last executing test programs: 28m32.477275809s ago: executing program 32 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080003"], 0x44}}, 0x2000800) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @loopback}, {0x306, @local}, 0x3c, {0x2, 0x4e22, @remote}, 'ip6erspan0\x00'}) 28m20.60492625s ago: executing program 33 (id=1073): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xa}], 0x10, 0x500}}], 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000006c0)={&(0x7f0000000080), 0x43f, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000680)}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="040025bd702000e13604cbd8e0d3000380060007004e000006"], 0x30}}, 0x48040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 25m51.072285619s ago: executing program 34 (id=2166): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="fdb7949b0300000004ffe500fa52", 0x0, 0xee, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 24m44.233173312s ago: executing program 35 (id=2910): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x1, 0x0, 0x5}, &(0x7f0000000340)=[{}, {}, {}, {}, {}]) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) gettid() r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r3) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r6, 0x0) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, r3}}}], 0x20, 0x8000}}], 0x1, 0x80) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x6, 0x4002) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x10000, 0x3, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1fc, 0x4}, 0x2, 0x2e, 0xfffffff8, 0x3, 0x8000000000fff, 0x8001, 0x5, 0x0, 0x40000000, 0x0, 0xffffffffffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x20, 0x7f, 0x4, 0xfffff010}]}, 0x10) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r10 = fsopen(&(0x7f0000000080)='autofs\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f00000005c0)='fd', 0x0, r9) (async) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) (async) r11 = fsmount(r10, 0x0, 0x2) fchdir(r11) 24m17.137044107s ago: executing program 36 (id=2997): r0 = syz_io_uring_setup(0x6496, &(0x7f0000000000)={0x0, 0xd813, 0x8000, 0x1, 0x2e4}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum, 0x0, @desc3}) r1 = io_uring_setup(0x18fb, &(0x7f0000000180)={0x0, 0xa296, 0x80, 0x1, 0x3c2, 0x0, r0}) r2 = syz_io_uring_setup(0x4141, &(0x7f0000000200)={0x0, 0xbfd6, 0x4000, 0x2, 0x37f, 0x0, r1}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000380)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) fallocate(r3, 0x20, 0xffff, 0x7fff) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @remote}, &(0x7f0000000600)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000680)={'gre0\x00', 0x0, 0x8006, 0x1, 0x2e, 0x0, {{0x1f, 0x4, 0x3, 0x0, 0x7c, 0x65, 0x0, 0x10, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x7b, 0x1, 0x2, [{@broadcast, 0x2}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81a6}, {@remote, 0x423}, {@rand_addr=0x64010102, 0x8}, {@local, 0x2c3944ad}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@local}]}, @rr={0x7, 0x23, 0x1c, [@empty, @remote, @loopback, @remote, @rand_addr=0x64010100, @multicast2, @broadcast, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xcc, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000801) r10 = syz_open_dev$rtc(&(0x7f0000000900), 0x2, 0x6002) ioctl$RTC_EPOCH_SET(r10, 0x4008700e, 0x55) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r4) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x1d8, r12, 0x800, 0x70bd25, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x17c, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}]}]}, {0xc4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ee2080b2be8250f3434b3cdefa9796938973ce2358ac9064e9e0bd7aab68e023"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3e38ace547d5b13b6595434c11059de729bae275df645d5db5638f62991e5439"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4}, 0x4001) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000c40)=0x7, 0x4) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$FIGETBSZ(r13, 0x2, &(0x7f0000000cc0)) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000d00)={0x0, r1, 0x6, 0x5, 0xa7, 0x7}) shutdown(r11, 0x1) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) gettid() r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r4) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x38, r14, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7dd2903505fd"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x340}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x4000) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000e80)) 23m3.240517184s ago: executing program 37 (id=3791): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 22m55.916869689s ago: executing program 38 (id=3851): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000491334573b1363c900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) lsm_get_self_attr(0x68, &(0x7f0000001000)={0x0, 0x0, 0xfb, 0xdb, ""/219}, &(0x7f0000001100)=0xfb, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) perf_event_open(0x0, 0x0, 0x200000000, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x8001, 0x0, r1, 0x4, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) iopl(0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x7fff, 0xcc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b70300000000002885000000c700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) 18m26.039236s ago: executing program 39 (id=6534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000000)) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000006f80)=[{{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000400)=""/216, 0xd8}], 0x1}, 0x8}], 0x1, 0x40012012, 0x0) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000480114b8f2138caffda225ef8a1c1e1add4318ab4dbe921906a146113762cf029ae88c19d4b419511c9f122fb91ea09449d902ca40103366ceb4d0d94ae9ef2cda08dfb07f1b3010105209013955462483834b85830491db977e56af1226cda0810ab3ad1316da20cb3454850ff4675db0b1858be72a", @ANYRES16=r1, @ANYBLOB="796100000000fffe00007e", @ANYBLOB="4ac28cd9"], 0x1c}}, 0x4000054) r4 = gettid() r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xfffffffffffffffc, 0x0, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) mmap(&(0x7f0000240000/0x1000)=nil, 0x1000, 0x2, 0x8031, r6, 0xffffc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tkill(r4, 0x7) 17m43.251960245s ago: executing program 40 (id=7145): syz_usbip_server_init(0x3) socket$inet_mptcp(0x2, 0x1, 0x106) 17m19.127322095s ago: executing program 41 (id=7376): unshare(0x22020600) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') dup(r0) readv(r0, 0x0, 0x0) 17m14.661133458s ago: executing program 42 (id=7432): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000540)=@ll={0x11, 0x4, 0x0, 0x1, 0x4, 0x6, @link_local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000180)="cf3bdf15fd81685544f46c3f0800", 0xe}, {&(0x7f0000000240)="64dac7d561547911fbd75528604c408c3363ea1604388d00436db1d308c82c000000", 0x22}], 0x2, 0x0, 0x0, 0x11000000}, 0x24008814) 17m2.425522848s ago: executing program 43 (id=7513): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001200)=""/4072, 0xfe8}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, r2, 0x303, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8840) r3 = socket$kcm(0x2, 0x4, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f00000006c0)="a584", 0xffe0}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x84, r2, 0x208, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x21}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2e, 0xa8, @random="451f09e4d3750af6cf108b767784f7806cffdd1a4691a0f2ad5b2701b9428eecfd835ef3875911a133f5"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x54}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xfffffffffffffff5}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x40880}, 0x54) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_read_part_table(0x1057, &(0x7f0000000000)="$eJzsz82pwkAYBdCbn/diBEWwsWwswIosQLAAO3BnA7bi3p1MYsAGRIRzFndmvrkwTPiq6q9kPx8vtySPJEPVZkhSvy66tklSyotp0OZQlmWJzTQq+yb3Osfq/Yn/MftVN/fWY+6319Pu/PEPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAPeAYAAP//FVEIqQ==") r5 = socket(0x400000000010, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x4, 0x0, 0x0, 0x0, 0x2, 0x3e, 0xffffffeb, 0x7c, 0x40, 0x2, 0x0, 0x6, 0x38, 0x1, 0xfffe, 0x3, 0x3}, [{0x3, 0xf, 0x8, 0x11, 0x0, 0xe5, 0x1, 0x3}], "", ['\x00']}, 0x178) close(r6) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000640)={0x4000, 0x2, 0x2, 0x8, 0x8001, 0x100}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000074c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x4, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0xa, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@deltfilter={0xac, 0x2d, 0x300, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x7, 0x6}, {0x3, 0xffe0}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ARP_SHA={0xa}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x9673}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffff00}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0xd}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xea}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4044}, 0x8800) ioctl$XFS_IOC_ERROR_INJECTION(r5, 0x40085874, &(0x7f0000000540)={r4, 0x100}) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x36, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000001bc0), 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f00000003c0)=0x2) 15m40.424615585s ago: executing program 44 (id=8305): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000013, 0x4c032, 0xffffffffffffffff, 0x0) 14m52.784758835s ago: executing program 45 (id=8578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="03002dbd7600fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="44000280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003"], 0x60}, 0x1, 0x400000000000000}, 0x40810) 14m34.185676368s ago: executing program 46 (id=8756): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x80000) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0xfdef}]) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x100) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x800000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffc, 0x5, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001f00)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x4, 0x6, 0x63eb0308, 0x846, 0x80, 0xffffffff, 0x34}, 0x9c) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r10, @in={{0x2, 0x0, @empty}}, 0xffffffff, 0x3, 0x0, 0x0, 0x5, 0x0, 0xfe}, 0x9c) 14m27.431089394s ago: executing program 47 (id=8674): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x1, 0x2, 0x0, 0x1}, 0x5) (fail_nth: 3) 12m43.042405465s ago: executing program 48 (id=9704): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) fchdir(r1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) chroot(&(0x7f0000000200)='./file0\x00') 11m21.962965493s ago: executing program 49 (id=10312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ppoll(&(0x7f0000000080)=[{r0, 0x1550}], 0x1, &(0x7f0000000100), &(0x7f00000001c0)={[0x3]}, 0x8) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES64=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000140)=@ethtool_rxnfc={0x2a, 0xd, 0x9, {0x2, @usr_ip6_spec={@private0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0xffffffff, 0x8, 0x3}, {0x0, @multicast, 0x9, 0x8001, [0x0, 0x101]}, @esp_ip6_spec={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0x5e}, {0x0, @random="ce7170e7aa3e", 0x2, 0x8, [0x22f, 0x9503]}, 0xb, 0x3}}}) setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x11dc0, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2d, 0xcbbc48433744eb72}, 0x0) write$tun(r0, &(0x7f0000002780)=ANY=[@ANYBLOB="00000a00bbbbbbbbbbbb0000000000008100010086dd6361d7a200303affff020000000000000000000000000001ff020000000000000000000000000001020090780000000668145a1a040000000000000000003bfe800000000000000000"], 0x6e) 10m34.523555766s ago: executing program 50 (id=10553): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000140)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) r3 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f", @ANYRESDEC, @ANYRES64=0x0], 0x0, 0x2fe, &(0x7f0000000080)="$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") 10m33.968153114s ago: executing program 51 (id=10626): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0x20da, 0x0, 0x3b0, 0x20025, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x400}, 0x8) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) acct(&(0x7f0000003300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) (async) shutdown(r3, 0x1) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000140)={r2, &(0x7f0000000040)=')&&\x00', 0x2000, &(0x7f0000000080)={@_ha_fsid={[0xffffffff, 0xffff]}, {0x0, 0x8, 0x1276, 0x73c1}}, 0x7, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x2}) (rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000180)={@private1, 0x0}, &(0x7f00000001c0)=0x14) (async) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x4010, r6, 0x3b762000) (async) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req={0x1, 0x800, 0x0, 0x9}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_newnexthop={0x24, 0x5e, 0x103, 0x0, 0x4, {}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}]}, 0x24}}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000006f0fffffe7f00000200000000000000", @ANYRES32=r4, @ANYBLOB="0100"/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0400000002000000020000000900"/28], 0x50) 9m51.223413498s ago: executing program 52 (id=10823): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, @perf_bp={0x0, 0x2}, 0x408, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4c0, &(0x7f0000000f00)="$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") write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800f3"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1306cde5}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r6, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000100)='$', 0x1, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d30, 0x13500}, &(0x7f0000000240), 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x21, 0x0, 0x1) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xf4f6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 9m38.994276848s ago: executing program 9 (id=10898): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x500, 0x40000}, 0x0) 9m38.93675694s ago: executing program 9 (id=10899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 9m38.826056204s ago: executing program 9 (id=10900): perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 9m38.756771466s ago: executing program 9 (id=10901): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1019e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 9m38.61744184s ago: executing program 9 (id=10902): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x5}, 0x0, 0x80000000, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x25, &(0x7f0000000d40)="01", 0x1) 9m38.475261585s ago: executing program 9 (id=10903): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_connect={0xfff}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0x0, 0x0, 0x0, 0x5, 0x60000, 0x0, 0x802, 0x6, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r2 = perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x44001, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000ac0)={0x1f, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x1, 0x1b}, &(0x7f0000000040)=[{}]) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x3, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x101c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES16=r3, @ANYRESHEX=r3], 0x1, 0x205, &(0x7f0000000800)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x7, 0x103}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) syz_open_dev$loop(0x0, 0x18bdb, 0x325967a8661874d2) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0xf5}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4, 0x7}}, './file0\x00'}) 9m38.392941007s ago: executing program 53 (id=10903): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_connect={0xfff}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_iso={0x0, {0x1, 0x1}, 0x49e, 0x0, 0x0, 0x0, 0x5, 0x60000, 0x0, 0x802, 0x6, 0x0}) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, &(0x7f0000000200), &(0x7f00000002c0)=0x4) r2 = perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x44001, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) rt_sigqueueinfo(r4, 0x36, &(0x7f0000000ac0)={0x1f, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r4, &(0x7f00000000c0)={0x0, 0x1, 0x1b}, &(0x7f0000000040)=[{}]) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r5, 0x3, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x101c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES16=r3, @ANYRESHEX=r3], 0x1, 0x205, &(0x7f0000000800)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x2, @perf_config_ext={0x7, 0x103}, 0x0, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) syz_open_dev$loop(0x0, 0x18bdb, 0x325967a8661874d2) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0xf5}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}}, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4, 0x7}}, './file0\x00'}) 5m16.181282607s ago: executing program 4 (id=12012): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0xb4, 0x10, 0x1, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc096, 0x2, @perf_config_ext={0x100000000, 0xdd4}, 0x1820, 0xfffffffffffffffc, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xcc}, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000580)) 5m16.124025589s ago: executing program 4 (id=12013): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000900)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@journal_async_commit}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$inet6(r0, &(0x7f0000002740)={&(0x7f00000002c0)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x30}, 0x4000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./bus\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") syz_mount_image$ext4(&(0x7f0000000940)='ext2\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000440), 0x3, 0x616, &(0x7f0000001980)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r1, 0x8, 0x5, 0x4) 5m13.971576638s ago: executing program 4 (id=12022): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080420000000ff0002a11800ff000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m13.245114711s ago: executing program 4 (id=12033): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x20000000, 0x2, 0x50000}, 0xfff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 5m13.217405952s ago: executing program 4 (id=12035): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x3}}, 0xe8) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) writev(r3, &(0x7f0000003ac0)=[{&(0x7f0000003740)="0518d89f1445", 0x6}, {&(0x7f0000003800)="d97c", 0x2}], 0x2) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="881a010018000000000000000c0000230c6b5970"], &(0x7f0000000f80)=""/4096, 0x26, 0x1000, 0x1, 0x80}, 0x28) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5m11.152488148s ago: executing program 4 (id=12045): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 5m11.109342809s ago: executing program 54 (id=12045): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) 2m50.231258074s ago: executing program 1 (id=12874): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x4, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000002c0)={0xad5, 0x40, 0x5d9d, 0xd35, 0x1}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "f66e49980ad09557ec8a838475a24bf5ea56c739145e58079dab405d6e29f5b0348ceda385078628a33a70532688e5ef1d5d420fef6cd6e57bc9bd9ee0f1eb4e7c8939b63a849e0c036f3603d83281e14db01942c5c634b7f9eb9305824fd24ba2f69f064b1d6f997e4a140bcb974e0fb0259aaea406b0f10f711e7b97a7e448860cad797ed2af1175161a301b6a3ee1212478a44b8c8af8035dc88bf3107bbb196873617034b524680932ec19a1a6666bb63680469944f239eab23d66b83a242e0f766103a182b28c27e8ac7db9692d8c0579620cf18c83a8621775cf41ab8a6c0f10dda19eac38cf5848eb768fbf0a6bee2f437d8d"}, 0x106) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0)=0x7ff, 0x4) 2m49.389076141s ago: executing program 1 (id=12875): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8003, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000001040)={0xb1, "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"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.651868274s ago: executing program 1 (id=12878): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000280)={&(0x7f00000012c0)=@ipv6_newroute={0x20, 0x18, 0xffffffffffffffff, 0x70bd2c, 0x1000000, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x900}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 2m48.504656049s ago: executing program 1 (id=12880): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0x80000001, 0xffb, 0x9, 0xb6b, 0x800c5, 0x4, 0x1, 0x1, 0x0, 0xff, 0x1000, 0xc, 0xf, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x2, 0x7, 0x8, 0x100000, 0x762, 0x3, 0x63c, 0x20000e, 0x6, 0x100, 0x6, 0x1bfe, 0x7, 0x7, 0x40, 0x1000, 0x8000100, 0x620, 0x0, 0x11000, 0x4, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x0, 0x9, 0x7, 0xc, 0x101, 0xa, 0x8a7a, 0x81, 0xa9, 0x2, 0x2, 0x180000, 0x2619, 0x28b, 0x5, 0x8, 0x3, 0x85, 0x2, 0x2, 0xb, 0x1004, 0x7, 0x4009, 0x0, 0x9, 0x100002, 0x8, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x8, 0x5, 0x3, 0xb, 0x2, 0x20006, 0xc50, 0x2, 0xe, 0x30000002, 0xd9a, 0xc8, 0x2a2, 0xffffdffd, 0x203, 0x2, 0x1, 0x8, 0x0, 0x4, 0x200, 0x200, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0xc, 0x8, 0x4, 0x2, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, r2, &(0x7f0000000700)={0x7, 0x8000}) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0x110, 0x16, 0x401, 0xfffffffd, 0x1, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x4}, @in=@remote, 0x204, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, r2}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in=@local, {0x4, 0xfffffffffffffffe, 0x80000001}, {0x4, 0x0, 0x40000000000000, 0x7}, {0x0, 0x0, 0x3}, 0xf7fffffe, 0x0, 0x0, 0x1, 0x0, 0x90}, 0x8, 0xfffffffd}, [@migrate={0x4, 0x1b}, @coaddr={0x14, 0xe, @in6=@loopback}]}, 0x110}, 0x1, 0x0, 0x0, 0x804}, 0x4808) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x8e2b01) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r2, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x4}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000880)=""/182) 2m47.672290996s ago: executing program 1 (id=12886): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x101c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESHEX], 0x1, 0x205, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0xc, 0xd, "85de02f352b681d3"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, 0x0) 2m47.424604014s ago: executing program 1 (id=12888): r0 = socket$netlink(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0xffffff8c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = socket(0x2, 0xa, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x3, 0xffeff038}, {0x6, 0x6, 0x6, 0x6}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5e546507da93883e8c628a600b17cbe584d2e73c", 0x14}], 0x1}}], 0x1, 0x4046040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") 2m47.423904974s ago: executing program 55 (id=12888): r0 = socket$netlink(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0xffffff8c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = socket(0x2, 0xa, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401e, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x1, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x3, 0xffeff038}, {0x6, 0x6, 0x6, 0x6}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5e546507da93883e8c628a600b17cbe584d2e73c", 0x14}], 0x1}}], 0x1, 0x4046040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") 2m41.429161496s ago: executing program 3 (id=12916): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x8}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000083000/0x3000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x5) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1141) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000003c0)={0x0, 0x0, {0xffffffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000340)={0x1, 0x1fd, 0x7f, 0x0, 0x11}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c00018008000140"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001c33bc8a00000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m40.661873711s ago: executing program 3 (id=12918): r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x5, 0x840) r1 = socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f0000000280)="dd80f29a", 0x4) unshare(0x22020600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x73, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x6, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0xa200}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xfffbffffffffd019}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) unshare(0x30000100) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r7, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, r10, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xc8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) 2m40.122483108s ago: executing program 3 (id=12923): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x33fa}, 0x28) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000000, 0xe}, 0x104b18, 0x6, 0x0, 0x1, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket$igmp6(0xa, 0x3, 0x3a) (async) r2 = socket$igmp6(0xa, 0x3, 0x3a) socket(0x10, 0x80002, 0x0) (async) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRESHEX=r2, @ANYBLOB="038b4a39cc4f989318c94ad2427b0456c6c09be5d1ada15fe49080a48b12d35388680c1e7a71d05abf4ea025265df6695c278f63272235ae63b1991e1b2bd70dd730b149e83ce3919d19e73a92b4b738dbc58cbeea5cba91b8749dfae6aed7905a9491f888a56884d5a8369c1a0c9323f384e29b1883c2766d741359638c29fe7b5f19d939a6c96f3ab93909201a9ff30fd1ad5b70484ddf07d05b737766eccab7c0fa80761b2c55138d76c8ae7c62f9a279013fc791a6de43", @ANYRES32=r3], 0x44}}, 0x42000810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="0e000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2509000000050008000700000008000100010000000500070000000000"], 0x2c}}, 0x64000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x278436641eeb0f08}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x840) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800599c6d0e0000ded650492d"], 0xfe33) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x2c9, &(0x7f00000005c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x100, 0x0, {0x0, 0x0, 0x74, 0x0, {0x1, 0x4}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044051}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810) (async) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2m39.400985171s ago: executing program 3 (id=12925): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$unix(0x1, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x80404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6(0xa, 0x802, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f0000000100)=0x27a) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') pread64(r3, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001256"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x66, 0x0, 0x0, &(0x7f00000010c0)={0x1, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0xf8, 0x7, 0x0, 0x5, 0x0, 0x1, 0x10, 0x1a, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000300)}, 0x2810, 0x6, 0x4, 0x9, 0x9, 0x6354a5d, 0x2, 0x0, 0x5, 0x0, 0x8}, r3, 0x2, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000a, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x5, 0x0, 0x84, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r10, 0x0) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000280)) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r11 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3}, 0x94) ioctl$SIOCSIFMTU(r11, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m38.993582194s ago: executing program 3 (id=12929): syz_open_dev$evdev(&(0x7f0000000340), 0x4, 0x200000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) wait4(r0, 0x0, 0x8, &(0x7f0000000400)) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$TIOCNXCL(r4, 0x540d) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000b80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000bc0)={0x96c, r3, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x3a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0x2}, {0x5, 0x6}, {0x5, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x5, 0x62054f1bb62362ac, 0xc, 0xb, 0x24, 0xb, 0x30, 0x6c, 0x18, 0x9, 0x12, 0x48, 0x24, 0x16, 0xc]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x3}, {0x6, 0x5}, {0x4}, {0x6, 0x6}, {0x2, 0x3}, {0x0, 0x1e}, {0x2, 0x4}, {0x1, 0x1}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x1}, {0x4, 0x6}, {}, {0x0, 0xa}, {0x4, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x4, 0x3}, {}, {0x6, 0x1}, {0x7}, {0x2, 0x1}, {0x4, 0x3}, {0x7, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x2}, {0x0, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc, 0x1, 0xfffa, 0x0, 0x80, 0x8, 0xba]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0x6, 0x8622, 0x401, 0x0, 0x4]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x8000, 0x1, 0x2, 0x3, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb47, 0x6, 0x2, 0x1, 0x3, 0x2, 0x9, 0x2]}}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x48, 0x12, 0x18, 0x48, 0x3, 0x1b, 0x60, 0x3, 0x24, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x5, 0x8, 0x7, 0x2, 0xc, 0x3ff, 0x7f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6c5, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x1, 0x8, 0x101, 0x800, 0xf000, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xff01, 0x5, 0x6e, 0x6, 0x200, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x2, 0x4}, {0x5, 0x6}, {0x4, 0x1}, {0x0, 0x2}, {0x6}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x9}, {0x7, 0x4}, {0x6, 0x6}, {0x3, 0x6}, {0x3, 0x6}, {0x2, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x9}, {0x4, 0x9}, {0x4}, {0x2}, {0x4, 0x4}, {0x3, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {}, {0x1}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x5}, {0x0, 0x1}, {0x2}, {0x6, 0x6}, {0x7, 0x3}, {0x1, 0x8}, {0x1}, {0x0, 0x4}, {0x3, 0x2}, {0x1, 0x8}, {0x6, 0x3}, {0x5}, {0x4, 0xa}, {0x6, 0x5}, {}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffd5, 0xdb71, 0x3, 0x0, 0x7, 0x4, 0x5b, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x6c, 0xc, 0x16, 0xc, 0x4, 0x24, 0x0, 0x48, 0x4, 0x60, 0x5, 0x60, 0x36, 0x3, 0x3, 0x2, 0x6c, 0x4, 0x18, 0x36, 0x36, 0x36, 0x12, 0x4, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1345, 0x1, 0x3, 0x8, 0x46a, 0x7, 0x9]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x1, 0x3, 0xfff, 0x9, 0x1, 0x4, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1292, 0xd18e, 0x5, 0x6, 0x8, 0x7, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0xc, 0x2, 0x18, 0xc, 0x7, 0x60, 0x6c, 0x2, 0xc, 0xb, 0x16, 0x5, 0x1b, 0x16, 0x9, 0x3, 0x1b, 0xc3e8e3932b4c9ca0, 0x6c, 0xc, 0x1, 0x30, 0xb, 0x5, 0x12, 0x9, 0x9]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x6c, 0xc, 0x6, 0x6c, 0x30, 0x30, 0x6, 0x16, 0x9, 0x36, 0xc, 0x2, 0x16, 0x48, 0x12, 0x9, 0x20, 0x24, 0x36, 0x1, 0x24, 0x0, 0x6, 0x6c, 0x6c, 0xb, 0x1, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x8}, {0x1, 0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x7}, {0x4, 0x5}, {0x5}, {0x4, 0x8}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x9}, {0x5, 0x1}, {0x7, 0x4}, {0x5, 0x4}, {0x7, 0x8}, {0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0x5}, {0x7, 0x7}, {0x3, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x0, 0x9, 0x3, 0x48, 0x1b, 0x9, 0x4, 0x60, 0x12, 0xb, 0x3, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x2, 0xd, 0x0, 0x7fff, 0x0, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1a2, 0x5, 0x4, 0x3, 0x4, 0xc, 0xde6c, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0x1000, 0x2, 0x724f, 0x8, 0xa64b, 0x684, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0xc, 0x2, 0x6, 0x3, 0x3, 0x1, 0x48, 0x3f, 0x9, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x467, 0x4, 0x928, 0x4, 0x9, 0xeb1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7bd, 0xfff, 0x800, 0x6, 0x7fff, 0x6, 0xff7f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd, 0x5, 0x5, 0x1, 0x5, 0x1, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x5, 0x9, 0x60, 0x0, 0x31, 0x48, 0x4, 0x1, 0x3, 0x1, 0x5, 0x4, 0x9, 0x48, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x7, 0xa997, 0x2, 0x5, 0x4, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x4ef, 0x9, 0x1, 0x200, 0x182, 0x1]}}, @NL80211_TXRATE_LEGACY={0x4}]}]}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xfffd, 0x3, 0x9, 0x6, 0x1000, 0x40, 0xe9]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0x7}, {0x0, 0x8}, {0x6, 0x7}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x2, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x4, 0x1}, {0x4, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x5, 0xa}, {0x5, 0x8}, {0x0, 0x6}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x4, 0x8}, {0x3, 0x2}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x6, 0x7f, 0xfff9, 0x62, 0x400, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x47, 0x8001, 0x8, 0x8, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x4e4, 0xff, 0xfffc, 0x1ff, 0xffa1]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x4}, {0x6, 0x4}, {0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x4, 0x4}, {}, {0x0, 0x9}, {0x0, 0x9}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x6}, {0x3, 0xa}, {0x5, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x9}, {0x2}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {}, {0x2, 0x5}, {0x3, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x10}, {0x2, 0x6}, {0x0, 0x5}, {0x7, 0x2}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x5, 0x9}, {0x3, 0x9}, {0x7}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x8}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x2, 0x18, 0x6c, 0x36, 0x18, 0x24, 0xb, 0x0, 0x30, 0x6, 0x3, 0x48, 0x30, 0x12, 0x36, 0xae009f3bc3b1bcb6, 0x4]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf3, 0x4, 0x0, 0x8, 0x5, 0x9fc, 0x4]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x3, 0x2}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {0x3, 0x7}, {0x5, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0x4}, {0x5}, {0x2, 0x3}, {0x4, 0x9}, {0x3, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9595, 0x1, 0x7fff, 0x2, 0x6, 0xbb0, 0x9, 0x80]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x6}, {0x1, 0x5}, {}, {0x0, 0xa}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x7, 0x6}, {0x1, 0x5}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x9}, {0x6, 0x8}, {0x5, 0x9}, {0x2}, {0x2, 0xa}, {0x5, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x3, 0x800, 0x1000, 0xe2, 0x9]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0xa}, {0x0, 0x1}, {0x4, 0x9}, {0x3, 0x5}, {0x6}, {0x1, 0x9}, {0x5, 0xa}, {0x1}, {0x5, 0x9}, {0x4, 0x8}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x2, 0x7}, {0x7, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x1}, {0x3, 0x7}, {0x4, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x6, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x3}, {0x3}, {0x1, 0x2}, {0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x3}, {0x3, 0xa}, {0x6}, {0x3}, {0x5, 0x9}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x5, 0x4}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x7}, {0x2}, {0x2, 0x1}, {0x7, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x6}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x6}, {0x4, 0x6}, {}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x36, 0x18, 0x16, 0x3, 0x0, 0x24, 0x48, 0x6c, 0x71, 0x24, 0x1]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x9, 0x30, 0x3, 0x5, 0x30, 0xc, 0x3, 0x3]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x7}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x6}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x5, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x5, 0x7}, {0x1, 0x3}, {0x2, 0x7}, {0x5, 0x8}, {0x3, 0x4}, {0x3, 0x9}, {0x2, 0x1}, {0x1}, {0x5, 0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x5, 0x2}, {0x6, 0x4}, {0x6, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0xa}, {0x1, 0xa}, {0x7, 0x4}, {0x7, 0x8}, {0x7, 0x4}, {0x5}, {0x5, 0x4}, {0x4}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0xc, 0x1, 0x60, 0x6c, 0x2, 0x2, 0x24, 0xc, 0x4, 0x34, 0x5, 0x12, 0x60, 0x24, 0x6c, 0x9, 0x16, 0x6c, 0x36, 0x10, 0x6c, 0x6, 0xc, 0x24, 0x1b, 0x36, 0x3, 0x60]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x1b, 0x3, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x0, 0x60, 0x0, 0xb, 0x9, 0x6, 0x12, 0x6, 0x60, 0xb, 0x36, 0x4, 0x36, 0x16, 0x30, 0xb, 0x5, 0x18, 0x2, 0x12, 0x6c, 0x32]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x101, 0x40, 0x40, 0x1, 0x6, 0xfffc, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x3, 0x2, 0x1a8, 0x9, 0x9, 0x8e6a]}}]}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6, 0x6c, 0x16]}]}, @NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x16, 0x5, 0x11, 0x2, 0x6c, 0x0, 0xc, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x18, 0x3, 0x5, 0x1b, 0x2a, 0x9, 0x1b, 0x6, 0x1, 0x24, 0xc, 0x3, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x40, 0x7ddd, 0xa1, 0x10, 0x7ff, 0xb0, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x100, 0x81, 0xfffc, 0x9, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x800, 0xe, 0x7, 0x3, 0xd, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0xfff8, 0x5, 0x1, 0x3, 0x2, 0x1, 0x21ed]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x1}, {0x4, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x6, 0xa}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0xa}, {0x3, 0xa}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x3, 0x18, 0x24, 0x16, 0x3, 0x48, 0xb, 0x0, 0x4, 0x5, 0x2, 0x1, 0xc, 0x24, 0xc, 0x1, 0x1, 0x9, 0x24, 0x4, 0x30, 0x1b, 0x3, 0x6, 0x18, 0x4, 0x0, 0x1b, 0x1, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x6, 0x16, 0x12, 0x24, 0x36, 0x6c, 0x4, 0x12, 0x16, 0x0, 0x2, 0x9, 0x3, 0xc, 0x1, 0x4, 0x4, 0xc, 0x3f, 0x3, 0x5, 0x30, 0x1b]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x0, 0x7, 0x5, 0x5, 0x0, 0x6c]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x0, 0x5, 0x3, 0xcfc7, 0x2, 0x3]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x7}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x5, 0x7, 0xe, 0xff, 0x5, 0x8]}}]}]}, @NL80211_ATTR_TX_RATES={0xa4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x7fff, 0x81b, 0x4, 0x8, 0x1, 0x4]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x36, 0x12, 0x12, 0x6, 0x9, 0x2, 0x5]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x7, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x5, 0xa}, {0x4, 0x3}, {0x5, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {0x1}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x2}, {0x7, 0x4}, {0x2, 0x7}, {0x1, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x5}, {0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0xa}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0xa}, {0x5, 0x8}, {0x4, 0x3}, {0x7, 0x6}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0xe}, {0x1, 0xa}, {0x3, 0xa}, {0x6, 0x2}, {0x4}, {0x0, 0x3}, {0x1}, {0x6}, {0x4, 0x7}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x3, 0xd, 0xf7, 0x7, 0xeafa, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1edc, 0xe, 0x9, 0xd25b, 0x2, 0x0, 0xe, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2f3, 0x56f3, 0x800, 0x80b4, 0x5, 0x4c7, 0x1, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x9, 0x14, 0x60, 0x12, 0x6c, 0x0, 0x9, 0x6, 0x4, 0x18, 0x2, 0xfab40ffaa5183d33, 0x6c]}]}]}]}, 0x96c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)=0x20) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008055}, 0x1000) ioctl$TIOCMBIS(r8, 0x5416, &(0x7f00000004c0)=0x101) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf250400000005cdaf0003000000050005008ae15905000000050005000200000008000300080000000800030078a1000008000200cffe881cc29fa95d93468fd96b899819788375b3f1a68efa6d0924065ad820018897e4c86b898a0c0eee9cf7c796e3c4cf0ee9dc4beeb15f50c58b8a89bf5adc541bd40fd458cbb2710ec4e969821e62a47732f855ada8076280"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x155a003d4f841c81) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000d31e1df38b0a485562625fe71d32270292a35df1506dcfe71c6ca0c54569", @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f3100000c0003800400038004000500"], 0x38}}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) setresgid(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f00000000c0), 0xb9) 2m38.703069453s ago: executing program 3 (id=12932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 2m22.2563359s ago: executing program 56 (id=12932): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) 1m50.478769919s ago: executing program 8 (id=13149): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x58, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x57}, {0xfffffe88, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m50.287499275s ago: executing program 8 (id=13151): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x520, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x9}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r7 = accept(r4, 0x0, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffffffd}}, @TCA_CT_ACTION={0x6, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "193fa665cb68f13b9239a3b09cec760f"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="00008100ffffff10ffffaaaa2aaaaaaa88a8110081002f000800450000204000e0"], 0x3a) 1m49.82516764s ago: executing program 8 (id=13157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfe, {0x21, 0x0, 0xffc3}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, 0x0, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x10) 1m49.711931103s ago: executing program 8 (id=13159): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x12080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) socket$netlink(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@getrule={0x14, 0x22, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0xc080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1a00000004000000040000000200000034050000", @ANYRES32=0x1, @ANYBLOB="00000011b4f40600000000000000000059ae8f7d9dc0b863a22089d8e11da100000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@nolazytime}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fa, &(0x7f0000001000)="$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") getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = accept(r5, &(0x7f0000000340)=@can, &(0x7f00000003c0)=0x80) fallocate(r6, 0x2, 0x4, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x1a, r7, 0x0, &(0x7f0000000040)) 1m48.956463658s ago: executing program 8 (id=13168): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x6, @remote}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000500)="6dcb1a067c6dffb3f70568fb4a3bb7f131a5783adcb9244a2a9e542b2aa7839bfbcc721986c97fb2baf87609ccd81f7b0143cb60aa91df97682b4ebcc425496ddcc1563cc4e7033fcfac30c5a7f22c91763fdbecfeae03926c47332484c1660b9f1f84f88778651e353870057e93669113c571ef515db0ed98a62ec6a70247b1ba9d143ed670ea49012aa10b280000000000000000", 0x95}, {&(0x7f0000000700)="bf30d6c1dfeaa2113ab07e84d3643ce6fc3ebb85dbbd7fabacec90b70c47b92c4337d64172e3ac062749682a84accce8db77efcf4111e16f1cdba7b9788989602614f30878afa0caa6b1c7921d07c34d87bcdff00e934c64da09a4a55100eb6ab461f093810981aa9e588725590b3f5c192babb66742d5b9012ef25983a28ea353180899444cb14ca00316b4101ca0e75ed27e9396e5ed1155512039ddb65500f52256b46e389534e920fc2ca6804f652fe6e36420180129c7eac7784545b9dcbeb4eddf9f3c158a00164b907f8f6e3fd863bc0baf", 0xd5}, {&(0x7f0000000800)="70fe4ae4a09722cdf5dbb798a88f082e0fef0c0dc46714de99828d4d195d6c8c1e7d107b4c709942b43d8c789fdd7b5b2974b675f961d1dbdaff6f4b7bfd438edab9a1dc8f1791e8006c8e9748eeda55c6153dd84e97ab5111c878769fad66fe758ae33f67296020a4050f98b20e3a190b49ddf2a130d4c24b6fa1352224fa", 0x7f}, {&(0x7f0000000880)="3c019e618a132fd5871227e3c462ef23f20ac833dbc98063e83d208462e67ecafe75ff0dfb26e9e62018afb17d571099de2c8bd931912d7b6a2b2adf5a81f47e0ff1ade8f11ef6698981f638477fbf7a9e09c3a83eea9f80ed5339ebfe0eab35d6ef9c4f377ae4ed654d9869ae6ef5e2f044e644f8b1e127b0371b572e47307950288afadfa7dd2d8ee6b333bf5a4be318d0ae2049dcc66ce58371c80a0972da50b69fa4fe7d09e73e517262ca484e75b9d5634faf69efe402346acb6ef19a0461b423fdf33e230d24f40de109e2ad5e", 0xd0}], 0x4}}], 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x280400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000340)={0xffffff00, {{0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32=r1, @ANYRES64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001"], 0x48) fsmount(0xffffffffffffffff, 0x1, 0x9) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 1m48.617212818s ago: executing program 8 (id=13173): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x5}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x3) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x58, 0x18, 0x2, 0x70bd2c, 0x1000000, {0xa, 0x0, 0x0, 0x9, 0xff, 0x0, 0xfe, 0x8, 0x1c00}, [@RTA_METRICS={0x3c, 0x8, 0x0, 0x1, "76e4f433609e4ce4f10eaa04739e1d53db90035884436119fc238abc86cac6d8becddbf7237d1a5fd5cf5c8006fcd24a0dbd8180917f6a39"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004404}, 0x0) 1m48.529130241s ago: executing program 57 (id=13173): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x5}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x3) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x58, 0x18, 0x2, 0x70bd2c, 0x1000000, {0xa, 0x0, 0x0, 0x9, 0xff, 0x0, 0xfe, 0x8, 0x1c00}, [@RTA_METRICS={0x3c, 0x8, 0x0, 0x1, "76e4f433609e4ce4f10eaa04739e1d53db90035884436119fc238abc86cac6d8becddbf7237d1a5fd5cf5c8006fcd24a0dbd8180917f6a39"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004404}, 0x0) 13.347121362s ago: executing program 0 (id=13684): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8000000000000009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x7}, 0x204, 0x0, 0x43a1bd76, 0x6a5a822728354d6d, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x2, 0x1, 0x780, 0x20, 0x400, 0x32, 0x9, 0x2ab14259]) 8.459411679s ago: executing program 0 (id=13710): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000001c0)={0x0, @loopback, 0x4ea2, 0x3, 'lblc\x00', 0x9, 0x5, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x25) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$unix(0x1, 0xcb846159c24a27e7, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0xa, 0x8) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x4, 0x3, 0x637a}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000340)={r9, 0x81}, 0x8) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0xffff}, {0xffff, 0xffff}, {0x1d43154bfaa01a3b}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xa, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8082) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r11) r12 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r13 = syz_open_procfs(r12, &(0x7f00000000c0)='wchan\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xfffffffd}) pread64(r13, &(0x7f0000000140)=""/15, 0xf, 0x4) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000240)=@add_del={0x2, &(0x7f0000000180)='ip_vti0\x00'}) 8.342493293s ago: executing program 6 (id=13712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000400000a8c000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800a00010072656469720000004c000280080001400000000c0800034000000002080003400000007d0800024000000015080002400000000408000340000000110800034000000020080001400000000008000340000000200900020073797a32"], 0xb4}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 8.288989354s ago: executing program 2 (id=13713): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x19, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c4108"}, &(0x7f0000000140)=0x21) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.220373736s ago: executing program 6 (id=13715): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 7.50113821s ago: executing program 6 (id=13718): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) pidfd_getfd(0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280000000000) recvfrom$inet6(r5, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 7.49558731s ago: executing program 2 (id=13719): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0xc) 7.229941288s ago: executing program 0 (id=13720): r0 = socket$netlink(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0xffffff8c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = socket(0x2, 0xa, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4046040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") 7.129109602s ago: executing program 2 (id=13721): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8000000000000009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x7}, 0x204, 0x0, 0x43a1bd76, 0x6a5a822728354d6d, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)}], 0x1, 0x0, 0x0, 0xe0000000}, 0x1a92189d0dd42cd6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x2, 0x1, 0x780, 0x20, 0x400, 0x32, 0x9, 0x2ab14259]) 6.640514377s ago: executing program 5 (id=13726): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/51, 0x33}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/32, 0x20}], 0x4, &(0x7f0000000600)}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/177, 0xb1}, {&(0x7f0000002400)=""/10, 0xa}], 0x4, &(0x7f0000002480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002500), 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/216, 0xd8}, {&(0x7f0000003680)=""/85, 0x55}, {&(0x7f0000003700)=""/229, 0xe5}, {&(0x7f0000003800)=""/177, 0xb1}, {&(0x7f00000038c0)=""/109, 0x6d}, {&(0x7f0000003940)=""/58, 0x3a}, {&(0x7f0000003980)=""/174, 0xae}], 0x8, &(0x7f0000003ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c80)=""/30, 0x1e}, {&(0x7f0000003cc0)=""/45, 0x2d}], 0x2}}, {{&(0x7f0000003d40), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003dc0)=""/249, 0xf9}, {&(0x7f0000003ec0)=""/16, 0x10}], 0x2, &(0x7f0000003f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004080), 0x6e, &(0x7f0000004180)=[{&(0x7f0000004100)=""/78, 0x4e}], 0x1, &(0x7f00000041c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000042c0), 0x6e, &(0x7f0000004640)=[{&(0x7f0000004340)=""/35, 0x23}, {&(0x7f0000004380)=""/189, 0xbd}, {&(0x7f0000004440)=""/237, 0xed}, {&(0x7f0000004540)=""/228, 0xe4}], 0x4, &(0x7f0000004680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x8, 0x40000000, &(0x7f0000004900)={0x77359400}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000a16000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r4, 0x12a, 0x14, 0x17, 0x0, 0x0) 5.707978127s ago: executing program 7 (id=13728): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 5.61170815s ago: executing program 5 (id=13729): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x19, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c4108"}, &(0x7f0000000140)=0x21) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.343126088s ago: executing program 5 (id=13730): syz_emit_ethernet(0x68, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0x40, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x18, r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004000) recvmmsg(0xffffffffffffffff, &(0x7f000000b200)=[{{0x0, 0x0, &(0x7f00000012c0)}, 0xf}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$netlink(0x10, 0x3, 0x4) 5.139483385s ago: executing program 5 (id=13731): socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(0x0, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r6 = epoll_create(0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)={0x10000004}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xffe0, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0xbec, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x8, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10000, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x9, 0xe, 0xffffffff, 0x7, 0xfffffffa, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0x5, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x368d, 0x2, 0x4850, 0xe, 0x8, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0x5, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x7, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0x24000002, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x20002, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b0ffb0bc26100000000000bf672000000000001602000000b0ffb06702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x48) socket$kcm(0xa, 0x2, 0x0) 4.435342348s ago: executing program 7 (id=13732): socketpair(0x10, 0x0, 0x15, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0xffffffb4, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.392220799s ago: executing program 6 (id=13733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x3, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x60}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008040}, 0x2000c811) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./bus\x00', 0x2, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) 4.270280033s ago: executing program 0 (id=13734): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001073118510000002000005850000000500000095000008000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket(0x1e, 0xa, 0x9) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x402140, 0xda}, 0x18) symlinkat(0x0, r4, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c000000210009002cbd70000000000002000004000000081000010005001300020000000c000c40000000000000000208000b0000000100080010"], 0x7c}}, 0x4008800) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a0001e08de765287481c30080"], 0x14}}, 0x0) 4.221038225s ago: executing program 7 (id=13735): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}]) 4.115477588s ago: executing program 7 (id=13736): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3c9vI1cdAPCvnThxfnSTlh4AQbu0hQWt1km8bVT1AOWIUCVEjyBtQ+KNothxFDulCXtIz1yRqMSJHvkDOPfEgRsXBDcuywGJHxFog8TBaMaTrDdrb6xNYqfx5yON5r2ZWX+/L868t36O/QIYWTcj4iAiJiLig4iYy47nsi3ebW/JdY8OH6weHT5YzUWr9f4/c+n55Fh0/JvETPaYxYj44acRP8k9Hbext7+5Uq1WdrL6QrO2vdDY27+zUVtZr6xXtsrl5aXlxbfvvlW+sLa+WpvISl99+IeDb/0sSWs2O9LZjovUbnrhJE5iPCK+fxnBhmAsa8/EsBPhueQj4qWIeC29/+diLH02AYDrrNWai9ZcZx0AuO7y6RxYLl/K5gJmI58vldpzeC/HdL5abzRv36/vbq2158rmo5C/v1GtLGZzhfNRyCX1pbT8uF4+Vb8bES9GxC8mp9J6abVeXRvmf3wAYITNnBr//zPZHv8BgGuuOOwEAICB6zH+Hww6DwBgcLz+B4DRY/wHgNFTTL/DYWrYaQAAA+T1PwCMHuM/AIyUH7z3XrK1jrLvv177cG93s/7hnbVKY7NU210trdZ3tkvr9fp6+p09tbMer1qvby+9GbsfzX97u9FcaOzt36vVd7ea99Lv9b5XKaRX+WQBAAzTi69+9udcMiK/M5Vu0bGWQ2GomQGXLT/sBIChGetRBq4/q33B6DrHa3zTA3BNdFmi9wnF6PIBoVar1bq8lIBLdutL5v9hVHXM//srYBgx5vxhdJn/h9HVauX6XfM/+r0QALjazPEDPd7/fynb/yZ7c+DHa6ev+OQyswIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr7Xj931K2Fvhs5POlUsQLETEfhdz9jWplMSJuRMSfJguTSX1pyDkDAOeV/1suW//r1twbs0+cemXmpDgRET/91fu//Gil2dz5Y8RE7l+Tx8ebn2THy4PPHgA42/E4ne47Xsg/OnywerwNMp+/fzciiu34R4cTcXQSfzzG030xChEx/e9cVm/LdcxdnMfBxxHxxW7tz8VsOgfSXvn0dPwk9gsDjZ9/In4+PdfeJz+LL1xALjBqPkv6n3e73X/5uJnuu9//xbSHOr+s/0seavUo7QMfxz/u/8Z69H83+43x5u++1y5NPX3u44gvj0ccxz7q6H+O4+d6xH+jz/h/+corr/U61/p1xK3oHr8z1kKztr3Q2Nu/s1FbWa+sV7bK5eWl5cW3775VXkjnqBd6jwb/eOf2jV7nkvZP94hfPKP9X++z/Z/+74Mffe0Z8b/5erf4+Xj5GfGTMfEbfcZfmf5tsde5JP5aj/af9fzf7jP+w7/uP7VsOAAwPI29/c2VarWy86zCjaOIs675XBaiv4t/n/2wrkTOI11InoUrkEbXwnc6jszEJcaa6HEz/vz19q/pZETnL3ar9VyxevUYFzHrBlwFJzd9RPx32MkAAAAAAAAAAAAAAABdDeLTUcNuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfX/wMAAP//jMfJaQ==") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x161) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x19f9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020300091800000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006003c0000000a0000000000fffffc010000000000000000000000000000000000000000000004000400000000000000000000000000000000000005000000000000000000000200010000000000000000000000000005000500000000000a00000000000000ff010000000000000000000000000001000000000000000002001300030000"], 0xc0}}, 0x0) write$selinux_create(r1, &(0x7f0000000380)=@access={'system_u:object_r:apt_var_lib_t:s0', 0x20, 'unconfined', 0x20, 0x101}, 0x43) 3.595735655s ago: executing program 5 (id=13737): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x91000a7a) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r2, 0x1, 0x2a, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a320000000009000100", @ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) read(r0, 0x0, 0x0) statx(r4, &(0x7f0000000140)='./file0\x00', 0x0, 0x800, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000380)=@v3={0x3000000, [{0x7, 0x1}, {0x9, 0x407}], r5}, 0x18, 0x1) 3.055496912s ago: executing program 6 (id=13738): preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0xfffffffc) 2.892340777s ago: executing program 7 (id=13739): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80000) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000004700)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/51, 0x33}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000580)=""/32, 0x20}], 0x4, &(0x7f0000000600)}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f00000006c0)=""/85, 0x55}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/177, 0xb1}, {&(0x7f0000002400)=""/10, 0xa}], 0x4, &(0x7f0000002480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000002500), 0x6e, &(0x7f0000003a40)=[{&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/216, 0xd8}, {&(0x7f0000003680)=""/85, 0x55}, {&(0x7f0000003700)=""/229, 0xe5}, {&(0x7f0000003800)=""/177, 0xb1}, {&(0x7f00000038c0)=""/109, 0x6d}, {&(0x7f0000003940)=""/58, 0x3a}, {&(0x7f0000003980)=""/174, 0xae}], 0x8, &(0x7f0000003ac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000003c00)=@abs, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003c80)=""/30, 0x1e}, {&(0x7f0000003cc0)=""/45, 0x2d}], 0x2}}, {{&(0x7f0000003d40), 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003dc0)=""/249, 0xf9}, {&(0x7f0000003ec0)=""/16, 0x10}], 0x2, &(0x7f0000003f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000004080), 0x6e, &(0x7f0000004180)=[{&(0x7f0000004100)=""/78, 0x4e}], 0x1, &(0x7f00000041c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f00000042c0), 0x6e, &(0x7f0000004640)=[{&(0x7f0000004340)=""/35, 0x23}, {&(0x7f0000004380)=""/189, 0xbd}, {&(0x7f0000004440)=""/237, 0xed}, {&(0x7f0000004540)=""/228, 0xe4}], 0x4, &(0x7f0000004680)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x8, 0x40000000, &(0x7f0000004900)={0x77359400}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x102020, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000a16000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r4, 0x12a, 0x14, 0x17, 0x0, 0x0) 2.811637909s ago: executing program 2 (id=13740): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x1a, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c41081b"}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.771049521s ago: executing program 2 (id=13741): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000001073118510000002000005850000000500000095000008000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket(0x1e, 0xa, 0x9) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x5, 0x80000000, 0x0, 0xe06, 0xa0, "3f3c5e0000ff775cfffffffff903e7ffffff00", 0xc, 0x81}) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) symlinkat(0x0, r4, &(0x7f0000000380)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nouid32}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$eJzs3M1vFOUfAPDvTOkLUGjhR37Ki1JFYyPa0oLKwYMaTbhoTPSAx1oqQQoYWhMhRIoxeDT+BerRxMSTF71ooka9qPGqd2NCDBdQE7Nmdmfa3XZ3u91CK+znk0z7PDPPvHyfmWd2Zp/ZCaBjDWV/koj+iPglIgYq2doCQ5V/169emPzz6oXJJEqlF/5IyuWuXb0wWRQt5tucZ4bTiPTtJHbXWe/MufMnJ6anp87m+dHZU6+Nzpw7//CJUxPHp45PnR4/fPjQwbHHHh1/pKU4Li4zPYvr2q43z+zZeeSl956dLMXL332cbW9/Pr06jorBltbbzFAMRSm3MLan/Pf+VS/9v2VLRPTm6WTDOm8MLeuKiGx3dZfb/0B0xcLOG4hn3prPfLVOGwjcNNln07YlY7vy/+n85xdwO0q0cehQxSd+dv9bDGt5/bHerjyZ/Z0qx389H354rlI3aXYvO1i5Y+9qMP//64zrW0iWBpZZf39EHJ376/1siLrfQzSRtFwSAGDeF9n1z0P1rv/SmmubrXkfymBE7I+I7RHxv4jYEel8mTsi4s4Vrn9oUX7p9c9PG1e4yBXJrv8ez/u2iqEypYgrmc9tKcffnbxyYnrqQF4nw9Hdm+XHmqzjy6d/frfRtKGq679syNZfXAvm2/H7ht7aeY5NzE6sIuQaVy5FEhvqxZ/M9wRkNbAzIna1sfyszk48+NGeLL1189Lpy8ffxA3oZyp9GPFAZf/PxaL4C0llTY36J0f7YnrqwGhxVCz1/Y+Xn6/Od1ela+Lvay2mvnaDrePKpYhNdY//PP6iGRT9tTN5/uv+ltdx+dd3Gt7TLN3/SRydqy6RH/8bF6otO/57khfL6Z583BsTs7NnxyI+z0fUjB9fWFqRL8pn8Q/vq42/cl+cZue4fz7I59sdEdlBfFdE3B0Re/Ntvyci7o2IfU3i//ap+15tXkNtHv83QBb/sWb7P2Iwqe6vbyPRdfKbzxqtv7Xz36FyajgfU33+62mw3FY3cLX1BwAAALeCtNwHnaQjVc9vF3bEpnT6zMzs/qF4/fSxSl/1YHSnxTddA1Xfh47l3w0X+fFF+YMRsa38pNHGcn5k8sz0lnWKGajYXNX+K+eCNB0ZqUz7rdFDL8DtY0X9aNUPnX3y6Y3fGGBN+b0mdC7tHzqX9g+dS/uHzlWv/V+MuL4OmwKssXY//xc/MADccko176cEOor7f+hc2j90pKU/ic9ft5KdE9r/yf/09iOreWPAzU+UBtqfPRpPmlv5ArtaK1y8/aLlJbdWOIkowkmbxFUnEenCmL/zt0mWx3RXyvS0vqlrn0iXLfPEcrXRvaJ3YvTVqY29eaI3IlpdzsU1q9XiDJF4yyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBL+zcAAP//Flvq9A==") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c000000210009002cbd70000000000002000004000000081000010005001300020000000c000c40000000000000000208000b0000000100080010"], 0x7c}}, 0x4008800) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0xc, 0xfffffffffffffffd}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a0001e08de765287481c30080"], 0x14}}, 0x0) 2.036232374s ago: executing program 0 (id=13742): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.060990796s ago: executing program 5 (id=13743): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x9, 0x1b) pidfd_getfd(0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) r6 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r6, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x280000000000) recvfrom$inet6(r5, 0x0, 0x0, 0x10000, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 992.586388ms ago: executing program 6 (id=13744): r0 = socket$netlink(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0xffffff8c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_open_procfs$userns(0x0, &(0x7f0000000000)) r2 = socket(0x2, 0xa, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4046040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") 26.527559ms ago: executing program 7 (id=13745): fcntl$notify(0xffffffffffffffff, 0x402, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) mq_notify(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000080)="0d8c7fc3467db2d27d8e3958c086bedc92d23ee7e4ffaf33b85c5b0a2c6bad5d76140fd3b71ac2d5e8773c1b43bf302553ca0e26bcd98a852ec166bf5c6806c34204ed9b664772217e6ed0103c", &(0x7f0000000180)="02bdfe7a25c9a44e4503627cfa85e544571270d698b17f075650b04cb8a0a0ffb0942f5e28f77f7e146e0a3e9d0b9757041fe3efb677c91f1d05b70d92b52ebb8018f9420f06276e2883995d135030303c8184d224648999d8e549084a646fc0ef40dc121e0d942f49fb0440ff733f8d53172f797a9029685bb9c68d62ae5ff194ff0c8dee5d1021e9118c68a74bbae837fa427623b50b4eadd4c47eae3305e510ce70b8fe354ae1497b61d20d75e4cbf2da3c47abfb57906c83e6922a03c41530d3a74582c89f17b25de14ca8d29e8fbbfa3beda85b806edeb324"}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x185}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) read$char_usb(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d00140002080000000010000000080003000100000008000500000000000000", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x20040804) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x7, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) unshare(0x20000400) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0x400000000a, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0xb) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x7, 0x8000, 0xdf, 0x0, {{0x10, 0x4, 0x2, 0x2, 0x40, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@ssrr={0x89, 0xb, 0xa8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp={0x44, 0x20, 0x21, 0x0, 0x7, [0x80000001, 0xc, 0x0, 0x919d, 0x4, 0x51, 0x2]}, @noop]}}}}}) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000740)="086bdd5d", 0x4}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa000000001800000000000000840000000000000000000700ff0f0b002000000000000000840000000800000000000000000000000000ff"], 0x50, 0x400c8d1}, 0x24000092) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32) listxattr(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)=""/187, 0xbb) socket$inet_udp(0x2, 0x2, 0x0) 11.207939ms ago: executing program 2 (id=13746): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}]) 0s ago: executing program 0 (id=13747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, r0, 0x2) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @rand_addr=' \x01\x00'}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c2"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r5, 0x24, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file7\x00', 0x40, &(0x7f0000000080), 0x1, 0x507, &(0x7f0000001300)="$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") rmdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r4, @ANYBLOB="000000000000000008000d0000000e00050021"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="fa3205563c7d2f983b7c694505c345849b68ecf5fc5259edd24de305b674a97e74dd858b16c4b4daf98ff1f1fee3869741fd047053c1aba8bb8a411a6dc8214edb8604213abd1359", 0x48}, {&(0x7f0000000100)="4a8eed9c34a4c15804d237aa994a905ce8a0ee4bfb76085c00124f1d84114f2c2f8bc9a39f190cff30a0dac251b70b40f4", 0x31}, {&(0x7f0000000500)="026bdc2227a95dcbf35dbbecc5c5a07b65997ecdeb915d5a8edb6e8a36ead140c50fd13b74b91f6fdbbfcbb3e2506e47506ee1b04925dd0e83a826806740a1aa996d9f765652f48c506c627f23446d4e6aaf22120f16ac7f6cf0d8bf9b62987c894b9c85cf6120b988baf559ec96ee25e32b347aa195eb24efc63a8ca735c1ab91c892f68146f7b766ae1df68c48509d331d83684023ee2c4e2c34e65e68b8ab43008f395c8d4f225c", 0xa9}], 0x4, &(0x7f0000000300)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5d}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@generic={0x82, 0xb, "12c617167a8b8b1cab"}, @ssrr={0x89, 0x3, 0xc6}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0xf, [{@multicast1, 0xf0}, {@multicast1, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0x42, 0x1, 0x3, [{@private=0xa010100, 0x46}, {@multicast1, 0x3}, {@broadcast, 0x3}, {@local, 0x3}, {@local, 0x4}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x49bf}}], 0xd8}, 0x4004000) kernel console output (not intermixed with test programs): 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.462836][T20055] RSP: 002b:00007f9b2966f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1818.462857][T20055] RAX: ffffffffffffffda RBX: 00007f9b2b716360 RCX: 00007f9b2b49ce59 [ 1818.462875][T20055] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1818.462897][T20055] RBP: 00007f9b2b532d6f R08: 0000000000000000 R09: 0000000000000000 [ 1818.462914][T20055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1818.462931][T20055] R13: 00007f9b2b7163f8 R14: 00007f9b2b716360 R15: 00007ffe67252e58 [ 1818.462953][T20055] [ 1818.462975][T20055] memory: usage 307200kB, limit 307200kB, failcnt 445 [ 1818.691018][T20055] memory+swap: usage 311516kB, limit 9007199254740988kB, failcnt 0 [ 1818.698952][T20055] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1818.706283][T20055] Memory cgroup stats for /syz6: [ 1818.706644][T20055] cache 0 [ 1818.714553][T20055] rss 0 [ 1818.717385][T20055] shmem 0 [ 1818.720438][T20055] mapped_file 0 [ 1818.723914][T20055] dirty 0 [ 1818.726911][T20055] writeback 0 [ 1818.730231][T20055] workingset_refault_anon 3022 [ 1818.735007][T20055] workingset_refault_file 438 [ 1818.739724][T20055] swap 4419584 [ 1818.743187][T20055] swapcached 51277824 [ 1818.747178][T20055] pgpgin 641974 [ 1818.750697][T20055] pgpgout 641973 [ 1818.754254][T20055] pgfault 728301 [ 1818.757900][T20055] pgmajfault 398 [ 1818.761487][T20055] inactive_anon 0 [ 1818.765139][T20055] active_anon 4096 [ 1818.768873][T20055] inactive_file 0 [ 1818.772595][T20055] active_file 0 [ 1818.776160][T20055] unevictable 0 [ 1818.779632][T20055] hierarchical_memory_limit 314572800 [ 1818.785040][T20055] hierarchical_memsw_limit 9223372036854771712 [ 1818.791274][T20055] total_cache 0 [ 1818.794769][T20055] total_rss 0 [ 1818.798074][T20055] total_shmem 0 [ 1818.801550][T20055] total_mapped_file 0 [ 1818.805574][T20055] total_dirty 0 [ 1818.809048][T20055] total_writeback 0 [ 1818.812882][T20055] total_workingset_refault_anon 3022 [ 1818.818211][T20055] total_workingset_refault_file 438 [ 1818.823430][T20055] total_swap 4419584 [ 1818.827404][T20055] total_swapcached 51277824 [ 1818.831924][T20055] total_pgpgin 641974 [ 1818.835947][T20055] total_pgpgout 641973 [ 1818.840026][T20055] total_pgfault 728301 [ 1818.844109][T20055] total_pgmajfault 398 [ 1818.848391][T20055] total_inactive_anon 0 [ 1818.852569][T20055] total_active_anon 4096 [ 1818.856848][T20055] total_inactive_file 0 [ 1818.861036][T20055] total_active_file 0 [ 1818.865043][T20055] total_unevictable 0 [ 1818.869059][T20055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.13354,pid=20045,uid=0 [ 1818.884052][T20055] Memory cgroup out of memory: Killed process 20045 (syz.6.13354) total-vm:92536kB, anon-rss:1236kB, file-rss:30544kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1818.954069][ T28] kauditd_printk_skb: 503 callbacks suppressed [ 1818.954089][ T28] audit: type=1400 audit(2000000083.147:82677): avc: denied { read write } for pid=20050 comm="syz.7.13356" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1818.991543][T20052] EXT4-fs error (device loop7): ext4_get_journal_inode:5896: comm syz.7.13356: inode #2147418112: comm syz.7.13356: iget: illegal inode # [ 1819.005870][T20052] loop7: lost filesystem error report for type 5 error -117 [ 1819.005960][T20052] EXT4-fs (loop7): no journal found [ 1819.018574][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1819.018618][ C0] EXT4-fs (loop7): initial error at time 2000000083: ext4_get_journal_inode:5896 [ 1819.018665][ C0] EXT4-fs (loop7): last error at time 2000000083: ext4_get_journal_inode:5896 [ 1819.043742][ T28] audit: type=1400 audit(2000000083.147:82678): avc: denied { open } for pid=20050 comm="syz.7.13356" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1819.071409][T20051] bridge_slave_1: left allmulticast mode [ 1819.079182][ T28] audit: type=1400 audit(2000000083.147:82679): avc: denied { ioctl } for pid=20050 comm="syz.7.13356" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1819.095401][T20051] bridge_slave_1: left promiscuous mode [ 1819.114966][T20052] EXT4-fs (loop7): can't get journal size [ 1819.122182][ T28] audit: type=1400 audit(2000000083.175:82680): avc: denied { recv } for pid=20045 comm="syz.6.13354" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1819.147060][T20051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.156633][T20052] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 1819.176657][T20051] bond0: (slave bond_slave_0): Releasing backup interface [ 1819.184599][T20052] EXT4-fs (loop7): Errors on filesystem, clearing orphan list. [ 1819.203661][T20051] bond0: (slave bond_slave_1): Releasing backup interface [ 1819.214200][T20052] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1819.237326][ T28] audit: type=1400 audit(2000000083.671:82681): avc: denied { mounton } for pid=20050 comm="syz.7.13356" path="/135/file0" dev="tmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1819.238512][T20051] team0: Port device team_slave_0 removed [ 1819.276247][T20052] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1819.291893][T20052] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.13356: Invalid inode bitmap blk 4 in block_group 0 [ 1819.306764][T20051] team0: Port device team_slave_1 removed [ 1819.313472][ T28] audit: type=1400 audit(2000000083.933:82682): avc: denied { mount } for pid=20050 comm="syz.7.13356" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1819.318328][T20051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1819.350121][T20052] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 1819.379647][T20051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1819.389445][T20051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1819.403745][ T28] audit: type=1400 audit(2000000083.933:82683): avc: denied { read write } for pid=20050 comm="syz.7.13356" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1819.403960][T20051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1819.437311][ T28] audit: type=1400 audit(2000000083.933:82684): avc: denied { read write open } for pid=20050 comm="syz.7.13356" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1819.480450][T20051] net_ratelimit: 10 callbacks suppressed [ 1819.480465][T20051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1819.519633][ T28] audit: type=1400 audit(2000000083.933:82685): avc: denied { write } for pid=20050 comm="syz.7.13356" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1819.560321][T20052] team0: Port device xfrm0 added [ 1819.593120][T20060] tipc: Failed to remove unknown binding: 66,0,0/0:2101640388/2101640389 [ 1819.662155][ T28] audit: type=1400 audit(2000000083.933:82686): avc: denied { remove_name } for pid=20050 comm="syz.7.13356" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1819.695436][T20065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1819.888814][T20021] wg1 speed is unknown, defaulting to 1000 [ 1820.813407][T17074] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.702883][T20079] syzkaller0: entered promiscuous mode [ 1821.708579][T20079] syzkaller0: entered allmulticast mode [ 1822.093990][T20070] wg1 speed is unknown, defaulting to 1000 [ 1822.283258][T14984] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1822.291766][T14984] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1822.301739][T14984] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1822.311040][T14984] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1822.611125][T20100] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13369'. [ 1823.578650][T20120] netlink: 'syz.7.13375': attribute type 10 has an invalid length. [ 1823.617201][T20109] syz.2.13371 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1823.628465][T20109] CPU: 0 UID: 0 PID: 20109 Comm: syz.2.13371 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1823.628588][T20109] Tainted: [W]=WARN [ 1823.628596][T20109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1823.628610][T20109] Call Trace: [ 1823.628618][T20109] [ 1823.628627][T20109] __dump_stack+0x1d/0x30 [ 1823.628655][T20109] dump_stack_lvl+0x95/0xd0 [ 1823.628679][T20109] dump_stack+0x15/0x1b [ 1823.628700][T20109] dump_header+0x80/0x240 [ 1823.628799][T20109] oom_kill_process+0x295/0x350 [ 1823.628836][T20109] out_of_memory+0x97d/0xb80 [ 1823.628881][T20109] try_charge_memcg+0x62f/0xa10 [ 1823.628931][T20109] ? radix_tree_lookup+0xfa/0x140 [ 1823.628967][T20109] charge_memcg+0x6d/0x120 [ 1823.628997][T20109] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1823.629031][T20109] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1823.629068][T20109] ? alloc_pages_mpol+0x217/0x260 [ 1823.629099][T20109] swap_cache_alloc_folio+0xa2/0x120 [ 1823.629128][T20109] swap_cluster_readahead+0x25f/0x3c0 [ 1823.629192][T20109] swapin_readahead+0xde/0x840 [ 1823.629219][T20109] ? _raw_spin_unlock+0x9/0x30 [ 1823.629240][T20109] ? swap_put_entries_cluster+0x46c/0x490 [ 1823.629270][T20109] ? __entry_text_end+0x1d908/0x102179 [ 1823.629410][T20109] ? __rcu_read_unlock+0x4e/0x70 [ 1823.629434][T20109] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1823.629461][T20109] do_swap_page+0x31e/0x2180 [ 1823.629491][T20109] ? __css_rstat_updated+0xbb/0x280 [ 1823.629580][T20109] ? __rcu_read_lock+0x36/0x50 [ 1823.629602][T20109] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1823.629629][T20109] handle_mm_fault+0xb30/0x2e70 [ 1823.629660][T20109] ? vma_start_read+0x1c7/0x2c0 [ 1823.629757][T20109] do_user_addr_fault+0x62f/0x1050 [ 1823.629793][T20109] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1823.629897][T20109] ? trace_page_fault_user+0x1f/0xa0 [ 1823.629931][T20109] exc_page_fault+0x62/0xa0 [ 1823.629961][T20109] asm_exc_page_fault+0x26/0x30 [ 1823.630022][T20109] RIP: 0033:0x7f0f83bfa80c [ 1823.630041][T20109] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 1823.630063][T20109] RSP: 002b:00007ffc76d44a10 EFLAGS: 00010202 [ 1823.630094][T20109] RAX: 0000000000000000 RBX: 00007f0f83fa5fa0 RCX: 0000555556126808 [ 1823.630178][T20109] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1823.630265][T20109] RBP: 00007f0f83fa7da0 R08: 0000000000000000 R09: 0000000000000000 [ 1823.630281][T20109] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000001a99d4 [ 1823.630295][T20109] R13: 00007f0f83fa627c R14: 00000000001a9862 R15: 00007ffc76d44b10 [ 1823.630318][T20109] [ 1823.630326][T20109] memory: usage 307200kB, limit 307200kB, failcnt 2118 [ 1823.897561][T20109] memory+swap: usage 318152kB, limit 9007199254740988kB, failcnt 0 [ 1823.905488][T20109] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1823.912850][T20109] Memory cgroup stats for /syz2: [ 1823.913226][T20109] cache 0 [ 1823.921119][T20109] rss 0 [ 1823.923909][T20109] shmem 0 [ 1823.926883][T20109] mapped_file 0 [ 1823.930353][T20109] dirty 0 [ 1823.933303][T20109] writeback 0 [ 1823.936671][T20109] workingset_refault_anon 579 [ 1823.941359][T20109] workingset_refault_file 532 [ 1823.946120][T20109] swap 11214848 [ 1823.949589][T20109] swapcached 38961152 [ 1823.953614][T20109] pgpgin 506058 [ 1823.957123][T20109] pgpgout 506056 [ 1823.960677][T20109] pgfault 420769 [ 1823.964290][T20109] pgmajfault 407 [ 1823.967873][T20109] inactive_anon 8192 [ 1823.971782][T20109] active_anon 0 [ 1823.975250][T20109] inactive_file 0 [ 1823.978906][T20109] active_file 0 [ 1823.982382][T20109] unevictable 0 [ 1823.985856][T20109] hierarchical_memory_limit 314572800 [ 1823.991411][T20109] hierarchical_memsw_limit 9223372036854771712 [ 1823.997587][T20109] total_cache 0 [ 1824.001504][T20109] total_rss 0 [ 1824.004806][T20109] total_shmem 0 [ 1824.008285][T20109] total_mapped_file 0 [ 1824.012308][T20109] total_dirty 0 [ 1824.015825][T20109] total_writeback 0 [ 1824.019661][T20109] total_workingset_refault_anon 579 [ 1824.024871][T20109] total_workingset_refault_file 532 [ 1824.030096][T20109] total_swap 11214848 [ 1824.034150][T20109] total_swapcached 38961152 [ 1824.038711][T20109] total_pgpgin 506058 [ 1824.042717][T20109] total_pgpgout 506056 [ 1824.046878][T20109] total_pgfault 420769 [ 1824.050961][T20109] total_pgmajfault 407 [ 1824.055090][T20109] total_inactive_anon 8192 [ 1824.059585][T20109] total_active_anon 0 [ 1824.063589][T20109] total_inactive_file 0 [ 1824.067817][T20109] total_active_file 0 [ 1824.071815][T20109] total_unevictable 0 [ 1824.075859][T20109] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.13371,pid=20109,uid=0 [ 1824.090801][T20109] Memory cgroup out of memory: Killed process 20109 (syz.2.13371) total-vm:86252kB, anon-rss:1236kB, file-rss:26384kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1824.097029][T20113] loop6: detected capacity change from 0 to 512 [ 1824.138865][T20120] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1824.168725][T20108] loop5: detected capacity change from 0 to 1024 [ 1824.183798][T20121] bond2: option mode: unable to set because the bond device is up [ 1824.195582][T20108] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 1824.195582][T20108] [ 1824.272337][T20113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1824.288838][T20108] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1824.320564][T20113] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1824.321878][ T28] kauditd_printk_skb: 386 callbacks suppressed [ 1824.321890][ T28] audit: type=1400 audit(2000000344.661:83073): avc: denied { mount } for pid=20112 comm="syz.6.13372" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1824.347727][T20113] xt_limit: Overflow, try lower: 7/0 [ 1824.376739][T20120] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1824.435840][T20120] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1824.531034][ T28] audit: type=1400 audit(2000000344.671:83074): avc: denied { read write } for pid=20112 comm="syz.6.13372" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1824.669097][ T28] audit: type=1400 audit(2000000344.671:83075): avc: denied { read write open } for pid=20112 comm="syz.6.13372" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1824.721255][T20132] program syz.7.13377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1824.767488][T19082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1824.777271][ T28] audit: type=1400 audit(2000000344.671:83076): avc: denied { open } for pid=20112 comm="syz.6.13372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1824.799515][T20132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20132 comm=syz.7.13377 [ 1824.837978][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1824.844656][ C1] audit: audit_lost=539 audit_rate_limit=0 audit_backlog_limit=64 [ 1824.852515][ C1] audit: backlog limit exceeded [ 1824.858892][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1824.865471][ C1] audit: audit_lost=540 audit_rate_limit=0 audit_backlog_limit=64 [ 1824.873363][ C1] audit: backlog limit exceeded [ 1825.295045][T20141] loop5: detected capacity change from 0 to 512 [ 1825.302639][T20141] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1825.986945][T20161] loop7: detected capacity change from 0 to 512 [ 1825.995233][T20161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1826.029730][T20161] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.13387: iget: bad i_size value: 38620345925642 [ 1826.063048][T20161] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1826.063299][T20161] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.13387: couldn't read orphan inode 15 (err -117) [ 1826.072531][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1826.072550][ C0] EXT4-fs (loop7): initial error at time 2000000346: ext4_orphan_get:1397: inode 15 [ 1826.072614][ C0] EXT4-fs (loop7): last error at time 2000000346: ext4_orphan_get:1397: inode 15 [ 1826.213113][T20161] loop7: lost filesystem error report for type 5 error -117 [ 1826.213906][T20161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1826.413573][T20163] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 1826.492778][T20161] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.13387: bg 0: block 5: invalid block bitmap [ 1826.532169][T20161] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1576 with error 28 [ 1826.554444][T20161] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1826.554444][T20161] [ 1826.575827][T20161] EXT4-fs (loop7): Total free blocks count 0 [ 1826.581868][T20161] EXT4-fs (loop7): Free/Dirty block details [ 1826.587947][T20161] EXT4-fs (loop7): free_blocks=0 [ 1826.609549][T20161] EXT4-fs (loop7): dirty_blocks=1576 [ 1826.614918][T20161] EXT4-fs (loop7): Block reservation details [ 1826.621005][T20161] EXT4-fs (loop7): i_reserved_data_blocks=1576 [ 1826.731424][T17074] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.886386][T20171] loop7: detected capacity change from 0 to 256 [ 1826.901068][T20171] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1827.090005][T20180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13394'. [ 1827.127010][T20182] program syz.2.13389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1827.148498][T20180] bond4: entered promiscuous mode [ 1827.153690][T20180] bond4: entered allmulticast mode [ 1827.159058][T20180] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1827.179492][T20182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20182 comm=syz.2.13389 [ 1827.209265][T20180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13394'. [ 1827.284093][T20180] bond4 (unregistering): Released all slaves [ 1828.197500][T20200] syz.6.13393 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1828.211818][T20200] CPU: 1 UID: 0 PID: 20200 Comm: syz.6.13393 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1828.211904][T20200] Tainted: [W]=WARN [ 1828.211912][T20200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1828.211928][T20200] Call Trace: [ 1828.211937][T20200] [ 1828.211991][T20200] __dump_stack+0x1d/0x30 [ 1828.212094][T20200] dump_stack_lvl+0x95/0xd0 [ 1828.212120][T20200] dump_stack+0x15/0x1b [ 1828.212142][T20200] dump_header+0x80/0x240 [ 1828.212169][T20200] oom_kill_process+0x295/0x350 [ 1828.212209][T20200] out_of_memory+0x97d/0xb80 [ 1828.212289][T20200] try_charge_memcg+0x62f/0xa10 [ 1828.212334][T20200] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1828.212387][T20200] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1828.212419][T20200] alloc_pages_mpol+0xb3/0x260 [ 1828.212586][T20200] alloc_pages_noprof+0x8f/0x140 [ 1828.212617][T20200] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1828.212658][T20200] __kvmalloc_node_noprof+0x3d4/0x640 [ 1828.212685][T20200] ? futex_hash_allocate+0x190/0x9a0 [ 1828.212789][T20200] ? futex_hash_allocate+0x190/0x9a0 [ 1828.212831][T20200] futex_hash_allocate+0x190/0x9a0 [ 1828.212890][T20200] ? futex_hash_prctl+0xcc/0xf0 [ 1828.213010][T20200] futex_hash_prctl+0xd8/0xf0 [ 1828.213048][T20200] __se_sys_prctl+0x4f4/0x1400 [ 1828.213086][T20200] __x64_sys_prctl+0x67/0x80 [ 1828.213161][T20200] x64_sys_call+0x2533/0x3020 [ 1828.213192][T20200] do_syscall_64+0x12c/0x3b0 [ 1828.213309][T20200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.213336][T20200] RIP: 0033:0x7f9b2b49ce59 [ 1828.213357][T20200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1828.213379][T20200] RSP: 002b:00007f9b2966f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1828.213404][T20200] RAX: ffffffffffffffda RBX: 00007f9b2b716360 RCX: 00007f9b2b49ce59 [ 1828.213463][T20200] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1828.213479][T20200] RBP: 00007f9b2b532d6f R08: 0000000000000000 R09: 0000000000000000 [ 1828.213495][T20200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1828.213511][T20200] R13: 00007f9b2b7163f8 R14: 00007f9b2b716360 R15: 00007ffe67252e58 [ 1828.213536][T20200] [ 1828.213544][T20200] memory: usage 307200kB, limit 307200kB, failcnt 874 [ 1828.441622][T20200] memory+swap: usage 311520kB, limit 9007199254740988kB, failcnt 0 [ 1828.449562][T20200] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1828.456897][T20200] Memory cgroup stats for /syz6: [ 1828.457216][T20200] cache 0 [ 1828.465588][T20200] rss 0 [ 1828.468446][T20200] shmem 0 [ 1828.471398][T20200] mapped_file 0 [ 1828.474881][T20200] dirty 0 [ 1828.477931][T20200] writeback 0 [ 1828.481229][T20200] workingset_refault_anon 3126 [ 1828.486015][T20200] workingset_refault_file 438 [ 1828.490742][T20200] swap 4423680 [ 1828.494123][T20200] swapcached 56053760 [ 1828.498133][T20200] pgpgin 655254 [ 1828.501691][T20200] pgpgout 655254 [ 1828.505247][T20200] pgfault 743319 [ 1828.508819][T20200] pgmajfault 462 [ 1828.512476][T20200] inactive_anon 0 [ 1828.516123][T20200] active_anon 0 [ 1828.519602][T20200] inactive_file 0 [ 1828.523333][T20200] active_file 0 [ 1828.526879][T20200] unevictable 0 [ 1828.530369][T20200] hierarchical_memory_limit 314572800 [ 1828.535804][T20200] hierarchical_memsw_limit 9223372036854771712 [ 1828.542049][T20200] total_cache 0 [ 1828.545572][T20200] total_rss 0 [ 1828.548872][T20200] total_shmem 0 [ 1828.552435][T20200] total_mapped_file 0 [ 1828.556455][T20200] total_dirty 0 [ 1828.559947][T20200] total_writeback 0 [ 1828.563806][T20200] total_workingset_refault_anon 3126 [ 1828.569253][T20200] total_workingset_refault_file 438 [ 1828.574491][T20200] total_swap 4423680 [ 1828.578418][T20200] total_swapcached 56053760 [ 1828.582932][T20200] total_pgpgin 655254 [ 1828.586941][T20200] total_pgpgout 655254 [ 1828.591020][T20200] total_pgfault 743319 [ 1828.595177][T20200] total_pgmajfault 462 [ 1828.599332][T20200] total_inactive_anon 0 [ 1828.603594][T20200] total_active_anon 0 [ 1828.607621][T20200] total_inactive_file 0 [ 1828.611793][T20200] total_active_file 0 [ 1828.615792][T20200] total_unevictable 0 [ 1828.619811][T20200] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.13393,pid=20176,uid=0 [ 1828.634658][T20200] Memory cgroup out of memory: Killed process 20176 (syz.6.13393) total-vm:92536kB, anon-rss:1236kB, file-rss:30544kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1828.730065][T20199] loop7: detected capacity change from 0 to 512 [ 1828.744006][T20199] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1828.767036][T20199] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1828.777343][T20199] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1828.796112][T20199] EXT4-fs (loop7): mount failed [ 1828.921597][T20194] C: renamed from veth1_to_team (while UP) [ 1828.932127][T20194] netlink: 164 bytes leftover after parsing attributes in process `syz.7.13397'. [ 1829.503916][T20204] wg1 speed is unknown, defaulting to 1000 [ 1829.681120][ T28] kauditd_printk_skb: 563 callbacks suppressed [ 1829.681140][ T28] audit: type=1400 audit(2000000349.666:83634): avc: denied { recv } for pid=3285 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1829.768195][ T28] audit: type=1400 audit(2000000349.666:83635): avc: denied { read write } for pid=17074 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1829.878211][ T28] audit: type=1400 audit(2000000349.666:83636): avc: denied { open } for pid=17074 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1829.994640][ T28] audit: type=1400 audit(2000000349.666:83637): avc: denied { ioctl } for pid=17074 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1830.106106][ T28] audit: type=1400 audit(2000000349.675:83638): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1830.199356][ T28] audit: type=1400 audit(2000000349.703:83639): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1830.243276][ T28] audit: type=1400 audit(2000000349.750:83640): avc: denied { open } for pid=20215 comm="syz.7.13401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1830.356371][ T28] audit: type=1400 audit(2000000349.750:83641): avc: denied { perfmon } for pid=20215 comm="syz.7.13401" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1830.378437][T20222] loop5: detected capacity change from 0 to 512 [ 1830.407825][ T28] audit: type=1400 audit(2000000349.750:83642): avc: denied { kernel } for pid=20215 comm="syz.7.13401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1830.432733][T20222] netlink: 'syz.5.13404': attribute type 39 has an invalid length. [ 1830.471185][ T28] audit: type=1400 audit(2000000349.778:83643): avc: denied { prog_load } for pid=20185 comm="syz.2.13395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1830.493658][T14967] smc: removing ib device syz0 [ 1830.551794][T20223] loop5: detected capacity change from 0 to 1024 [ 1830.934429][T11330] wg1 speed is unknown, defaulting to 1000 [ 1830.940974][T11330] syz0: Port: 1 Link DOWN [ 1831.008603][T20226] netlink: 204 bytes leftover after parsing attributes in process `syz.6.13405'. [ 1831.042342][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13405'. [ 1831.181242][T20226] bond0: entered promiscuous mode [ 1831.193621][T20226] bond_slave_0: entered promiscuous mode [ 1831.202656][T20226] bond_slave_1: entered promiscuous mode [ 1831.208487][T20226] syz_tun: entered promiscuous mode [ 1831.216391][T20226] batadv_slave_0: entered promiscuous mode [ 1831.222324][T20226] batadv_slave_0: left promiscuous mode [ 1831.241439][T20226] bond0: left promiscuous mode [ 1831.246330][T20226] bond_slave_0: left promiscuous mode [ 1831.251916][T20226] bond_slave_1: left promiscuous mode [ 1831.257592][T20226] syz_tun: left promiscuous mode [ 1832.259001][T20253] program syz.5.13413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1832.299475][T20253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=20253 comm=syz.5.13413 [ 1832.759169][T20265] SELinux: policydb string length 0 does not match expected length 8 [ 1832.780869][T20265] SELinux: failed to load policy [ 1832.801965][T20265] loop7: detected capacity change from 0 to 764 [ 1832.824613][T20265] iso9660: Unknown parameter '00000000000000000000003000000000000000000030x0000000000000003ߟäŒDLÓŽ™àÉêÐò]-ºu·z€4wùt5±|_*/¾{  5û$T%±‚' [ 1833.581396][T20280] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13420'. [ 1834.084468][T20297] netlink: 'syz.5.13427': attribute type 10 has an invalid length. [ 1834.108082][T20297] bond2: option mode: unable to set because the bond device has slaves [ 1834.123193][T20297] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1834.164010][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13424'. [ 1834.254082][T20301] netlink: 204 bytes leftover after parsing attributes in process `syz.7.13428'. [ 1834.268941][T20301] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13428'. [ 1834.665732][T20319] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13434'. [ 1834.888808][T20322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13435'. [ 1835.003324][T20325] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13436'. [ 1835.035437][ T28] kauditd_printk_skb: 569 callbacks suppressed [ 1835.035456][ T28] audit: type=1400 audit(2000000354.679:84213): avc: denied { create } for pid=20324 comm="syz.5.13436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1835.105552][ T28] audit: type=1400 audit(2000000354.689:84214): avc: denied { create } for pid=20324 comm="syz.5.13436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1835.134437][T20325] loop5: detected capacity change from 0 to 4096 [ 1835.145668][ T28] audit: type=1400 audit(2000000354.698:84215): avc: denied { create } for pid=20324 comm="syz.5.13436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1835.189023][ T28] audit: type=1400 audit(2000000354.698:84216): avc: denied { setopt } for pid=20324 comm="syz.5.13436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1835.225792][ T28] audit: type=1400 audit(2000000354.764:84217): avc: denied { read write } for pid=20324 comm="syz.5.13436" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1835.251301][ T28] audit: type=1400 audit(2000000354.764:84218): avc: denied { open } for pid=20324 comm="syz.5.13436" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1835.256972][T20325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1835.279331][ T28] audit: type=1400 audit(2000000354.764:84219): avc: denied { ioctl } for pid=20324 comm="syz.5.13436" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1835.317536][ T28] audit: type=1400 audit(2000000354.801:84220): avc: denied { mounton } for pid=20324 comm="syz.5.13436" path="/149/file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1835.340510][ T28] audit: type=1400 audit(2000000354.857:84221): avc: denied { map_create } for pid=20295 comm="syz.2.13426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1835.361450][ T28] audit: type=1400 audit(2000000354.857:84222): avc: denied { recv } for pid=3285 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1835.415677][T20306] 9pnet_fd: Insufficient options for proto=fd [ 1836.232668][T17444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1836.436251][T20344] netlink: 'syz.5.13439': attribute type 10 has an invalid length. [ 1836.527352][T20344] bond2: option mode: unable to set because the bond device has slaves [ 1836.579302][T20350] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1836.631101][T20356] 9p: Bad value for 'wfdno' [ 1836.872955][T20366] loop5: detected capacity change from 0 to 256 [ 1836.894660][T20366] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1836.989883][T20362] batman_adv: batadv0: Adding interface: dummy0 [ 1837.018486][T20362] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1837.046958][T20362] batman_adv: batadv0: Interface activated: dummy0 [ 1837.058748][T20362] batadv0: mtu less than device minimum [ 1837.089760][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.100856][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.111806][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.122622][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.133708][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.144784][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.155703][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.166732][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1837.178000][T20362] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1838.038264][T20391] netlink: 'syz.7.13457': attribute type 10 has an invalid length. [ 1838.091332][T20391] bond2: option mode: unable to set because the bond device has slaves [ 1838.160015][T20391] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1838.460287][T20401] Cannot find add_set index 0 as target [ 1838.472271][T20401] loop6: detected capacity change from 0 to 256 [ 1838.520785][T20401] FAT-fs (loop6): Directory bread(block 64) failed [ 1838.528774][T20401] FAT-fs (loop6): Directory bread(block 65) failed [ 1838.535559][T20401] FAT-fs (loop6): Directory bread(block 66) failed [ 1838.542158][T20401] FAT-fs (loop6): Directory bread(block 67) failed [ 1838.548743][T20401] FAT-fs (loop6): Directory bread(block 68) failed [ 1838.555330][T20401] FAT-fs (loop6): Directory bread(block 69) failed [ 1838.562023][T20401] FAT-fs (loop6): Directory bread(block 70) failed [ 1838.568735][T20401] FAT-fs (loop6): Directory bread(block 71) failed [ 1838.575414][T20401] FAT-fs (loop6): Directory bread(block 72) failed [ 1838.582009][T20401] FAT-fs (loop6): Directory bread(block 73) failed [ 1839.565786][T20407] bond2: (slave macvlan2): speed changed to 0 on port 1 [ 1840.302229][T20423] netlink: 'syz.6.13466': attribute type 1 has an invalid length. [ 1840.327161][T20423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1840.350226][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13466'. [ 1840.381638][T20423] bond2: (slave bridge1): making interface the new active one [ 1840.389940][T20423] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1840.420997][ T28] kauditd_printk_skb: 553 callbacks suppressed [ 1840.421016][ T28] audit: type=1400 audit(2000000359.702:84776): avc: denied { create } for pid=20428 comm="syz.0.13468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1840.449012][ T28] audit: type=1400 audit(2000000359.702:84777): avc: denied { write } for pid=20428 comm="syz.0.13468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1840.566446][ T28] audit: type=1400 audit(2000000359.702:84778): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1840.595120][T20432] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13469'. [ 1840.621881][ T28] audit: type=1400 audit(2000000359.702:84779): avc: denied { read write } for pid=20422 comm="syz.2.13465" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1840.662496][T20436] loop7: detected capacity change from 0 to 512 [ 1840.681676][T20436] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1840.697112][ T28] audit: type=1400 audit(2000000359.702:84780): avc: denied { ioctl open } for pid=20422 comm="syz.2.13465" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1840.757482][ T28] audit: type=1400 audit(2000000359.702:84781): avc: denied { recv } for pid=28 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1840.788061][T20440] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1840.794682][T20440] audit: audit_lost=543 audit_rate_limit=0 audit_backlog_limit=64 [ 1840.802538][T20440] audit: backlog limit exceeded [ 1840.808257][T20440] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1841.209099][T20455] loop6: detected capacity change from 0 to 1024 [ 1841.328502][T20455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1841.343690][T20455] FAULT_INJECTION: forcing a failure. [ 1841.343690][T20455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1841.386145][T20455] CPU: 1 UID: 0 PID: 20455 Comm: syz.6.13477 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1841.386188][T20455] Tainted: [W]=WARN [ 1841.386197][T20455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1841.386214][T20455] Call Trace: [ 1841.386242][T20455] [ 1841.386252][T20455] __dump_stack+0x1d/0x30 [ 1841.386282][T20455] dump_stack_lvl+0x95/0xd0 [ 1841.386326][T20455] dump_stack+0x15/0x1b [ 1841.386352][T20455] should_fail_ex+0x263/0x280 [ 1841.386379][T20455] should_fail+0xb/0x20 [ 1841.386403][T20455] should_fail_usercopy+0x1a/0x20 [ 1841.386433][T20455] strncpy_from_user+0x27/0x250 [ 1841.386486][T20455] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 1841.386533][T20455] do_getname+0x59/0x1c0 [ 1841.386559][T20455] getname_flags+0x1d/0x30 [ 1841.386583][T20455] path_setxattrat+0x20f/0x310 [ 1841.386664][T20455] __x64_sys_lsetxattr+0x71/0x90 [ 1841.386690][T20455] x64_sys_call+0x1300/0x3020 [ 1841.386719][T20455] do_syscall_64+0x12c/0x3b0 [ 1841.386801][T20455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.386828][T20455] RIP: 0033:0x7f9b2b49ce59 [ 1841.386847][T20455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.386869][T20455] RSP: 002b:00007f9b29ef7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1841.386893][T20455] RAX: ffffffffffffffda RBX: 00007f9b2b715fa0 RCX: 00007f9b2b49ce59 [ 1841.386982][T20455] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000180 [ 1841.386999][T20455] RBP: 00007f9b29ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.387015][T20455] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1841.387030][T20455] R13: 00007f9b2b716038 R14: 00007f9b2b715fa0 R15: 00007ffe67252e58 [ 1841.387053][T20455] [ 1841.621492][T19082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1841.701631][T20472] loop5: detected capacity change from 0 to 128 [ 1841.741489][T20472] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1841.756151][T20472] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1841.807079][T20472] netlink: 'syz.5.13481': attribute type 1 has an invalid length. [ 1841.907497][T20472] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1841.981840][T20466] netem: change failed [ 1841.992786][T20484] bond4: entered allmulticast mode [ 1842.003971][T20483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13484'. [ 1842.024610][T20489] loop7: detected capacity change from 0 to 256 [ 1842.072695][T20484] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full [ 1842.081639][T20472] bond4: (slave ip6gretap1): making interface the new active one [ 1842.128714][T20472] ip6gretap1: entered allmulticast mode [ 1842.153365][T20472] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1842.249074][T17444] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1842.450673][T14967] net_ratelimit: 30 callbacks suppressed [ 1842.450691][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1842.481367][T20499] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1842.487956][T20499] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1842.524689][T20499] vhci_hcd vhci_hcd.0: Device attached [ 1842.608851][T20502] vhci_hcd: connection closed [ 1842.610712][T14967] vhci_hcd vhci_hcd.6: stop threads [ 1842.620740][T14967] vhci_hcd vhci_hcd.6: release socket [ 1842.630906][T20501] syzkaller0: entered promiscuous mode [ 1842.639626][T14967] vhci_hcd vhci_hcd.6: disconnect device [ 1842.652108][T20501] syzkaller0: entered allmulticast mode [ 1842.685736][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1842.688271][T20509] loop7: detected capacity change from 0 to 128 [ 1842.813484][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1842.834296][T20513] FAULT_INJECTION: forcing a failure. [ 1842.834296][T20513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1842.879514][T20513] CPU: 1 UID: 0 PID: 20513 Comm: syz.7.13492 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1842.879595][T20513] Tainted: [W]=WARN [ 1842.879605][T20513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1842.879620][T20513] Call Trace: [ 1842.879627][T20513] [ 1842.879635][T20513] __dump_stack+0x1d/0x30 [ 1842.879660][T20513] dump_stack_lvl+0x95/0xd0 [ 1842.879684][T20513] dump_stack+0x15/0x1b [ 1842.879716][T20513] should_fail_ex+0x263/0x280 [ 1842.879743][T20513] should_fail+0xb/0x20 [ 1842.879766][T20513] should_fail_usercopy+0x1a/0x20 [ 1842.879795][T20513] _copy_from_user+0x1c/0xb0 [ 1842.879823][T20513] memdup_user+0x5e/0xd0 [ 1842.879875][T20513] strndup_user+0x68/0xb0 [ 1842.879914][T20513] __se_sys_mount+0x4d/0x2e0 [ 1842.879961][T20513] ? fput+0x8f/0xc0 [ 1842.879987][T20513] ? ksys_write+0x194/0x1a0 [ 1842.880026][T20513] __x64_sys_mount+0x67/0x80 [ 1842.880147][T20513] x64_sys_call+0x2d61/0x3020 [ 1842.880180][T20513] do_syscall_64+0x12c/0x3b0 [ 1842.880224][T20513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.880299][T20513] RIP: 0033:0x7ffa946ece59 [ 1842.880378][T20513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1842.880403][T20513] RSP: 002b:00007ffa93147028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1842.880428][T20513] RAX: ffffffffffffffda RBX: 00007ffa94965fa0 RCX: 00007ffa946ece59 [ 1842.880445][T20513] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 1842.880458][T20513] RBP: 00007ffa93147090 R08: 00002000000000c0 R09: 0000000000000000 [ 1842.880482][T20513] R10: 0000000002214803 R11: 0000000000000246 R12: 0000000000000001 [ 1842.880520][T20513] R13: 00007ffa94966038 R14: 00007ffa94965fa0 R15: 00007ffca89cb908 [ 1842.880548][T20513] [ 1842.985549][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1843.198419][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1843.219749][T20525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1843.229499][T20525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.316021][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1843.433834][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1843.551293][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1843.668606][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1843.786323][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1844.001269][T20550] syzkaller0: entered promiscuous mode [ 1844.006865][T20550] syzkaller0: entered allmulticast mode [ 1844.085601][T20559] netlink: 13 bytes leftover after parsing attributes in process `syz.0.13507'. [ 1844.094779][T20559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13507'. [ 1844.104884][T20559] netlink: 'syz.0.13507': attribute type 2 has an invalid length. [ 1844.122420][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13507'. [ 1844.131454][T20559] netlink: 13 bytes leftover after parsing attributes in process `syz.0.13507'. [ 1844.660713][T20578] loop5: detected capacity change from 0 to 512 [ 1845.245189][T20578] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1845.256136][T20578] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 1846.103232][T20581] syz.2.13512 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1846.127422][T20581] CPU: 0 UID: 0 PID: 20581 Comm: syz.2.13512 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1846.127469][T20581] Tainted: [W]=WARN [ 1846.127479][T20581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1846.127497][T20581] Call Trace: [ 1846.127508][T20581] [ 1846.127520][T20581] __dump_stack+0x1d/0x30 [ 1846.127559][T20581] dump_stack_lvl+0x95/0xd0 [ 1846.127624][T20581] dump_stack+0x15/0x1b [ 1846.127724][T20581] dump_header+0x80/0x240 [ 1846.127750][T20581] oom_kill_process+0x295/0x350 [ 1846.127786][T20581] out_of_memory+0x97d/0xb80 [ 1846.127821][T20581] try_charge_memcg+0x62f/0xa10 [ 1846.127884][T20581] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1846.127922][T20581] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1846.127960][T20581] alloc_pages_mpol+0xb3/0x260 [ 1846.128021][T20581] alloc_pages_noprof+0x8f/0x140 [ 1846.128057][T20581] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1846.128098][T20581] __kvmalloc_node_noprof+0x3d4/0x640 [ 1846.128120][T20581] ? futex_hash_allocate+0x190/0x9a0 [ 1846.128222][T20581] ? futex_hash_allocate+0x190/0x9a0 [ 1846.128260][T20581] futex_hash_allocate+0x190/0x9a0 [ 1846.128312][T20581] ? cap_task_prctl+0x13f/0x6b0 [ 1846.128345][T20581] futex_hash_prctl+0xd8/0xf0 [ 1846.128433][T20581] __se_sys_prctl+0x4f4/0x1400 [ 1846.128475][T20581] __x64_sys_prctl+0x67/0x80 [ 1846.128509][T20581] x64_sys_call+0x2533/0x3020 [ 1846.128545][T20581] do_syscall_64+0x12c/0x3b0 [ 1846.128594][T20581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.128627][T20581] RIP: 0033:0x7f0f83d2ce59 [ 1846.128644][T20581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.128674][T20581] RSP: 002b:00007f0f8231a028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1846.128700][T20581] RAX: ffffffffffffffda RBX: 00007f0f83fa6270 RCX: 00007f0f83d2ce59 [ 1846.128722][T20581] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1846.128741][T20581] RBP: 00007f0f83dc2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1846.128760][T20581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1846.128791][T20581] R13: 00007f0f83fa6308 R14: 00007f0f83fa6270 R15: 00007ffc76d448a8 [ 1846.128872][T20581] [ 1846.128894][T20581] memory: usage 307200kB, limit 307200kB, failcnt 2191 [ 1846.313216][ T28] kauditd_printk_skb: 855 callbacks suppressed [ 1846.313260][ T28] audit: type=1400 audit(2000000364.913:85635): avc: denied { recv } for pid=20560 comm="syz.5.13513" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1846.318437][T20581] memory+swap: usage 318140kB, limit 9007199254740988kB, failcnt 0 [ 1846.399179][T20581] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 1846.406580][T20581] Memory cgroup stats for /syz2: [ 1846.406810][T20581] cache 0 [ 1846.414762][T20581] rss 0 [ 1846.417597][T20581] shmem 0 [ 1846.420585][T20581] mapped_file 0 [ 1846.424099][T20581] dirty 0 [ 1846.427200][T20581] writeback 0 [ 1846.430597][T20581] workingset_refault_anon 610 [ 1846.435326][T20581] workingset_refault_file 532 [ 1846.440081][T20581] swap 11210752 [ 1846.443570][T20581] swapcached 43450368 [ 1846.447626][T20581] pgpgin 518591 [ 1846.451173][T20581] pgpgout 518584 [ 1846.454812][T20581] pgfault 434270 [ 1846.458407][T20581] pgmajfault 427 [ 1846.462004][T20581] inactive_anon 28672 [ 1846.466029][T20581] active_anon 0 [ 1846.469887][T20581] inactive_file 0 [ 1846.473579][T20581] active_file 0 [ 1846.477143][T20581] unevictable 0 [ 1846.480739][T20581] hierarchical_memory_limit 314572800 [ 1846.486230][T20581] hierarchical_memsw_limit 9223372036854771712 [ 1846.492452][T20581] total_cache 0 [ 1846.495949][T20581] total_rss 0 [ 1846.499276][T20581] total_shmem 0 [ 1846.502825][T20581] total_mapped_file 0 [ 1846.506868][T20581] total_dirty 0 [ 1846.510560][T20581] total_writeback 0 [ 1846.514443][T20581] total_workingset_refault_anon 610 [ 1846.519672][T20581] total_workingset_refault_file 532 [ 1846.525133][T20581] total_swap 11210752 [ 1846.529143][T20581] total_swapcached 43450368 [ 1846.533703][T20581] total_pgpgin 518591 [ 1846.537719][T20581] total_pgpgout 518584 [ 1846.541828][T20581] total_pgfault 434270 [ 1846.545964][T20581] total_pgmajfault 427 [ 1846.550096][T20581] total_inactive_anon 28672 [ 1846.554700][T20581] total_active_anon 0 [ 1846.558751][T20581] total_inactive_file 0 [ 1846.562955][T20581] total_active_file 0 [ 1846.567078][T20581] total_unevictable 0 [ 1846.622101][T20581] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.13512,pid=20562,uid=0 [ 1846.637743][T20581] Memory cgroup out of memory: Killed process 20562 (syz.2.13512) total-vm:86252kB, anon-rss:1248kB, file-rss:26388kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1846.807796][ T28] audit: type=1400 audit(2000000365.689:85636): avc: denied { recv } for pid=3285 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1846.838264][ T28] audit: type=1400 audit(2000000365.717:85637): avc: denied { create } for pid=20575 comm="syz.0.13517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1846.863292][ T28] audit: type=1400 audit(2000000365.745:85638): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1846.893508][ T28] audit: type=1400 audit(2000000365.745:85639): avc: denied { create } for pid=20582 comm="syz.6.13518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1846.916934][ T28] audit: type=1400 audit(2000000365.745:85640): avc: denied { recv } for pid=20582 comm="syz.6.13518" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1846.971971][ T28] audit: type=1400 audit(2000000365.745:85641): avc: denied { recv } for pid=20582 comm="syz.6.13518" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1847.024489][ T28] audit: type=1400 audit(2000000365.745:85642): avc: denied { recv } for pid=20582 comm="syz.6.13518" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1847.104139][ T28] audit: type=1400 audit(2000000365.745:85643): avc: denied { recv } for pid=20582 comm="syz.6.13518" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1847.155200][ T28] audit: type=1400 audit(2000000365.745:85644): avc: denied { setopt } for pid=20582 comm="syz.6.13518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1847.476986][T20597] netlink: 'syz.6.13523': attribute type 10 has an invalid length. [ 1847.906578][T20601] bond1: option mode: unable to set because the bond device is up [ 1847.925507][T20604] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1847.963151][T20604] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 1847.973056][T23359] bond_slave_0: entered promiscuous mode [ 1847.978790][T23359] bond_slave_1: entered promiscuous mode [ 1848.030484][T14971] net_ratelimit: 9 callbacks suppressed [ 1848.030501][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1848.103299][T20612] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1848.135312][T20613] loop6: detected capacity change from 0 to 512 [ 1848.195985][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1848.227816][T20619] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13529'. [ 1848.257293][T20613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1848.283112][T20619] loop7: detected capacity change from 0 to 256 [ 1848.291533][T20613] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1848.319965][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1848.345561][T20619] msdos: Bad value for 'umask' [ 1848.437278][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1848.509374][T19082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1848.578409][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1848.646722][T20629] loop6: detected capacity change from 0 to 512 [ 1848.658925][T20629] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1848.684283][T20629] EXT4-fs (loop6): 1 truncate cleaned up [ 1848.742286][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1848.758026][T20629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1848.950270][T14984] bond2: (slave macvlan2): failed to get link speed/duplex [ 1848.972236][T20643] loop5: detected capacity change from 0 to 512 [ 1848.985477][T20643] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1848.997034][T20643] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 1849.007120][T20643] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.13534: Corrupt directory, running e2fsck is recommended [ 1849.045587][T20643] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1849.073458][T20643] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.13534: corrupted in-inode xattr: e_name out of bounds [ 1849.088994][T20643] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1849.096254][T20643] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.13534: couldn't read orphan inode 15 (err -117) [ 1849.107193][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1849.107289][ C0] EXT4-fs (loop5): initial error at time 2000000367: ext4_iget_extra_inode:5128: inode 15 [ 1849.107607][ C0] EXT4-fs (loop5): last error at time 2000000367: ext4_iget_extra_inode:5128: inode 15 [ 1849.147966][T20643] loop5: lost filesystem error report for type 5 error -117 [ 1849.150522][T20643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1849.171368][T20643] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1849.328037][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1849.437403][T19082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1849.452240][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1849.570266][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1849.608677][T20641] loop7: detected capacity change from 0 to 512 [ 1849.622262][T20641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1849.914139][T20643] netlink: 60 bytes leftover after parsing attributes in process `syz.5.13534'. [ 1850.192606][T20650] loop6: detected capacity change from 0 to 256 [ 1850.494981][T17074] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.807639][T20660] loop5: detected capacity change from 0 to 256 [ 1851.035017][T20669] netlink: 236 bytes leftover after parsing attributes in process `syz.5.13545'. [ 1851.056225][T20669] netlink: 236 bytes leftover after parsing attributes in process `syz.5.13545'. [ 1851.253448][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13549'. [ 1851.290145][T20677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13549'. [ 1851.321805][T20677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13549'. [ 1851.449222][T20674] geneve0: entered promiscuous mode [ 1851.457237][T20674] geneve0: entered allmulticast mode [ 1851.610781][T20692] netlink: 'syz.5.13553': attribute type 21 has an invalid length. [ 1851.666752][ T28] kauditd_printk_skb: 664 callbacks suppressed [ 1851.666835][ T28] audit: type=1400 audit(2000000370.235:86309): avc: denied { create } for pid=20693 comm="syz.5.13554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1851.697307][ T28] audit: type=1400 audit(2000000370.254:86310): avc: denied { write } for pid=20693 comm="syz.5.13554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1851.770176][ T28] audit: type=1400 audit(2000000370.291:86311): avc: denied { read write } for pid=17074 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1851.795530][ T28] audit: type=1400 audit(2000000370.291:86312): avc: denied { read write open } for pid=17074 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1851.821873][ T28] audit: type=1400 audit(2000000370.291:86313): avc: denied { ioctl } for pid=17074 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1851.867470][ T28] audit: type=1400 audit(2000000370.329:86314): avc: denied { open } for pid=20695 comm="syz.7.13555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1851.910794][ T28] audit: type=1400 audit(2000000370.329:86315): avc: denied { perfmon } for pid=20695 comm="syz.7.13555" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1851.932823][ T28] audit: type=1400 audit(2000000370.338:86316): avc: denied { read write } for pid=19082 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1851.961306][ T28] audit: type=1400 audit(2000000370.338:86317): avc: denied { open } for pid=19082 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1851.995964][ T28] audit: type=1400 audit(2000000370.338:86318): avc: denied { ioctl } for pid=19082 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1852.871088][T20713] 9pnet_fd: Insufficient options for proto=fd [ 1852.940418][T20717] loop5: detected capacity change from 0 to 764 [ 1853.019764][T20717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13562'. [ 1853.216847][T20725] loop5: detected capacity change from 0 to 512 [ 1853.232221][T20718] veth1_to_bond: invalid flags given to default FDB implementation [ 1853.255332][T20725] EXT4-fs (loop5): invalid journal inode [ 1853.266267][T20725] EXT4-fs (loop5): can't get journal size [ 1853.319672][T20725] EXT4-fs (loop5): 1 truncate cleaned up [ 1853.384655][T20725] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1853.425502][ C1] net_ratelimit: 25 callbacks suppressed [ 1853.425538][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1853.450853][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1853.473818][T20725] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1853.580941][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1853.879195][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1854.368395][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1854.459458][T20741] syz.6.13570 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1854.470643][T20741] CPU: 0 UID: 0 PID: 20741 Comm: syz.6.13570 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1854.470693][T20741] Tainted: [W]=WARN [ 1854.470702][T20741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1854.470718][T20741] Call Trace: [ 1854.470726][T20741] [ 1854.470736][T20741] __dump_stack+0x1d/0x30 [ 1854.470830][T20741] dump_stack_lvl+0x95/0xd0 [ 1854.470873][T20741] dump_stack+0x15/0x1b [ 1854.470900][T20741] dump_header+0x80/0x240 [ 1854.470979][T20741] oom_kill_process+0x295/0x350 [ 1854.471021][T20741] out_of_memory+0x97d/0xb80 [ 1854.471059][T20741] try_charge_memcg+0x62f/0xa10 [ 1854.471092][T20741] ? radix_tree_lookup+0xfa/0x140 [ 1854.471128][T20741] charge_memcg+0x6d/0x120 [ 1854.471158][T20741] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1854.471272][T20741] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1854.471303][T20741] ? alloc_pages_mpol+0x217/0x260 [ 1854.471333][T20741] swap_cache_alloc_folio+0xa2/0x120 [ 1854.471453][T20741] swap_cluster_readahead+0x25f/0x3c0 [ 1854.471513][T20741] swapin_readahead+0xde/0x840 [ 1854.471582][T20741] ? __pfx_lapic_next_event+0x10/0x10 [ 1854.471608][T20741] ? __rcu_read_unlock+0x4e/0x70 [ 1854.471631][T20741] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1854.471665][T20741] do_swap_page+0x31e/0x2180 [ 1854.471692][T20741] ? __schedule+0x951/0xd40 [ 1854.471716][T20741] ? __rcu_read_lock+0x36/0x50 [ 1854.471790][T20741] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1854.471816][T20741] handle_mm_fault+0xb30/0x2e70 [ 1854.471865][T20741] ? vma_start_read+0x1c7/0x2c0 [ 1854.471908][T20741] do_user_addr_fault+0x62f/0x1050 [ 1854.471944][T20741] ? trace_page_fault_user+0x1f/0xa0 [ 1854.472058][T20741] exc_page_fault+0x62/0xa0 [ 1854.472087][T20741] asm_exc_page_fault+0x26/0x30 [ 1854.472140][T20741] RIP: 0033:0x7f9b2b45d68e [ 1854.472218][T20741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1854.472239][T20741] RSP: 002b:00007ffe67252f38 EFLAGS: 00010246 [ 1854.472259][T20741] RAX: 0000000000000000 RBX: 000055556d95b500 RCX: 00007f9b2b45d68e [ 1854.472274][T20741] RDX: 00007ffe67252f90 RSI: 0000000000000000 RDI: 0000000000000000 [ 1854.472356][T20741] RBP: 00007f9b2b717da0 R08: 0000000000000000 R09: 0000000000000000 [ 1854.472370][T20741] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000001b0aa2 [ 1854.472393][T20741] R13: 00007f9b2b71627c R14: 00000000001b090f R15: 00007ffe672530c0 [ 1854.472414][T20741] [ 1854.472422][T20741] memory: usage 307200kB, limit 307200kB, failcnt 1262 [ 1854.723069][T20741] memory+swap: usage 311680kB, limit 9007199254740988kB, failcnt 0 [ 1854.731058][T20741] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1854.738382][T20741] Memory cgroup stats for /syz6: [ 1854.738819][T20741] cache 0 [ 1854.746739][T20741] rss 0 [ 1854.749516][T20741] shmem 0 [ 1854.752464][T20741] mapped_file 0 [ 1854.755954][T20741] dirty 0 [ 1854.758906][T20741] writeback 0 [ 1854.762199][T20741] workingset_refault_anon 3226 [ 1854.767115][T20741] workingset_refault_file 438 [ 1854.771800][T20741] swap 4587520 [ 1854.775218][T20741] swapcached 60985344 [ 1854.779230][T20741] pgpgin 680238 [ 1854.782705][T20741] pgpgout 680237 [ 1854.786257][T20741] pgfault 773271 [ 1854.790518][T20741] pgmajfault 508 [ 1854.794082][T20741] inactive_anon 0 [ 1854.797743][T20741] active_anon 4096 [ 1854.801480][T20741] inactive_file 0 [ 1854.805123][T20741] active_file 0 [ 1854.808613][T20741] unevictable 0 [ 1854.812159][T20741] hierarchical_memory_limit 314572800 [ 1854.817539][T20741] hierarchical_memsw_limit 9223372036854771712 [ 1854.823767][T20741] total_cache 0 [ 1854.827241][T20741] total_rss 0 [ 1854.830549][T20741] total_shmem 0 [ 1854.834042][T20741] total_mapped_file 0 [ 1854.838043][T20741] total_dirty 0 [ 1854.841532][T20741] total_writeback 0 [ 1854.845352][T20741] total_workingset_refault_anon 3226 [ 1854.850660][T20741] total_workingset_refault_file 438 [ 1854.855909][T20741] total_swap 4587520 [ 1854.859843][T20741] total_swapcached 60985344 [ 1854.864373][T20741] total_pgpgin 680238 [ 1854.868421][T20741] total_pgpgout 680237 [ 1854.872567][T20741] total_pgfault 773271 [ 1854.876647][T20741] total_pgmajfault 508 [ 1854.880722][T20741] total_inactive_anon 0 [ 1854.884904][T20741] total_active_anon 4096 [ 1854.889216][T20741] total_inactive_file 0 [ 1854.893389][T20741] total_active_file 0 [ 1854.897476][T20741] total_unevictable 0 [ 1854.901485][T20741] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.13570,pid=20741,uid=0 [ 1854.916402][T20741] Memory cgroup out of memory: Killed process 20741 (syz.6.13570) total-vm:86252kB, anon-rss:1232kB, file-rss:26384kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1854.957241][T14984] bond2: (slave macvlan2): failed to get link speed/duplex [ 1854.971335][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1855.075987][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1855.236309][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1855.296511][T17444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.399837][T20770] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1855.482734][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1855.689876][T20779] netlink: 'syz.7.13584': attribute type 10 has an invalid length. [ 1855.701153][T20779] bond2: option mode: unable to set because the bond device has slaves [ 1855.746733][T20779] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 1857.021822][ T28] kauditd_printk_skb: 713 callbacks suppressed [ 1857.021841][ T28] audit: type=1326 audit(2000000375.249:87032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20800 comm="syz.5.13591" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7fe3ddce59 code=0x7ffc0000 [ 1857.070399][T20805] netlink: 12 bytes leftover after parsing attributes in process `syz.7.13593'. [ 1857.096185][T20806] team0: Cannot enslave team device to itself [ 1857.103119][ T28] audit: type=1400 audit(2000000375.277:87033): avc: denied { create } for pid=20803 comm="syz.7.13593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1857.270856][ T28] audit: type=1400 audit(2000000375.277:87034): avc: denied { write } for pid=20803 comm="syz.7.13593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1857.291755][ T28] audit: type=1400 audit(2000000375.277:87035): avc: denied { create } for pid=20803 comm="syz.7.13593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1857.332972][T20810] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=20810 comm=syz.5.13594 [ 1857.385562][ T28] audit: type=1400 audit(2000000375.277:87036): avc: denied { write } for pid=20803 comm="syz.7.13593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1857.531599][T20810] loop5: detected capacity change from 0 to 128 [ 1857.682326][T20810] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 1857.721472][ T28] audit: type=1400 audit(2000000375.286:87037): avc: denied { create } for pid=20803 comm="syz.7.13593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1857.757465][T20810] FAT-fs (loop5): Filesystem has been set read-only [ 1857.830581][T20810] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000) [ 1857.911068][ T28] audit: type=1400 audit(2000000375.286:87038): avc: denied { write } for pid=20803 comm="syz.7.13593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1857.996075][T20816] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1857.999199][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1858.002624][T20816] audit: audit_lost=545 audit_rate_limit=0 audit_backlog_limit=64 [ 1858.061417][T20816] netlink: 'syz.6.13596': attribute type 6 has an invalid length. [ 1858.069361][T20816] netlink: 140 bytes leftover after parsing attributes in process `syz.6.13596'. [ 1858.552436][T20836] loop7: detected capacity change from 0 to 512 [ 1859.493971][T14967] net_ratelimit: 20 callbacks suppressed [ 1859.494011][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1859.723061][T20837] SELinux: Context system_u:object_r:dhcpd_exec_t:s0 is not valid (left unmapped). [ 1859.804571][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13602'. [ 1860.332561][T20831] syz.6.13601 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1860.343801][T20831] CPU: 0 UID: 0 PID: 20831 Comm: syz.6.13601 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1860.343838][T20831] Tainted: [W]=WARN [ 1860.343894][T20831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1860.343908][T20831] Call Trace: [ 1860.343916][T20831] [ 1860.343927][T20831] __dump_stack+0x1d/0x30 [ 1860.343961][T20831] dump_stack_lvl+0x95/0xd0 [ 1860.343988][T20831] dump_stack+0x15/0x1b [ 1860.344022][T20831] dump_header+0x80/0x240 [ 1860.344046][T20831] oom_kill_process+0x295/0x350 [ 1860.344092][T20831] out_of_memory+0x97d/0xb80 [ 1860.344183][T20831] try_charge_memcg+0x62f/0xa10 [ 1860.344267][T20831] charge_memcg+0x6d/0x120 [ 1860.344294][T20831] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1860.344331][T20831] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1860.344475][T20831] ? alloc_pages_mpol+0x217/0x260 [ 1860.344507][T20831] swap_cache_alloc_folio+0xa2/0x120 [ 1860.344542][T20831] swap_cluster_readahead+0x25f/0x3c0 [ 1860.344575][T20831] swapin_readahead+0xde/0x840 [ 1860.344720][T20831] ? _raw_spin_unlock+0x9/0x30 [ 1860.344742][T20831] ? swap_put_entries_cluster+0x46c/0x490 [ 1860.344777][T20831] ? __entry_text_end+0x1d908/0x102179 [ 1860.344951][T20831] ? __rcu_read_unlock+0x4e/0x70 [ 1860.345005][T20831] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1860.345042][T20831] do_swap_page+0x31e/0x2180 [ 1860.345115][T20831] ? __rcu_read_lock+0x36/0x50 [ 1860.345135][T20831] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1860.345162][T20831] handle_mm_fault+0xb30/0x2e70 [ 1860.345285][T20831] ? vma_start_read+0x1c7/0x2c0 [ 1860.345446][T20831] do_user_addr_fault+0x62f/0x1050 [ 1860.345495][T20831] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1860.345529][T20831] ? trace_page_fault_user+0x1f/0xa0 [ 1860.345630][T20831] exc_page_fault+0x62/0xa0 [ 1860.345769][T20831] asm_exc_page_fault+0x26/0x30 [ 1860.345867][T20831] RIP: 0033:0x7f9b2b457fb8 [ 1860.345885][T20831] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 1860.345904][T20831] RSP: 002b:00007ffe67252f40 EFLAGS: 00010246 [ 1860.345921][T20831] RAX: 0000000000000000 RBX: 000055556d95b500 RCX: 00007f9b2b45d68e [ 1860.345960][T20831] RDX: 00007ffe67252f90 RSI: 0000000000000000 RDI: 0000000000000000 [ 1860.345978][T20831] RBP: 00007f9b2b717da0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.345993][T20831] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000001b1f2a [ 1860.346006][T20831] R13: 00007f9b2b71627c R14: 00000000001b1e8f R15: 00007ffe672530c0 [ 1860.346027][T20831] [ 1860.632649][T20831] memory: usage 307200kB, limit 307200kB, failcnt 1404 [ 1860.639626][T20831] memory+swap: usage 311852kB, limit 9007199254740988kB, failcnt 0 [ 1860.647680][T20831] kmem: usage 306968kB, limit 9007199254740988kB, failcnt 0 [ 1860.655035][T20831] Memory cgroup stats for /syz6: [ 1860.655452][T20831] cache 0 [ 1860.663383][T20831] rss 0 [ 1860.666205][T20831] shmem 0 [ 1860.669186][T20831] mapped_file 0 [ 1860.672692][T20831] dirty 0 [ 1860.675654][T20831] writeback 0 [ 1860.679015][T20831] workingset_refault_anon 3251 [ 1860.683886][T20831] workingset_refault_file 438 [ 1860.688680][T20831] swap 4763648 [ 1860.692189][T20831] swapcached 65626112 [ 1860.696209][T20831] pgpgin 683400 [ 1860.699728][T20831] pgpgout 683394 [ 1860.703320][T20831] pgfault 776803 [ 1860.706886][T20831] pgmajfault 521 [ 1860.710508][T20831] inactive_anon 0 [ 1860.714182][T20831] active_anon 24576 [ 1860.718031][T20831] inactive_file 0 [ 1860.721720][T20831] active_file 0 [ 1860.725345][T20831] unevictable 0 [ 1860.728841][T20831] hierarchical_memory_limit 314572800 [ 1860.734280][T20831] hierarchical_memsw_limit 9223372036854771712 [ 1860.740484][T20831] total_cache 0 [ 1860.743998][T20831] total_rss 0 [ 1860.747356][T20831] total_shmem 0 [ 1860.750860][T20831] total_mapped_file 0 [ 1860.754892][T20831] total_dirty 0 [ 1860.758380][T20831] total_writeback 0 [ 1860.762237][T20831] total_workingset_refault_anon 3251 [ 1860.767582][T20831] total_workingset_refault_file 438 [ 1860.772872][T20831] total_swap 4763648 [ 1860.776929][T20831] total_swapcached 65626112 [ 1860.781479][T20831] total_pgpgin 683400 [ 1860.785532][T20831] total_pgpgout 683394 [ 1860.789689][T20831] total_pgfault 776803 [ 1860.793798][T20831] total_pgmajfault 521 [ 1860.797928][T20831] total_inactive_anon 0 [ 1860.802123][T20831] total_active_anon 24576 [ 1860.806521][T20831] total_inactive_file 0 [ 1860.810779][T20831] total_active_file 0 [ 1860.814793][T20831] total_unevictable 0 [ 1860.818826][T20831] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.13601,pid=20831,uid=0 [ 1860.833788][T20831] Memory cgroup out of memory: Killed process 20831 (syz.6.13601) total-vm:86252kB, anon-rss:1232kB, file-rss:26384kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1860.928704][T20836] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1860.938289][T20836] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.13600: invalid block [ 1860.949776][T20836] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1860.959626][T20836] EXT4-fs (loop7): 1 truncate cleaned up [ 1860.974983][T20836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1861.042470][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1861.181620][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1861.220549][T20847] loop5: detected capacity change from 0 to 1024 [ 1861.229461][T20847] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1861.246996][T20847] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 1861.285734][T20847] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.13603: inode #1: comm syz.5.13603: iget: illegal inode # [ 1861.308219][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1861.325963][T20849] netlink: 'syz.6.13604': attribute type 10 has an invalid length. [ 1861.333990][T20847] loop5: lost filesystem error report for type 5 error -117 [ 1861.340155][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1861.353962][ C1] EXT4-fs (loop5): initial error at time 2000000635: ext4_get_journal_inode:5896 [ 1861.363123][ C1] EXT4-fs (loop5): last error at time 2000000635: ext4_get_journal_inode:5896 [ 1861.372323][T20843] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1861.386119][T20847] EXT4-fs (loop5): no journal found [ 1861.391358][T20847] EXT4-fs (loop5): can't get journal size [ 1861.393792][T20849] bond1: option mode: unable to set because the bond device has slaves [ 1861.407614][T20847] EXT4-fs (loop5): failed to initialize system zone (-22) [ 1861.417106][T20843] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1861.426003][T20847] EXT4-fs (loop5): mount failed [ 1861.447087][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1861.461743][T20849] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1861.672890][T17074] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1861.682267][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1861.814394][T20863] netlink: 228 bytes leftover after parsing attributes in process `syz.7.13606'. [ 1861.832062][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1861.897059][T20863] loop7: detected capacity change from 0 to 1024 [ 1861.909697][T20863] EXT4-fs: Ignoring removed orlov option [ 1861.942947][T20863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1861.955432][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1862.079325][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1862.111519][T20857] netlink: 'syz.2.13608': attribute type 9 has an invalid length. [ 1862.189923][T20874] loop6: detected capacity change from 0 to 512 [ 1862.210170][T20874] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1862.220150][T20874] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 1862.246869][T20857] netlink: 'syz.2.13608': attribute type 7 has an invalid length. [ 1862.254744][T20857] netlink: 'syz.2.13608': attribute type 8 has an invalid length. [ 1862.287130][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1862.297391][T20874] SELinux: policydb string length 393224 does not match expected length 8 [ 1862.337293][T20874] SELinux: failed to load policy [ 1862.392549][ T28] kauditd_printk_skb: 384 callbacks suppressed [ 1862.392568][ T28] audit: type=1400 audit(2000000636.255:87417): avc: denied { write } for pid=20859 comm="syz.5.13609" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1862.451382][ T28] audit: type=1400 audit(2000000636.320:87418): avc: denied { ioctl } for pid=20859 comm="syz.5.13609" path="socket:[186132]" dev="sockfs" ino=186132 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1862.479990][T20874] loop6: detected capacity change from 0 to 8192 [ 1862.501216][ T28] audit: type=1400 audit(2000000636.320:87419): avc: denied { read write } for pid=20873 comm="syz.6.13612" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1862.526056][ T28] audit: type=1400 audit(2000000636.320:87420): avc: denied { read write open } for pid=20873 comm="syz.6.13612" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1862.551298][ T28] audit: type=1400 audit(2000000636.320:87421): avc: denied { ioctl } for pid=20873 comm="syz.6.13612" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1862.576960][ T28] audit: type=1400 audit(2000000636.358:87422): avc: denied { mounton } for pid=20873 comm="syz.6.13612" path="/97/file2" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1862.602085][ T28] audit: type=1400 audit(2000000636.358:87423): avc: denied { mount } for pid=20873 comm="syz.6.13612" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1862.637051][ T28] audit: type=1400 audit(2000000636.358:87424): avc: denied { read write } for pid=20873 comm="syz.6.13612" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1862.692349][ T28] audit: type=1400 audit(2000000636.358:87425): avc: denied { open } for pid=20873 comm="syz.6.13612" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1862.723400][ T28] audit: type=1400 audit(2000000636.358:87426): avc: denied { create } for pid=20873 comm="syz.6.13612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1862.858471][T17074] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1863.012424][T20880] loop7: detected capacity change from 0 to 512 [ 1863.051172][T20880] ext4: Unknown parameter 'noacl' [ 1863.246418][T20883] loop6: detected capacity change from 0 to 256 [ 1863.270771][T20883] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1863.420749][T20885] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1863.428381][T20885] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1863.435823][T20885] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1864.746376][T20895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13618'. [ 1864.763631][T20895] bond0: (slave syz_tun): Releasing backup interface [ 1864.943788][T14967] net_ratelimit: 19 callbacks suppressed [ 1864.943810][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1864.977969][T20899] loop6: detected capacity change from 0 to 256 [ 1865.081883][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1865.199491][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1865.317384][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1865.332558][T20903] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13620'. [ 1865.523181][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1865.583977][T20908] SET target dimension over the limit! [ 1865.649009][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1865.772145][T20920] loop6: detected capacity change from 0 to 128 [ 1865.776991][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1865.820333][T20920] syz.6.13626: attempt to access beyond end of device [ 1865.820333][T20920] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 1865.839188][T20920] syz.6.13626: attempt to access beyond end of device [ 1865.839188][T20920] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 1865.853957][T20920] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 1865.864114][T20920] syz.6.13626: attempt to access beyond end of device [ 1865.864114][T20920] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 1865.890153][T20920] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 1865.907296][T20920] syz.6.13626: attempt to access beyond end of device [ 1865.907296][T20920] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 1865.920945][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1865.954731][T20920] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 1865.979893][T20920] syz.6.13626: attempt to access beyond end of device [ 1865.979893][T20920] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 1865.996092][T20920] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 1866.012008][T20920] syz.6.13626: attempt to access beyond end of device [ 1866.012008][T20920] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 1866.039734][T20920] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 1866.049285][T20920] syz.6.13626: attempt to access beyond end of device [ 1866.049285][T20920] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 1866.062908][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1866.072048][T20920] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 1866.081442][T20920] syz.6.13626: attempt to access beyond end of device [ 1866.081442][T20920] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 1866.096117][T20920] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 1866.105423][T20920] syz.6.13626: attempt to access beyond end of device [ 1866.105423][T20920] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 1866.122307][T20920] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 1866.193846][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1868.193367][ T28] kauditd_printk_skb: 346 callbacks suppressed [ 1868.193397][ T28] audit: type=1400 audit(2000000641.661:87773): avc: denied { create } for pid=20933 comm="syz.0.13628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1868.322922][ T28] audit: type=1400 audit(2000000641.661:87774): avc: denied { map } for pid=20933 comm="syz.0.13628" path="socket:[187497]" dev="sockfs" ino=187497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1868.347220][ T28] audit: type=1400 audit(2000000641.671:87775): avc: denied { create } for pid=20937 comm="syz.5.13632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1868.385060][ T28] audit: type=1400 audit(2000000641.680:87776): avc: denied { write } for pid=20937 comm="syz.5.13632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1868.408536][ T28] audit: type=1400 audit(2000000641.727:87777): avc: denied { open } for pid=20937 comm="syz.5.13632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1868.428932][ T28] audit: type=1400 audit(2000000641.727:87778): avc: denied { perfmon } for pid=20937 comm="syz.5.13632" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1868.470684][T20954] netlink: 64 bytes leftover after parsing attributes in process `syz.6.13635'. [ 1868.496106][T20954] loop6: detected capacity change from 0 to 512 [ 1868.506246][T20954] EXT4-fs: Ignoring removed bh option [ 1868.565809][ T28] audit: type=1400 audit(2000000641.727:87779): avc: denied { recv } for pid=3285 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1868.601640][T20954] EXT4-fs (loop6): 1 truncate cleaned up [ 1868.607975][T20954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1868.650195][T20954] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1868.657198][T20954] audit: audit_lost=548 audit_rate_limit=0 audit_backlog_limit=64 [ 1868.665121][T20954] audit: backlog limit exceeded [ 1868.684803][T20954] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.13635: invalid indirect mapped block 4294901760 (level 0) [ 1868.700216][T20954] EXT4-fs (loop6): Remounting filesystem read-only [ 1868.896920][T14967] team0: Port device xfrm0 removed [ 1868.947457][T14967] bond0 (unregistering): (slave geneve2): Releasing active interface [ 1869.188542][T14967] .` (unregistering): Released all slaves [ 1869.196204][T14967] bond1 (unregistering): Released all slaves [ 1869.205051][T14967] bond2 (unregistering): Released all slaves [ 1869.214188][T14967] bond3 (unregistering): Released all slaves [ 1869.223301][T14967] bond0 (unregistering): Released all slaves [ 1869.268723][T14967] tipc: Left network mode [ 1869.277349][T19082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1869.580662][T21010] loop7: detected capacity change from 0 to 512 [ 1869.588551][T21010] ext3: Bad value for 'init_itable' [ 1870.200492][T21014] sg_write: data in/out 412636/74 bytes for SCSI command 0x0-- guessing data in; [ 1870.200492][T21014] program syz.6.13646 not setting count and/or reply_len properly [ 1870.303053][T21019] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13646'. [ 1870.507612][ T2499] kernel write not supported for file /sg0 (pid: 2499 comm: kworker/0:3) [ 1870.532294][T14967] hsr_slave_0: left promiscuous mode [ 1870.542734][T14967] hsr_slave_1: left promiscuous mode [ 1870.687325][T21029] tmpfs: Bad value for 'mpol' [ 1870.901446][ T3259] net_ratelimit: 8 callbacks suppressed [ 1870.901468][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1871.079981][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1871.263104][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1871.390859][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1871.415764][T14967] IPVS: stop unused estimator thread 0... [ 1871.517618][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1871.668658][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1871.795611][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1871.913387][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1872.031542][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1872.182163][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1873.556590][ T28] kauditd_printk_skb: 2462 callbacks suppressed [ 1873.556610][ T28] audit: type=1400 audit(2000000646.703:90212): avc: denied { open } for pid=21162 comm="syz.6.13668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1873.629449][ T28] audit: type=1400 audit(2000000646.740:90213): avc: denied { perfmon } for pid=21162 comm="syz.6.13668" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1873.699456][ T28] audit: type=1400 audit(2000000646.759:90214): avc: denied { open } for pid=21166 comm="syz.7.13669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1873.769514][ T28] audit: type=1400 audit(2000000646.759:90216): avc: denied { perfmon } for pid=21166 comm="syz.7.13669" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1873.796789][ T28] audit: type=1400 audit(2000000646.759:90215): avc: denied { kernel } for pid=21162 comm="syz.6.13668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1873.816865][ T28] audit: type=1400 audit(2000000646.759:90217): avc: denied { kernel } for pid=21166 comm="syz.7.13669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1873.841307][ T28] audit: type=1400 audit(2000000646.759:90218): avc: denied { perfmon } for pid=21166 comm="syz.7.13669" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1873.847985][T21180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1873.869915][ T28] audit: type=1400 audit(2000000646.759:90219): avc: denied { prog_load } for pid=21166 comm="syz.7.13669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1873.889427][ T28] audit: type=1400 audit(2000000646.759:90220): avc: denied { bpf } for pid=21166 comm="syz.7.13669" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1874.468399][T21196] Cannot find del_set index 0 as target [ 1876.277063][ T3259] net_ratelimit: 18 callbacks suppressed [ 1876.277083][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1876.861638][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1876.984335][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1877.014164][T21222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13681'. [ 1877.079358][T21225] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13679'. [ 1877.188197][T14984] bond2: (slave macvlan2): failed to get link speed/duplex [ 1877.323757][T14984] bond2: (slave macvlan2): failed to get link speed/duplex [ 1877.376571][T21235] loop7: detected capacity change from 0 to 164 [ 1877.405830][T21235] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1877.450919][T14984] bond2: (slave macvlan2): failed to get link speed/duplex [ 1877.600583][T14984] bond2: (slave macvlan2): failed to get link speed/duplex [ 1877.718403][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1877.857197][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1877.986154][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1878.673704][T21223] syz.5.13680 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1878.683748][T21223] CPU: 1 UID: 0 PID: 21223 Comm: syz.5.13680 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1878.683865][T21223] Tainted: [W]=WARN [ 1878.683876][T21223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1878.683966][T21223] Call Trace: [ 1878.683975][T21223] [ 1878.683987][T21223] __dump_stack+0x1d/0x30 [ 1878.684012][T21223] dump_stack_lvl+0x95/0xd0 [ 1878.684037][T21223] dump_stack+0x15/0x1b [ 1878.684057][T21223] dump_header+0x80/0x240 [ 1878.684146][T21223] oom_kill_process+0x295/0x350 [ 1878.684189][T21223] out_of_memory+0x97d/0xb80 [ 1878.684225][T21223] try_charge_memcg+0x62f/0xa10 [ 1878.684401][T21223] charge_memcg+0x6d/0x120 [ 1878.684440][T21223] __mem_cgroup_charge+0x28/0xb0 [ 1878.684492][T21223] shmem_get_folio_gfp+0x47b/0xd60 [ 1878.684522][T21223] shmem_fault+0xf6/0x250 [ 1878.684559][T21223] ? __pfx_filemap_map_pages+0x10/0x10 [ 1878.684588][T21223] handle_mm_fault+0x16cd/0x2e70 [ 1878.684681][T21223] ? __pfx_shmem_fault+0x10/0x10 [ 1878.684777][T21223] do_user_addr_fault+0x3fd/0x1050 [ 1878.684821][T21223] ? unix_dgram_recvmsg+0x7e/0x90 [ 1878.684849][T21223] exc_page_fault+0x62/0xa0 [ 1878.684923][T21223] asm_exc_page_fault+0x26/0x30 [ 1878.684953][T21223] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1878.685054][T21223] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1878.685084][T21223] RSP: 0018:ffffc9000222bc28 EFLAGS: 00050206 [ 1878.685142][T21223] RAX: ffff8881020c2d00 RBX: 0000000000000038 RCX: 0000000000000038 [ 1878.685162][T21223] RDX: 0000000000000001 RSI: 0000200000233000 RDI: ffffc9000222bc88 [ 1878.685181][T21223] RBP: ffffc9000222bd80 R08: 00000000000003c2 R09: 0000000000000000 [ 1878.685196][T21223] R10: 0001c9000222bc88 R11: 0001c9000222bcbf R12: ffffc9000222bdf0 [ 1878.685211][T21223] R13: 0000200000233000 R14: ffffc9000222bc88 R15: 0000200000233000 [ 1878.685267][T21223] _copy_from_user+0x6f/0xb0 [ 1878.685304][T21223] ___sys_recvmsg+0xaa/0x3b0 [ 1878.685358][T21223] do_recvmmsg+0x1ef/0x560 [ 1878.685472][T21223] __x64_sys_recvmmsg+0xe5/0x170 [ 1878.685509][T21223] x64_sys_call+0x80f/0x3020 [ 1878.685566][T21223] do_syscall_64+0x12c/0x3b0 [ 1878.685613][T21223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.685636][T21223] RIP: 0033:0x7f7fe3ddce59 [ 1878.685652][T21223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.685744][T21223] RSP: 002b:00007f7fe280e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1878.685770][T21223] RAX: ffffffffffffffda RBX: 00007f7fe4056090 RCX: 00007f7fe3ddce59 [ 1878.685785][T21223] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1878.685799][T21223] RBP: 00007f7fe3e72d6f R08: 0000000000000000 R09: 0000000000000000 [ 1878.685831][T21223] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1878.685844][T21223] R13: 00007f7fe4056128 R14: 00007f7fe4056090 R15: 00007ffe9d01b298 [ 1878.685870][T21223] [ 1878.685893][T21223] memory: usage 307200kB, limit 307200kB, failcnt 3054 [ 1878.913464][ T28] kauditd_printk_skb: 1853 callbacks suppressed [ 1878.913513][ T28] audit: type=1400 audit(2000000651.707:91322): avc: denied { open } for pid=21260 comm="syz.0.13684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1878.919816][T21223] memory+swap: usage 309664kB, limit 9007199254740988kB, failcnt 0 [ 1878.949245][ T28] audit: type=1400 audit(2000000651.754:91323): avc: denied { perfmon } for pid=21260 comm="syz.0.13684" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1878.951260][T21223] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1878.961173][ T28] audit: type=1400 audit(2000000651.764:91324): avc: denied { kernel } for pid=21260 comm="syz.0.13684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1878.969532][T21223] Memory cgroup stats for [ 1879.027910][ T28] audit: type=1400 audit(2000000651.829:91325): avc: denied { recv } for pid=21219 comm="syz.5.13680" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1879.028029][ T28] audit: type=1400 audit(2000000651.829:91326): avc: denied { recv } for pid=21219 comm="syz.5.13680" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1879.028069][ T28] audit: type=1400 audit(2000000651.829:91327): avc: denied { recv } for pid=21219 comm="syz.5.13680" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1879.057478][T21223] /syz5 [ 1879.080659][ T28] audit: type=1400 audit(2000000651.848:91328): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1879.108608][T21223] : [ 1879.132693][ T28] audit: type=1400 audit(2000000651.848:91329): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1879.219610][T21223] cache 0 [ 1879.244255][T21223] rss 0 [ 1879.252651][ T28] audit: type=1400 audit(2000000651.848:91330): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1879.286790][T21223] shmem 0 [ 1879.289770][T21223] mapped_file 0 [ 1879.293255][T21223] dirty 0 [ 1879.296212][T21223] writeback 0 [ 1879.299520][T21223] workingset_refault_anon 672 [ 1879.304272][T21223] workingset_refault_file 179 [ 1879.308964][T21223] swap 2523136 [ 1879.312351][T21223] swapcached 59654144 [ 1879.316353][T21223] pgpgin 543838 [ 1879.319824][T21223] pgpgout 543837 [ 1879.323390][T21223] pgfault 580429 [ 1879.326953][T21223] pgmajfault 530 [ 1879.330523][T21223] inactive_anon 0 [ 1879.334173][T21223] active_anon 0 [ 1879.337651][T21223] inactive_file 0 [ 1879.341307][T21223] active_file 4096 [ 1879.345049][T21223] unevictable 0 [ 1879.348573][T21223] hierarchical_memory_limit 314572800 [ 1879.358853][ T28] audit: type=1400 audit(2000000651.848:91331): avc: denied { recv } for pid=22 comm="ksoftirqd/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1879.385728][T21223] hierarchical_memsw_limit 9223372036854771712 [ 1879.393114][T21223] total_cache 0 [ 1879.397212][T21223] total_rss 0 [ 1879.400538][T21223] total_shmem 0 [ 1879.404034][T21223] total_mapped_file 0 [ 1879.408136][T21223] total_dirty 0 [ 1879.412594][T21223] total_writeback 0 [ 1879.416482][T21223] total_workingset_refault_anon 672 [ 1879.422434][T21223] total_workingset_refault_file 179 [ 1879.427732][T21223] total_swap 2523136 [ 1879.432639][T21223] total_swapcached 59654144 [ 1879.437231][T21223] total_pgpgin 543838 [ 1879.441258][T21223] total_pgpgout 543837 [ 1879.445375][T21223] total_pgfault 580429 [ 1879.449492][T21223] total_pgmajfault 530 [ 1879.455686][T21223] total_inactive_anon 0 [ 1879.460443][T21223] total_active_anon 0 [ 1879.465413][T21223] total_inactive_file 0 [ 1879.469611][T21223] total_active_file 4096 [ 1879.473948][T21223] total_unevictable 0 [ 1879.479609][T21223] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.13680,pid=21219,uid=0 [ 1879.495198][T21223] Memory cgroup out of memory: Killed process 21219 (syz.5.13680) total-vm:86252kB, anon-rss:1232kB, file-rss:26452kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1879.951570][T21276] loop6: detected capacity change from 0 to 512 [ 1879.969484][T21276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.002329][T21276] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1880.163081][T21282] loop5: detected capacity change from 0 to 4096 [ 1880.207568][T21282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1880.237736][T21276] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.13688: corrupted xattr block 6: invalid header [ 1880.318410][T21276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 1880.341980][T21282] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1880.353224][T21276] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #12: comm syz.6.13688: corrupted xattr block 6: invalid header [ 1880.416760][T21276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=12 [ 1880.419397][T21282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1880.427523][T21276] EXT4-fs error (device loop6): ext4_xattr_block_find:1881: inode #12: comm syz.6.13688: corrupted xattr block 6: invalid header [ 1880.610860][T19082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1880.762120][T21294] loop6: detected capacity change from 0 to 128 [ 1880.974387][T21292] loop7: detected capacity change from 0 to 8192 [ 1881.098841][T17444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.577257][T21311] sctp: [Deprecated]: syz.6.13698 (pid 21311) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1881.577257][T21311] Use struct sctp_sack_info instead [ 1881.625606][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13698'. [ 1881.674479][T14971] net_ratelimit: 26 callbacks suppressed [ 1881.674498][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1881.771982][T21316] netlink: 60 bytes leftover after parsing attributes in process `syz.6.13699'. [ 1881.812746][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1881.942139][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1882.073687][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1882.201041][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1882.258183][T21307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13696'. [ 1882.390368][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1882.462454][T21326] loop6: detected capacity change from 0 to 1024 [ 1882.472348][T21326] EXT4-fs: test_dummy_encryption option not supported [ 1882.520253][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1882.669935][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1882.807230][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1882.979159][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1883.715369][T21346] program syz.5.13709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1883.736396][T21346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=21346 comm=syz.5.13709 [ 1883.835621][T21351] bond5: option all_slaves_active: invalid value (5) [ 1883.849275][T21351] bond5 (unregistering): Released all slaves [ 1884.213861][T21363] netlink: 'syz.7.13716': attribute type 3 has an invalid length. [ 1884.249307][T21363] loop7: detected capacity change from 0 to 256 [ 1884.278902][ T28] kauditd_printk_skb: 526 callbacks suppressed [ 1884.278919][ T28] audit: type=1400 audit(2000000656.740:91858): avc: denied { mounton } for pid=21362 comm="syz.7.13716" path="/240/file1" dev="tmpfs" ino=1284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1884.315599][T21365] loop5: detected capacity change from 0 to 1024 [ 1884.351010][T21365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1884.365324][ T28] audit: type=1400 audit(2000000656.768:91859): avc: denied { read write } for pid=21362 comm="syz.7.13716" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1884.390794][T21365] System zones: 0-1, 3-36 [ 1884.418867][T21365] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.13717: bad orphan inode 134217728 [ 1884.431264][ T28] audit: type=1400 audit(2000000656.768:91860): avc: denied { read write open } for pid=21362 comm="syz.7.13716" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1884.458933][ T28] audit: type=1400 audit(2000000656.768:91861): avc: denied { ioctl } for pid=21362 comm="syz.7.13716" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1884.489285][ T28] audit: type=1400 audit(2000000656.777:91862): avc: denied { read write } for pid=21364 comm="syz.5.13717" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1884.504033][T21365] loop5: lost filesystem error report for type 5 error -117 [ 1884.514709][ T28] audit: type=1400 audit(2000000656.777:91863): avc: denied { open } for pid=21364 comm="syz.5.13717" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1884.609161][ T28] audit: type=1400 audit(2000000656.777:91864): avc: denied { ioctl } for pid=21364 comm="syz.5.13717" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1884.636590][T21368] netlink: 76 bytes leftover after parsing attributes in process `syz.7.13716'. [ 1884.670537][T21365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1884.679010][ T28] audit: type=1400 audit(2000000656.777:91865): avc: denied { remount } for pid=21362 comm="syz.7.13716" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1884.791527][ T28] audit: type=1400 audit(2000000656.777:91866): avc: denied { read write } for pid=21362 comm="syz.7.13716" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1884.854946][ T28] audit: type=1400 audit(2000000656.777:91867): avc: denied { open } for pid=21362 comm="syz.7.13716" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1885.162826][T17444] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1886.020948][T19082] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1886.040448][T19082] CPU: 1 UID: 0 PID: 19082 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1886.040551][T19082] Tainted: [W]=WARN [ 1886.040561][T19082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1886.040578][T19082] Call Trace: [ 1886.040585][T19082] [ 1886.040595][T19082] __dump_stack+0x1d/0x30 [ 1886.040641][T19082] dump_stack_lvl+0x95/0xd0 [ 1886.040669][T19082] dump_stack+0x15/0x1b [ 1886.040747][T19082] dump_header+0x80/0x240 [ 1886.040776][T19082] oom_kill_process+0x295/0x350 [ 1886.040819][T19082] out_of_memory+0x97d/0xb80 [ 1886.040857][T19082] try_charge_memcg+0x62f/0xa10 [ 1886.040903][T19082] charge_memcg+0x6d/0x120 [ 1886.040961][T19082] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1886.041069][T19082] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1886.041105][T19082] ? alloc_pages_mpol+0x217/0x260 [ 1886.041137][T19082] swap_cache_alloc_folio+0xa2/0x120 [ 1886.041164][T19082] swap_cluster_readahead+0x25f/0x3c0 [ 1886.041265][T19082] swapin_readahead+0xde/0x840 [ 1886.041294][T19082] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 1886.041323][T19082] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 1886.041354][T19082] ? __rcu_read_unlock+0x4e/0x70 [ 1886.041460][T19082] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1886.041497][T19082] do_swap_page+0x31e/0x2180 [ 1886.041585][T19082] ? __schedule+0x951/0xd40 [ 1886.041607][T19082] ? __rcu_read_lock+0x36/0x50 [ 1886.041638][T19082] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1886.041712][T19082] handle_mm_fault+0xb30/0x2e70 [ 1886.041740][T19082] ? vma_start_read+0x1c7/0x2c0 [ 1886.041782][T19082] do_user_addr_fault+0x62f/0x1050 [ 1886.041886][T19082] ? trace_page_fault_user+0x1f/0xa0 [ 1886.041996][T19082] exc_page_fault+0x62/0xa0 [ 1886.042030][T19082] asm_exc_page_fault+0x26/0x30 [ 1886.042052][T19082] RIP: 0033:0x7f9b2b457fd7 [ 1886.042073][T19082] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1886.042121][T19082] RSP: 002b:00007ffe67253150 EFLAGS: 00010202 [ 1886.042143][T19082] RAX: 0000000000000000 RBX: 000055556d95b500 RCX: 00007f9b2b457fd7 [ 1886.042161][T19082] RDX: 00007ffe67253190 RSI: 0000000000000000 RDI: 0000000000000000 [ 1886.042177][T19082] RBP: 00007ffe672531fc R08: 0000000000000000 R09: 0000000000000000 [ 1886.042190][T19082] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1886.042207][T19082] R13: 00000000000927c0 R14: 00000000001b7d29 R15: 00007ffe67253250 [ 1886.042300][T19082] [ 1886.289880][T19082] memory: usage 290820kB, limit 307200kB, failcnt 1623 [ 1886.308715][T19082] memory+swap: usage 281284kB, limit 9007199254740988kB, failcnt 0 [ 1886.329669][T19082] kmem: usage 259244kB, limit 9007199254740988kB, failcnt 0 [ 1886.347802][T19082] Memory cgroup stats for /syz6: [ 1886.348084][T19082] cache 122880 [ 1886.370413][T19082] rss 0 [ 1886.377937][T19082] shmem 122880 [ 1886.388190][T19082] mapped_file 122880 [ 1886.399265][T19082] dirty 0 [ 1886.406936][T19082] writeback 0 [ 1886.415235][T19082] workingset_refault_anon 3269 [ 1886.430793][T19082] workingset_refault_file 438 [ 1886.442051][T19082] swap 1417216 [ 1886.449797][T19082] swapcached 66691072 [ 1886.460578][T19082] pgpgin 733661 [ 1886.470766][T19082] pgpgout 733630 [ 1886.482450][T19082] pgfault 804547 [ 1886.495943][T19082] pgmajfault 537 [ 1886.509616][T19082] inactive_anon 0 [ 1886.519942][T19082] active_anon 8192 [ 1886.530970][T19082] inactive_file 0 [ 1886.540147][T19082] active_file 0 [ 1886.604485][T19082] unevictable 0 [ 1886.614344][T19082] hierarchical_memory_limit 314572800 [ 1886.632442][T19082] hierarchical_memsw_limit 9223372036854771712 [ 1886.648570][T19082] total_cache 122880 [ 1886.655637][T19082] total_rss 0 [ 1886.663524][T19082] total_shmem 122880 [ 1886.669085][T19082] total_mapped_file 122880 [ 1886.691199][T19082] total_dirty 0 [ 1886.705512][T19082] total_writeback 0 [ 1886.717118][T19082] total_workingset_refault_anon 3269 [ 1886.736299][T19082] total_workingset_refault_file 438 [ 1886.795183][T19082] total_swap 1417216 [ 1886.811495][T19082] total_swapcached 66691072 [ 1886.830853][T19082] total_pgpgin 733661 [ 1886.852388][T19082] total_pgpgout 733630 [ 1886.896869][T19082] total_pgfault 804547 [ 1886.916903][T19082] total_pgmajfault 537 [ 1886.936378][T19082] total_inactive_anon 0 [ 1886.962234][T19082] total_active_anon 8192 [ 1886.979763][T19082] total_inactive_file 0 [ 1887.003840][T19082] total_active_file 0 [ 1887.018975][T19082] total_unevictable 0 [ 1887.030750][T19082] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.13718,pid=21381,uid=0 [ 1887.083740][T19082] Memory cgroup out of memory: Killed process 21391 (syz.6.13718) total-vm:86252kB, anon-rss:1268kB, file-rss:26388kB, shmem-rss:1588kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1887.105742][T14967] net_ratelimit: 28 callbacks suppressed [ 1887.105757][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1887.589189][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1887.714152][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1887.831981][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1887.960071][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1888.247676][T21434] loop6: detected capacity change from 0 to 1024 [ 1888.268393][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1888.280137][T21434] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1888.383915][T21449] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13734'. [ 1888.409106][T21434] System zones: 0-1, 3-36 [ 1888.425246][T21434] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.13733: bad orphan inode 134217728 [ 1888.436010][T21434] loop6: lost filesystem error report for type 5 error -117 [ 1888.437241][T21434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1888.590852][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1888.804477][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1888.982462][T21453] loop7: detected capacity change from 0 to 512 [ 1889.041037][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1889.119970][T21453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1889.169272][T14967] bond2: (slave macvlan2): failed to get link speed/duplex [ 1889.183819][T19082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.219280][T21453] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1890.077044][T21463] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13741'. [ 1890.099660][ T28] kauditd_printk_skb: 376 callbacks suppressed [ 1890.099688][ T28] audit: type=1400 audit(2000000662.118:92241): avc: denied { prog_load } for pid=21460 comm="syz.2.13741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1890.131022][ T28] audit: type=1400 audit(2000000662.118:92242): avc: denied { bpf } for pid=21460 comm="syz.2.13741" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1890.155484][ T28] audit: type=1400 audit(2000000662.118:92243): avc: denied { perfmon } for pid=21460 comm="syz.2.13741" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1890.190914][ T28] audit: type=1400 audit(2000000662.118:92244): avc: denied { prog_run } for pid=21460 comm="syz.2.13741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1890.220709][ T28] audit: type=1400 audit(2000000662.118:92245): avc: denied { open } for pid=21460 comm="syz.2.13741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1890.243554][ T28] audit: type=1400 audit(2000000662.118:92246): avc: denied { perfmon } for pid=21460 comm="syz.2.13741" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1890.267678][ T28] audit: type=1400 audit(2000000662.118:92247): avc: denied { kernel } for pid=21460 comm="syz.2.13741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1890.297738][ T28] audit: type=1400 audit(2000000662.175:92248): avc: denied { mounton } for pid=21460 comm="syz.2.13741" path="/341" dev="tmpfs" ino=1837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1890.328554][ T28] audit: type=1400 audit(2000000662.268:92249): avc: denied { recv } for pid=21460 comm="syz.2.13741" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1890.521221][ T28] audit: type=1400 audit(2000000662.268:92250): avc: denied { recv } for pid=3285 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.130 dest=46648 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1891.046321][T17074] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1892.285442][T21470] syz.5.13743 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1892.296747][T21470] CPU: 0 UID: 0 PID: 21470 Comm: syz.5.13743 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1892.296785][T21470] Tainted: [W]=WARN [ 1892.296793][T21470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1892.296807][T21470] Call Trace: [ 1892.296827][T21470] [ 1892.296836][T21470] __dump_stack+0x1d/0x30 [ 1892.296897][T21470] dump_stack_lvl+0x95/0xd0 [ 1892.296936][T21470] dump_stack+0x15/0x1b [ 1892.297041][T21470] dump_header+0x80/0x240 [ 1892.297065][T21470] oom_kill_process+0x295/0x350 [ 1892.297100][T21470] out_of_memory+0x97d/0xb80 [ 1892.297136][T21470] try_charge_memcg+0x62f/0xa10 [ 1892.297228][T21470] ? radix_tree_lookup+0xfa/0x140 [ 1892.297263][T21470] charge_memcg+0x6d/0x120 [ 1892.297406][T21470] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1892.297458][T21470] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1892.297489][T21470] ? alloc_pages_mpol+0x217/0x260 [ 1892.297525][T21470] swap_cache_alloc_folio+0xa2/0x120 [ 1892.297555][T21470] swap_cluster_readahead+0x35c/0x3c0 [ 1892.297591][T21470] swapin_readahead+0xde/0x840 [ 1892.297622][T21470] ? _raw_spin_unlock+0x9/0x30 [ 1892.297643][T21470] ? swap_put_entries_cluster+0x46c/0x490 [ 1892.297707][T21470] ? __entry_text_end+0x1d908/0x102179 [ 1892.297739][T21470] ? __rcu_read_unlock+0x4e/0x70 [ 1892.297777][T21470] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1892.297804][T21470] do_swap_page+0x31e/0x2180 [ 1892.297834][T21470] ? __css_rstat_updated+0xbb/0x280 [ 1892.297871][T21470] ? __rcu_read_lock+0x36/0x50 [ 1892.297893][T21470] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1892.297994][T21470] handle_mm_fault+0xb30/0x2e70 [ 1892.298025][T21470] ? vma_start_read+0x1c7/0x2c0 [ 1892.298098][T21470] do_user_addr_fault+0x62f/0x1050 [ 1892.298134][T21470] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1892.298232][T21470] ? trace_page_fault_user+0x1f/0xa0 [ 1892.298266][T21470] exc_page_fault+0x62/0xa0 [ 1892.298295][T21470] asm_exc_page_fault+0x26/0x30 [ 1892.298318][T21470] RIP: 0033:0x7f7fe3cb1588 [ 1892.298336][T21470] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 e1 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 1892.298395][T21470] RSP: 002b:00007ffe9d01b330 EFLAGS: 00010202 [ 1892.298414][T21470] RAX: 0000000000000001 RBX: ffffffff8596757e RCX: ffffffff8596757e [ 1892.298430][T21470] RDX: 000000000000157e RSI: ffffffff8596757e RDI: 000000000000001b [ 1892.298445][T21470] RBP: 0000000000000000 R08: 00007f7fe4040000 R09: 00007f7fe4042000 [ 1892.298512][T21470] R10: 0000000085967582 R11: 000000000000001b R12: 00007f7fe4056308 [ 1892.298527][T21470] R13: 000000000005de6b R14: ffffffff859673d9 R15: 00007f7fe4b85720 [ 1892.298686][T21470] ? plist_del+0x19/0x200 [ 1892.298711][T21470] ? plist_del+0x1be/0x200 [ 1892.298763][T21470] ? plist_del+0x1be/0x200 [ 1892.298787][T21470] ? plist_del+0x1be/0x200 [ 1892.298811][T21470] [ 1892.298819][T21470] memory: usage 307200kB, limit 307200kB, failcnt 3365 [ 1892.583745][T21470] memory+swap: usage 311684kB, limit 9007199254740988kB, failcnt 0 [ 1892.591706][T21470] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1892.599032][T21470] Memory cgroup stats for /syz5: [ 1892.599372][T21470] cache 0 [ 1892.607274][T21470] rss 0 [ 1892.610060][T21470] shmem 0 [ 1892.613025][T21470] mapped_file 0 [ 1892.616564][T21470] dirty 0 [ 1892.619511][T21470] writeback 0 [ 1892.622825][T21470] workingset_refault_anon 892 [ 1892.627512][T21470] workingset_refault_file 179 [ 1892.632217][T21470] swap 4591616 [ 1892.635597][T21470] swapcached 67121152 [ 1892.639591][T21470] pgpgin 556001 [ 1892.643145][T21470] pgpgout 555999 [ 1892.646706][T21470] pgfault 594698 [ 1892.650263][T21470] pgmajfault 655 [ 1892.653839][T21470] inactive_anon 0 [ 1892.657480][T21470] active_anon 4096 [ 1892.661212][T21470] inactive_file 0 [ 1892.664911][T21470] active_file 4096 [ 1892.668710][T21470] unevictable 0 [ 1892.672183][T21470] hierarchical_memory_limit 314572800 [ 1892.677780][T21470] hierarchical_memsw_limit 9223372036854771712 [ 1892.683943][T21470] total_cache 0 [ 1892.687429][T21470] total_rss 0 [ 1892.690744][T21470] total_shmem 0 [ 1892.694214][T21470] total_mapped_file 0 [ 1892.698268][T21470] total_dirty 0 [ 1892.701783][T21470] total_writeback 0 [ 1892.705658][T21470] total_workingset_refault_anon 892 [ 1892.710878][T21470] total_workingset_refault_file 179 [ 1892.716151][T21470] total_swap 4591616 [ 1892.720120][T21470] total_swapcached 67121152 [ 1892.724675][T21470] total_pgpgin 556001 [ 1892.728747][T21470] total_pgpgout 555999 [ 1892.732832][T21470] total_pgfault 594698 [ 1892.736972][T21470] total_pgmajfault 655 [ 1892.741071][T21470] total_inactive_anon 0 [ 1892.745235][T21470] total_active_anon 4096 [ 1892.749507][T21470] total_inactive_file 0 [ 1892.753884][T21470] total_active_file 4096 [ 1892.758139][T21470] total_unevictable 0 [ 1892.762154][T21470] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.13743,pid=21470,uid=0 [ 1892.777074][T21470] Memory cgroup out of memory: Killed process 21470 (syz.5.13743) total-vm:86252kB, anon-rss:1232kB, file-rss:26388kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1892.862588][T14980] net_ratelimit: 15 callbacks suppressed [ 1892.862607][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1892.868651][T21476] ================================================================== [ 1892.883634][T21476] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 1892.893522][T21476] [ 1892.895879][T21476] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 1: [ 1892.903968][T21476] tick_do_update_jiffies64+0x113/0x1c0 [ 1892.909578][T21476] tick_nohz_handler+0x8d/0x3d0 [ 1892.914480][T21476] __hrtimer_run_queues+0x276/0x4f0 [ 1892.919715][T21476] hrtimer_interrupt+0x261/0x850 [ 1892.924692][T21476] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 1892.930619][T21476] sysvec_apic_timer_interrupt+0x6f/0x80 [ 1892.936288][T21476] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1892.942293][T21476] console_flush_all+0x540/0x6c0 [ 1892.947274][T21476] console_unlock+0xa1/0x280 [ 1892.951897][T21476] vprintk_emit+0x3e4/0x600 [ 1892.956417][T21476] vprintk_default+0x26/0x30 [ 1892.960861][T21481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13745'. [ 1892.961034][T21476] vprintk+0x1d/0x30 [ 1892.973975][T21476] _printk+0x79/0xa0 [ 1892.977907][T21476] __netdev_printk+0x310/0x370 [ 1892.982719][T21476] netdev_warn+0xa6/0xd0 [ 1892.987015][T21476] bond_mii_monitor+0xd6d/0x1720 [ 1892.992026][T21476] process_scheduled_works+0x4f0/0x9c0 [ 1892.997526][T21476] worker_thread+0x58a/0x780 [ 1893.002145][T21476] kthread+0x22a/0x280 [ 1893.006238][T21476] ret_from_fork+0x146/0x330 [ 1893.010204][T21481] netlink: 20 bytes leftover after parsing attributes in process `syz.7.13745'. [ 1893.010863][T21476] ret_from_fork_asm+0x1a/0x30 [ 1893.024670][T21476] [ 1893.027016][T21476] read to 0xffffffff86c07a00 of 8 bytes by task 21476 on cpu 0: [ 1893.034672][T21476] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 1893.038035][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1893.040961][T21476] count_shadow_nodes+0x6a/0x250 [ 1893.053120][T21476] do_shrink_slab+0x63/0x660 [ 1893.057761][T21476] shrink_slab+0x545/0x8f0 [ 1893.062216][T21476] shrink_node+0x6d4/0x20a0 [ 1893.066767][T21476] do_try_to_free_pages+0x408/0xc90 [ 1893.072012][T21476] try_to_free_mem_cgroup_pages+0x201/0x420 [ 1893.078000][T21476] try_charge_memcg+0x373/0xa10 [ 1893.082885][T21476] charge_memcg+0x6d/0x120 [ 1893.087349][T21476] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1893.093362][T21476] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1893.099198][T21476] swap_cache_alloc_folio+0xa2/0x120 [ 1893.104508][T21476] swap_cluster_readahead+0x35c/0x3c0 [ 1893.109907][T21476] swapin_readahead+0xde/0x840 [ 1893.114705][T21476] do_swap_page+0x31e/0x2180 [ 1893.119324][T21476] handle_mm_fault+0xb30/0x2e70 [ 1893.124202][T21476] do_user_addr_fault+0x3fd/0x1050 [ 1893.129343][T21476] exc_page_fault+0x62/0xa0 [ 1893.133873][T21476] asm_exc_page_fault+0x26/0x30 [ 1893.138742][T21476] __get_user_8+0x14/0x30 [ 1893.143092][T21476] exit_robust_list+0x31/0x280 [ 1893.147890][T21476] futex_exit_release+0xe0/0x130 [ 1893.152866][T21476] exit_mm_release+0x1a/0x30 [ 1893.157473][T21476] exit_mm+0x38/0x1f0 [ 1893.161492][T21476] do_exit+0x442/0x1530 [ 1893.165670][T21476] do_group_exit+0xfe/0x140 [ 1893.170201][T21476] get_signal+0xe30/0xf20 [ 1893.174561][T21476] arch_do_signal_or_restart+0x96/0x480 [ 1893.180179][T21476] exit_to_user_mode_loop+0x6f/0x820 [ 1893.185488][T21476] do_syscall_64+0x232/0x3b0 [ 1893.190119][T21476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.196121][T21476] [ 1893.198466][T21476] value changed: 0x0000000100024ce9 -> 0x0000000100024cea [ 1893.205590][T21476] [ 1893.207931][T21476] Reported by Kernel Concurrency Sanitizer on: [ 1893.214185][T21476] CPU: 0 UID: 0 PID: 21476 Comm: syz.5.13743 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1893.225231][T21476] Tainted: [W]=WARN [ 1893.229048][T21476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1893.239119][T21476] ================================================================== [ 1893.386980][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1893.470178][T21475] loop6: detected capacity change from 0 to 256 [ 1893.523166][T21475] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1893.531014][T14969] bond2: (slave macvlan2): failed to get link speed/duplex [ 1893.659404][ T3259] bond2: (slave macvlan2): failed to get link speed/duplex [ 1893.740052][T21490] syz_tun: refused to change device tx_queue_len [ 1893.746478][T21490] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1893.843298][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1893.978686][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1894.096248][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1894.213797][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1898.265560][T14980] net_ratelimit: 33 callbacks suppressed [ 1898.265581][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1898.393842][T14976] bond2: (slave macvlan2): failed to get link speed/duplex [ 1898.511457][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1898.629045][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1898.746699][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1898.864201][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1898.981828][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1899.099438][T14980] bond2: (slave macvlan2): failed to get link speed/duplex [ 1899.217017][T14971] bond2: (slave macvlan2): failed to get link speed/duplex [ 1899.334634][T14980] bond2: (slave macvlan2): failed to get link speed/duplex