last executing test programs: 2m54.976109586s ago: executing program 32 (id=90): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r0, 0x4b4a, 0x10000000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, 0x32a13, 0x18081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x3c}}, 0x20004040) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020208000c00030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2m23.780477853s ago: executing program 2 (id=366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$eJzs3c1rHGUYAPBnNps0bapJoRT1IIUerNRuvvyoILQeRYsFvdcl2YaQTbdkN6WJBduDvXgrgogF8Sp491j8B/wrClooUoIeRIjMZjZN0t3NR5Numv39YJL33ZnZd56ded59Z2aXDaBrnUz/5CJejehPi4Nr5uUjm3lyZbmlxzcn0imJ5eXP/koiyR5rLJ9k/weyyisR8dvXEWdyT7dbXVicKZbLpbmsPlybvTZcXVg8Oz1bnCpNla6OjY+fe2d87P333t21WN+89M/3n97/6Nw3p5a+++XhsbtJXIij2by1cTyDW2srJ4v/ZaXeuLBhwdFdaGw/STq9AexIT5bnvZH2AYPRk2U9cPB9FRHLQJdK5D90qcY4oHFuv0vnwS+MRx+unADVY+9bG39+5dpI9NfPjY4sJevOjNLz3aFdaD9t49c/791Np2h/HeLwJnWAbbl1OyJG8vmn+/8k6/92bqR+8bi9jW102/sPdNL9dPzzVrPxX251/BNNxj8DTXJ3JzbP/9zDXWimpXT890HT8e9q1zXUk9Veqo/5epMrA+XSSES8HBGnI+LKdLk02r9yDb2Zc0sPllu1v3b8l05p+42xYLYdD/OH1q8zWawVI6LvWWNPPbod8Vq+WfzJ6v5Pmuz/9PW4tMU2TpTuvd5q3ubx763lnyLeaLr/n9zRStrfnxxO9//Iyt+mbfx958TvrdrvdPzp/j/SPv6hZO392ur22/ix/99Sq3kt41892Jof/33J5/VyIwluFGu1udGIvuSTpx8fe7Juo95YPo3/9Kn2/V+z4z89+fpii/HfOX6n5aL7Yf9Pbmv/byykr0SLWVnhwcdf/tCq/a31f2/XS6ezR7L+r7nsWGmzOesKz/r6AQAAAAAAwH6Si4ijkeQKq+VcrlBY+XzH8TiSK1eqtTNXKvNXJ6P+Xdmh6M017nQPNj4PMV0ujWafh23UxzbUxyPiWER823O4Xi9MVMqTnQ4eAAAAAAAAAAAAAAAAAAAA9omBFt//T/3R0+mtA/Zc/YcNDnV6K4BO2PQn/3fjl56AfWnT/AcOrHX5n3RuO4Dnz/s/dC/5D91L/kP3kv/QveQ/dK+t5P+F57AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEBcungxnZaXHt+cSOuT1xfmZyrXz06WqjOF2fmJwkRl7lphqlKZKpcKE5XZiBhs93zlSuXa6FjM3xiulaq14erC4uXZyvzV2uXp2eJU6XKp97lFBgAAAAAAAAAAAAAAAAAAAC+O6sLiTLFcLs0diMLP+b145vPR6bj2uHA+4lZ6MOxo9fx+iUKhReF2luvbW6uz/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPV/AAAA///HtTBf") clock_gettime(0x0, &(0x7f0000002200)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/83, 0x53}, {&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/95, 0x5f}], 0x6, &(0x7f0000000580)=""/177, 0xb1}, 0xb6}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)=""/124, 0x7c}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f0000000880)=""/187, 0xbb}], 0x5, &(0x7f00000009c0)=""/87, 0x57}, 0x1}, {{&(0x7f0000000a40)=@nl, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000ac0)=""/85, 0x55}, 0x5}, {{&(0x7f0000000b40)=@l2, 0x80, &(0x7f0000000c40)=[{&(0x7f0000001cc0)=""/241, 0xf1}, {&(0x7f0000000bc0)=""/121, 0x79}], 0x2}, 0x4}, {{&(0x7f0000001dc0)=@phonet, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001e40)=""/150, 0x96}, {&(0x7f0000001f00)=""/133, 0x85}], 0x2}, 0x7}, {{&(0x7f0000002000)=@ieee802154, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002080)=""/7, 0x7}, {&(0x7f00000020c0)=""/228, 0xe4}], 0x2, &(0x7f0000002880)=""/230, 0xe6}, 0x9}], 0x6, 0x40000000, &(0x7f0000002240)={r0, r1+60000000}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x100000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa9f5ad1}], 0x1c) 2m22.632259525s ago: executing program 2 (id=373): iopl(0x3) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x1, 0xff}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000340)="2f8820f4d15537ebf3739c3c3e8e19050e07b305223c3b9e361b50425d42bd85c3b7880c980dc74d558ac2ee5a1bd0212009f5315e01898d161e216d4908a554767c08153dcddec6dbc886f5a9b3eede56ffae88afe9239a2b0f622185f922b7c3401c0e8076e6f1dd84daaee2c5e1b3fca070031b5d9afe09a670255c03ce50b97630400edfe0945650293866d02b9de8cc0271fd8768fdcc58879639eeeba80ef8570edf949af4b2e9cf2417f37609bc41f04d6f11aa6029dfa1e69d327014d84d5fbd30dc213d89b0b7b582466b33aa3b97877d56384cbbac", 0xda}, {&(0x7f0000000440)="ea94380704d2f4e0080f08d2c7fd1d3c1a04a31561111e4916da50b8f37ada8de2eba00a78ed1ad9759202adced2ec6b9ce7fce443a4ab5387e1b995a9647261562521e43f36215401c36b2f8560fd9a2afb43baed66e6576a2b72709cc042033fe63d06052fc3a9c9ab2527b69ae91778692fd9621a2955049efad2d8edec834318f18256b689e003b201d87b9cd43fd9fc232952c5dea385f26f3066405d4af7fe30", 0xa3}, {&(0x7f0000000100)="ccf770eddef84d13679aa156a6d2e801c57a7fe90af8bd9babfa66c892b309d3f8a2886ed33004b8127a4e331646640ee545a4499d0c8981d535600acfc0deb7143ab3c71354f1f005", 0x49}, {&(0x7f0000000040)="f87be016f9edac94d47e", 0xa}, {&(0x7f0000000200)="a0e03773c0e5d60265bb54486fef9ea663ad0c5606f32184eea8190df1811aba03cbe2dd229d887e8dd27b22293a7fd56a1035d8dd007eaddf03ab8bd2a5509efb212bdc88b0570f85c12554eda59555c8efc7d04b14b82df05f0067c3f651bf0f8dfd72674b2da425eaa176120da03162a86b34f85c1869043cc74e7772e9", 0x7f}], 0x5) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) 2m20.678484579s ago: executing program 2 (id=398): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x20, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x6}, @snprintf, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x8, &(0x7f0000000340)=""/8, 0x41000, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x3, 0x0, 0x3}, {0x4, 0x1, 0x1, 0x4}, {0x2, 0x4, 0x8, 0x2}, {0x2, 0x3, 0x4, 0x4}, {0x1, 0x3, 0x10, 0x7}, {0x4, 0x2, 0x6, 0x6}, {0x0, 0x2, 0x9, 0xa}, {0x4, 0x1, 0x0, 0xa}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m20.577927398s ago: executing program 2 (id=403): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x378}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x44000006) socket(0x10, 0x80002, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$inet(r1, &(0x7f0000004d00), 0x0, 0xf1c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x20000000) fallocate(r0, 0x10, 0x6, 0x10001) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000740)="$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") 2m20.239346038s ago: executing program 2 (id=408): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40100}, 0x200008d1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40100}, 0x200008d1) (async) 2m19.283682793s ago: executing program 2 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000180)={0x65, 0x6, 0x20}, 0x20, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="c3a647f0"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") (async) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) (async) lsm_set_self_attr(0x69, &(0x7f0000000180)={0x65, 0x6, 0x20}, 0x20, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) (async) lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="c3a647f0"]) (async) 2m19.240086997s ago: executing program 33 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x94) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) lsm_set_self_attr(0x69, &(0x7f0000000180)={0x65, 0x6, 0x20}, 0x20, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="c3a647f0"]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x46}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") (async) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) (async) lsm_set_self_attr(0x69, &(0x7f0000000180)={0x65, 0x6, 0x20}, 0x20, 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) (async) lremovexattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="c3a647f0"]) (async) 1m8.447965438s ago: executing program 4 (id=1665): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) syz_open_dev$usbfs(&(0x7f0000000000), 0xe1, 0x200fc2) 1m8.30874111s ago: executing program 4 (id=1668): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file2\x00'}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x101281, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file2\x00'}) socket$igmp6(0xa, 0x3, 0x3a) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x29c6846bf06ccbd9) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000880)='./file0\x00', 0x100c404, &(0x7f0000000280)=ANY=[], 0x1, 0x1ff, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4247c, &(0x7f0000004000)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES8=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="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", @ANYBLOB="b13754b80dea7719ef0dc3f550fbdc73cba49d4e7c82016d5769fcbd99ef37581e8a1a59015dac55d80767f6ebd134de7aeb32fb8672e2854f2b1f232b59d913c818bafee229130f2f139c9abd8d6278fd2347233a650ab304a1d02efb4c9c6f4d32e45cad4ade56d6f2966fc3f418c537da6c8a2c1fcf66667f65c4f6794746c9da9c7778c19647890cd400af2cc623f50c755118d05171a980c539cac0576e4b616d0c4027", @ANYRES16, @ANYRESHEX, @ANYRESOCT, @ANYBLOB="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"/394, @ANYBLOB="94b65231ff72115114ebaa5c989b151934dc050b6a9a2be44298b5d84feb3892838280ec13531d79a890932db7ed059888c314982baa52e77255257748283ef9ebc6291f2ad639cd00274ba3bc494b67fe9b86ea83146429d9b58b5e5a5f4456ac6e3aaa769d671ec3e205be67d6bcb35240da8c3e3927beca9e0cc3e3ab04c4b217462801adae3786ceb99fd69be1bca660570b9cc3b0a6a3", @ANYRES64, @ANYRES16], 0x5, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24008080) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r4}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0), 0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000780)="90826279e703c94262590a134048d2f678180b16f9de62165fe66c31be51a184c10701a3af538a7d8d1c4cb90c00654c17e7e63f51aac2a1c42d7c58d91957539781c3f3d39f08ca807bf2a0b99a010e98b0d2c0cbdae34a0699cdc644422dddd4ec497513e31eb38b0f4998d299095a2e510c943a63261a2892d673a89b247c5dc961ba4c86066e9a4a1138c1bca9afae2566", 0x93, 0x4000005, 0x0, 0x0) 1m8.070949491s ago: executing program 4 (id=1673): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1000, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x1000, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) (async) 1m3.382282579s ago: executing program 4 (id=1729): syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18) writev(r2, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f0000000dc0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@data_err_ignore}, {@nomblk_io_submit}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@permit_directio}, {@euid_lt}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, '\xff\xff'}}, {@dont_appraise}, {@uid_eq}, {@uid_gt}, {@pcr={'pcr', 0x3d, 0x5}}, {@fsname={'fsname', 0x3d, 'orlov'}}, {@euid_eq}], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r3, @ANYBLOB="2c7746a4f64d3d", @ANYRES64=r4, @ANYBLOB=',\x00']) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) 1m3.148936619s ago: executing program 4 (id=1730): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r2 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xc, 0x200000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r5 = syz_open_procfs(0x0, &(0x7f0000000640)='net/hci\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r7 = dup(r6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x100000001}, {0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x0) r11 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r11, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r11, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x11, 0x12, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x10006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x7, 0x10001, 0x9, 0x22, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x6}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r15, r16, 0x26, 0x0, @void}, 0x10) r17 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) read$usbmon(r17, &(0x7f0000000200)=""/147, 0x93) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x28, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000001000100000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000088854000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7084369261a91130d0b7d6fafb9ead8ae0000000000007b8af8ff002a8a000000bfa2000000000000ff020000f8ffffffb703000008000000b704000000000018110000000000000000002dfa", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe3, &(0x7f0000000480)=""/227, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0xc, 0xd, 0x10001, 0xc}, 0x10, 0x7846, r4, 0x6, &(0x7f0000000880)=[r5, r7, r12, r13, r14, r16, r17, 0xffffffffffffffff, 0x1], &(0x7f00000008c0)=[{0x3, 0x2, 0x10, 0x9}, {0x5, 0x1, 0x2, 0x3}, {0x5, 0x3, 0x6, 0x3}, {0x5, 0x1, 0x5, 0x2}, {0x4, 0x5, 0x5, 0x5}, {0x2, 0x5, 0x5, 0x2}]}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r18}]}]}, 0x40}}, 0x0) 1m2.838226767s ago: executing program 4 (id=1733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x2, 0xb, 0x3, 0x2, 0x2, 0x3, 0x2, 0x378, 0x40, 0x334, 0x7fffffff, 0x26, 0x38, 0x1, 0x7ff, 0x2, 0xff00}, [{0x70000000, 0x0, 0x0, 0x8, 0x8d, 0x2, 0x8}]}, 0x78) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0xe3800000000000, 0x58e}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) 1m2.821099448s ago: executing program 34 (id=1733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x2, 0xb, 0x3, 0x2, 0x2, 0x3, 0x2, 0x378, 0x40, 0x334, 0x7fffffff, 0x26, 0x38, 0x1, 0x7ff, 0x2, 0xff00}, [{0x70000000, 0x0, 0x0, 0x8, 0x8d, 0x2, 0x8}]}, 0x78) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0xe3800000000000, 0x58e}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xffffffffffffffff}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) 53.599914479s ago: executing program 6 (id=1847): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="29150154", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251500000008000300", @ANYRES32, @ANYBLOB="0500290010000000"], 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x8048) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd26, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0xf024, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4000) 53.59543825s ago: executing program 6 (id=1848): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0xfe, 0x0, 0x0, 0x0, 0x20000000000020, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffbff, 0x0, @perf_bp={0x0}, 0x1076f0, 0x5, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) 53.531339675s ago: executing program 6 (id=1849): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) move_mount(0xffffffffffffffff, &(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x277) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000020003b00000008000300", @ANYRES32=r5, @ANYBLOB="2a003300d00000000802110000010802110000005050505050500000030200204000bd06080211000000000063824bd83126f942a2867460041ad6954d79a3d5df8e8aceb71ecc451bea22b8fccf3cd3f3716ee78358bfd1447ba986f8085c564bc10664e796f8abce23323b24b93b01e8b0efbcf0581b29fa0b02885a4589a572fd7831980a5f1c5741dcf06e2899177a2c052abad5fc12790ed1702d8ddb82d6f3"], 0x48}}, 0x40000) (async, rerun: 32) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x86}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x44}}, 0x2) (async, rerun: 32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003e80), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000140)=ANY=[@ANYBLOB="00c5bae05a6ac3ef5b66640f8c8941d0e99852eb0254eb", @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x810) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x0, 0x81, 0x1, 0x9}, {0x29a, 0x3, 0x1, 0x4}, {0x4, 0x40, 0x6, 0x9}]}) (async, rerun: 32) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) (async, rerun: 64) r7 = socket(0x80000000000000a, 0x2, 0x0) (rerun: 64) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x10, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 53.485007289s ago: executing program 6 (id=1850): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x100) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 52.463157271s ago: executing program 6 (id=1858): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x2, 0xb, 0x3, 0x2, 0x2, 0x3, 0x2, 0x378, 0x40, 0x334, 0x7fffffff, 0x26, 0x38, 0x1, 0x7ff, 0x5, 0xff00}, [{0x5, 0x0, 0x0, 0x8, 0x8d, 0x2, 0x208, 0x7}], "", ['\x00', '\x00']}, 0x278) fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x0, 0x0, 0xe3800000000000, 0x58e}) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x5, 0x8) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) 52.294205526s ago: executing program 6 (id=1861): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7b5, &(0x7f0000000540)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x25, 0xf58, 0x0, 0x3, 0x1, 0xfffd, 0x6, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x4, 0x2, 0x0, 0x5}}, &(0x7f0000000200)=0xb0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffa, 0x3}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x4) getdents64(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 52.278968207s ago: executing program 35 (id=1861): perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7b5, &(0x7f0000000540)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x25, 0xf58, 0x0, 0x3, 0x1, 0xfffd, 0x6, {0x0, @in={{0x2, 0x4e23, @remote}}, 0x4, 0x2, 0x0, 0x5}}, &(0x7f0000000200)=0xb0) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffa, 0x3}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) socket$kcm(0x10, 0x2, 0x4) getdents64(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 37.564568526s ago: executing program 7 (id=2117): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rt_sigpending(0x0, 0x0) 37.502716492s ago: executing program 7 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=r4], 0x48) 37.06879822s ago: executing program 7 (id=2131): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, 0x0, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 37.005536406s ago: executing program 7 (id=2134): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x8b, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002100050100000000000000000200000000000000020000d704000f"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c000}, 0x4000890) rt_tgsigqueueinfo(0x0, 0x0, 0x5, &(0x7f0000000680)={0x21, 0x3, 0xfffffa0e}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) fsync(r5) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x223c3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xdc34}]}}}]}, 0x3c}}, 0x884) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 36.764071637s ago: executing program 7 (id=2141): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x48) 36.491785572s ago: executing program 7 (id=2151): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x0, 0x50f, &(0x7f0000000140)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c000380"], 0x8c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdc}]}]}, 0x1c}], 0x1}, 0x0) socket(0x22, 0x2, 0x24) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000100)) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) 36.451434086s ago: executing program 36 (id=2151): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@stripe={'stripe', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x0, 0x50f, &(0x7f0000000140)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c000380"], 0x8c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x1c, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdc}]}]}, 0x1c}], 0x1}, 0x0) socket(0x22, 0x2, 0x24) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000100)) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) 22.997238923s ago: executing program 8 (id=2307): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "941895a14fa6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x48010}, 0xd209f6d814827b13) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r2, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000006c0)=""/11, 0xb}, {&(0x7f00000008c0)=""/90}, {&(0x7f0000000700)=""/42}], 0x2}, 0x6}, {{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000004c0)=""/200, 0xf9}, {&(0x7f00000005c0)=""/136, 0x88}, {&(0x7f0000000680)=""/49, 0x31}, {&(0x7f0000000c80)=""/84, 0x39}, {&(0x7f0000000740)=""/160, 0xa0}, {&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000f80)=""/257, 0xf5}, {&(0x7f0000000d00)=""/190, 0xcb}, {&(0x7f0000000280)=""/38, 0x26}, {&(0x7f0000000e00)=""/147, 0x93}], 0xa, &(0x7f0000000b00)=""/198, 0xc6}, 0x400}], 0x2, 0x10023, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(0x0, 0x0) rmdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf1000000000000015000200091b00003d200100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 22.053441187s ago: executing program 8 (id=2331): r0 = syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) r1 = epoll_create(0xaf2) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) syz_emit_ethernet(0xc2, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa810028000800450000b00000000000119078ac1414ffac14140000000000009c9078f9137513681d254044ef9c280100000000000000d8faebab25c9440f1e0b429560dea05fcfa134c5886328060189b9c9d245a4ecddff7080bb17115c263928f3d2700740b11bf4257abb0000000085024cd3ef42000000000000000000000000000000007af3756acdedd1857ba242939e2683eb956c31000000000000000000e311f95152ce9fab74b351abd67a3e95f5437168"], 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) r2 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x7}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x2980c}, @TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_team\x00'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="a50a00000000000061110c000000000018000000feffffff000000000000000095000000000000000e1ed9cccc11123b618bae109d7357d56a3b78fc9fd03456b3c4a00a8441f60dad0f324fef551b0f2874c850caa91fe84bfeb11e37"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6}, 0x94) 21.016447869s ago: executing program 8 (id=2337): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x1214, &(0x7f0000000140)={0x0, 0xc6, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mount$tmpfs(0x0, 0x0, &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000040)=ANY=[]) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3}}, 0x10) unlink(&(0x7f0000000100)='./file0/file1\x00') sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) syz_emit_ethernet(0x42, &(0x7f0000000780)=ANY=[@ANYBLOB="000000000000c44eb74c00008100110086dd6a00002f5df84df2a92de000000000000000000000000000fc0000000000000000000000000000402900000000000000db4f8118f959f149c9b3eb5b0e827feec0a8a04e48532210498a487a611267c941adbdf03e7249e40698032d9f56685d67d753a2473a53adb4e011a020f1d51481b99d7e23fe52569c54ab0c4e0148353530cc265592fd1f2d07aa85df205b2999cb4d8b6dc90dbd7f2e20c0a7cd38cdaa4ab5d7d27f33032d36d2154da3557452ce5d3d989302d4d4e845cd6afe7fb2bb10c9959471539d"], 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x38, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0x7, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) shutdown(r1, 0x1) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000852000000400000085200000040000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000480)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x5, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x5, 0x5, 0x7}, {0x3, 0x5, 0x6, 0x8}, {0x1, 0x5, 0x1, 0xc}, {0x4, 0x5, 0xd, 0x2}, {0x3, 0x5, 0x10, 0xa}], 0x10, 0xffff}, 0x94) r14 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000365f507f62aa6172f7881"], 0x33fe0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r13, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 20.820099447s ago: executing program 8 (id=2341): epoll_create1(0x80000) r0 = syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x6005}, @val={0x2, 0x4, 0x633, 0x3, 0x9, 0x8001}, @ipv4=@udp={{0x8, 0x4, 0x3, 0x32, 0xf9, 0x68, 0x0, 0xf, 0x11, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0xc, 0x8f, 0x0, 0x4, [0x8, 0x400]}]}}, {0x4e23, 0x4e20, 0xd9, 0x0, @opaque="8a5289a159ae94c6719fd620c026b425b3fd99b0be3a4dd87b0aa43305861e72c8105903b580fcf6962f4b9ca0aa10a16547faeaedacc40edd8a99f4bbffbd4716d523cac50faf4b24e244e3de83b9fb29d5d33fe714f1facddf8c9a261c68be71d0aee6ce52cdf76860693ffc17d8cdef62a1a307494d60f237c8c0a0837087550d9c802b7a6aef7cab527b662c1e8a658f9b65797eb8b25a661f8b26518513a8e9dfc53bc769ce6723d3fba8c22432df1bfb1c22cb8a47b4a2ff5df7173dca02c7cfdb47482beefac50fea09a855ea7e"}}}, 0x107) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x2000844, &(0x7f0000000380)={[{@fat=@tz_utc}, {@fat=@errors_remount}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {@fat=@discard}, {@nodots}, {@fat=@dos1xfloppy}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@nfs_nostale_ro}, {@dots}]}, 0x21, 0x23d, &(0x7f0000000a40)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) brk(0x200000ffc000) syz_open_procfs(r0, &(0x7f0000000280)='net/raw6\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x3c, 0xa, 0x80}, 0x2c) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) ioctl$TIOCEXCL(r3, 0x540c) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0xff, 0xde, 0xca, 0x8, 0x0, 0xffff, 0x81008, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x7fff, 0xe}, 0x15004, 0x0, 0x3, 0x1, 0x800, 0x80, 0x40, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000840)={{r2, &(0x7f00000006c0)='net/raw6\x00', 0x200, &(0x7f0000000700)={@align=0x30b, {0xfff0, 0x3, 0x56, 0xc5}}, 0x1ff, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0xd3e}, {[0x80000000, 0xfffffffa, 0x80, 0x10001]}, 0xe09, 0x59, &(0x7f00000007c0)=""/89}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300731900000000000014000000110001"], 0x7c}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0), r6) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000c80)=0x4c) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f00000009c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x476}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737908000000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) close(r7) 20.662896891s ago: executing program 8 (id=2347): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x887, 0x4}}], 0x18, 0x4810}, 0x4000000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9acbfe9b49379798) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket(0x2000000015, 0x80005, 0x0) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x8000, 0x0) (async, rerun: 32) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async, rerun: 32) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) move_mount(0xffffffffffffffff, 0xfffffffffffffffd, r2, &(0x7f0000000040)='./file0\x00', 0x54) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000001980), r1) (rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) 20.400115304s ago: executing program 8 (id=2355): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001808100001c6e842000000004e0e00009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x6, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r7 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) openat$cgroup_ro(r0, &(0x7f00000004c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000"], 0x0) sendmsg$inet6(r5, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e20, 0x10000, @empty, 0x6dd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e64df0b8d6a1ce872d40b28bf6b48b3b6c9608e0d3eeca40c31eb3e56091c248ff0f2cb6d8720200601c13cf1489e881a0e6d8b60d9cb7824605aa2b36f1c59b034da151b9c8852c16e67baca5b66c894f5388ef91933ac7e30a0df457bd1645c6f208dcaa54f269e62aa11984365a500841be09502182accf2576e2aaac83618e5fd58495f44f2da43a3abd", 0x8c}], 0x1, &(0x7f0000000580)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x89, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x21}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x84, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0xfa}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0xab, 0x5, [0x1, 0x9, 0x3, 0x800, 0x5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo, @pad1, @pad1]}}}, @dstopts={{0x118, 0x29, 0x37, {0x3a, 0x1f, '\x00', [@generic={0x7, 0xc2, "beaa7d10882bd13848d3301ddb0f610837b5cf9594c83467f7027fdcee25b1566ef0c353be46d0b3454a6fc38a7b9e478f7537c3bf0edb4ac428c1adb11b248939823aaefd665570abd5b14f95a9688e6e0cfc69fdc137fd4bd6ebce3ca8651046b58b0d20a5449ba25e09814aed9c5ad07bf90ab23d4752e25085341bc6e855493959aebe4fa1cb78a7396927f58a86b5ba7c1eba8309db211f44e0b8c7993d41929fc9528156b83dfb17f780abd462554c279073b6c7c8a478b15aefdabe7804e9"}, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @jumbo={0xc2, 0x4, 0x62a}]}}}], 0x1d0}, 0x4000080) 20.33498768s ago: executing program 37 (id=2355): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001808100001c6e842000000004e0e00009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x27, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x6, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r7 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) openat$cgroup_ro(r0, &(0x7f00000004c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000"], 0x0) sendmsg$inet6(r5, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x4e20, 0x10000, @empty, 0x6dd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e64df0b8d6a1ce872d40b28bf6b48b3b6c9608e0d3eeca40c31eb3e56091c248ff0f2cb6d8720200601c13cf1489e881a0e6d8b60d9cb7824605aa2b36f1c59b034da151b9c8852c16e67baca5b66c894f5388ef91933ac7e30a0df457bd1645c6f208dcaa54f269e62aa11984365a500841be09502182accf2576e2aaac83618e5fd58495f44f2da43a3abd", 0x8c}], 0x1, &(0x7f0000000580)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x89, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x21}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x84, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0xfa}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0xab, 0x5, [0x1, 0x9, 0x3, 0x800, 0x5]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo, @pad1, @pad1]}}}, @dstopts={{0x118, 0x29, 0x37, {0x3a, 0x1f, '\x00', [@generic={0x7, 0xc2, "beaa7d10882bd13848d3301ddb0f610837b5cf9594c83467f7027fdcee25b1566ef0c353be46d0b3454a6fc38a7b9e478f7537c3bf0edb4ac428c1adb11b248939823aaefd665570abd5b14f95a9688e6e0cfc69fdc137fd4bd6ebce3ca8651046b58b0d20a5449ba25e09814aed9c5ad07bf90ab23d4752e25085341bc6e855493959aebe4fa1cb78a7396927f58a86b5ba7c1eba8309db211f44e0b8c7993d41929fc9528156b83dfb17f780abd462554c279073b6c7c8a478b15aefdabe7804e9"}, @hao={0xc9, 0x10, @empty}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @jumbo={0xc2, 0x4, 0x62a}]}}}], 0x1d0}, 0x4000080) 3.505979148s ago: executing program 9 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000540)={0x50, r1, 0x1, 0x21, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x11a, 0x20016}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x10, @device_a, 0x8001, @value=@device_b, 0xffff8001, 0x7fff, @device_b, 0x8}}]}]}, 0x50}}, 0x4014080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0xa}}}}, ["", ""]}, 0x28}}, 0x40) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000540)={0x50, r1, 0x1, 0x21, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x11a, 0x20016}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2e, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x10, @device_a, 0x8001, @value=@device_b, 0xffff8001, 0x7fff, @device_b, 0x8}}]}]}, 0x50}}, 0x4014080) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0xa}}}}, ["", ""]}, 0x28}}, 0x40) (async) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x45, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x0, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), 0xffffffffffffffff) (async) 2.974217245s ago: executing program 9 (id=2599): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) unshare(0x20060400) r3 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x1186ca, 0xa7, 0x2, 0x5, 0xa5, 0x4, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgid(0x0) capget(&(0x7f00000017c0)={0x19980330, r5}, &(0x7f0000001800)={0x8, 0xd, 0x9, 0x7ad, 0x1000, 0xc3d}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x58, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r3) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xd0, 0xd0, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x2, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 2.832714578s ago: executing program 9 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004800100034000fb04000000", @ANYRES32=r4], 0x48) 1.877511832s ago: executing program 9 (id=2605): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) futex(0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) kexec_load(0xfffffffffffffffc, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}, {0x0, 0x0, 0x3e0000000000, 0x8000}], 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) sendmsg$unix(0xffffffffffffffff, 0x0, 0x44041) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) shutdown(r0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1.877301413s ago: executing program 0 (id=2606): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x8048) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd26, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0xf024, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x4000) 1.874029093s ago: executing program 3 (id=2608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) 1.873535143s ago: executing program 0 (id=2609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x6, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_TTL={0x5, 0x7, 0xc}, @TCA_MPLS_PROTO={0x0, 0x4, 0x88a2}]}, {0x4, 0x4}, {0x2c}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x74}}, 0x4000850) fcntl$getflags(r0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") 1.872645803s ago: executing program 3 (id=2610): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x50002, 0x2) fcntl$setstatus(r1, 0x4, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) close(0x3) 1.872181043s ago: executing program 3 (id=2611): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.868246623s ago: executing program 1 (id=2613): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0xf76b, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYRES32=r4], 0x48) 1.447782841s ago: executing program 0 (id=2615): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004008001034000fb04000000", @ANYRES32=r4], 0x48) 1.405054775s ago: executing program 1 (id=2616): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x403, 0x6, 0x20599, 0x9, 0x2, 0x0, 0x7ffffffe, 0xffd}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @generic={0x5, 0x0, 0x0, 0x3}, @jmp, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x800001, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x2c, 0x30]}}}}]}) 1.298409024s ago: executing program 3 (id=2617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3fc03, 0x71e12}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfeffffffffffffff, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)={[{@discard}, {@noload}]}, 0x64, 0x544, &(0x7f0000000880)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0xfffffffffffffffc, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff190}, {0x3, 0x0, 0x80, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3d080045000028000000000006907800000000ffffffff4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501001309a780000"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e00000006000300"], 0x70}}, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x2000000000006) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) fcntl$getown(r3, 0x9) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x22d8, 0x30, 0x100, 0x70bd29, 0x25dfdbfd, {}, [{0x22c4, 0x1, [@m_police={0x22c0, 0x15, 0x0, 0x0, {{0xb}, {0x21f4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xb7561da3137b2806, 0x1, 0x0, 0x5, {0x5, 0x2, 0x5, 0xfff, 0x1, 0x3}, {0x5, 0x0, 0x0, 0x1ff, 0x6, 0x7f}, 0xfff, 0x2, 0x10000}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0x2, 0x7, 0x9, 0x1, 0x1997, 0xbe9, 0x5, 0x4, 0x1, 0x456, 0x3, 0x3, 0x6, 0x1ff, 0x2, 0xf67e, 0x5, 0xa, 0x2dda, 0x800, 0xffff4743, 0x9, 0x7, 0x38, 0xfffffcfd, 0xf, 0x1ff0, 0x1, 0x8, 0x75d32403, 0x8, 0x2, 0x1, 0x1, 0x5, 0xe4, 0x4, 0xf5b, 0x6, 0xfffffffa, 0x8, 0x0, 0x2, 0x1, 0x3, 0x2, 0x7, 0xfffffffa, 0x7fff, 0x400, 0x10001, 0xffffffff, 0x40, 0x37, 0x4, 0x4, 0x0, 0x0, 0x2, 0x10000, 0x6d, 0x6, 0x3, 0x8, 0xab, 0x5, 0x7fffffff, 0x7, 0x2, 0x9, 0x5, 0x7ff, 0x5, 0x7fffffff, 0x3fc0, 0x4, 0x401, 0x1, 0x62, 0x6, 0xfffffffa, 0x0, 0x400, 0x1, 0x6, 0xfff, 0x400, 0x76a, 0x1, 0x0, 0xd, 0x401, 0x7ff, 0x4, 0xffffffa7, 0x8, 0x81, 0x4, 0x8, 0x3, 0x8, 0xc, 0xe, 0x8001, 0x7c6, 0x3, 0x3, 0x3ff, 0xffff, 0x9b, 0x6, 0xd, 0x9, 0xfffffff8, 0x64, 0x3ff, 0x10000, 0xb, 0x2, 0x7f, 0xfffff801, 0x2, 0xd, 0x285, 0x9, 0xd, 0x3, 0xef4, 0x80000001, 0x4, 0xf, 0x9, 0xffff, 0x8, 0x54f, 0x932, 0x2, 0x0, 0x6, 0x6, 0x8, 0x8, 0xfffff801, 0x7fffffff, 0x3, 0x8, 0x5, 0xa, 0xfffffbff, 0x0, 0x1ff, 0xaa, 0x4, 0x3ff, 0x6, 0xdfaf, 0x0, 0x7, 0xb, 0x7, 0x7, 0xc797, 0x7e85, 0x92cd, 0x5, 0x9, 0x2, 0x13a, 0x9, 0x2, 0x7, 0x7, 0x0, 0x6, 0x8, 0x40, 0x86f, 0x2, 0xffffffff, 0x2, 0x5, 0x6, 0x9, 0xc, 0x800, 0x3, 0x8000, 0x6, 0x5, 0x9, 0x8, 0x10000, 0x8, 0x5, 0x2000, 0x400, 0x1e42, 0x8, 0x3, 0x0, 0x3, 0x4, 0x800, 0x9, 0x8, 0x3, 0x3, 0xff, 0x2, 0x2, 0x3, 0x2a, 0x5, 0x620518d7, 0x5, 0x5, 0x3, 0x7, 0x9, 0x0, 0x4, 0x3, 0x7ff, 0xffffffff, 0x40c54814, 0x3ff, 0x6, 0x62, 0x7, 0x7, 0x4, 0x8, 0x3a, 0xde04, 0x108, 0x2, 0xc4ac, 0xfffffffb, 0x4, 0x2, 0x2, 0xc887, 0x8, 0x6, 0x9694, 0x4, 0xcd, 0xb12, 0x90, 0x800, 0x0, 0x401, 0x5f, 0x63]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xe7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x4, 0xc573, 0x80000000, {0x9, 0x1, 0x3, 0x7fff, 0x200, 0xffffffff}, {0x3, 0x2, 0x1000, 0x8000, 0xfff2, 0x4}, 0x101, 0x2, 0x7fffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1205e46b}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0xffffffffffffffff, 0xa538, 0x4, 0xe709, {0x5, 0x2, 0x2, 0x1, 0xde2e, 0x4}, {0x6, 0x2, 0x7f, 0x6, 0x2, 0x31}, 0x5, 0x952b}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x120, 0x3, 0x8000000, 0xe5, 0x3d, 0x5, 0x8d, 0x8, 0x4, 0x8, 0x7fffffff, 0xfffffff0, 0xe, 0xa, 0x80000001, 0x1ff, 0xffffffff, 0x5, 0xf, 0xc3, 0x1, 0x81, 0xd, 0x4, 0xffff7fff, 0x8, 0xe, 0x2, 0xcf, 0x8, 0x3, 0x8, 0x80, 0x10, 0x3ff, 0x7, 0x4, 0x859, 0x400, 0x2, 0x2, 0x0, 0x7, 0x8, 0x5, 0x100, 0x60, 0xa, 0x37, 0x8, 0x0, 0x1000, 0x7ff, 0xb, 0x8, 0xfffffff9, 0x0, 0x0, 0x6, 0x80000000, 0x5, 0x8, 0x6, 0x1000, 0x80000000, 0x200, 0x4, 0x7, 0x0, 0x9, 0x742, 0x7, 0x8, 0x9, 0x9, 0x19, 0x9, 0x7, 0x2, 0x8, 0x4, 0x8, 0x3, 0x4, 0x7, 0x0, 0x8, 0xffffff13, 0x5, 0x80, 0xffffff77, 0x1, 0x1b5, 0xfffffe01, 0x3, 0x48a1, 0x0, 0x9, 0x6, 0x10000, 0x2, 0xe2f4, 0x9, 0x244, 0x67c, 0x2, 0x9, 0x4, 0xaf, 0x6, 0xfffffffe, 0x7afb4315, 0x2, 0x1000, 0x3, 0x5, 0xd, 0x4, 0x5, 0x8, 0x4b6a, 0x401, 0x5, 0x4, 0x8000, 0x8, 0x2, 0x3, 0x1, 0xf, 0xe, 0x0, 0x1, 0xe, 0x400000, 0x3, 0x3, 0x1, 0x4, 0x582c0000, 0x7ff, 0x8, 0x3, 0x8, 0x2, 0xfffffffd, 0x5, 0x8001, 0x1, 0xd74, 0x4, 0xc26a, 0x2, 0x401, 0x8, 0x5, 0x4f59, 0x72686f46, 0x5, 0x9, 0x9, 0x87fc, 0xac, 0x52, 0x2, 0x8dfd, 0xa, 0x2cd3, 0x9, 0x7bf8, 0x3, 0x7, 0x9, 0x7fff, 0x2f4, 0x3c, 0x0, 0xa, 0xbb58, 0x1, 0x22a8, 0xfffffff7, 0x0, 0x7fffffff, 0x6, 0x200, 0x60, 0x6, 0x2, 0x7, 0xff, 0x0, 0xa, 0x1, 0xad5a, 0x9, 0x10001, 0x400, 0x5, 0x3, 0x6c, 0x4, 0x6, 0x8, 0x1, 0x6378dae0, 0x0, 0x6, 0x9, 0xf0cc, 0x7f, 0x0, 0x5, 0xd30, 0x81, 0x7fff, 0x7, 0x8001, 0x7, 0xc0, 0x5, 0x80000001, 0x200, 0x6, 0x8f, 0x3, 0x1, 0x8, 0xf0, 0x38, 0x42, 0x72e, 0x6, 0x1, 0x6, 0x9, 0x3, 0x2, 0xffffffff, 0x3, 0x4, 0x5b4, 0x80000000, 0x146, 0xfd, 0x1, 0x1, 0xf5b, 0x9, 0x3, 0x0, 0x5, 0x3, 0xa43]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80000000}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5415, 0x80, 0x3, 0x80000001, 0xa, 0x7f, 0xa434, 0x7fffffff, 0x59, 0x7, 0x7, 0x3, 0x6, 0x80, 0x9, 0x9, 0xa0f, 0x7, 0x400, 0x6, 0x100, 0x10000, 0x2000000, 0x3, 0x7b49, 0xbbc, 0x5, 0x7fff, 0x5, 0x5, 0x1, 0x3, 0x0, 0xff, 0x40, 0x3, 0xe0000000, 0x4, 0x7, 0x8, 0x7, 0x8000, 0x303b, 0xc, 0x6, 0x0, 0x3, 0x4, 0x80000001, 0x32, 0x7ff, 0x2, 0x9, 0x2, 0x9, 0x4b5, 0x8, 0xfffffff0, 0xa, 0x5, 0x5, 0xe19f, 0x8, 0xfd9, 0xffff8000, 0xe, 0x87, 0x7, 0x3, 0x6, 0x2, 0x4, 0xe2f, 0x6, 0x9, 0x4, 0x2af, 0x2, 0x8, 0xa65, 0x10, 0x2, 0x7, 0x4, 0x401, 0x6, 0xfff, 0x7fffffff, 0x1, 0x7, 0x2, 0x2, 0x2, 0x7, 0x4, 0x4, 0x6, 0x1, 0x6, 0x2, 0x3, 0x5e7f, 0x9, 0x8, 0x7ae, 0x0, 0x32adda63, 0x6, 0x6, 0xf, 0x9, 0x7, 0xecc, 0x9, 0x6, 0x4, 0x90b0, 0x860000, 0xfffffffe, 0x7, 0x1, 0x7, 0x40, 0x4, 0x3, 0x3, 0x0, 0x8, 0xffffffff, 0x7f, 0xff, 0x7, 0x5, 0x6, 0x532d, 0x3, 0x6, 0x650, 0x7, 0x5, 0xd, 0x6, 0x9, 0xb, 0xffff, 0x6, 0x5, 0x0, 0x3, 0x100, 0x9, 0x1, 0x8, 0xfffffffe, 0xb23d, 0x0, 0x101, 0x3d, 0xe, 0x9, 0x1, 0x800, 0x5, 0xffff0001, 0xf, 0x80, 0x0, 0x4, 0xd3dc, 0x0, 0xd, 0x3, 0x5, 0x10000, 0x9, 0x9, 0x7, 0x3, 0x9f3, 0xfffffffb, 0x1, 0xe, 0x19e, 0x800, 0x6, 0x9, 0x6, 0x5, 0x9, 0x4, 0x4, 0x3, 0x7, 0x3, 0x1, 0x3, 0xff, 0x8, 0x9, 0x9, 0x8, 0x7, 0x9, 0x1, 0x80000001, 0xa, 0xffff, 0x9, 0x4, 0x7, 0x9b, 0x74, 0x9ac, 0x0, 0x2, 0x9, 0xd7, 0x3da, 0x2, 0x80000001, 0xf0, 0x81, 0xfffffffd, 0x2000000, 0x5, 0x6, 0x2, 0xffff8000, 0x76, 0x4a1, 0x6, 0xfe, 0x8, 0x4, 0x8, 0x56, 0x4, 0x6, 0x0, 0x1, 0x1, 0x7fff, 0x8, 0x5, 0x7, 0xffffffb6, 0x52fe, 0x1, 0x7, 0x3, 0x7, 0x0, 0x2, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x3, 0x3, 0x6, 0xffff3d4a, {0x1, 0x1, 0x5, 0x2, 0x3ff, 0x10000}, {0x7, 0x0, 0x53e, 0x60d6, 0x0, 0x7}, 0x4, 0x3, 0x5}}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x9, 0x5, 0x2, {0x2, 0x2, 0x6, 0x7, 0x7ff}, {0x1, 0x2, 0x4, 0x81, 0x3, 0xd}, 0xff, 0x80000000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x10000, 0x4, 0xe7a0, 0x1000, 0x7, 0x0, 0x4, 0x401, 0x8, 0xc3b7, 0xd, 0x8, 0xe, 0x80, 0x6, 0x2, 0x9, 0xa, 0x5, 0x1ff, 0x737e9982, 0x3, 0x2, 0x26, 0x8, 0x6, 0xd, 0xb7, 0x249d8187, 0x9, 0x6, 0x3, 0x5, 0x0, 0xb0, 0x6, 0x9, 0x8, 0x4, 0xc82, 0xb579, 0xd5, 0x10001, 0x9, 0xd0f, 0x3, 0x40, 0x8001, 0x1, 0xa0, 0x2, 0x5, 0xfff, 0xd0, 0x0, 0xfffffd6e, 0x3, 0xa3a, 0xfffffffb, 0x9, 0x932, 0x800, 0x1, 0x2, 0x0, 0x7, 0x800, 0x2, 0x10000, 0x7, 0x0, 0x2, 0x7, 0x3, 0x8, 0x6, 0x4, 0x5, 0xf4, 0x3, 0xff, 0x7, 0x3, 0xfffffff8, 0x9, 0x3, 0x80, 0x8, 0x80000000, 0x2, 0xffffffff, 0x6, 0xffaa, 0x7, 0xef, 0x8, 0x7, 0x7, 0x3, 0x5, 0x800, 0x0, 0x9fe, 0x0, 0x8001, 0xc, 0x13a, 0xa, 0x2, 0xd3, 0x5f890000, 0xa000000, 0x3, 0x6, 0x3, 0x4000, 0x8, 0x8, 0x3, 0x1, 0x20, 0x5, 0x1493, 0x0, 0x4, 0x6, 0x9, 0x3, 0xc, 0x9, 0x1, 0x3, 0x9, 0x0, 0x5, 0x9, 0x3, 0x2, 0x8, 0x2, 0xec, 0x2, 0x4, 0x800, 0x0, 0x2d, 0x6, 0x1, 0x475, 0x7, 0x81, 0x8f3, 0x5, 0x2, 0x0, 0x5, 0x4, 0x0, 0x5, 0x590, 0x400, 0xfffffff7, 0x4, 0xfffffff7, 0x2, 0x5, 0x9, 0x2, 0x7, 0x6, 0x7f4a, 0x8, 0x3, 0x6, 0xff, 0x69b, 0x131, 0x8, 0xffffff64, 0x1ff, 0x8, 0x8, 0x81, 0xb3, 0x2, 0x40, 0xffffffff, 0x7, 0x2, 0x6, 0x2, 0x8, 0x1, 0x0, 0x40, 0x0, 0x9, 0x6, 0xa3, 0x6, 0x7fff, 0x2, 0xf, 0x92c5fcf, 0x5, 0x0, 0xfab6, 0x3, 0x0, 0x5, 0x4, 0xee, 0x3f60, 0x7, 0x2, 0x100, 0x8, 0x6, 0x6, 0x1, 0x9, 0x8, 0x2, 0x40, 0x10001, 0xb12, 0x451, 0x37f, 0x7, 0x0, 0xfffffff8, 0x7, 0xff, 0x400, 0x912, 0x7, 0x0, 0x1, 0x5, 0xce, 0x6, 0xfffffff5, 0x0, 0xffff7636, 0x7, 0x1, 0x3, 0x7, 0x7, 0x7, 0x8001, 0x76, 0x7fffffff, 0x1000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff8}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0xfff, 0x2000000, 0x2, 0x77, 0x5, 0xffffffff, 0xfff, 0x4, 0x0, 0x39e, 0x4, 0x2, 0x6, 0x5, 0x8, 0x9, 0x3, 0x61, 0x10001, 0x400, 0x2, 0x0, 0x8, 0x5, 0x7, 0x5, 0x7, 0x950, 0xff, 0x7fff, 0x0, 0x1, 0x5, 0x80000001, 0x10000, 0xff, 0x4, 0xb, 0xa6, 0x100, 0xfffffff8, 0x4, 0x1, 0xfffffffb, 0x3a, 0x8, 0x7, 0x4, 0xd03, 0x5, 0xfffffffa, 0xcf0f, 0x1, 0x1ff, 0x3, 0x3, 0x1a, 0x1, 0xffff, 0x4, 0xdb, 0x4, 0x2, 0x200, 0x0, 0x6, 0x6, 0x1, 0x0, 0x73, 0x6, 0x5, 0x7c0, 0x4, 0x7ff, 0x10, 0x1, 0x0, 0x9, 0x8, 0x1, 0x10001, 0x3, 0x40, 0x6, 0x62ec, 0x800, 0x2, 0x0, 0x5a6e, 0x7, 0xff, 0x0, 0x7ff, 0x5, 0x2, 0x0, 0x0, 0x467, 0x7f, 0xe, 0x7d6, 0x2, 0x7, 0xf8e, 0x0, 0x5, 0xc0000, 0x1, 0x7, 0x80000000, 0x0, 0xc, 0xc307, 0x8, 0x81, 0x200, 0xa, 0xf3, 0x8000, 0xffffffff, 0x6, 0x6, 0x5, 0xa4e, 0xf, 0xfff, 0x3ff, 0xfffffffa, 0x0, 0x9, 0x1, 0x2000000, 0x7ff, 0x771c, 0x2, 0x6, 0xfffffffc, 0x6, 0xe0c, 0xb27, 0xffff, 0xfff, 0x6, 0xfffffffb, 0x8001, 0x0, 0x80, 0xb4, 0x81, 0x56, 0xffffffff, 0x9, 0x8, 0x7fffffff, 0x7, 0xfeca, 0x3, 0xe16, 0x8000, 0x5, 0xfffffffe, 0x746e, 0x8000, 0x6, 0x6, 0x0, 0xb1, 0x1, 0x0, 0x8609, 0xfffffffe, 0x0, 0x7, 0xe, 0x94, 0x2, 0x6, 0x6, 0xfffffff9, 0x2, 0x1, 0x8, 0xc8, 0x1, 0x8000, 0x0, 0x7, 0x42, 0x9, 0x9, 0x5, 0x2000400, 0x1, 0x4, 0x7, 0x1, 0x42dcbd82, 0xfff, 0x1, 0x7b6, 0x7fffffff, 0x8, 0x7, 0x9500, 0xdc, 0xfffffffa, 0x0, 0x1, 0xc837, 0x3, 0x2, 0x3, 0xb4cd, 0x2, 0x0, 0xfffffffd, 0x4, 0x6, 0x0, 0x81, 0x3, 0x5, 0x5, 0x0, 0x5, 0x5, 0xece6, 0x3, 0x7, 0x6, 0xfffffff7, 0xe4000000, 0x2, 0x4, 0xffff8000, 0x8a5e, 0x7, 0x7, 0x7, 0x0, 0xa4, 0x80000000, 0x53, 0x3, 0x1000, 0x7, 0x45, 0x3, 0xffffffff, 0x7fffffff, 0x40, 0xc0000000, 0xffffff0e]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x703}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x8, 0xbf13, 0x7, 0x67, {0x1, 0x1, 0x4, 0x200, 0x1, 0x400}, {0x1, 0x2, 0x8, 0x2, 0x9, 0x4}, 0x2, 0x3, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0xfffffffb, 0x4c82, 0xff, 0x4, 0x6, 0x401, 0x10001, 0x0, 0x7, 0x4, 0x4, 0xa, 0xfe8, 0x3, 0x8, 0x72c0432a, 0x6, 0x5, 0x8, 0x2, 0x5, 0x4, 0x7, 0xfffffd67, 0x1, 0x8, 0x80, 0x4, 0xd, 0x10, 0x9, 0x7, 0xffff, 0x1, 0x3, 0x8, 0x5, 0x9, 0x3, 0xfffffffc, 0x26, 0x7, 0xc, 0x2, 0x40, 0x4a1, 0x401, 0xffffffff, 0x6, 0x8, 0x5, 0x7, 0x3467c9ca, 0x1, 0x8, 0x3, 0x401, 0x8, 0x3394, 0x2, 0xc0, 0xc4, 0x6, 0x790, 0x8, 0x3, 0x1, 0x9, 0x2, 0x3, 0xe, 0x6, 0xfffffffe, 0x9, 0x9, 0x1, 0x2, 0x8, 0x8, 0x4, 0x1, 0x16, 0xc18, 0x100, 0xba, 0x4, 0xffff, 0x9, 0x0, 0x5, 0x200, 0xfffffff2, 0x5, 0x2, 0x15, 0x7, 0x9, 0x40, 0x2, 0x1, 0x0, 0x2, 0x5, 0x4, 0x6c4, 0x8, 0x200, 0x80000001, 0x81, 0x10001, 0x0, 0xfffffffe, 0x7, 0x8, 0x4, 0x3, 0x3, 0x2, 0x0, 0x8, 0x8, 0x4, 0x79, 0x3, 0xbf95, 0x1000, 0x799, 0x7, 0x1000, 0x4, 0x4, 0x4, 0x98, 0x9d, 0x7487, 0xfffffffb, 0x3, 0x101, 0x4, 0x800, 0x80000001, 0x77, 0x4, 0xffff, 0xd6e, 0x1, 0x3, 0x0, 0x1, 0xffffffff, 0x2, 0x3, 0x401, 0xffffff80, 0x7, 0x6, 0x401, 0x1, 0x80, 0x7, 0xd, 0x4d9, 0x400, 0x7, 0x7, 0x9a, 0x8, 0x0, 0x1, 0x4, 0xfffffffd, 0x1, 0x2, 0x7ff, 0x6, 0xb, 0x6, 0x0, 0xa, 0x0, 0x80000001, 0x7, 0x3, 0x4, 0x7, 0x28f, 0x6, 0x1ff, 0x1, 0x2c, 0x80, 0x3, 0x653c, 0x4, 0x4, 0x42, 0x1, 0x5, 0x0, 0x9, 0x57, 0x6, 0xffffff3f, 0x5, 0x1, 0x1000, 0x7, 0xff, 0xe24b, 0x0, 0x1, 0x8001, 0x0, 0x0, 0xfffffffc, 0xea84, 0x5, 0x7, 0x0, 0x3, 0x401, 0x0, 0x7, 0xc1, 0xd, 0x4, 0x8000, 0x3, 0x80000000, 0x10001, 0xfffffffe, 0xc, 0x1, 0x7, 0x7f51ee9d, 0x2, 0x80000001, 0x5, 0x7, 0x1, 0xf44b, 0x7, 0x6, 0x3, 0xffff, 0x7, 0x8001, 0x4, 0x5c, 0x800, 0xb, 0x2, 0x6, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x5, 0x0, 0x2, 0x80, 0x168, 0x6, 0x6, 0x1, 0xcff, 0x40, 0x0, 0xfff, 0x6, 0xffffff20, 0x5, 0x9, 0x3, 0x9, 0x8000, 0x4, 0x5, 0x8, 0x80ae, 0x401, 0x80000000, 0x0, 0xf, 0x8, 0x0, 0xfffffffc, 0x3, 0x7, 0x4, 0x80000000, 0x0, 0x200, 0x101, 0xffffffff, 0x9, 0x10001, 0xb45d, 0x8, 0x400, 0x8, 0x3, 0x1, 0x1, 0xf, 0x9, 0x9, 0x6, 0x9, 0x3, 0xff, 0xe, 0x2bb, 0x35, 0x0, 0x7, 0x2, 0x3, 0x7fff, 0x8, 0x2, 0x5, 0x4, 0x339, 0x9, 0x2, 0x6, 0x2, 0x4, 0x7, 0x7f07, 0x0, 0x2, 0xfffffff8, 0x89a4, 0xf000000, 0x0, 0xffffff03, 0x101, 0x2, 0x1, 0xa20, 0x2, 0x8, 0x1, 0x0, 0x6, 0x1, 0x6, 0xff, 0x40, 0x7, 0x31f1, 0x5, 0xe, 0x10001, 0x13, 0x7f, 0x1, 0x9, 0x3, 0x8, 0x7fff, 0x9, 0x7, 0xfffffff8, 0x3, 0x8001, 0x4, 0x5b0, 0x400, 0x7, 0x34a, 0x80000000, 0x3, 0x4, 0x7, 0x101, 0x0, 0x4, 0x1, 0x3318, 0x49bc, 0x10001, 0x4, 0x0, 0x9, 0xcfa2, 0x0, 0x9, 0x7, 0x4, 0x4, 0x6, 0x81, 0x6, 0xfd49, 0x7, 0x7, 0x0, 0xaea0, 0x1, 0x7dcc, 0xfff, 0x5, 0x7f, 0x7, 0x7, 0x1, 0x7c, 0x6, 0x5, 0x1c5, 0x5, 0x5, 0x100, 0x384d, 0x6c, 0x80000001, 0x800, 0x0, 0x6, 0x4, 0x5, 0xd, 0x90, 0x9, 0xb, 0x6, 0x7, 0x6, 0x8000, 0x1, 0x9, 0x8001, 0xc3be, 0x8, 0x88, 0x2be6d61d, 0xc54, 0x538848ae, 0xff, 0x3, 0x7, 0x8, 0x6, 0x5, 0x1, 0x3, 0x85, 0x80, 0x5, 0x6, 0xa8, 0x8, 0x0, 0x3, 0xc27f, 0x9, 0x7fffffff, 0x3, 0x2, 0x5, 0x4, 0xffffffff, 0xe2a, 0x5, 0x7fff, 0xc358, 0x9, 0x9, 0x7, 0x7, 0x1, 0x70, 0xfffffff8, 0x100, 0x3, 0xadf, 0x8, 0x8e7, 0x8, 0x80000, 0x3, 0x6, 0x2, 0x2, 0x0, 0x6a23db8b, 0x18, 0xfffffffb, 0x5, 0x0, 0xb731, 0x0, 0x0, 0x1000, 0x2a, 0x6, 0x1ff, 0x3, 0x3f, 0xe5a, 0x7, 0x6, 0x6, 0x4, 0x81, 0x6, 0x7, 0x8000, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x7, 0x3, 0xfffffff5, 0x3, 0x7f, 0x3, 0x80, 0x7, 0x74455226, 0x0, 0x87d2, 0x3ff, 0x2, 0x8000, 0x2, 0x6, 0x7f4, 0x5, 0x401, 0x3ff, 0x9, 0x6, 0x5, 0x6, 0x6, 0x6, 0xf671, 0xaf, 0xffffffff, 0x7fffffff, 0x9, 0x0, 0x1, 0x80, 0x6, 0x8, 0xfffff940, 0x1000, 0x4, 0x6, 0x0, 0x9, 0x0, 0x2, 0xfff, 0x800, 0x2, 0x200, 0x9, 0xe9a, 0x2, 0xe44, 0x64f9, 0x9, 0x6, 0x1, 0x6, 0xffff, 0x63, 0x9, 0x4, 0xd9fb, 0x80000001, 0x0, 0x5, 0x3, 0x5, 0x0, 0x36e, 0xe3, 0x6c, 0x3, 0x101, 0x1, 0x3, 0x61, 0x8, 0x5, 0x1ff, 0xb2d, 0xc, 0x3, 0x800, 0x0, 0x80, 0x2, 0x7, 0x6, 0xffff3255, 0x5, 0x100, 0x7, 0x6, 0x1, 0x400, 0x2, 0x9, 0xb, 0x1, 0x2, 0x2, 0xb, 0x8, 0x94, 0x627aadd5, 0xffffffff, 0xa96, 0x9, 0x7fffffff, 0xfffffffa, 0x6, 0x9, 0x2, 0x800, 0xa, 0x0, 0x0, 0x7, 0xf, 0x101, 0x9578, 0x0, 0xf, 0xfffffff2, 0x5, 0x8, 0x7, 0x9, 0x80, 0x81, 0x5, 0xa7, 0x9, 0x3, 0x3a36, 0x6, 0x4, 0xa, 0xd06, 0x1, 0x1c, 0x7, 0x9, 0x5, 0x6e, 0x9, 0x400, 0x401, 0x2, 0x4b5, 0x7f, 0xb8d, 0xb768, 0xd1a, 0x1000, 0x2, 0xac, 0x3, 0xe10f, 0x9, 0x1, 0x100, 0xffffffff, 0xf0000000, 0xc, 0x1, 0x7, 0x2, 0x401, 0x8, 0xffff, 0x7, 0x3, 0x387, 0x5, 0x9, 0x9, 0x6115562, 0x3, 0xb, 0x7, 0x3, 0x7, 0x6, 0xe6e, 0x2, 0x7, 0x3ff, 0x4, 0x200, 0x3, 0x10000, 0x2, 0x9, 0x8, 0x2, 0x7, 0xffffff01, 0x5, 0xff, 0x2, 0x6, 0x6, 0x2, 0x7, 0x4, 0x66, 0x8, 0x7, 0x9, 0xfffffff7, 0xc20, 0x0, 0x2, 0x22ab654a, 0x101, 0x8, 0xffffffb0, 0xf37, 0xd59, 0x1, 0x100, 0x7, 0x7, 0xedc, 0x100, 0x6, 0x4, 0x7, 0x6, 0x1, 0x770, 0x4, 0x9, 0x10, 0x6, 0x2, 0x6, 0xab, 0x0, 0x0, 0xfffffffc, 0x6, 0x6, 0x55, 0x400, 0xffffffff, 0xffff, 0x80000001, 0x7ff6, 0x3, 0x0, 0x7, 0x3, 0xe8]}]]}, {0xa3, 0x6, "1f31019f73211854124b3b36738541f443fea78b21ecbed7370fceaa82df06eff146acbefcf6a4567eab94bd8e991834b7e5ffe0d9e2e9eb1ffd47276da2e11402a3bbcec60aacea906b25b0d578b40b8c9f3b0122244638010c3360c29f62a356f2bfcbc3b06a4f5232efd5cc0ef6576e32d5b187269d87e8dae4e0cd3bdc3e0c5edc6137d77a29414a484d2cd95877ac1a6fda642b5cbf4e97c2cefb5ac2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x22d8}}, 0x20008884) lseek(r3, 0x8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 1.037762268s ago: executing program 0 (id=2620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1a43) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x7, 0x0) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffc) shutdown(r3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1a43) (async) pipe(&(0x7f00000000c0)) (async) splice(r2, 0x0, r4, 0x0, 0x7, 0x0) (async) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) shutdown(r3, 0x2) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) (async) 937.524137ms ago: executing program 0 (id=2621): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="62ed992ee70e419c"}}) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/213, 0xd5) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000100)=0x6, 0x4) 936.942137ms ago: executing program 9 (id=2622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f00000000c0)=[{0x3, 0x8, 0x3, 0x4}, {0x40, 0x7, 0x76, 0x4a07}, {0x3, 0x9, 0x40, 0xa1b}]}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'wlan0\x00'}) 864.405023ms ago: executing program 0 (id=2623): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) getsockopt(r1, 0x116, 0x271c, &(0x7f000001a340)=""/102400, &(0x7f0000000480)=0x2f1e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000001a2c0)={r4, 0x0, 0xb0, 0x9a, &(0x7f000001a0c0)="ecc9a34cf1b3d3c2d46af041bfb19a72ef9a0e904b3cec9888b61db117f24deccbbea41600f2e54b35a4383b3767434be62906eca1c8fa712f00405720f29a31411675c474a6456921dc84438bad464d3a44f22b3efae6f4d3d78351e4b1d174bab589b16866e1304c21ed0d908a63c73b6a483492be2dcc87bbd260e9d17d4c2a14c5f7902961c8e3985e8b449c3f44951a47417b65b12f455f3e495fdf22554ece77d30523e8b2c568508cd6b62aa4", &(0x7f000001a180)=""/154, 0x2, 0x0, 0x7, 0x1b, &(0x7f000001a240)="d2af355bad8de5", &(0x7f000001a280)="12a772d595fab74d38df8347741832e5908eaff8d52fedecc60bdb", 0x0, 0x0, 0x3}, 0x50) setsockopt$inet6_int(r6, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) listen(r5, 0x70000008) listen(r6, 0x401) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xd69, 0x200}, 0x103af4, 0x10000, 0xfffffffe, 0x1, 0x5, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write(r4, &(0x7f0000000300)="c73cb5504520ba6ca3dad6b9f3125ff581462c881a75b1288bd957cd607d92921c8606f85c94a10e3557a52b35ffb9e494c574121d0ca7d2f6d7e82169c56b75ebf5be00fc85d156855b7210266271d03a6b53a9a5cde3256a11afd9170239467234793d5a1fada766107e1ab1557a", 0x6f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10006}, 0x38) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000000)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) syz_emit_ethernet(0xd5, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd308009f0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000"], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9, 0xffffffffffffffff, 0x521}, 0x57) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) socket$netlink(0x10, 0x3, 0x13) syz_usb_connect(0x5, 0x6a, &(0x7f0000019900)=ANY=[@ANYBLOB="12010003f2a09d11cd061b01fd81010203010902580001d194875c0904d38d073fe6d6c695c4a3148d0501ff7700abfa4b3600005405240001000d15cfa24cca9314b7baee934edade5c3b05240f010400000070000400f70524010202052401000606241a0300040524150900092100017f0122f202"], &(0x7f00000003c0)={0x19, &(0x7f0000000440)={0xa, 0x6, 0x201, 0xd, 0x6, 0x10, 0x20, 0x10}, 0xfb, &(0x7f00000004c0)={0x5, 0xf, 0xfb, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x3, 0x2, 0x101}, @ssp_cap={0x0, 0x10, 0xa, 0x5, 0x0, 0x6, 0xf08, 0xfff, [0x3f00, 0xc0, 0xc0, 0x3f00, 0x60, 0xa030]}, @ss_cap={0x0, 0x10, 0x3, 0x2, 0x1, 0x81, 0xf, 0x2}]}, 0x6, [{0x4, &(0x7f0000019580)=@lang_id={0x4, 0x3, 0x83e}}, {0xa8, &(0x7f00000195c0)=@string={0xa8, 0x3, "e1963f9b4ea25b067f801f5d925519fcb43e125d0f12199b6fa1a055138072d039f6f4042754b1b05b3e769361a73a747cb2b27e7d6119b2fdc6cfb0384af26fbde85cc736fb4626048d71b159f2939ef1529f3981515f5d54c88b1cec74f8ad9b8d43c97699f0e2e213153a04f0767c49249a1f7bf19f4914bb88f708d89bc7dbba63d1556f61655e48bc55e4af372b83cdcbbe3d7ae7d0f6e3c208065599448135a1df61eb"}}, {0x5b, &(0x7f0000019680)=@string={0x5b, 0x3, "f3d7d7f04c2461d391b00d5898a0f1e002ae5b4116605ef3b5e9a8af047d52db6b82e5966491cf67b3ca158da182b01496722966824664f8f81a1f0e969a0ebb4b83a301bad77ffa5ad94de1bb2050b9c84035c03551215f10"}}, {0x4, &(0x7f0000019700)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x582a}}, {0xe7, &(0x7f0000019980)=@string={0xe7, 0x3, "3277f1030e32fa08ab1bc1da7d6c05321735a0f77f4e1e1f5cacc13e64d9ecca62313c58e9c012b0b1486be0fa1b0b94a7e185730e01043f020000000000000090a5cc827de051b01fd2dee462e4189555b3baf6a72149ab4e9e46f66244ccd32bb5f4542157c47ae5020000008cd1d38d6b2c7d36801d40bbbda14b99de1c64c5f3e0efc001b584413e64651a6a5b44066d9b9753a1910a93c85864fcdb90ffffeae085b11100fe2fa00f3553a77408ea85d0a9eab3281d0c44b4eb3a49f40894de7b6b8290f1c6a57dd6f9833edf9bc03c89c2c87ba9a7c2d8f4caada55ca9c8a2c1a08a6b995c2f61e4f91440c0da0b89aab802dcff7d43f73659749ab93f"}}]}) 750.308753ms ago: executing program 5 (id=2625): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x9}, 0x106214, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x4000}], 0x1, 0x0, 0x0, 0x0) (async) pwritev2(r2, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x133, 0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) (async) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x10) (async) setxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async) write$UHID_CREATE2(r2, &(0x7f0000001340)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xfe, 0x2, 0x3, 0x7, 0x7fff, 0x81, "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"}}, 0x216) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) 652.745582ms ago: executing program 5 (id=2626): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="010025bd7000ffe9df2528000000088002001667e387ee5e8c356a050000000000007877bc0cc7aae54661a947fbdd805996d025546489839f000000000000bbf62305f5a8a1079199bd1d7dd9da034b6ab269fa945e667aa761ac83c9b70d9f4c6042232f5e356d1233860f132edf662f20f4352050e68385addbc9fc820c1aa0f4c20466c57fa565563ea0e4b27c008167ed8997c23019c08532ae601465113e23c53c28f7036b07deeacff901aebce02c92738c9b9f49f2690a79f7047b54f74943f1a761b0a3e42f", @ANYRES32=r1, @ANYBLOB="05002b000300000005002e00ff000000", @ANYRESDEC=r2], 0x2c}}, 0x10) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x2f2, &(0x7f0000000180)="$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") 650.332612ms ago: executing program 5 (id=2627): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 634.103253ms ago: executing program 9 (id=2628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r1) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\b', @ANYRES16=r2, @ANYBLOB="010126bd7000fbdbdf250d0000000500190051000000050007001700000006000a0002000000050017000900000006000800a0aa0000050018000b00000005001a0004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r6}, &(0x7f0000000380)=0x0) tkill(r6, 0x12) timer_settime(r7, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x20004100) r8 = gettid() tkill(r8, 0x16) prlimit64(r8, 0xa, &(0x7f0000000000)={0x568, 0x8}, &(0x7f0000000100)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) close(r9) fsetxattr$system_posix_acl(r9, &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r10, &(0x7f0000000040)="e2", 0x1068) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x21) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004000000034000fb04000000", @ANYRES32=r11], 0x48) 569.29747ms ago: executing program 3 (id=2629): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x45c, &(0x7f00000010c0)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) name_to_handle_at(r1, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x9, 0x7}, 0x7f, 0x2}}, &(0x7f00000002c0), 0x400) 443.672711ms ago: executing program 5 (id=2630): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004800) unshare(0x680) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) (async) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x47, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x47, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) (async) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) (async) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x5, 0x10, 0x6, 0x70e6aca}, {0x2, 0x2d, 0xb7, 0x71f}]}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r5 = mq_open(&(0x7f0000000000)='!\'-\xb0^*:[E\x00', 0x40, 0x80, 0x0) mq_getsetattr(r5, &(0x7f00000004c0)={0x0, 0x6, 0x7fffffff, 0x4}, &(0x7f0000000500)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008024) sendto$inet(r0, &(0x7f0000000180)="8995b3c271bfb84f6e861cd28301f2e02519276836b2ab14baa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce60bd4af9b8cf0b15eab7ab7a92eb2bad756f12238f6649d204a1065dad7cffef082a59ee2b8735d83669614e4eb5b9be7e4e76b2bb0c", 0xffffffffffffff55, 0x4040, 0x0, 0x0) 380.770536ms ago: executing program 1 (id=2631): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004000000034000fb04800100", @ANYRES32=r4], 0x48) 335.84586ms ago: executing program 5 (id=2632): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x400}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x6}, &(0x7f0000000140)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r2, 0xffffd5db}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={r4, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r2, 0xdc, &(0x7f0000000240)=[@in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e21, 0xffff, @loopback, 0x7}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00', 0x8}, @in6={0xa, 0x4e23, 0x0, @empty, 0x15}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9f0a}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x4000}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x5, 0x7af, 0x1, 0x200, 0x2, 0x1, 0x2f, 0x0, r5}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'sit0\x00', 0x0, 0x0, 0x8000, 0x81, 0x0, {{0x25, 0x4, 0x0, 0x22, 0x94, 0x65, 0x0, 0x1, 0x4, 0x0, @multicast2, @empty, {[@noop, @rr={0x7, 0x13, 0x2f, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x3d}, @local]}, @timestamp_prespec={0x44, 0x44, 0x5a, 0x3, 0x3, [{@remote, 0x50a5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@private=0xa010101, 0x16}, {@private=0xa010101, 0x3}, {@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x3}, {@empty, 0x5}, {@multicast1, 0x3}]}, @rr={0x7, 0x7, 0x41, [@local]}, @ssrr={0x89, 0xf, 0x35, [@loopback, @remote, @local]}, @rr={0x7, 0xf, 0xdc, [@multicast2, @loopback, @broadcast]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x2, 0xb, 0x16, @dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, 0x7800, 0x80, 0x4, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x9, 0x8000, {{0x6, 0x4, 0x0, 0x8, 0x18, 0x64, 0x0, 0x4, 0x4, 0x0, @remote, @multicast1, {[@end]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=@ipv6_getroute={0x54, 0x1a, 0x800, 0x70bd28, 0x25dfdbff, {0xa, 0x14, 0x0, 0x6d, 0xfe, 0x0, 0xfe, 0x9, 0xb00}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x1, 0xc, r8}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0x5, 0x2, '\x00'}}}, @RTA_IIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x0, 0x0, 0x3e, r9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000010) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000800), 0x106, 0x9}}, 0x20) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000980)={'nat\x00', 0x0, 0x4, 0x4c, [0x7, 0x10001, 0xfff, 0xd, 0xff, 0x9], 0x5, &(0x7f0000000880)=[{}, {}, {}, {}, {}], &(0x7f0000000900)=""/76}, &(0x7f0000000a00)=0x78) ioctl$XFS_IOC_FSGETXATTRA(r3, 0x801c582d, &(0x7f0000000a40)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%-5lx \x00'}, 0x20) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/mdstat\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, &(0x7f0000000e40)={r12, &(0x7f0000000d40)='(\x00', 0xae00, &(0x7f0000000d80)={@align=0x852d2f3c000, {0x0, 0x7, 0x80000000, 0xff}}, 0x200, &(0x7f0000000dc0)={@_ha_fsid}, &(0x7f0000000e00)=0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0xa, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffff9de}, [@map_fd={0x18, 0x0, 0x1, 0x0, r13}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @generic={0x80, 0x6, 0x3, 0x8001, 0x5}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x95, 0x8b, &(0x7f0000000c00)=""/139, 0x41100, 0x0, '\x00', r9, 0x25, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x5, 0x4, 0x10000, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000e80)=[r15], &(0x7f0000000ec0)=[{0x4, 0x5, 0x1, 0x1}, {0x2, 0x1, 0x8, 0x1}, {0x1, 0x3, 0x8, 0xc}, {0x2, 0x3, 0xa, 0x2}, {0x5, 0x2, 0x6, 0xb}, {0x2, 0x2, 0x1, 0x4}, {0x1, 0x3, 0x2}, {0x3, 0x1, 0xa, 0x4}, {0x4, 0x2, 0xf, 0x9}], 0x10, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r15, 0x84, 0x6e, &(0x7f0000001040), 0x0) ioctl$FIONCLEX(r0, 0x5450) io_uring_enter(r15, 0x3fc0, 0x24f0, 0x4, &(0x7f0000001080)={[0x7ff]}, 0x8) writev(r13, &(0x7f0000002240)=[{&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="8535bba9c406695cc95cf3d15b4a65c64490cd9ce19f9fc4c4ccc52624a937754a1c3d8c2c12e6e9cbc48fcec150819e4f752c7d47f6", 0x36}, {&(0x7f0000002100)="b13f71c4387bbc8fbcb8e7d811ed3fef23689f56d630ed495ea49e667eac4b5c17fa3f163fbb6c8331160c56d39117152a519e133d993cd7f2e73c3a3a60bd4ccfc314235f3867df198b3ed52287ce22a14590da89836476cf4565e854e25d743e37204f4ba41ef51ebb5c9e5ecf1ca31c321729647ae1d6c7559ec1b359c3a2f1ff9486af68073d82", 0x89}, {&(0x7f00000021c0)="5e43a5197c4d7b65b87680fc3f7fc871c2cb1d0131051a408d0679a3fd6dc2515ee4a540", 0x24}, {&(0x7f0000002200)="6702cb312641a67d8ff53a10be8998c51f4587e4891dad0f", 0x18}], 0x5) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f00000022c0)={r5}, &(0x7f0000002300)=0x8) openat(r14, &(0x7f0000002340)='./file0\x00', 0x260000, 0x58) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000002380)=[@in6={0xa, 0x4e24, 0x7, @remote, 0xd}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0xc, @loopback, 0x9}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x80000001}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010100}], 0xb4) 317.651101ms ago: executing program 5 (id=2633): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) futex(0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) kexec_load(0xfffffffffffffffc, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}, {0x0, 0x0, 0x3e0000000000, 0x8000}], 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) sendmsg$unix(0xffffffffffffffff, 0x0, 0x44041) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) shutdown(r0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 4.602799ms ago: executing program 1 (id=2634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000021000100fcffffff00000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a0000005e0000004c2b606e7fb30ed8e9e615acee119770433935434c872132a9ae6e9ee3dba7aa0c5a774ddd7b94ffe01a734639ef4b0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000160000080000"], 0x50}, 0x1, 0x0, 0x0, 0x800c}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r2, 0x0, 0x100000000) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0xffffff57, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500000003000000000000", @ANYBLOB="94d60e0d7d91ba9be6a8fd087b7701f3cd9d72f3d87cb200398ea5e24c7ae78ee5fa00009f42929b6e", @ANYRES64=r5], 0x48}, 0x1, 0x0, 0x0, 0x20010014}, 0x4040080) r6 = socket$phonet(0x23, 0x2, 0x1) r7 = socket(0x25, 0x80805, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000000)={r10, 0x4, 0x3, 0x7, 0x7, 0x8000}, &(0x7f0000000080)=0x14) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file1\x00', 0x1000802, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x1600) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) 1.0336ms ago: executing program 1 (id=2635): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}}, 0x88) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x8048) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x10, 0x1, 0x70bd26, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0xf024, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x4c}}, 0x4000) 708.72µs ago: executing program 3 (id=2636): socketpair(0x18, 0x4, 0xa06b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r1 = msgget$private(0x0, 0x80) msgrcv(r1, 0x0, 0x0, 0x0, 0x2000) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x24, 0x8}, 0x0, 0x0, 0x4, 0x9, 0xe, 0x29, 0xea51d77, 0x0, 0x9, 0x1}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004040), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x4, 0x4) io_setup(0x6, &(0x7f0000000300)=0x0) io_getevents(r3, 0x2, 0x0, &(0x7f0000001340), 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) io_destroy(r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_destroy(r4) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="646973636172642c6e66732c646f74732c636865636b3d72656c63786570f8f04574732c6e6f646f74732c646973636172642c646f74732c00"], 0x1, 0x245, &(0x7f0000001200)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002a00)="f8", 0x1}], 0x1}}], 0x1, 0x40088c5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 0s ago: executing program 1 (id=2637): r0 = socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=""/279, 0x117}, {&(0x7f0000002a40)=""/4056, 0xfd8}, {&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f0000000680)=""/192, 0xc0}, {&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f00000000c0)=""/160, 0xa0}, {&(0x7f0000000740)=""/196, 0xc4}], 0x8}, 0x10182) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, &(0x7f0000000000)=0x4, 0x4) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) r5 = getpgrp(0x0) ptrace$poke(0x5, r5, &(0x7f0000000880), 0x5f7f) getsockopt$MRT6(r3, 0x29, 0xce, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000040), &(0x7f00000002c0)=r3}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="51ca689ac078dc350025eeb5874f090ca23dacda36831d0f0260266a23c1e9ec15d81dc5883812d24fdbf733dcf1e636f89bbda7403339b5901d4b2d98335a1a76ad846d3147921858a666b3f1fd316bd66b6622c7a46e6bdff53fa185694de562ba38dbd3d7e9067708bc5379ecdee9c9f04b40b5484ba97ebcc0c334af514a28bb438c5d09a41b7fc0771009ed8d72354e7a7b5aba3e", @ANYRES32=r9, @ANYBLOB="eb00000608000100000000000a0002000180c20000030000"], 0x30}}, 0x4000004) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000008c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000d00)=@newqdisc={0x2b4, 0x24, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x9, 0x3}, {0xffff, 0x11}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x27c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x2, 0x1, 0x1}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x39}, @TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x6, 0x6, 0x2, 0x1, 0x6, 0x16f4c85, 0x200, 0x1, 0x4, 0x14, 0x18, 0x1a, 0x9, 0x9, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}, @TCA_GRED_LIMIT={0x8, 0x5, 0xfe}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000080) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000840), 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x100010, r10, 0x7f0a7000) kernel console output (not intermixed with test programs): syz.1.1675': attribute type 4 has an invalid length. [ 143.359420][ T9437] veth1: entered promiscuous mode [ 143.367691][ T28] audit: type=1400 audit(1771518889.784:3808): avc: denied { checkpoint_restore } for pid=9432 comm="syz.6.1677" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.706190][ T9454] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 143.742389][ T9454] EXT4-fs (loop6): 1 truncate cleaned up [ 143.759470][ T9454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.132835][ T5149] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.200517][ T9467] __nla_validate_parse: 13 callbacks suppressed [ 144.200532][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1687'. [ 144.242713][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1687'. [ 144.267927][ T9467] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1687'. [ 144.326809][ T9469] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1688'. [ 144.423613][ T9479] batadv_slave_1: entered promiscuous mode [ 144.452271][ T9479] batadv_slave_1: left promiscuous mode [ 144.621847][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1694'. [ 144.776611][ T9497] netlink: 'syz.1.1697': attribute type 6 has an invalid length. [ 144.788762][ T9497] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1697'. [ 145.297509][ T9510] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 145.304098][ T9510] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 145.343442][ T9510] vhci_hcd vhci_hcd.0: Device attached [ 145.359758][ T9511] vhci_hcd: connection closed [ 145.359925][ T8782] vhci_hcd vhci_hcd.6: stop threads [ 145.371737][ T8782] vhci_hcd vhci_hcd.6: release socket [ 145.380812][ T8782] vhci_hcd vhci_hcd.6: disconnect device [ 145.438768][ T9519] lo speed is unknown, defaulting to 1000 [ 146.843852][ T9551] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 146.868567][ T9551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1716'. [ 146.923929][ T9553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1717'. [ 146.984070][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 146.984086][ T28] audit: type=1400 audit(1771518893.170:3819): avc: denied { getopt } for pid=9556 comm="syz.1.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 147.411886][ T28] audit: type=1400 audit(1771518893.563:3820): avc: denied { read } for pid=9580 comm="syz.0.1728" path="socket:[23949]" dev="sockfs" ino=23949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.456841][ T9568] netlink: 'syz.1.1724': attribute type 13 has an invalid length. [ 147.468134][ T28] audit: type=1400 audit(1771518893.619:3821): avc: denied { lock } for pid=9580 comm="syz.0.1728" path="socket:[24790]" dev="sockfs" ino=24790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.528775][ T9588] set_capacity_and_notify: 1 callbacks suppressed [ 147.528790][ T9588] loop4: detected capacity change from 0 to 128 [ 147.558938][ T9588] 9p: Bad value for 'rfdno' [ 147.568249][ T7017] lo speed is unknown, defaulting to 1000 [ 147.568754][ T9585] net_ratelimit: 6 callbacks suppressed [ 147.568767][ T9585] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.596312][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.603558][ T9581] bridge0: port 1(1¾x9ÿ) entered disabled state [ 147.613835][ T9581] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 147.633425][ T9586] lo speed is unknown, defaulting to 1000 [ 147.691707][ T9591] 9p: Bad value for 'rfdno' [ 148.039012][ T9600] 9p: Bad value for 'wfdno' [ 148.107563][ T8779] bridge_slave_1: left allmulticast mode [ 148.113363][ T8779] bridge_slave_1: left promiscuous mode [ 148.119047][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.128564][ T8779] bridge_slave_0: left allmulticast mode [ 148.134843][ T8779] bridge_slave_0: left promiscuous mode [ 148.140747][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.164586][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1738'. [ 148.174144][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 148.183158][ T9618] netlink: 'syz.5.1738': attribute type 12 has an invalid length. [ 148.224924][ T8779] team0: Port device geneve1 removed [ 148.232285][ T28] audit: type=1326 audit(1771518894.339:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9617 comm="syz.5.1738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x0 [ 148.359932][ T8779] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 148.424152][ T8779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.433938][ T8779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.443063][ T8779] bond0 (unregistering): Released all slaves [ 148.451375][ T8779] bond1 (unregistering): Released all slaves [ 148.459579][ T8779] bond2 (unregistering): Released all slaves [ 148.481073][ T9596] lo speed is unknown, defaulting to 1000 [ 148.491543][ T9621] lo speed is unknown, defaulting to 1000 [ 148.500601][ T8779] tipc: Left network mode [ 148.506824][ T8779] IPVS: stopping backup sync thread 6714 ... [ 148.519709][ T8779] hsr_slave_0: left promiscuous mode [ 148.525306][ T8779] hsr_slave_1: left promiscuous mode [ 148.531744][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.539542][ T8779] batman_adv: batadv0: Removing interface: ipvlan2 [ 148.554635][ T8779] team0 (unregistering): Port device macvlan1 removed [ 148.574932][ T8779] team0 (unregistering): Port device team_slave_1 removed [ 148.585166][ T8779] team0 (unregistering): Port device team_slave_0 removed [ 148.646668][ T9596] chnl_net:caif_netlink_parms(): no params data found [ 148.679677][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.686843][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.694219][ T9596] bridge_slave_0: entered allmulticast mode [ 148.701143][ T9596] bridge_slave_0: entered promiscuous mode [ 148.707725][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.714996][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.722270][ T9596] bridge_slave_1: entered allmulticast mode [ 148.728904][ T9596] bridge_slave_1: entered promiscuous mode [ 148.744691][ T9596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.754958][ T9596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.773427][ T9596] team0: Port device team_slave_0 added [ 148.780237][ T9596] team0: Port device team_slave_1 added [ 148.795434][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.802421][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.828430][ T9596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.840134][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.847148][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.873281][ T9596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.897955][ T9596] hsr_slave_0: entered promiscuous mode [ 148.904047][ T9596] hsr_slave_1: entered promiscuous mode [ 148.909896][ T9596] debugfs: 'hsr0' already exists in 'hsr' [ 148.915636][ T9596] Cannot create hsr debugfs directory [ 149.385026][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 149.558793][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1742'. [ 150.509877][ T9574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.521932][ T9596] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.565490][ T9658] bond2: entered promiscuous mode [ 150.570732][ T9658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.588197][ T9596] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 150.604568][ T9668] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1749'. [ 150.910198][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1753'. [ 150.940655][ T9596] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 150.961430][ T9596] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.072252][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1755'. [ 151.073068][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.096869][ T9596] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.107691][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.114958][ T8783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.153017][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.160157][ T8783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.249597][ T9596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.440292][ T9596] veth0_vlan: entered promiscuous mode [ 151.461379][ T9596] veth1_vlan: entered promiscuous mode [ 151.523366][ T9596] veth0_macvtap: entered promiscuous mode [ 151.540152][ T9596] veth1_macvtap: entered promiscuous mode [ 151.567408][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.590147][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.628092][ T8783] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.647079][ T8783] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.663151][ T8783] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.695146][ T8783] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.858471][ T9786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1764'. [ 151.936679][ T9790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1765'. [ 151.962638][ T9790] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1765'. [ 151.996369][ T9790] lo speed is unknown, defaulting to 1000 [ 152.016628][ T9790] lo speed is unknown, defaulting to 1000 [ 152.034932][ T9790] lo speed is unknown, defaulting to 1000 [ 152.060294][ T9790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 152.067962][ T9793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1766'. [ 152.116631][ T9793] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1766'. [ 152.159065][ T9790] lo speed is unknown, defaulting to 1000 [ 152.166669][ T9790] lo speed is unknown, defaulting to 1000 [ 152.182992][ T9790] lo speed is unknown, defaulting to 1000 [ 152.231657][ T9790] lo speed is unknown, defaulting to 1000 [ 152.236809][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'. [ 152.249485][ T9790] lo speed is unknown, defaulting to 1000 [ 152.450857][ T28] audit: type=1400 audit(1771518898.277:3823): avc: denied { execheap } for pid=9819 comm="syz.1.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 152.520014][ T28] audit: type=1400 audit(1771518898.343:3824): avc: denied { connect } for pid=9830 comm="syz.6.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 152.544959][ T9831] loop6: detected capacity change from 0 to 1024 [ 152.554773][ T9833] netlink: 'syz.1.1777': attribute type 19 has an invalid length. [ 152.570292][ T9831] EXT4-fs (loop6): blocks per group (131072) and clusters per group (8192) inconsistent [ 152.608085][ T9837] loop7: detected capacity change from 0 to 1024 [ 152.611347][ T9833] netlink: 'syz.1.1777': attribute type 19 has an invalid length. [ 152.639415][ T28] audit: type=1400 audit(1771518898.455:3825): avc: denied { ioctl } for pid=9838 comm="syz.5.1779" path="socket:[25908]" dev="sockfs" ino=25908 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.694815][ T9837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.716956][ T9837] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4224: comm syz.7.1780: Allocating blocks 385-513 which overlap fs metadata [ 152.748469][ T9836] EXT4-fs (loop7): pa ffff888107e7ef50: logic 16777216, phys. 129, len 24 [ 152.757056][ T9836] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5467: group 0, free 0, pa_free 8 [ 152.816217][ T28] audit: type=1326 audit(1771518898.614:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9849 comm="syz.6.1782" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed5638c629 code=0x0 [ 152.904259][ T9596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.975260][ T9858] lo speed is unknown, defaulting to 1000 [ 152.985831][ T9860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9860 comm=syz.1.1785 [ 153.003755][ T28] audit: type=1400 audit(1771518898.773:3827): avc: denied { read } for pid=9859 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 153.031117][ T9858] lo speed is unknown, defaulting to 1000 [ 153.116599][ T9866] loop7: detected capacity change from 0 to 512 [ 153.161240][ T9866] EXT4-fs: Mount option(s) incompatible with ext2 [ 153.300842][ T9874] lo speed is unknown, defaulting to 1000 [ 153.340326][ T9874] lo speed is unknown, defaulting to 1000 [ 153.783763][ T9902] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.795636][ T9902] SET target dimension over the limit! [ 154.028929][ T9912] hub 9-0:1.0: USB hub found [ 154.033676][ T9912] hub 9-0:1.0: 8 ports detected [ 154.311867][ T9924] 9p: Bad value for 'rfdno' [ 154.651504][ T28] audit: type=1326 audit(1771518900.335:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 154.722344][ T28] audit: type=1326 audit(1771518900.335:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 154.789685][ T28] audit: type=1326 audit(1771518900.335:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 154.796909][ T9963] 9p: Bad value for 'rfdno' [ 154.845251][ T28] audit: type=1326 audit(1771518900.335:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 154.876451][ T28] audit: type=1326 audit(1771518900.335:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9957 comm="syz.5.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 154.945289][ T9967] erspan0: left promiscuous mode [ 154.974308][ T9967] team0: left promiscuous mode [ 154.985062][ T9967] macvlan1: left promiscuous mode [ 155.021645][ T9967] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 155.396839][ T9974] __nla_validate_parse: 4 callbacks suppressed [ 155.396854][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 155.412064][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 155.453714][ T9977] tmpfs: Bad value for 'mpol' [ 155.464402][ T8775] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.791586][ T9987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.809440][ T7001] lo speed is unknown, defaulting to 1000 [ 155.815520][ T7001] syz0: Port: 1 Link DOWN [ 155.881297][ T9995] netlink: 'syz.1.1826': attribute type 3 has an invalid length. [ 155.890027][ T9995] netlink: 'syz.1.1826': attribute type 3 has an invalid length. [ 155.899630][ T9995] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 155.899977][ T9992] lo speed is unknown, defaulting to 1000 [ 155.916019][ T9995] bond3: entered promiscuous mode [ 155.923297][ T9995] bond3: entered allmulticast mode [ 155.930240][ T9995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.940597][ T9992] lo speed is unknown, defaulting to 1000 [ 156.031884][T10005] 9p: Bad value for 'rfdno' [ 156.118190][T10007] lo speed is unknown, defaulting to 1000 [ 156.136845][T10007] lo speed is unknown, defaulting to 1000 [ 156.259245][T10016] netlink: 'syz.5.1829': attribute type 39 has an invalid length. [ 156.667991][T10011] syz.5.1829 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 156.682194][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.5.1829 Tainted: G W syzkaller #0 PREEMPT(full) [ 156.682229][T10011] Tainted: [W]=WARN [ 156.682237][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.682250][T10011] Call Trace: [ 156.682325][T10011] [ 156.682335][T10011] __dump_stack+0x1d/0x30 [ 156.682365][T10011] dump_stack_lvl+0x95/0xd0 [ 156.682423][T10011] dump_stack+0x15/0x1b [ 156.682447][T10011] dump_header+0x80/0x240 [ 156.682473][T10011] oom_kill_process+0x295/0x350 [ 156.682497][T10011] out_of_memory+0x97d/0xb80 [ 156.682551][T10011] try_charge_memcg+0x62e/0xa10 [ 156.682588][T10011] obj_cgroup_charge_pages+0x23/0xc0 [ 156.682614][T10011] __memcg_kmem_charge_page+0x9e/0x170 [ 156.682683][T10011] __alloc_frozen_pages_noprof+0x18a/0x360 [ 156.682711][T10011] alloc_pages_mpol+0xb3/0x260 [ 156.682774][T10011] alloc_pages_noprof+0x8f/0x130 [ 156.682798][T10011] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 156.682832][T10011] __kvmalloc_node_noprof+0x3d4/0x650 [ 156.682879][T10011] ? ip_set_alloc+0x24/0x30 [ 156.682901][T10011] ? ip_set_alloc+0x24/0x30 [ 156.682923][T10011] ? __kmalloc_cache_noprof+0x18a/0x410 [ 156.683000][T10011] ip_set_alloc+0x24/0x30 [ 156.683022][T10011] hash_netiface_create+0x282/0x740 [ 156.683055][T10011] ? __pfx_hash_netiface_create+0x10/0x10 [ 156.683116][T10011] ip_set_create+0x3cf/0x970 [ 156.683186][T10011] ? __nla_parse+0x40/0x60 [ 156.683254][T10011] nfnetlink_rcv_msg+0x509/0x5d0 [ 156.683294][T10011] netlink_rcv_skb+0x123/0x220 [ 156.683322][T10011] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 156.683419][T10011] nfnetlink_rcv+0x167/0x1720 [ 156.683445][T10011] ? merge_sched_in+0x5d4/0xc70 [ 156.683468][T10011] ? rb_next+0x5c/0x80 [ 156.683554][T10011] ? perf_trace_run_bpf_submit+0xac/0x110 [ 156.683588][T10011] ? perf_trace_kmem_cache_alloc+0x179/0x1c0 [ 156.683655][T10011] ? selinux_nlmsg_lookup+0x99/0x890 [ 156.683684][T10011] ? __rcu_read_unlock+0x33/0x70 [ 156.683703][T10011] ? __netlink_lookup+0x276/0x2b0 [ 156.683740][T10011] netlink_unicast+0x5c0/0x690 [ 156.683789][T10011] netlink_sendmsg+0x5c8/0x6f0 [ 156.683818][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.683841][T10011] ____sys_sendmsg+0x5af/0x600 [ 156.683890][T10011] ___sys_sendmsg+0x195/0x1e0 [ 156.684008][T10011] __x64_sys_sendmsg+0xd4/0x160 [ 156.684053][T10011] x64_sys_call+0x194c/0x3020 [ 156.684084][T10011] do_syscall_64+0x12c/0x370 [ 156.684143][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.684188][T10011] RIP: 0033:0x7f60e2bfc629 [ 156.684210][T10011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.684282][T10011] RSP: 002b:00007f60e1657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.684301][T10011] RAX: ffffffffffffffda RBX: 00007f60e2e75fa0 RCX: 00007f60e2bfc629 [ 156.684314][T10011] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 156.684326][T10011] RBP: 00007f60e2c92b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.684341][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.684356][T10011] R13: 00007f60e2e76038 R14: 00007f60e2e75fa0 R15: 00007ffe96fbfff8 [ 156.684430][T10011] [ 156.684472][T10011] memory: usage 307200kB, limit 307200kB, failcnt 4031 [ 157.007224][T10011] memory+swap: usage 309420kB, limit 9007199254740988kB, failcnt 0 [ 157.015189][T10011] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 157.027750][T10011] Memory cgroup stats for /syz5: [ 157.027985][T10011] cache 0 [ 157.036772][T10011] rss 0 [ 157.040116][T10011] shmem 0 [ 157.043104][T10011] mapped_file 0 [ 157.046744][T10011] dirty 0 [ 157.050053][T10011] writeback 0 [ 157.053393][T10011] workingset_refault_anon 870 [ 157.058296][T10011] workingset_refault_file 0 [ 157.063092][T10011] swap 2273280 [ 157.066578][T10011] swapcached 8540160 [ 157.070915][T10011] pgpgin 216910 [ 157.074647][T10011] pgpgout 216908 [ 157.078205][T10011] pgfault 216611 [ 157.083316][T10011] pgmajfault 173 [ 157.086916][T10011] inactive_anon 0 [ 157.090910][T10011] active_anon 8192 [ 157.094890][T10011] inactive_file 0 [ 157.098557][T10011] active_file 0 [ 157.102080][T10011] unevictable 0 [ 157.105736][T10011] hierarchical_memory_limit 314572800 [ 157.111157][T10011] hierarchical_memsw_limit 9223372036854771712 [ 157.118084][T10011] total_cache 0 [ 157.121541][T10011] total_rss 0 [ 157.124958][T10011] total_shmem 0 [ 157.128530][T10011] total_mapped_file 0 [ 157.132527][T10011] total_dirty 0 [ 157.147669][T10011] total_writeback 0 [ 157.151749][T10011] total_workingset_refault_anon 870 [ 157.159052][T10011] total_workingset_refault_file 0 [ 157.161156][T10072] FAULT_INJECTION: forcing a failure. [ 157.161156][T10072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.164149][T10011] total_swap 2273280 [ 157.164159][T10011] total_swapcached 8540160 [ 157.164168][T10011] total_pgpgin 236067 [ 157.177539][T10072] CPU: 1 UID: 0 PID: 10072 Comm: syz.6.1846 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.177611][T10072] Tainted: [W]=WARN [ 157.177618][T10072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.177630][T10072] Call Trace: [ 157.177637][T10072] [ 157.177645][T10072] __dump_stack+0x1d/0x30 [ 157.177671][T10072] dump_stack_lvl+0x95/0xd0 [ 157.177694][T10072] dump_stack+0x15/0x1b [ 157.177722][T10072] should_fail_ex+0x263/0x280 [ 157.177750][T10072] should_fail+0xb/0x20 [ 157.177769][T10072] should_fail_usercopy+0x1a/0x20 [ 157.177792][T10072] _copy_from_user+0x1c/0xb0 [ 157.177823][T10072] do_replace+0x8a/0x360 [ 157.177862][T10072] do_ebt_set_ctl+0x12e/0xcd0 [ 157.177891][T10072] ? __rcu_read_unlock+0x4e/0x70 [ 157.177914][T10072] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 157.177940][T10072] ? ip4_datagram_release_cb+0x3ee/0x420 [ 157.177969][T10072] ? _raw_spin_unlock_bh+0x18/0x20 [ 157.177990][T10072] ? release_sock+0x116/0x150 [ 157.178091][T10072] ? sockopt_release_sock+0x41/0x50 [ 157.178114][T10072] ? do_ip_setsockopt+0x1af1/0x2290 [ 157.178136][T10072] nf_setsockopt+0x199/0x1b0 [ 157.178230][T10072] ip_setsockopt+0x102/0x110 [ 157.178323][T10072] sock_common_setsockopt+0x69/0x80 [ 157.178379][T10072] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 157.178450][T10072] __sys_setsockopt+0x184/0x200 [ 157.178476][T10072] __x64_sys_setsockopt+0x64/0x80 [ 157.178501][T10072] x64_sys_call+0x2327/0x3020 [ 157.178548][T10072] do_syscall_64+0x12c/0x370 [ 157.178581][T10072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.178603][T10072] RIP: 0033:0x7fed5638c629 [ 157.178619][T10072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.178657][T10072] RSP: 002b:00007fed54de7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.178678][T10072] RAX: ffffffffffffffda RBX: 00007fed56605fa0 RCX: 00007fed5638c629 [ 157.178693][T10072] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 157.178738][T10072] RBP: 00007fed54de7090 R08: 0000000000000138 R09: 0000000000000000 [ 157.178757][T10072] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 157.178771][T10072] R13: 00007fed56606038 R14: 00007fed56605fa0 R15: 00007ffca941e548 [ 157.178790][T10072] [ 157.355496][T10085] loop6: detected capacity change from 0 to 2048 [ 157.373142][T10011] total_pgpgout 236065 [ 157.413490][T10085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.414700][T10011] total_pgfault 217438 [ 157.454925][T10011] total_pgmajfault 173 [ 157.459251][T10011] total_inactive_anon 0 [ 157.463396][T10011] total_active_anon 8192 [ 157.467750][T10011] total_inactive_file 0 [ 157.471895][T10011] total_active_file 0 [ 157.475879][T10011] total_unevictable 0 [ 157.480615][T10011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.586,pid=5820,uid=0 [ 157.496580][T10011] Memory cgroup out of memory: Killed process 5820 (syz.5.586) total-vm:96076kB, anon-rss:1220kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 157.553935][T10090] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 157.564032][T10011] syz.5.1829 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 157.584605][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.5.1829 Tainted: G W syzkaller #0 PREEMPT(full) [ 157.584688][T10011] Tainted: [W]=WARN [ 157.584696][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 157.584709][T10011] Call Trace: [ 157.584717][T10011] [ 157.584725][T10011] __dump_stack+0x1d/0x30 [ 157.584751][T10011] dump_stack_lvl+0x95/0xd0 [ 157.584823][T10011] dump_stack+0x15/0x1b [ 157.584846][T10011] dump_header+0x80/0x240 [ 157.584869][T10011] oom_kill_process+0x295/0x350 [ 157.584889][T10011] out_of_memory+0x97d/0xb80 [ 157.584974][T10011] try_charge_memcg+0x62e/0xa10 [ 157.585011][T10011] obj_cgroup_charge_pages+0x23/0xc0 [ 157.585036][T10011] __memcg_kmem_charge_page+0x9e/0x170 [ 157.585093][T10011] __alloc_frozen_pages_noprof+0x18a/0x360 [ 157.585181][T10011] alloc_pages_mpol+0xb3/0x260 [ 157.585208][T10011] alloc_pages_noprof+0x8f/0x130 [ 157.585337][T10011] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 157.585369][T10011] __kvmalloc_node_noprof+0x3d4/0x650 [ 157.585392][T10011] ? ip_set_alloc+0x24/0x30 [ 157.585419][T10011] ? ip_set_alloc+0x24/0x30 [ 157.585418][T10090] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 432 with error 28 [ 157.585445][T10011] ? __kmalloc_cache_noprof+0x18a/0x410 [ 157.585472][T10011] ip_set_alloc+0x24/0x30 [ 157.585562][T10011] hash_netiface_create+0x282/0x740 [ 157.585669][T10011] ? __pfx_hash_netiface_create+0x10/0x10 [ 157.585695][T10011] ip_set_create+0x3cf/0x970 [ 157.585731][T10011] ? __nla_parse+0x40/0x60 [ 157.585757][T10011] nfnetlink_rcv_msg+0x509/0x5d0 [ 157.585827][T10011] netlink_rcv_skb+0x123/0x220 [ 157.585854][T10011] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 157.585882][T10011] nfnetlink_rcv+0x167/0x1720 [ 157.585912][T10011] ? merge_sched_in+0x5d4/0xc70 [ 157.585980][T10011] ? rb_next+0x5c/0x80 [ 157.586009][T10011] ? perf_trace_run_bpf_submit+0xac/0x110 [ 157.586040][T10011] ? perf_trace_kmem_cache_alloc+0x179/0x1c0 [ 157.586074][T10011] ? selinux_nlmsg_lookup+0x99/0x890 [ 157.586131][T10011] ? __rcu_read_unlock+0x33/0x70 [ 157.586153][T10011] ? __netlink_lookup+0x276/0x2b0 [ 157.586184][T10011] netlink_unicast+0x5c0/0x690 [ 157.586251][T10011] netlink_sendmsg+0x5c8/0x6f0 [ 157.586352][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.586434][T10011] ____sys_sendmsg+0x5af/0x600 [ 157.586465][T10011] ___sys_sendmsg+0x195/0x1e0 [ 157.586535][T10011] __x64_sys_sendmsg+0xd4/0x160 [ 157.586566][T10011] x64_sys_call+0x194c/0x3020 [ 157.586592][T10011] do_syscall_64+0x12c/0x370 [ 157.586628][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.586665][T10011] RIP: 0033:0x7f60e2bfc629 [ 157.586681][T10011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.586701][T10011] RSP: 002b:00007f60e1657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.586782][T10011] RAX: ffffffffffffffda RBX: 00007f60e2e75fa0 RCX: 00007f60e2bfc629 [ 157.586796][T10011] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 157.586884][T10011] RBP: 00007f60e2c92b39 R08: 0000000000000000 R09: 0000000000000000 [ 157.586898][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.586911][T10011] R13: 00007f60e2e76038 R14: 00007f60e2e75fa0 R15: 00007ffe96fbfff8 [ 157.586932][T10011] [ 157.608994][T10011] memory: usage 307200kB, limit 307200kB, failcnt 4089 [ 157.634371][T10090] EXT4-fs (loop6): This should not happen!! Data will be lost [ 157.634371][T10090] [ 157.680454][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.686390][T10090] EXT4-fs (loop6): Total free blocks count 0 [ 157.949323][T10011] memory+swap: usage 308196kB, limit 9007199254740988kB, failcnt 0 [ 157.957219][T10011] kmem: usage 307068kB, limit 9007199254740988kB, failcnt 0 [ 157.968696][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 157.968709][ T28] audit: type=1400 audit(1771518903.441:3900): avc: denied { connect } for pid=10098 comm="syz.7.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.968852][T10011] Memory cgroup stats for /syz5: [ 157.969146][T10011] cache 0 [ 158.003404][T10090] EXT4-fs (loop6): Free/Dirty block details [ 158.009475][T10090] EXT4-fs (loop6): free_blocks=2415919504 [ 158.009495][T10090] EXT4-fs (loop6): dirty_blocks=8464 [ 158.009508][T10090] EXT4-fs (loop6): Block reservation details [ 158.009519][T10090] EXT4-fs (loop6): i_reserved_data_blocks=529 [ 158.062509][T10089] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1850'. [ 158.062535][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1850'. [ 158.081157][T10011] rss 8192 [ 158.081169][T10011] shmem 0 [ 158.081176][T10011] mapped_file 0 [ 158.081183][T10011] dirty 0 [ 158.081191][T10011] writeback 0 [ 158.081197][T10011] workingset_refault_anon 884 [ 158.081204][T10011] workingset_refault_file 0 [ 158.081211][T10011] swap 1019904 [ 158.081217][T10011] swapcached 8540160 [ 158.081256][T10011] pgpgin 216924 [ 158.081342][T10011] pgpgout 216916 [ 158.081349][T10011] pgfault 216624 [ 158.081357][T10011] pgmajfault 186 [ 158.081364][T10011] inactive_anon 0 [ 158.081370][T10011] active_anon 32768 [ 158.081376][T10011] inactive_file 0 [ 158.081444][T10011] active_file 0 [ 158.081451][T10011] unevictable 0 [ 158.081459][T10011] hierarchical_memory_limit 314572800 [ 158.081468][T10011] hierarchical_memsw_limit 9223372036854771712 [ 158.081545][T10011] total_cache 0 [ 158.081553][T10011] total_rss 8192 [ 158.081559][T10011] total_shmem 0 [ 158.081565][T10011] total_mapped_file 0 [ 158.081572][T10011] total_dirty 0 [ 158.081578][T10011] total_writeback 0 [ 158.081585][T10011] total_workingset_refault_anon 884 [ 158.081592][T10011] total_workingset_refault_file 0 [ 158.081600][T10011] total_swap 1019904 [ 158.081606][T10011] total_swapcached 8540160 [ 158.081613][T10011] total_pgpgin 236081 [ 158.081677][T10011] total_pgpgout 236073 [ 158.081684][T10011] total_pgfault 217451 [ 158.081691][T10011] total_pgmajfault 186 [ 158.081698][T10011] total_inactive_anon 0 [ 158.081706][T10011] total_active_anon 32768 [ 158.081715][T10011] total_inactive_file 0 [ 158.081721][T10011] total_active_file 0 [ 158.081728][T10011] total_unevictable 0 [ 158.081735][T10011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1829,pid=10010,uid=0 [ 158.081904][T10011] Memory cgroup out of memory: Killed process 10010 (syz.5.1829) total-vm:96340kB, anon-rss:1236kB, file-rss:22700kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 158.134151][T10105] loop7: detected capacity change from 0 to 8192 [ 158.302785][ T28] audit: type=1400 audit(1771518903.759:3901): avc: denied { unlink } for pid=5149 comm="syz-executor" name="file1" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 158.355052][T10107] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 158.362682][T10095] xt_limit: Overflow, try lower: 65536/2147483648 [ 158.362914][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1852'. [ 158.702439][T10124] lo speed is unknown, defaulting to 1000 [ 158.709640][T10124] lo speed is unknown, defaulting to 1000 [ 158.852481][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1865'. [ 158.891077][T10124] chnl_net:caif_netlink_parms(): no params data found [ 158.989027][T10124] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.996749][T10124] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.003995][T10124] bridge_slave_0: entered allmulticast mode [ 159.010453][T10124] bridge_slave_0: entered promiscuous mode [ 159.017633][T10124] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.024716][T10124] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.032777][T10124] bridge_slave_1: entered allmulticast mode [ 159.039451][T10124] bridge_slave_1: entered promiscuous mode [ 159.056644][T10124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.068002][T10124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.093233][T10124] team0: Port device team_slave_0 added [ 159.099927][T10124] team0: Port device team_slave_1 added [ 159.118653][T10124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.130497][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.158225][T10124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.177623][T10124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.184893][T10124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.213791][T10124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.260859][T10174] lo: entered allmulticast mode [ 159.288918][T10124] hsr_slave_0: entered promiscuous mode [ 159.295117][T10124] hsr_slave_1: entered promiscuous mode [ 159.301220][T10124] debugfs: 'hsr0' already exists in 'hsr' [ 159.307110][T10124] Cannot create hsr debugfs directory [ 159.432626][T10124] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 159.448182][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1879'. [ 159.457725][T10124] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 159.458691][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 159.475183][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1879'. [ 159.475956][T10124] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 159.495924][T10185] netlink: 26 bytes leftover after parsing attributes in process `syz.5.1879'. [ 159.505821][T10180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.524083][T10124] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 159.554021][T10180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.594474][T10200] bond4: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 159.610351][T10200] bond4 (unregistering): Released all slaves [ 159.620221][T10180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.645826][T10209] lo speed is unknown, defaulting to 1000 [ 159.654916][T10209] lo speed is unknown, defaulting to 1000 [ 159.677318][T10213] netlink: 'syz.1.1884': attribute type 1 has an invalid length. [ 159.679749][T10124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.698103][T10213] bond4: entered promiscuous mode [ 159.703424][T10213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.720378][T10180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.740623][T10213] bond4: (slave bridge1): making interface the new active one [ 159.748211][T10213] bridge1: entered promiscuous mode [ 159.755316][T10213] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 159.767317][T10124] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.779306][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.786514][ T8766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.800360][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.807455][ T8782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.828495][ T8779] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.841172][ T8779] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.860597][ T8783] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.881832][ T8783] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.917686][T10124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.928962][T10124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.986597][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.215277][ T28] audit: type=1400 audit(1771518905.527:3902): avc: denied { write } for pid=10222 comm="syz.1.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.379133][ T28] audit: type=1400 audit(1771518905.686:3903): avc: denied { setopt } for pid=10238 comm="syz.0.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 160.501192][T10256] pimreg: entered allmulticast mode [ 160.514326][T10265] loop7: detected capacity change from 0 to 512 [ 160.528703][T10265] EXT4-fs (loop7): orphan cleanup on readonly fs [ 160.542936][T10265] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #11: block 1: comm syz.7.1895: lblock 0 mapped to illegal pblock 1 (length 1) [ 160.557717][T10124] veth0_vlan: entered promiscuous mode [ 160.563177][T10265] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.563464][T10265] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 160.567970][T10124] veth1_vlan: entered promiscuous mode [ 160.572602][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 160.597343][T10124] veth0_macvtap: entered promiscuous mode [ 160.597429][ C1] EXT4-fs (loop7): initial error at time 1771518905: ext4_map_blocks:776: inode 11: block 1 [ 160.606175][T10124] veth1_macvtap: entered promiscuous mode [ 160.613250][ C1] EXT4-fs (loop7): last error at time 1771518905: ext4_map_blocks:776: inode 11: block 1 [ 160.625182][T10124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.642409][T10124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.650858][T10265] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.1895: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 160.651566][T10269] bond1: up delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 160.667335][T10265] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 160.677577][T10265] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.1895: ea_inode dec ref err=-117 [ 160.700981][T10273] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.701681][T10265] EXT4-fs (loop7): 1 orphan inode deleted [ 160.715505][T10273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.719524][T10265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.741653][T10255] pimreg: left allmulticast mode [ 160.762262][ T8783] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.777433][ T8783] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.786771][ T8783] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.797793][ T8783] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.852550][ T9596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.864594][T10281] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 160.915497][T10286] netlink: 'syz.5.1902': attribute type 1 has an invalid length. [ 160.928990][T10285] loop7: detected capacity change from 0 to 4096 [ 161.004155][T10286] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 161.023551][T10285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.036946][T10286] veth7: entered promiscuous mode [ 161.045800][T10286] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 161.060254][T10286] __nla_validate_parse: 2 callbacks suppressed [ 161.060270][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1902'. [ 161.076116][ T8782] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 161.087266][T10286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.102446][T10298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.127171][ T28] audit: type=1400 audit(1771518906.397:3904): avc: denied { create } for pid=10294 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 161.207514][ T9596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.216686][ T8782] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 161.326024][ T6998] IPVS: starting estimator thread 0... [ 161.349912][T10312] loop7: detected capacity change from 0 to 1024 [ 161.399600][T10312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.412325][T10312] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.424376][T10310] IPVS: using max 2448 ests per chain, 122400 per kthread [ 161.461619][T10321] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1911'. [ 161.777287][T10297] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 161.827632][T10321] loop8: detected capacity change from 0 to 1024 [ 161.864297][ T9596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.920681][ T28] audit: type=1326 audit(1771518907.136:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10333 comm="syz.7.1913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02223bc629 code=0x7ffc0000 [ 161.956883][T10321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.995087][T10124] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.011633][T10345] loop7: detected capacity change from 0 to 1024 [ 162.024903][T10347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.032177][T10347] IPv6: NLM_F_CREATE should be set when creating new route [ 162.039398][T10347] IPv6: NLM_F_CREATE should be set when creating new route [ 162.046628][T10347] IPv6: NLM_F_CREATE should be set when creating new route [ 162.054279][T10345] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.074594][T10347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.082511][T10345] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.1915: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 162.103570][T10347] 9pnet_fd: p9_fd_create_unix (10347): problem connecting socket: éq‰Y’3aK: -111 [ 162.113406][ T28] audit: type=1400 audit(1771518907.304:3906): avc: denied { create } for pid=10346 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 162.127418][T10345] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 162.133935][ T28] audit: type=1400 audit(1771518907.304:3907): avc: denied { mounton } for pid=10346 comm="syz.5.1917" path=2F3338312FE91F7189591E9233614B dev="tmpfs" ino=2033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 162.143054][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 162.143076][ C1] EXT4-fs (loop7): initial error at time 1771518907: ext4_ext_check_inode:521: inode 3 [ 162.143102][ C1] EXT4-fs (loop7): last error at time 1771518907: ext4_ext_check_inode:521: inode 3 [ 162.149118][T10345] EXT4-fs error (device loop7): ext4_quota_enable:7197: comm syz.7.1915: Bad quota inode: 3, type: 0 [ 162.195049][ T28] audit: type=1400 audit(1771518907.397:3908): avc: denied { create } for pid=10348 comm="syz.8.1916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 162.231985][T10345] loop7: lost filesystem error report for type 5 error -117 [ 162.236214][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1916'. [ 162.252813][T10345] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 162.282471][T10345] EXT4-fs (loop7): mount failed [ 162.290677][ T28] audit: type=1400 audit(1771518907.435:3909): avc: denied { setopt } for pid=10348 comm="syz.8.1916" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 162.429225][T10374] loop7: detected capacity change from 0 to 1764 [ 162.629278][T10381] netlink: 'syz.0.1926': attribute type 32 has an invalid length. [ 162.648691][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1926'. [ 162.682342][T10381] bond3: Setting coupled_control to off (0) [ 162.799405][T10379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10379 comm=syz.0.1926 [ 163.089488][T10410] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 163.417062][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 163.417076][ T28] audit: type=1400 audit(1771518908.539:3915): avc: denied { setattr } for pid=10415 comm="syz.7.1934" name="secretmem" dev="secretmem" ino=27467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.503492][ T28] audit: type=1326 audit(1771518908.585:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 163.540906][T10430] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 163.573174][ T28] audit: type=1326 audit(1771518908.585:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 163.638149][ T28] audit: type=1326 audit(1771518908.585:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60e2bbcece code=0x7ffc0000 [ 163.652420][T10444] hub 8-0:1.0: USB hub found [ 163.684376][T10444] hub 8-0:1.0: 8 ports detected [ 163.686964][T10447] veth0_vlan: entered allmulticast mode [ 163.698151][ T28] audit: type=1326 audit(1771518908.585:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 163.733257][T10450] veth0_vlan: left promiscuous mode [ 163.736353][T10439] netlink: 'syz.0.1935': attribute type 10 has an invalid length. [ 163.738908][T10450] veth0_vlan: entered promiscuous mode [ 163.863276][ T28] audit: type=1326 audit(1771518908.585:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 163.891784][ T28] audit: type=1326 audit(1771518908.585:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 163.977389][ T28] audit: type=1326 audit(1771518908.585:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 164.074328][ T28] audit: type=1326 audit(1771518908.585:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 164.120967][ T28] audit: type=1326 audit(1771518908.585:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10425 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e2bfc629 code=0x7ffc0000 [ 164.592388][T10517] loop7: detected capacity change from 0 to 256 [ 164.599248][T10517] vfat: Bad value for 'utf8' [ 164.617541][T10517] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1956'. [ 164.650486][T10478] loop8: detected capacity change from 0 to 32768 [ 164.737833][ T4351] loop8: p1 p3 < > [ 164.767259][T10478] loop8: p1 p3 < > [ 164.845118][T10555] loop7: detected capacity change from 0 to 1024 [ 164.870143][T10555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 164.890468][T10555] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.903069][T10555] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 164.911412][T10555] EXT4-fs (loop7): orphan cleanup on readonly fs [ 164.918549][T10555] EXT4-fs error (device loop7): ext4_free_blocks:6726: comm syz.7.1962: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.932217][T10555] loop7: lost filesystem error report for type 5 error -117 [ 164.933595][T10555] EXT4-fs (loop7): Remounting filesystem read-only [ 164.940919][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 164.940937][ C1] EXT4-fs (loop7): initial error at time 1771518909: ext4_free_blocks:6726 [ 164.940956][ C1] EXT4-fs (loop7): last error at time 1771518909: ext4_free_blocks:6726 [ 164.972356][T10555] EXT4-fs (loop7): 1 orphan inode deleted [ 164.981865][T10555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.080290][ T9596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.110985][T10575] 9p: Bad value for 'rfdno' [ 165.138694][ T4351] udevd[4351]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 165.143915][ T3550] udevd[3550]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 165.300873][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1971'. [ 165.411003][T10585] loop7: detected capacity change from 0 to 1024 [ 165.418309][T10585] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.660992][T10591] Invalid argument reading file caps for ./file0 [ 165.731890][T10585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 165.740006][T10585] System zones: 0-1, 3-36 [ 165.746911][T10585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.826396][T10602] syz_tun: entered allmulticast mode [ 166.488809][ T9596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.628787][T10649] lo speed is unknown, defaulting to 1000 [ 167.635063][T10649] lo speed is unknown, defaulting to 1000 [ 167.858345][T10665] tipc: Enabling of bearer rejected, failed to enable media [ 168.136203][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1996'. [ 168.290615][T10696] dvmrp0: entered allmulticast mode [ 168.355425][T10700] dvmrp0: left allmulticast mode [ 168.402284][T10702] loop8: detected capacity change from 0 to 512 [ 168.450045][T10702] EXT4-fs (loop8): 1 truncate cleaned up [ 168.490820][T10702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.505682][T10702] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2004: bg 0: block 465: padding at end of block bitmap is not set [ 168.553194][T10702] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 168.627086][T10699] team0: No ports can be present during mode change [ 168.637174][T10714] loop7: detected capacity change from 0 to 2048 [ 168.644787][T10702] EXT4-fs (loop8): This should not happen!! Data will be lost [ 168.644787][T10702] [ 168.659880][T10714] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 168.671065][T10702] EXT4-fs (loop8): Total free blocks count 0 [ 168.677141][T10702] EXT4-fs (loop8): Free/Dirty block details [ 168.683502][T10702] EXT4-fs (loop8): free_blocks=0 [ 168.688484][T10702] EXT4-fs (loop8): dirty_blocks=12 [ 168.693867][T10702] EXT4-fs (loop8): Block reservation details [ 168.699992][T10702] EXT4-fs (loop8): i_reserved_data_blocks=12 [ 168.709003][T10714] RDS: rds_bind could not find a transport for cff:ffff:800::, load rds_tcp or rds_rdma? [ 168.903412][T10727] syzkaller0: entered promiscuous mode [ 168.909203][T10727] syzkaller0: entered allmulticast mode [ 168.963123][T10124] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.994334][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'. [ 169.022937][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 169.022953][ T28] audit: type=1326 audit(1771518913.777:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.053582][ T28] audit: type=1326 audit(1771518913.777:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.077892][ T28] audit: type=1326 audit(1771518913.814:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.101797][ T28] audit: type=1326 audit(1771518913.814:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.129839][T10743] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2017'. [ 169.140275][ T28] audit: type=1326 audit(1771518913.814:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.165787][ T28] audit: type=1326 audit(1771518913.814:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.189790][ T28] audit: type=1326 audit(1771518913.814:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.216783][ T28] audit: type=1326 audit(1771518913.814:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.242583][ T28] audit: type=1326 audit(1771518913.917:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10739 comm="syz.8.2015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 169.332520][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2023'. [ 169.414061][T10776] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2026'. [ 169.521210][ T28] audit: type=1326 audit(1771518914.245:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10786 comm="syz.1.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2699bcc629 code=0x7ffc0000 [ 169.862173][T10802] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2035'. [ 169.981798][T10810] bond4: option arp_all_targets: invalid value (4194305) [ 169.994537][T10810] bond4 (unregistering): Released all slaves [ 170.024745][T10815] loop8: detected capacity change from 0 to 512 [ 170.064499][T10815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.077211][T10815] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.101343][T10124] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.161792][T10833] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2044'. [ 170.176738][T10833] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2044'. [ 170.193049][T10839] loop8: detected capacity change from 0 to 128 [ 170.336726][T10847] loop8: detected capacity change from 0 to 512 [ 170.352045][T10847] EXT4-fs warning (device loop8): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.358633][T10842] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2045'. [ 170.379676][T10847] EXT4-fs (loop8): mount failed [ 170.435789][T10847] loop8: detected capacity change from 0 to 1024 [ 170.453093][T10847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.557490][T10860] 9p: Bad value for 'rfdno' [ 170.961370][T10884] loop7: detected capacity change from 0 to 736 [ 171.217038][T10912] sctp: [Deprecated]: syz.5.2072 (pid 10912) Use of int in maxseg socket option. [ 171.217038][T10912] Use struct sctp_assoc_value instead [ 171.247783][T10913] Invalid argument reading file caps for ./file0 [ 171.303998][T10847] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.318356][T10920] : renamed from bond_slave_0 [ 172.128625][T10947] netlink: 'syz.5.2081': attribute type 1 has an invalid length. [ 172.214907][T10958] loop7: detected capacity change from 0 to 512 [ 172.231728][T10958] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 172.239670][T10958] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 172.247808][T10958] System zones: 0-1, 15-15, 18-18, 34-34 [ 172.253669][T10958] EXT4-fs (loop7): orphan cleanup on readonly fs [ 172.260078][T10958] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.274730][T10958] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 172.284055][T10958] EXT4-fs (loop7): 1 truncate cleaned up [ 172.290087][T10958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.348984][T10952] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2079'. [ 172.399196][T10973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10973 comm=syz.8.2089 [ 172.422493][T10974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10974 comm=syz.8.2089 [ 172.447648][ T9596] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.571154][T10989] netlink: 'syz.8.2095': attribute type 10 has an invalid length. [ 172.581712][T10989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.595882][T10989] ipvlan2: entered allmulticast mode [ 172.601292][T10989] vlan0: entered allmulticast mode [ 172.606529][T10989] veth0_vlan: entered allmulticast mode [ 172.638684][T10993] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.2098' sets config #1 [ 172.764586][T11011] loop8: detected capacity change from 0 to 128 [ 172.779836][T11011] /dev/loop8: Can't open blockdev [ 172.828466][T11022] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 173.076255][T11037] loop8: detected capacity change from 0 to 512 [ 173.121464][T11037] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2109: inode has both inline data and extents flags [ 173.166735][T11037] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 173.171062][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 173.186649][ C0] EXT4-fs (loop8): initial error at time 1771518917: ext4_orphan_get:1391: inode 15 [ 173.196083][ C0] EXT4-fs (loop8): last error at time 1771518917: ext4_orphan_get:1391: inode 15 [ 173.210164][T11037] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2109: couldn't read orphan inode 15 (err -117) [ 173.235479][T11055] lo speed is unknown, defaulting to 1000 [ 173.241740][T11055] lo speed is unknown, defaulting to 1000 [ 173.254856][T11037] loop8: lost filesystem error report for type 5 error -117 [ 173.255520][T11037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.417979][T10124] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.757624][T11104] syz.7.2131: attempt to access beyond end of device [ 173.757624][T11104] loop7: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 173.856336][T11118] netlink: 'syz.7.2134': attribute type 15 has an invalid length. [ 173.892080][T11118] set_capacity_and_notify: 1 callbacks suppressed [ 173.892096][T11118] loop7: detected capacity change from 0 to 1024 [ 173.929172][T11118] EXT4-fs: Ignoring removed orlov option [ 173.984415][T11118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.182753][T11147] syzkaller1: entered promiscuous mode [ 174.195274][T11147] syzkaller1: entered allmulticast mode [ 174.296140][T11130] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.351723][ T8783] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.448314][ T8783] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.551514][T11172] tipc: Enabling of bearer rejected, failed to enable media [ 174.580953][ T8783] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.630530][T11172] xt_connbytes: Forcing CT accounting to be enabled [ 174.638108][T11172] set match dimension is over the limit! [ 174.664562][ T8783] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.889872][ T8783] bridge_slave_1: left allmulticast mode [ 174.916038][ T8783] bridge_slave_1: left promiscuous mode [ 174.935680][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.965854][ T8783] bridge_slave_0: left allmulticast mode [ 174.982602][ T8783] bridge_slave_0: left promiscuous mode [ 175.003317][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.215183][ T8783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.225605][ T8783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.236218][ T8783] bond0 (unregistering): Released all slaves [ 175.274554][T11165] lo speed is unknown, defaulting to 1000 [ 175.582093][T11165] lo speed is unknown, defaulting to 1000 [ 175.598490][ T8783] hsr_slave_0: left promiscuous mode [ 175.609162][ T8783] hsr_slave_1: left promiscuous mode [ 175.639259][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.670063][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.686712][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.694273][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.724672][ T8783] veth1_macvtap: left promiscuous mode [ 175.730227][ T8783] veth0_macvtap: left promiscuous mode [ 175.741110][ T8783] veth1_vlan: left promiscuous mode [ 175.746344][ T8783] veth0_vlan: left promiscuous mode [ 175.945128][ T8783] team0 (unregistering): Port device team_slave_1 removed [ 175.955755][ T8783] team0 (unregistering): Port device team_slave_0 removed [ 176.533466][T11165] chnl_net:caif_netlink_parms(): no params data found [ 176.556838][ T8783] IPVS: stop unused estimator thread 0... [ 176.645113][T11165] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.668085][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.675326][T11165] bridge_slave_0: entered allmulticast mode [ 176.682200][T11165] bridge_slave_0: entered promiscuous mode [ 176.689307][T11165] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.696485][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.739146][T11279] netlink: 'syz.5.2175': attribute type 1 has an invalid length. [ 176.749291][T11165] bridge_slave_1: entered allmulticast mode [ 176.767169][T11165] bridge_slave_1: entered promiscuous mode [ 176.835728][T11165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.870701][T11165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.935632][T11165] team0: Port device team_slave_0 added [ 176.956348][T11165] team0: Port device team_slave_1 added [ 176.997457][T11165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.033577][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.087218][T11165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.100807][T11165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.107868][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.134736][T11165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.196598][T11304] __nla_validate_parse: 15 callbacks suppressed [ 177.196619][T11304] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2181'. [ 177.239717][T11165] hsr_slave_0: entered promiscuous mode [ 177.255478][T11165] hsr_slave_1: entered promiscuous mode [ 177.267536][T11165] debugfs: 'hsr0' already exists in 'hsr' [ 177.277829][T11165] Cannot create hsr debugfs directory [ 177.298805][T11312] netlink: 'syz.1.2183': attribute type 7 has an invalid length. [ 177.314920][T11312] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2183'. [ 177.326924][ T28] kauditd_printk_skb: 6184 callbacks suppressed [ 177.326940][ T28] audit: type=1400 audit(1771518921.550:10172): avc: denied { ioctl } for pid=11317 comm="syz.0.2185" path="socket:[30584]" dev="sockfs" ino=30584 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 177.328345][T11318] SELinux: policydb version 279545291 does not match my version range 15-35 [ 177.333917][ T28] audit: type=1400 audit(1771518921.550:10173): avc: denied { load_policy } for pid=11317 comm="syz.0.2185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 177.367025][T11302] loop8: detected capacity change from 0 to 2048 [ 177.389126][T11312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 177.407837][T11318] SELinux: failed to load policy [ 177.473549][T11302] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.538190][T11302] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2180: bg 0: block 234: padding at end of block bitmap is not set [ 177.669434][T11302] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 177.704430][T11302] EXT4-fs (loop8): This should not happen!! Data will be lost [ 177.704430][T11302] [ 177.715292][T11302] EXT4-fs (loop8): Total free blocks count 0 [ 177.721331][T11302] EXT4-fs (loop8): Free/Dirty block details [ 177.730916][T11302] EXT4-fs (loop8): free_blocks=0 [ 177.735871][T11302] EXT4-fs (loop8): dirty_blocks=16 [ 177.742598][T11302] EXT4-fs (loop8): Block reservation details [ 177.759650][T11302] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 177.762290][ T28] audit: type=1400 audit(1771518921.962:10174): avc: denied { getopt } for pid=11301 comm="syz.8.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 177.865582][T10124] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.957175][T11354] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2189'. [ 177.991366][T11350] loop8: detected capacity change from 0 to 512 [ 178.018250][T11350] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 178.029133][T11165] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 178.058999][T11165] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 178.077627][T11350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.100310][T11165] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 178.123020][T11165] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 178.171727][T11165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.184529][T11165] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.211453][T11350] lo speed is unknown, defaulting to 1000 [ 178.218052][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.225252][ T8766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.250556][T11350] lo speed is unknown, defaulting to 1000 [ 178.281619][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.288733][ T8783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.331499][T11165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.356027][T11165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.577185][T11165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.728374][T11165] veth0_vlan: entered promiscuous mode [ 178.736726][T11165] veth1_vlan: entered promiscuous mode [ 178.755858][T11165] veth0_macvtap: entered promiscuous mode [ 178.763955][T11165] veth1_macvtap: entered promiscuous mode [ 178.775052][T11165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.787406][T11165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.799075][ T8769] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.814105][ T8769] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.836216][ T8769] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.858703][ T8769] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.004295][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2196'. [ 179.559549][T10124] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.017481][T11445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2204'. [ 180.035267][T11443] batman_adv: batadv0: Adding interface: gretap1 [ 180.048440][T11443] batman_adv: batadv0: Interface activated: gretap1 [ 180.080969][T11443] netlink: 356 bytes leftover after parsing attributes in process `syz.9.2203'. [ 180.093571][ T28] audit: type=1400 audit(1771518924.141:10175): avc: denied { read } for pid=11444 comm="syz.5.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 180.120225][T11445] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1546 sclass=netlink_xfrm_socket pid=11445 comm=syz.5.2204 [ 180.256023][T11458] netlink: 'syz.9.2209': attribute type 13 has an invalid length. [ 180.407964][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.427000][ T28] audit: type=1400 audit(1771518924.412:10176): avc: denied { listen } for pid=11453 comm="syz.8.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.450260][T11465] loop9: detected capacity change from 0 to 1024 [ 180.488061][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.522753][T11469] lo speed is unknown, defaulting to 1000 [ 180.569855][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.606133][T11469] lo speed is unknown, defaulting to 1000 [ 180.618724][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.641685][ T28] audit: type=1400 audit(1771518924.646:10177): avc: denied { bind } for pid=11453 comm="syz.8.2207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.703032][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.747720][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.747879][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.748035][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.748156][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 180.748252][T11466] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 181.539043][T11495] pimreg0: tun_chr_ioctl cmd 1074025678 [ 181.626023][T11495] pimreg0: group set to 1 [ 181.669331][T11495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11495 comm=syz.9.2215 [ 181.995740][ T28] audit: type=1326 audit(1771518925.918:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 182.029277][ T28] audit: type=1326 audit(1771518925.946:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 182.053509][ T28] audit: type=1326 audit(1771518925.946:10180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 182.100521][ T28] audit: type=1326 audit(1771518925.946:10181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.8.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 182.256184][T11520] loop9: detected capacity change from 0 to 1024 [ 182.274929][T11520] EXT4-fs: quotafile must be on filesystem root [ 182.296462][T11523] tmpfs: Bad value for 'mpol' [ 182.309204][T11520] tmpfs: Bad value for 'mpol' [ 182.342213][T11520] loop9: detected capacity change from 0 to 512 [ 182.470775][T11520] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.2224: ea_inode with extended attributes [ 182.514833][T11520] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 182.515056][T11520] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.2224: error while reading EA inode 11 err=-117 [ 182.536574][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 182.536595][ C1] EXT4-fs (loop9): initial error at time 1771518926: ext4_xattr_inode_iget:441: inode 11 [ 182.536626][ C1] EXT4-fs (loop9): last error at time 1771518926: ext4_xattr_inode_iget:441: inode 11 [ 182.577877][T11520] loop9: lost filesystem error report for type 5 error -117 [ 182.578915][T11520] EXT4-fs (loop9): 1 orphan inode deleted [ 182.601772][T11520] EXT4-fs (loop9): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.631483][T11165] EXT4-fs (loop9): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 182.662528][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2230'. [ 182.705760][T11552] loop8: detected capacity change from 0 to 256 [ 182.712601][T11552] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.751785][T11552] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.341811][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 183.352952][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 183.352964][ T28] audit: type=1400 audit(1771518927.190:10287): avc: denied { ioctl } for pid=11567 comm="syz.0.2237" path="socket:[31059]" dev="sockfs" ino=31059 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 183.453532][T11575] batadv_slave_0: Caught tx_queue_len zero misconfig [ 183.575989][ T28] audit: type=1326 audit(1771518927.396:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.625324][T11586] team0: Port device team_slave_0 removed [ 183.637906][ T28] audit: type=1326 audit(1771518927.396:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.638484][T11586] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 183.699089][ T28] audit: type=1326 audit(1771518927.396:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.755539][ T28] audit: type=1326 audit(1771518927.396:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.808243][ T28] audit: type=1326 audit(1771518927.396:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.851249][ T28] audit: type=1326 audit(1771518927.396:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.905286][ T28] audit: type=1326 audit(1771518927.396:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.932883][T11595] 8021q: VLANs not supported on ip6gre0 [ 183.964735][ T28] audit: type=1326 audit(1771518927.396:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 183.995892][ T28] audit: type=1326 audit(1771518927.396:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11585 comm="syz.8.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08113cc629 code=0x7ffc0000 [ 184.793483][T11617] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2249'. [ 185.219714][T11639] loop9: detected capacity change from 0 to 512 [ 185.242014][T11639] EXT4-fs (loop9): filesystem is read-only [ 185.261956][T11639] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 185.309608][T11639] EXT4-fs (loop9): filesystem is read-only [ 185.331319][T11639] EXT4-fs (loop9): orphan cleanup on readonly fs [ 185.355946][T11639] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2257: bg 0: block 64: padding at end of block bitmap is not set [ 185.400773][T11639] loop9: lost filesystem error report for type 5 error -117 [ 185.400933][T11639] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 185.408460][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 185.408485][ C0] EXT4-fs (loop9): initial error at time 1771518929: ext4_validate_block_bitmap:441 [ 185.408510][ C0] EXT4-fs (loop9): last error at time 1771518929: ext4_validate_block_bitmap:441 [ 185.471134][T11639] loop9: lost filesystem error report for type 5 error -117 [ 185.471383][T11639] EXT4-fs (loop9): 1 orphan inode deleted [ 185.519719][T11639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 185.566209][T11165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.618837][T11649] loop9: detected capacity change from 0 to 1024 [ 185.630004][T11649] EXT4-fs: Ignoring removed orlov option [ 185.671063][T11649] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.755127][T11165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.794726][T11661] vhci_hcd vhci_hcd.0: invalid port number 9 [ 185.801701][T11661] vhci_hcd vhci_hcd.0: invalid port number 9 [ 185.852821][T11665] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 185.882752][T11665] bond0: (slave gre0): Error -95 calling set_mac_address [ 185.923494][T11665] ip6gretap1: entered promiscuous mode [ 185.937594][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2266'. [ 185.953374][T11665] ip6gretap1: entered allmulticast mode [ 186.022154][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2268'. [ 186.031558][T11674] loop8: detected capacity change from 0 to 2048 [ 186.055763][T11677] xt_hashlimit: size too large, truncated to 1048576 [ 186.062456][T11677] xt_hashlimit: max too large, truncated to 1048576 [ 186.241450][T11698] lo speed is unknown, defaulting to 1000 [ 186.248666][T11698] lo speed is unknown, defaulting to 1000 [ 186.269217][T11704] netlink: 'syz.5.2279': attribute type 1 has an invalid length. [ 186.280906][T11704] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 186.430730][T11721] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2284'. [ 186.436616][T11722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2284'. [ 186.586651][T11721] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 186.598344][T11721] bond4 (unregistering): Released all slaves [ 186.636779][T11722] bond4: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 186.653140][T11722] bond4 (unregistering): Released all slaves [ 186.692950][T11734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43414 sclass=netlink_route_socket pid=11734 comm=syz.5.2287 [ 186.991212][T11747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2293'. [ 187.101604][T11750] 9p: Bad value for 'rfdno' [ 187.278277][T11758] SELinux: Context system_u:object_r:anacron_exec_t:s0 is not valid (left unmapped). [ 187.420410][T11764] loop8: detected capacity change from 0 to 128 [ 188.261304][T11807] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2316'. [ 188.342853][T11807] bond4 (unregistering): Released all slaves [ 188.383844][T11814] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2316'. [ 188.394854][T11814] tipc: Invalid UDP bearer configuration [ 188.394868][T11814] tipc: Enabling of bearer rejected, failed to enable media [ 188.705966][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 188.705981][ T28] audit: type=1400 audit(1771518932.195:10437): avc: denied { connect } for pid=11857 comm="syz.9.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.740221][ T28] audit: type=1400 audit(1771518932.195:10438): avc: denied { name_connect } for pid=11857 comm="syz.9.2329" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 188.766036][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2329'. [ 188.929182][ T28] audit: type=1400 audit(1771518932.214:10439): avc: denied { write } for pid=11856 comm="syz.5.2328" path="socket:[32618]" dev="sockfs" ino=32618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.984116][ T28] audit: type=1400 audit(1771518932.288:10440): avc: denied { setopt } for pid=11856 comm="syz.5.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.642885][T11894] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2334'. [ 189.654095][ T28] audit: type=1400 audit(1771518933.084:10441): avc: denied { listen } for pid=11893 comm="syz.9.2334" lport=37323 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.679608][ T28] audit: type=1400 audit(1771518933.084:10442): avc: denied { accept } for pid=11893 comm="syz.9.2334" lport=37323 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 189.703096][ T28] audit: type=1400 audit(1771518933.112:10443): avc: denied { write } for pid=11893 comm="syz.9.2334" lport=37323 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 189.730094][ T28] audit: type=1400 audit(1771518933.112:10444): avc: denied { setopt } for pid=11893 comm="syz.9.2334" lport=37323 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 189.758138][ T28] audit: type=1400 audit(1771518933.112:10445): avc: denied { write } for pid=11893 comm="syz.9.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.840373][ T28] audit: type=1400 audit(1771518933.261:10446): avc: denied { create } for pid=11903 comm="syz.9.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.895715][T11905] loop9: detected capacity change from 0 to 164 [ 189.899940][T11902] netlink: 14601 bytes leftover after parsing attributes in process `syz.8.2337'. [ 190.014837][T11915] loop8: detected capacity change from 0 to 512 [ 190.026534][T11915] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 190.156617][T10124] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 190.170651][T10124] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 190.185533][T11932] syzkaller0: entered promiscuous mode [ 190.192289][T11932] syzkaller0: entered allmulticast mode [ 190.424794][T11964] netlink: 'syz.9.2354': attribute type 39 has an invalid length. [ 190.458237][ T8783] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.536247][ T8783] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.547517][T11974] uprobe: syz.1.2358:11974 failed to unregister, leaking uprobe [ 190.598812][T11973] uprobe: syz.1.2358:11973 failed to unregister, leaking uprobe [ 190.633937][ T8783] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.747518][ T8783] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.779414][T11976] lo speed is unknown, defaulting to 1000 [ 190.787916][T11976] lo speed is unknown, defaulting to 1000 [ 190.923953][T12006] tipc: Enabling of bearer rejected, failed to enable media [ 191.047727][ T8783] bridge_slave_1: left allmulticast mode [ 191.058379][ T8783] bridge_slave_1: left promiscuous mode [ 191.064185][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.073171][ T8783] bridge_slave_0: left allmulticast mode [ 191.079137][ T8783] bridge_slave_0: left promiscuous mode [ 191.084921][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.108126][T11165] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 191.121157][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 191.121316][T11165] Tainted: [W]=WARN [ 191.121322][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.121334][T11165] Call Trace: [ 191.121341][T11165] [ 191.121348][T11165] __dump_stack+0x1d/0x30 [ 191.121373][T11165] dump_stack_lvl+0x95/0xd0 [ 191.121393][T11165] dump_stack+0x15/0x1b [ 191.121412][T11165] dump_header+0x80/0x240 [ 191.121443][T11165] oom_kill_process+0x295/0x350 [ 191.121543][T11165] out_of_memory+0x97d/0xb80 [ 191.121564][T11165] try_charge_memcg+0x62e/0xa10 [ 191.121598][T11165] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 191.121677][T11165] __swap_cache_prepare_and_add+0x386/0x530 [ 191.121707][T11165] swap_cache_alloc_folio+0xa2/0x120 [ 191.121732][T11165] swap_cluster_readahead+0x36b/0x3d0 [ 191.121775][T11165] swapin_readahead+0xde/0x840 [ 191.121802][T11165] ? __rcu_read_unlock+0x4e/0x70 [ 191.121824][T11165] ? __perf_event_task_sched_in+0xa65/0xad0 [ 191.121963][T11165] ? __list_add_valid_or_report+0x38/0xe0 [ 191.121990][T11165] ? __rcu_read_unlock+0x4e/0x70 [ 191.122011][T11165] ? swap_cache_get_folio+0x26f/0x280 [ 191.122039][T11165] do_swap_page+0x309/0x2210 [ 191.122075][T11165] ? __schedule+0x85a/0xd40 [ 191.122096][T11165] ? __rcu_read_lock+0x36/0x50 [ 191.122163][T11165] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 191.122189][T11165] handle_mm_fault+0xb40/0x3020 [ 191.122288][T11165] ? vma_start_read+0x1c7/0x2c0 [ 191.122392][T11165] do_user_addr_fault+0x62f/0x1050 [ 191.122436][T11165] ? trace_page_fault_user+0x1f/0xe0 [ 191.122463][T11165] exc_page_fault+0x62/0xa0 [ 191.122487][T11165] asm_exc_page_fault+0x26/0x30 [ 191.122505][T11165] RIP: 0033:0x7f501ae67817 [ 191.122570][T11165] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 191.122588][T11165] RSP: 002b:00007ffd23e22360 EFLAGS: 00010202 [ 191.122606][T11165] RAX: 0000000000000000 RBX: 00005555798e9500 RCX: 00007f501ae67817 [ 191.122626][T11165] RDX: 00007ffd23e223a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.122641][T11165] RBP: 00007ffd23e2240c R08: 0000000000000000 R09: 0000000000000000 [ 191.122653][T11165] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 191.122665][T11165] R13: 00000000000927c0 R14: 000000000002cfb7 R15: 00007ffd23e22460 [ 191.122684][T11165] [ 191.123095][T11165] memory: usage 307200kB, limit 307200kB, failcnt 317 [ 191.369254][T11165] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 191.381383][T11165] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 191.389220][T11165] Memory cgroup stats for /syz9: [ 191.389480][T11165] cache 0 [ 191.397396][T11165] rss 0 [ 191.400188][T11165] shmem 0 [ 191.403108][T11165] mapped_file 0 [ 191.406618][T11165] dirty 0 [ 191.409637][T11165] writeback 0 [ 191.412910][T11165] workingset_refault_anon 79 [ 191.417506][T11165] workingset_refault_file 0 [ 191.422028][T11165] swap 221184 [ 191.425301][T11165] swapcached 221184 [ 191.429132][T11165] pgpgin 52778 [ 191.432617][T11165] pgpgout 52777 [ 191.436074][T11165] pgfault 57894 [ 191.439534][T11165] pgmajfault 48 [ 191.443075][T11165] inactive_anon 0 [ 191.446711][T11165] active_anon 0 [ 191.446964][ T8783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.450165][T11165] inactive_file 0 [ 191.462506][T11165] active_file 4096 [ 191.466398][T11165] unevictable 0 [ 191.466643][ T8783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.469955][T11165] hierarchical_memory_limit 314572800 [ 191.469964][T11165] hierarchical_memsw_limit 9223372036854771712 [ 191.469972][T11165] total_cache 0 [ 191.493596][T11165] total_rss 0 [ 191.495458][ T8783] bond0 (unregistering): Released all slaves [ 191.496896][T11165] total_shmem 0 [ 191.506405][T11165] total_mapped_file 0 [ 191.510401][T12020] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2365'. [ 191.515032][T11165] total_dirty 0 [ 191.520515][T12020] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2365'. [ 191.524896][T11165] total_writeback 0 [ 191.537214][T11165] total_workingset_refault_anon 79 [ 191.542525][T11165] total_workingset_refault_file 0 [ 191.547670][T11165] total_swap 221184 [ 191.551849][T11165] total_swapcached 221184 [ 191.556216][T11165] total_pgpgin 52778 [ 191.560169][T11165] total_pgpgout 52777 [ 191.564139][T11165] total_pgfault 57894 [ 191.568214][T11165] total_pgmajfault 48 [ 191.572322][T11165] total_inactive_anon 0 [ 191.576474][T11165] total_active_anon 0 [ 191.582642][T11165] total_inactive_file 0 [ 191.592345][ T8783] hsr_slave_0: left promiscuous mode [ 191.594785][T11165] total_active_file 4096 [ 191.602155][T11165] total_unevictable 0 [ 191.617795][T11165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2354,pid=11959,uid=0 [ 191.633145][ T8783] hsr_slave_1: left promiscuous mode [ 191.647890][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.673591][T11165] Memory cgroup out of memory: Killed process 11959 (syz.9.2354) total-vm:100576kB, anon-rss:1224kB, file-rss:26816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 191.696022][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.737478][ T8783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.765889][ T8783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.822700][ T8783] veth1_macvtap: left promiscuous mode [ 191.841252][ T8783] veth0_macvtap: left promiscuous mode [ 191.846851][ T8783] veth1_vlan: left promiscuous mode [ 191.878550][ T8783] veth0_vlan: left promiscuous mode [ 192.024119][ T8783] team0 (unregistering): Port device team_slave_1 removed [ 192.071304][T12069] tipc: Enabling of bearer rejected, failed to enable media [ 192.085688][T12074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2374'. [ 192.102623][T11976] chnl_net:caif_netlink_parms(): no params data found [ 192.231034][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2379'. [ 192.244449][T12093] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 192.434830][T12083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.511495][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.518704][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.526215][T11976] bridge_slave_0: entered allmulticast mode [ 192.532992][T11976] bridge_slave_0: entered promiscuous mode [ 192.540337][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.547450][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.555349][T11976] bridge_slave_1: entered allmulticast mode [ 192.562033][T11976] bridge_slave_1: entered promiscuous mode [ 192.577515][ T8782] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.587295][ T8782] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.589463][T12132] netlink: 'syz.1.2388': attribute type 2 has an invalid length. [ 192.639678][ T8782] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.651536][ T8782] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.661623][ T8782] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.671007][ T8782] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.682619][ T8782] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.694408][ T8782] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.727987][T11976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.782630][T11976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.816327][T12148] loop9: detected capacity change from 0 to 256 [ 192.838476][T12148] FAT-fs (loop9): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 192.879819][T12148] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2392'. [ 192.893955][T11976] team0: Port device team_slave_0 added [ 192.909369][T11976] team0: Port device team_slave_1 added [ 193.081119][T12173] netlink: 'syz.1.2398': attribute type 1 has an invalid length. [ 193.124762][T11976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.147064][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.205479][T11976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.220441][T11976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.227943][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.254853][T11976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.284210][T11976] hsr_slave_0: entered promiscuous mode [ 193.290361][T11976] hsr_slave_1: entered promiscuous mode [ 193.297208][T11976] debugfs: 'hsr0' already exists in 'hsr' [ 193.303053][T11976] Cannot create hsr debugfs directory [ 193.345009][T12190] xt_hashlimit: size too large, truncated to 1048576 [ 193.355387][T12190] xt_hashlimit: max too large, truncated to 1048576 [ 193.522174][ T8782] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.529924][T12229] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 193.562562][ T8782] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.572579][ T8782] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.587931][ T8782] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.631913][T11976] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.644041][T11976] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.656589][T11976] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.681802][T11976] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 193.693834][T12247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.730666][T12247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.791466][T11976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.818878][T11976] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.834095][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.841212][ T8783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.875827][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.882938][ T8783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.916826][T12276] __nla_validate_parse: 3 callbacks suppressed [ 193.916842][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2418'. [ 194.020962][T11976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.157820][T11976] veth0_vlan: entered promiscuous mode [ 194.175442][T11976] veth1_vlan: entered promiscuous mode [ 194.211930][T11976] veth0_macvtap: entered promiscuous mode [ 194.226335][T12327] loop9: detected capacity change from 0 to 2048 [ 194.235575][T11976] veth1_macvtap: entered promiscuous mode [ 194.258003][T11976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.276147][T11976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.283962][T12327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.306246][ T8777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.307639][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 194.307651][ T28] audit: type=1400 audit(1771518937.433:10514): avc: denied { mount } for pid=12326 comm="syz.9.2424" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.341889][ T8777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.354072][ T28] audit: type=1400 audit(1771518937.480:10515): avc: denied { add_name } for pid=12326 comm="syz.9.2424" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 194.375622][ T28] audit: type=1400 audit(1771518937.480:10516): avc: denied { create } for pid=12326 comm="syz.9.2424" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 194.378315][T12327] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 194.402634][ T28] audit: type=1400 audit(1771518937.480:10517): avc: denied { read write } for pid=12326 comm="syz.9.2424" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 194.432648][ T8777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.445672][ T28] audit: type=1400 audit(1771518937.480:10518): avc: denied { open } for pid=12326 comm="syz.9.2424" path="/51/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 194.466920][ T8777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.509785][ T28] audit: type=1400 audit(1771518937.480:10519): avc: denied { remount } for pid=12326 comm="syz.9.2424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 194.548693][ T28] audit: type=1400 audit(1771518937.620:10520): avc: denied { ioctl } for pid=12347 comm="syz.0.2427" path="socket:[34592]" dev="sockfs" ino=34592 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 194.575140][T12327] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 194.619280][ T28] audit: type=1400 audit(1771518937.676:10521): avc: denied { mounton } for pid=11976 comm="syz-executor" path="/root/syzkaller.L3fOXb/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 194.619392][ T28] audit: type=1400 audit(1771518937.676:10522): avc: denied { mount } for pid=11976 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 194.619416][ T28] audit: type=1400 audit(1771518937.676:10523): avc: denied { mount } for pid=11976 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 194.716607][T12327] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 194.745146][T12327] EXT4-fs (loop9): This should not happen!! Data will be lost [ 194.745146][T12327] [ 194.755184][T12327] EXT4-fs (loop9): Total free blocks count 0 [ 194.823832][T12366] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 194.851839][T12327] EXT4-fs (loop9): Free/Dirty block details [ 194.862619][T12327] EXT4-fs (loop9): free_blocks=4096 [ 194.874727][T12366] EXT4-fs (loop9): This should not happen!! Data will be lost [ 194.874727][T12366] [ 194.895306][T12327] EXT4-fs (loop9): dirty_blocks=512 [ 195.293596][T12420] hub 8-0:1.0: USB hub found [ 195.298468][T12420] hub 8-0:1.0: 8 ports detected [ 195.307811][T12420] netlink: 'syz.9.2439': attribute type 10 has an invalid length. [ 195.369688][T12420] macvlan1: entered allmulticast mode [ 195.378603][T12420] veth1_vlan: entered allmulticast mode [ 195.389068][T12420] team0: Port device macvlan1 added [ 195.549992][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2440'. [ 195.732944][T12438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12438 comm=syz.1.2443 [ 195.845461][T12448] bond7 (unregistering): Released all slaves [ 196.189413][T12498] loop9: detected capacity change from 0 to 4096 [ 196.199421][T12498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.362934][T11165] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.832844][T12564] ipvlan2: entered promiscuous mode [ 196.838920][T12564] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 196.974520][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2465'. [ 197.107031][T12583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2465'. [ 197.199511][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2467'. [ 197.517656][T12618] loop3: detected capacity change from 0 to 1024 [ 197.536659][T12618] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 197.552519][T12618] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 197.563479][T12618] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.575074][T12618] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 197.591563][T12618] EXT4-fs (loop3): orphan cleanup on readonly fs [ 197.604516][T12618] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.2473: Inode bitmap for bg 0 marked uninitialized [ 197.617326][T12618] loop3: lost filesystem error report for type 5 error -117 [ 197.618004][T12618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.643682][T12618] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.2473: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 197.663550][T12618] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.2473: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 197.698768][T12618] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.2473: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 197.727303][T12618] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.2473: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 197.759349][T11976] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.108472][T12663] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 198.122608][T12679] netlink: 'syz.0.2481': attribute type 4 has an invalid length. [ 198.146466][T12680] netlink: 'syz.0.2481': attribute type 4 has an invalid length. [ 198.235350][T12690] netlink: 'syz.5.2483': attribute type 3 has an invalid length. [ 198.250234][T12690] netlink: 'syz.5.2483': attribute type 3 has an invalid length. [ 198.371640][T12708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2487'. [ 198.419777][T12708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2487'. [ 198.472633][T12723] loop3: detected capacity change from 0 to 128 [ 198.613471][T12723] FAT-fs (loop3): bogus number of reserved sectors [ 198.672988][T12723] FAT-fs (loop3): Can't find a valid FAT filesystem [ 198.758315][T12737] loop9: detected capacity change from 0 to 8192 [ 198.792752][T12737] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.807587][T12759] netlink: 'syz.0.2494': attribute type 10 has an invalid length. [ 198.871498][T12760] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.880411][T12759] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 198.897655][T12759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12759 comm=syz.0.2494 [ 198.933079][T12759] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 198.940808][T12759] bond4: (slave macvlan2): unknown ethtool speed (2) for port 1 (set it to 0) [ 198.950472][T12759] bond4: (slave macvlan2): speed changed to 0 on port 1 [ 198.958741][T12759] bond4: (slave macvlan2): Enslaving as a backup interface with an up link [ 198.970079][T12778] xt_hashlimit: size too large, truncated to 1048576 [ 199.075452][T12783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2495'. [ 199.142978][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2501'. [ 199.176438][T12791] loop9: detected capacity change from 0 to 128 [ 201.424606][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 201.424624][ T28] audit: type=1326 audit(1771518944.084:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12803 comm="syz.9.2505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f501aeac629 code=0x7ffc0000 [ 201.491379][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2509'. [ 201.501755][T12818] netlink: 'syz.5.2510': attribute type 8 has an invalid length. [ 201.509591][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 201.525846][T12816] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 201.540193][T12816] xt_TCPMSS: Only works on TCP SYN packets [ 201.549368][ T28] audit: type=1400 audit(1771518944.205:10604): avc: denied { ioctl } for pid=12810 comm="syz.0.2507" path="socket:[35972]" dev="sockfs" ino=35972 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.553803][T12818] bond0: entered promiscuous mode [ 201.584458][T12818] gretap0: entered promiscuous mode [ 201.591339][T12818] veth1_to_bond: entered promiscuous mode [ 201.597973][T12818] hsr1: entered promiscuous mode [ 201.616490][T12811] lo speed is unknown, defaulting to 1000 [ 201.622741][T12811] lo speed is unknown, defaulting to 1000 [ 201.653325][ T28] audit: type=1400 audit(1771518944.308:10605): avc: denied { write } for pid=12826 comm="syz.3.2513" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 201.676959][T12827] loop3: detected capacity change from 0 to 1024 [ 201.683931][T12827] ext4: Unknown parameter 'obj_user' [ 201.997036][ T28] audit: type=1400 audit(1771518944.626:10606): avc: denied { watch } for pid=12848 comm="syz.0.2522" path="/515" dev="tmpfs" ino=2730 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 202.281973][ T28] audit: type=1400 audit(1771518944.888:10607): avc: denied { getopt } for pid=12875 comm="syz.3.2529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 202.516147][ T28] audit: type=1400 audit(1771518945.103:10608): avc: denied { bind } for pid=12848 comm="syz.0.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 202.578893][ T28] audit: type=1400 audit(1771518945.141:10609): avc: denied { read write } for pid=12900 comm="syz.9.2538" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 202.604636][ T28] audit: type=1400 audit(1771518945.141:10610): avc: denied { open } for pid=12900 comm="syz.9.2538" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 202.631520][ T28] audit: type=1400 audit(1771518945.141:10611): avc: denied { setattr } for pid=12900 comm="syz.9.2538" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 202.701100][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2540'. [ 203.283726][T12930] netlink: 'syz.1.2546': attribute type 29 has an invalid length. [ 203.297988][T12930] netlink: 'syz.1.2546': attribute type 29 has an invalid length. [ 203.309360][T12930] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2546'. [ 203.318691][T12930] unsupported nla_type 58 [ 203.346019][T12935] pimreg: entered allmulticast mode [ 203.373230][T12932] FAULT_INJECTION: forcing a failure. [ 203.373230][T12932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.386467][T12932] CPU: 1 UID: 0 PID: 12932 Comm: syz.9.2547 Tainted: G W syzkaller #0 PREEMPT(full) [ 203.386511][T12932] Tainted: [W]=WARN [ 203.386519][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.386531][T12932] Call Trace: [ 203.386538][T12932] [ 203.386545][T12932] __dump_stack+0x1d/0x30 [ 203.386570][T12932] dump_stack_lvl+0x95/0xd0 [ 203.386664][T12932] dump_stack+0x15/0x1b [ 203.386761][T12932] should_fail_ex+0x263/0x280 [ 203.386783][T12932] should_fail+0xb/0x20 [ 203.386799][T12932] should_fail_usercopy+0x1a/0x20 [ 203.386888][T12932] _copy_to_user+0x20/0xa0 [ 203.386928][T12932] bpf_test_finish+0x34d/0x510 [ 203.386951][T12932] ? ___migrate_enable+0x67/0x90 [ 203.386996][T12932] bpf_prog_test_run_flow_dissector+0x2c9/0x360 [ 203.387027][T12932] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 203.387089][T12932] bpf_prog_test_run+0x204/0x340 [ 203.387111][T12932] __sys_bpf+0x52e/0x7e0 [ 203.387193][T12932] __x64_sys_bpf+0x41/0x50 [ 203.387221][T12932] x64_sys_call+0x10cb/0x3020 [ 203.387244][T12932] do_syscall_64+0x12c/0x370 [ 203.387325][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.387345][T12932] RIP: 0033:0x7f501aeac629 [ 203.387360][T12932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.387376][T12932] RSP: 002b:00007f5019907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.387419][T12932] RAX: ffffffffffffffda RBX: 00007f501b125fa0 RCX: 00007f501aeac629 [ 203.387432][T12932] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 203.387444][T12932] RBP: 00007f5019907090 R08: 0000000000000000 R09: 0000000000000000 [ 203.387456][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.387467][T12932] R13: 00007f501b126038 R14: 00007f501b125fa0 R15: 00007ffd23e22068 [ 203.387546][T12932] [ 203.641637][T12940] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2549'. [ 203.651372][T12940] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2549'. [ 203.881409][T12958] lo speed is unknown, defaulting to 1000 [ 203.888118][T12958] lo speed is unknown, defaulting to 1000 [ 204.678694][ T28] audit: type=1400 audit(1771518947.133:10612): avc: denied { write } for pid=12972 comm="syz.1.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 205.288261][T13012] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 206.146433][T13045] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 206.922431][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 206.922450][ T28] audit: type=1400 audit(1771518949.238:10617): avc: denied { listen } for pid=13076 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.013567][ T28] audit: type=1400 audit(1771518949.257:10618): avc: denied { getopt } for pid=13076 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.087326][ T28] audit: type=1400 audit(1771518949.257:10619): avc: denied { accept } for pid=13076 comm="syz.0.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 207.171010][T13081] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2591'. [ 207.200458][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2591'. [ 207.227937][T13081] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2591'. [ 207.324145][T13094] loop3: detected capacity change from 0 to 256 [ 207.360834][ T28] audit: type=1400 audit(1771518949.621:10620): avc: denied { remount } for pid=13089 comm="syz.3.2592" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 207.868570][T13124] IPVS: Error connecting to the multicast addr [ 207.886641][T13126] vlan3: entered promiscuous mode [ 207.891901][T13126] gretap0: entered promiscuous mode [ 207.913849][ T28] audit: type=1400 audit(1771518950.155:10621): avc: denied { setopt } for pid=13120 comm="syz.5.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.093221][ T28] audit: type=1400 audit(1771518950.323:10622): avc: denied { name_bind } for pid=13118 comm="syz.1.2597" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 208.439507][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2609'. [ 208.516552][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2609'. [ 208.539542][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 209.110624][ T28] audit: type=1400 audit(1771518951.277:10623): avc: denied { getopt } for pid=13181 comm="syz.5.2614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.556419][T13193] tmpfs: Bad value for 'mpol' [ 209.578655][T13195] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 209.590572][T13192] loop3: detected capacity change from 0 to 512 [ 209.637491][T13192] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 209.663038][T13192] System zones: 0-2, 18-18, 34-34 [ 209.687960][T13192] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2617: bg 0: block 248: padding at end of block bitmap is not set [ 209.702327][T13192] loop3: lost filesystem error report for type 5 error -117 [ 209.702635][T13192] Quota error (device loop3): write_blk: dquota write failed [ 209.717322][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 209.717361][ C1] EXT4-fs (loop3): last error at time 1771518951: ext4_validate_block_bitmap:441 [ 209.733993][T13192] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 209.744078][T13192] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.2617: Failed to acquire dquot type 1 [ 209.772652][T13200] lo speed is unknown, defaulting to 1000 [ 209.779350][T13200] lo speed is unknown, defaulting to 1000 [ 209.794038][T13192] loop3: lost filesystem error report for type 5 error -117 [ 209.808885][T13192] EXT4-fs (loop3): 1 truncate cleaned up [ 209.815740][T13192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.897441][T13192] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.934348][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2617'. [ 209.940510][T13216] syzkaller0: entered promiscuous mode [ 209.955419][T13216] syzkaller0: entered allmulticast mode [ 209.964458][T13221] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.987442][ T28] audit: type=1400 audit(1771518952.100:10624): avc: denied { getopt } for pid=13220 comm="syz.0.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.038735][T13221] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.073307][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.085501][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.121065][T13221] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.343440][T13221] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.344222][T11976] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.373193][ T8756] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:17: Failed to release dquot type 1 [ 210.384792][ T8756] loop3: lost filesystem error report for type 5 error -117 [ 210.436468][T13257] loop3: detected capacity change from 0 to 512 [ 210.507503][ T8756] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.529140][ T8767] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.538063][T13257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 210.555767][ T8767] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.574137][T13257] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2629: invalid indirect mapped block 1023410176 (level 0) [ 210.595483][ T8767] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.614066][T13257] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 210.614267][T13257] EXT4-fs (loop3): Remounting filesystem read-only [ 210.623455][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 210.623472][ C0] EXT4-fs (loop3): initial error at time 1771518952: ext4_free_branches:1023: inode 11 [ 210.623520][ C0] EXT4-fs (loop3): last error at time 1771518952: ext4_free_branches:1023: inode 11 [ 210.704215][T13257] EXT4-fs (loop3): 1 truncate cleaned up [ 210.717652][T13257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.789717][T11976] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.875204][T13274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2637'. [ 210.896384][T13272] ================================================================== [ 210.904582][T13272] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 210.911595][T13272] [ 210.913898][T13272] write to 0xffff88810b0e1530 of 8 bytes by task 3308 on cpu 1: [ 210.921502][T13272] release_task+0x6ef/0xb60 [ 210.925987][T13272] wait_consider_task+0x1160/0x1670 [ 210.931168][T13272] __do_wait+0xf9/0x510 [ 210.935303][T13272] do_wait+0xb6/0x260 [ 210.939266][T13272] kernel_wait4+0x19f/0x210 [ 210.943773][T13272] __x64_sys_wait4+0x91/0x120 [ 210.948454][T13272] x64_sys_call+0x2aee/0x3020 [ 210.953134][T13272] do_syscall_64+0x12c/0x370 [ 210.957732][T13272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.963626][T13272] [ 210.965942][T13272] read to 0xffff88810b0e1080 of 3264 bytes by task 13272 on cpu 0: [ 210.973996][T13272] memcpy_and_pad+0x48/0x80 [ 210.978505][T13272] arch_dup_task_struct+0x2c/0x40 [ 210.983539][T13272] dup_task_struct+0x6e/0x940 [ 210.988213][T13272] copy_process+0x37e/0x20d0 [ 210.992813][T13272] kernel_clone+0x16b/0x5d0 [ 210.997310][T13272] __se_sys_clone3+0x1f5/0x230 [ 211.002075][T13272] __x64_sys_clone3+0x31/0x40 [ 211.006749][T13272] x64_sys_call+0x580/0x3020 [ 211.011336][T13272] do_syscall_64+0x12c/0x370 [ 211.015913][T13272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.021799][T13272] [ 211.024107][T13272] Reported by Kernel Concurrency Sanitizer on: [ 211.030242][T13272] CPU: 0 UID: 0 PID: 13272 Comm: syz.3.2636 Tainted: G W syzkaller #0 PREEMPT(full) [ 211.041168][T13272] Tainted: [W]=WARN [ 211.044951][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 211.054989][T13272] ================================================================== [ 211.140740][T13273] loop3: detected capacity change from 0 to 512