909.230172][T25608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6179'. [ 909.249482][T25608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6179'. [ 909.300787][ T28] audit: type=1400 audit(2000001626.149:9710): avc: denied { wake_alarm } for pid=25609 comm="syz.4.6181" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 909.451444][T25622] loop4: detected capacity change from 0 to 128 [ 909.582739][T25626] set_capacity_and_notify: 1 callbacks suppressed [ 909.582757][T25626] loop3: detected capacity change from 0 to 128 [ 909.899438][T25628] netlink: 'syz.5.6188': attribute type 3 has an invalid length. [ 910.039641][T25629] loop5: detected capacity change from 0 to 512 [ 910.082000][T25631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6189'. [ 910.125938][T25629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.155724][T25629] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 910.273637][T25635] sctp: [Deprecated]: syz.1.6190 (pid 25635) Use of int in max_burst socket option. [ 910.273637][T25635] Use struct sctp_assoc_value instead [ 910.347150][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6193'. [ 910.356445][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6193'. [ 910.372647][T25629] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 910.454351][ T28] audit: type=1400 audit(2000001627.309:9711): avc: denied { read write } for pid=25645 comm="syz.3.6192" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 910.490877][ T28] audit: type=1400 audit(2000001627.309:9712): avc: denied { open } for pid=25645 comm="syz.3.6192" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 910.583775][T25664] loop2: detected capacity change from 0 to 128 [ 910.653961][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.722283][T25668] netlink: 'syz.5.6200': attribute type 3 has an invalid length. [ 910.794386][T25668] loop5: detected capacity change from 0 to 512 [ 910.825750][T25666] loop2: detected capacity change from 0 to 512 [ 910.897799][T25671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 910.928813][T25666] EXT4-fs (loop2): 1 orphan inode deleted [ 910.957114][T25666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.984164][T25668] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.013608][T25668] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.632653][T25681] loop4: detected capacity change from 0 to 128 [ 912.646960][T25680] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 912.707261][T19448] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.788239][T25697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.824502][T21053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.874810][T25703] netlink: 'syz.1.6210': attribute type 3 has an invalid length. [ 912.892020][T25707] loop5: detected capacity change from 0 to 128 [ 912.906612][T25706] netlink: 'syz.4.6211': attribute type 3 has an invalid length. [ 913.043177][T25706] loop4: detected capacity change from 0 to 512 [ 913.053192][T25711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.079775][ T3002] ================================================================== [ 913.087926][ T3002] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 913.095014][ T3002] [ 913.097359][ T3002] read-write to 0xffff888125c56540 of 4 bytes by task 25457 on cpu 0: [ 913.105538][ T3002] d_delete+0xbe/0xe0 [ 913.109569][ T3002] d_delete_notify+0x32/0x100 [ 913.114287][ T3002] vfs_unlink+0x289/0x490 [ 913.118634][ T3002] filename_unlinkat+0x1e2/0x410 [ 913.123599][ T3002] __se_sys_unlink+0x2b/0xe0 [ 913.128241][ T3002] __x64_sys_unlink+0x1f/0x30 [ 913.132952][ T3002] x64_sys_call+0x2eb6/0x3020 [ 913.137677][ T3002] do_syscall_64+0x12c/0x370 [ 913.142303][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.148265][ T3002] [ 913.150614][ T3002] read to 0xffff888125c56540 of 4 bytes by task 3002 on cpu 1: [ 913.158177][ T3002] step_into_slowpath+0xea/0x4c0 [ 913.163157][ T3002] path_lookupat+0x330/0x500 [ 913.167810][ T3002] filename_lookup+0x190/0x390 [ 913.172615][ T3002] do_readlinkat+0x74/0x2f0 [ 913.177173][ T3002] __x64_sys_readlink+0x47/0x60 [ 913.182053][ T3002] x64_sys_call+0x2b51/0x3020 [ 913.186780][ T3002] do_syscall_64+0x12c/0x370 [ 913.191394][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.197325][ T3002] [ 913.199673][ T3002] value changed: 0x00300180 -> 0x00000080 [ 913.205408][ T3002] [ 913.207749][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 913.213924][ T3002] CPU: 1 UID: 0 PID: 3002 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 913.224392][ T3002] Tainted: [W]=WARN [ 913.228215][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.238298][ T3002] ================================================================== [ 913.250839][T25711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.474040][T25706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.553575][T25706] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 913.696605][T25706] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 914.020187][T18540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.