last executing test programs: 16m26.527160015s ago: executing program 3 (id=661): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x3000c000) 16m25.11142494s ago: executing program 3 (id=665): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="000000000000de00a80001"], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) 16m24.747179411s ago: executing program 3 (id=670): unshare(0x6a040000) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x7}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_emit_ethernet(0x66, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, r0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x78) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000ffff25bd7000fbdbdf2500000000", @ANYRESHEX=0x0, @ANYBLOB="137c0300f0ff68703667726574617000000051ff028008000d000200ff0f00000000000000000000733dc76a253818320454b475da54e0416027c8024a3e58fb8ea1dc699ebbe432a000144ee6ff4896cb3dcd43d6dbcd90b278ff1dc458699fa01ad638bde85564f242bb36787e9de7fba2ca691c05ed2f9f18b0b40e0c94a428e54184d3856d0d5eff082a37c04d46b7b95a3c509cd8a41d8d0e51589cbfeb6a2464d4d96315453babebe60b5ed8e87582c9f7b37ce87faf6d2fe48a4249cc2ca3c7a665d749dd619d1a5df72b8a0f697749e2b6a28bb3"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x88c0) 16m23.323779025s ago: executing program 3 (id=677): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r0, 0xb15, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x60048c0}, 0x20040804) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r4], 0x40}}, 0x0) 16m23.17305234s ago: executing program 3 (id=678): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x6, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd28, 0x3503}]}, 0x30}, 0x1, 0x7}, 0x0) 16m22.633062697s ago: executing program 3 (id=681): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x4, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 16m22.632499107s ago: executing program 32 (id=681): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x24, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x4, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 13m35.582133443s ago: executing program 5 (id=1501): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000400, &(0x7f0000000180)=ANY=[], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x82042, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x3d) sendfile(r1, r0, 0x0, 0x3ffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/17, 0x11}, {0x0}, {&(0x7f00000007c0)=""/24, 0x18}], 0x5}, 0xc}, {{&(0x7f0000000880)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/90, 0x5a}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/109, 0x6d}, {&(0x7f0000001b40)=""/74, 0x4a}, {&(0x7f0000001bc0)=""/109, 0x6d}, {&(0x7f0000001c40)=""/100, 0x64}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x9, &(0x7f0000002d80)=""/250, 0xfa}, 0x7}, {{&(0x7f0000002e80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002f00)=""/125, 0x7d}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003080)=""/117, 0x75}, {&(0x7f0000003100)=""/105, 0x69}, {&(0x7f0000003180)=""/92, 0x5c}, {&(0x7f0000003200)=""/194, 0xc2}], 0x6, &(0x7f0000003380)=""/13, 0xd}, 0x40}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/217, 0xd9}, {&(0x7f0000005540)=""/154, 0x9a}, {&(0x7f0000005600)=""/72, 0x48}, {&(0x7f0000005680)=""/60, 0x3c}, {&(0x7f00000056c0)=""/255, 0xff}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)}], 0x9, &(0x7f0000005980)=""/135, 0x87}, 0x8bd7}], 0x4, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={r6, 0x10001}, &(0x7f0000000340)=0x8) 13m32.380106193s ago: executing program 5 (id=1511): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x7, 0x8001, 0x7ffb}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000009000000811181000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d0000000086b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d59e5ac2d704fa2595b5d36400d0b2d119796726a223f5739e45568cfdbdb3064d01bf9cd033e5e0907b2eb410b7cf31951394c2477f106d42cc844ffb", 0xec}], 0x2}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x48e}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f00000005c0)="$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") mlockall(0x3) setuid(0xee01) semop(0x0, &(0x7f0000000180), 0x0) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) mknod$loop(0x0, 0x6000, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) 13m30.790399662s ago: executing program 5 (id=1522): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4004, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000400, &(0x7f0000000180)=ANY=[], 0x1, 0x29b, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x82042, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x3d) sendfile(r1, r0, 0x0, 0x3ffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000600)=""/186, 0xba}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/17, 0x11}, {0x0}, {&(0x7f00000007c0)=""/24, 0x18}], 0x5}, 0xc}, {{&(0x7f0000000880)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000000900)=""/53, 0x35}, {&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/90, 0x5a}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/109, 0x6d}, {&(0x7f0000001b40)=""/74, 0x4a}, {&(0x7f0000001bc0)=""/109, 0x6d}, {&(0x7f0000001c40)=""/100, 0x64}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x9, &(0x7f0000002d80)=""/250, 0xfa}, 0x7}, {{&(0x7f0000002e80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002f00)=""/125, 0x7d}, {&(0x7f0000002f80)=""/245, 0xf5}, {&(0x7f0000003080)=""/117, 0x75}, {&(0x7f0000003100)=""/105, 0x69}, {&(0x7f0000003180)=""/92, 0x5c}, {&(0x7f0000003200)=""/194, 0xc2}], 0x6, &(0x7f0000003380)=""/13, 0xd}, 0x40}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f00000033c0)=""/77, 0x4d}, {&(0x7f0000004440)=""/4096, 0x1000}, {&(0x7f0000005440)=""/217, 0xd9}, {&(0x7f0000005540)=""/154, 0x9a}, {&(0x7f0000005600)=""/72, 0x48}, {&(0x7f0000005680)=""/60, 0x3c}, {&(0x7f00000056c0)=""/255, 0xff}, {&(0x7f00000057c0)=""/151, 0x97}, {&(0x7f0000005880)}], 0x9, &(0x7f0000005980)=""/135, 0x87}, 0x8bd7}], 0x4, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={r6, 0x10001}, &(0x7f0000000340)=0x8) 13m29.782799473s ago: executing program 5 (id=1526): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0xfd, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x8000000000000001, 0x10000, 0x2, 0x2, 0x80000001, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x3c) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4080, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44051) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x26e1, 0x0) socket$kcm(0x23, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x44f0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xf) syz_open_procfs(0x0, &(0x7f0000000100)='limits\x00') lseek(r0, 0x7, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r4, 0x4) recvmsg$kcm(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 13m29.451208214s ago: executing program 5 (id=1527): unshare(0x20000400) openat(0xffffffffffffffff, 0x0, 0x801, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x2, 0x80805, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, 0x0, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m28.781605515s ago: executing program 5 (id=1536): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7f, 0x1, 0x5, 0x4, 0x0, 0x2, 0x4000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xfff, 0x2}, 0x18029, 0x8b, 0x5, 0x6, 0x40000000000000, 0x3, 0x7c0, 0x0, 0x4f2f, 0x0, 0x548}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0) 13m28.689739808s ago: executing program 33 (id=1536): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x7f, 0x1, 0x5, 0x4, 0x0, 0x2, 0x4000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xfff, 0x2}, 0x18029, 0x8b, 0x5, 0x6, 0x40000000000000, 0x3, 0x7c0, 0x0, 0x4f2f, 0x0, 0x548}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x2c}}, 0x0) 11m5.60361554s ago: executing program 0 (id=2619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x316}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 11m5.57616329s ago: executing program 0 (id=2620): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r1, 0x1) umount2(0x0, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1d}, 0x94) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000e80)='./binderfs/binder-control\x00', 0x800, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffaf) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40) 11m4.784989515s ago: executing program 0 (id=2627): socket(0xa, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0xa3010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 11m4.420934037s ago: executing program 0 (id=2637): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfff, 0x4, 0x6, 0x3f, 0x58ff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x8, 0x800003fa, 0x9}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x10418}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) ftruncate(r5, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x26}, 0x94) write$binfmt_aout(r5, &(0x7f0000000500)=ANY=[], 0xff2e) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x30, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r2, 0x1}, 0x20) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "cc0dac667f0b4db9b39dcaf902708bd7280ac739c633a9e750716760baa50415ee402c4ec4ae6df75555b733a46b45752f225448e220411217c9cf8afe0f666591579ff9938edd751535cd6bc15aac0b4ff2c8290f6f21616426a3c1d86c1ce7ab512681e7c06d3ff25f65c0b82f60287643aca1d10d847cb4c397aeccf09099877492565d150e1e"}, 0x93) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext2\x00', &(0x7f0000000280)='./file2\x00', 0x3258054, &(0x7f0000000400)={[{@mb_optimize_scan}, {@bh}]}, 0xff, 0x25f, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0, 0x0) 11m4.012752379s ago: executing program 0 (id=2638): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000024c0)=""/4127, 0x101f}], 0x1, 0x2de, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000d00)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x4c4, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) write$P9_RREAD(r2, &(0x7f0000000380)={0xab, 0x75, 0x1, {0xa0, "dc909bed5b57fe78f283ac69f382dd7b1bbcbe2decbb79b2ca1886ca17bbb8c3a2ede9436cd3847d42f95365cc3329d468c088bdedc5851985941d8a56def71944c2a2e3f4d8bbb21d0b7dd72b059569f1321580a2eba1361a5cc70f1e468eb1b66678bec43b0781b09fff763d8dff2cad9d58eeef021f7c653640635b50cc2ab4f050437a0b7eff8e2168681cdb1acf9bf289c9532c5e0c84eb2e67887c1c4b"}}, 0xab) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f00000017d34460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001110004"], 0xfdef) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f00000000c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666d61736b3d30303030303030303030303030303030303030303036362c696f636861727365743d69736f383835392d312c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c696f636861727365743d61736369692c726f6469722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c757466383d302c756e695f786c6174653d312c64656275672c756e695f786c6174653d312c666d61736b3d30303030303030303030303030303030303030303030332c6e6f63617365aec489af6ba9723d4b17106f6d47b9ade1c253d4e3b08066427cae22ad6e8bf6f67e052de91b544f2f4541f87a0c0b36e8d444150b35c110bda57fe7a9c06ba087cc975447082aaf95213301f3e04b70ea67a8aa0d582ca1a9525dba7116d80f126f782a78428b878fc79c0be9ad98cb6950995e6edba78e5301e8c8e69cc85beceb8b54f84a84787815ef9a18f1fe1c81b4c1830102f7e3236e2533e486ecb46ee53991c5bfe6289a474582b2e57741fd8de78f42097851bee74d4201c7767e0e0f4b34523150639b1291441ad01f2f72ed3679d7bca0e8b4e0689f883196af0d0dfe7344f276c1b4bd333882cf7879248ad423e3f21cd0cae2309519f9d40df23cf05d9c8d8f9d07da771ea1e3bcd8478fb989f770da17f700"/521], 0x6, 0x2ca, &(0x7f0000001080)="$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") 11m3.411710878s ago: executing program 0 (id=2641): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0xf70f) 11m3.3222541s ago: executing program 34 (id=2641): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_access(r0, 0x0, 0xf70f) 9m58.435426538s ago: executing program 6 (id=3078): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x1b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x98, 0x30, 0x2, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x3, 0x1, 0x0, 0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x0, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @loopback}], 0x20) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r7) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r9, 0x10, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffff8c, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004000}, 0xa0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, &(0x7f0000001940), 0x0}, 0x20) 9m58.250824513s ago: executing program 6 (id=3081): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfff, 0x4, 0x6, 0x3f, 0x58ff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x8, 0x800003fa, 0x9}, 0x0, 0xffffffffffffffff, r0, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x10418}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r4, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x26}, 0x94) write$binfmt_aout(r4, &(0x7f0000000500)=ANY=[], 0xff2e) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) 9m57.099105669s ago: executing program 6 (id=3086): socket(0x400000000010, 0x3, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x400c4) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)={0x2}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) 9m53.168430572s ago: executing program 6 (id=3131): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x0, 0x4044080) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vxcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r5, 0x58, &(0x7f0000000680)}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000000)={&(0x7f00000009c0)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbf9, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4020) pipe(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100004) write$eventfd(0xffffffffffffffff, &(0x7f0000000240), 0xffffff14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f00000002c0)) r8 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x9) fchdir(r9) 9m51.91624937s ago: executing program 6 (id=3140): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106210, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000010000000800000002"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000007c0), &(0x7f00000000c0)=@udp=r1, 0x1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000140), 0x0}, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r2, 0x1080}, {r2, 0x274}], 0x2, 0x7f) syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "227df434a09a17136738e59641b8c413da6132d7e6deef81c451202c60fd36fd", "ab74f8fdb7a24523383898bed84ed7d5", {"3a8c4933e11dbfea618d175f76fca313", "792d8b5f8fc60cb1319650c6e6c82eaf"}}}}}}}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x20) write$tun(r3, &(0x7f0000000540)={@val={0x0, 0x8809}, @void, @ipv6=@generic={0x7, 0x6, "48e217", 0xea, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, {[@fragment={0x8, 0x0, 0x2, 0x1, 0x0, 0x8, 0x67}, @dstopts={0x33, 0x4, '\x00', [@pad1, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x2, [0x8, 0xa8b0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x21, 0x6, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @empty, @private1]}], "80d5b981f1cc6844bd7a99afe24d51743ceedb0ad7628f230bff4b8633fda6bd514813f010beacf0eedcc3cb50cae7b9081eb7924246995ca1d5b4562e2633f99e52630357cf26256fc1585d2c4631dd4a67ab0641f8dd9826e7d15d364f321b44244ff74d607450e2e0499ecb3badb4567367024dbaf60c4480"}}}, 0x116) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000002380)=""/4096) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x208000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x5}}, '.\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000a00000800040001000000", 0x24) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x1b, 0x4000, @broadcast}}}, 0x118) fstat(r5, &(0x7f0000000040)) 9m51.27561287s ago: executing program 6 (id=3144): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r1, 0x1) umount2(0x0, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1d}, 0x94) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000e80)='./binderfs/binder-control\x00', 0x800, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffaf) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40) 9m35.753388903s ago: executing program 35 (id=3144): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r1, 0x1) umount2(0x0, 0x2) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1d}, 0x94) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000e80)='./binderfs/binder-control\x00', 0x800, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffaf) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40) 9m3.556852014s ago: executing program 2 (id=3353): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) umount2(0x0, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1d}, 0x94) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000e80)='./binderfs/binder-control\x00', 0x800, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffaf) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xebd53000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40) 9m2.115503009s ago: executing program 2 (id=3359): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb3}, 0x0, 0x0, 0x90a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffaf) 9m0.844849918s ago: executing program 2 (id=3361): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x40, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a3100000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 9m0.637486164s ago: executing program 2 (id=3367): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r4 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) sendmsg$rds(r0, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0), 0x0, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001b780)=""/148, 0x94}, {&(0x7f000001b840)=""/102, 0x66}], 0x2, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, &(0x7f000001b900)=0xcf61, &(0x7f000001b940), 0x1, 0x6, 0x9, 0x200, 0x14, 0x8}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, 0x0, &(0x7f000001bb00)=0x1, 0x0, 0x3, 0xffff, 0x7, 0x20}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80, 0x8}, &(0x7f000001bb40)=0x8000, 0x0, 0x1000, 0x3, 0xffffffffffffff65, 0x6, 0x2a, 0x3}}], 0x180, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f0000019080)) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5d5dfca8) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700201009078000003037f1202000000"], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000140)='./bus\x00', 0x0, 0x3801000, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x80002004}) syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) 8m59.755339252s ago: executing program 2 (id=3371): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x4, [{0x6, 0x800000, 0x7}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x5f, 0x5f, 0x2e, 0x30, 0x5f]}}, &(0x7f0000003680)=""/4096, 0x3b, 0x1000, 0x1}, 0x28) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x8, 0xfffffffa}, 0x28) r9 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r9, 0x110, 0x4, 0x0, 0x4) listen(r8, 0x50) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x1000}, 0x1c) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids'], 0xb) 8m58.343528845s ago: executing program 2 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020400) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="b8000000000105050000000000000000020000003c0002802c0001"], 0xb8}}, 0x0) 8m58.300613667s ago: executing program 36 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) unshare(0x22020400) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="b8000000000105050000000000000000020000003c0002802c0001"], 0xb8}}, 0x0) 4.791832751s ago: executing program 8 (id=6086): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x0, 0x4, 0x6, 0x0, @vifc_lcl_ifindex, @multicast2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 4.611423237s ago: executing program 8 (id=6087): socket$inet6(0xa, 0x80001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00020076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x154) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@nombcache}, {@oldalloc}, {@nodiscard}, {@quota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0x3, 0x452, &(0x7f0000000140)="$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") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() r4 = geteuid() mount$9p_virtio(0x0, &(0x7f0000001000)='./bus\x00', &(0x7f00000003c0), 0x840020, &(0x7f0000000680)={'trans=virtio,', {[], [{@fowner_lt={'fowner<', r4}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '#! '}}, {@smackfshat={'smackfshat', 0x3d, 'an\xa5\xd9-\x10\xfd\x19\xb5U\x8b\xc5^h\xbb\xb6\xc0^\x01\xf0R[\xcf\xb7\xd4\\\xafo\xb2q\x0e\xe4\x1e+\xacxG\x82\xb7&\x1f\xbd\xc2\x9fP\xc9<\x03\"D\xa9{\x96\x11\xe7a!\x85u\x9b\xda\xeb\x9d\xa3\x00\xd8|\x8a\xf0\xda\al\xe0\xa6\xeb!\xf3\xbb\t\x1de\x1a\x14t+\xde\x9dD\xc1\\\x04\x00\x00\x00\x00\x00\x00\x00{HA\xb8\xbf\x99+\xf1\x02\xc7\xe8_\x1d\xf3\xe5\x9f-\xbd\x85g\xda\xe3\v \x13\xb3\b\x00\x00\x00\x00\x00\x00\x00-\xe4\x00\x99S5'}}, {@fowner_gt={'fowner>', r4}}]}}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000032) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r8, &(0x7f00000029c0), 0x400006d, 0x20000004) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mount(&(0x7f00000005c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000600)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='yrans=rdma,') 4.611167307s ago: executing program 1 (id=6088): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='>E'], 0x4c}}, 0x4000015) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e355d3232e6301ba6d90a058d7845", 0x11}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff00, 0x100}, 0x8) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 4.575897738s ago: executing program 4 (id=6089): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") lsetxattr$security_selinux(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.308982197s ago: executing program 1 (id=6092): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @loopback, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x4a}, 0x41}, r3, 0x1}}, 0x48) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000680)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r6}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002780)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000cc0)="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", 0x1a5}, {&(0x7f0000000700)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a583115", 0x93}], 0x2}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000380)="3a826f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f4b7231caab54aaa15e736e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61e320ead44c2256a14c3c29f6fea826ce6dfcdbd00000000000000", 0x75}, {&(0x7f0000001240)="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", 0x149}, {&(0x7f0000000600)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace70600095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f9657", 0x72}], 0x3}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)="6210497ecf38ab1295c82ae11bb5d4e878a5c991840827ca02ec6587fa60b9450433ff931f3c77609961fea486ac8c016b346865e77f453a7e530044f166706d878029a1e61397981895b91723516831c94a96ea73d7dc1a058f09d49ad04dc239d71747bd1cc3417d6f1a6d5fd60605522e7f82bf18ba3aca52b25d155b0bf0b2aeddd2a8c926aa2d688df0", 0x8c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="16067563fbf2f3094e11fe800dc2bf2e106966cf4e5a356ff4773d9630e3d6cd1c3b10ddfe9b8df9f62eb4087960ba02f0d500b75998e180d90d56d8f0af7bc9ebe94507e43721bcfc9ca60e61422799db619096fbc9b98c5988527d3602211e17542986520283a52b1f5bbf86d8a0f7c5f5f3177e360fa4a4b9029adc48a00e2267e35dec7d76bef0d2b7897122e853827b99cec9a7538b3a620f3da9e6642aaa7bb307931c75e76808714d0c5ebcdfdfe7c6bdaf4aec612aaae489d89878a457bed22f0b7d362225462eba2c65258482399447113e05b2d06d3ea8012188c87f64c8", 0xe3}, {&(0x7f0000000140)="6050c6b5b0972f8eebaf", 0xa}], 0x2}}, {{0x0, 0x0, &(0x7f0000001080)=[{0x0}, {&(0x7f0000001780)="b05a16ba30a49d206ef40e78819d09a49d35e1b0997f7b6fc1382babaa05c6de2967163596daa74f089f30a21d3084a00766324ed309bbf03532b3855e86216ad780b82d5ed043e39d8c3fe1d815e3eab24ee2d10c733a52626d7fe21d47e52d197f3adb1c478018c538efb14a7d55a8307d566cfeea57040181", 0x7a}], 0x2}}], 0x6, 0x2000c044) sendto$inet(r1, &(0x7f0000001740)="e83901d3ce", 0x5, 0x32000800, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x40000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r8, 0x1000) unshare(0x22020600) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xfffffc8d) r11 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000100)=0x1e, 0x4) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) 3.263576319s ago: executing program 7 (id=6093): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r2, 0xf, 0x70bd2d, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008001}, 0xc000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, r0, 0x0, 0xffffffffffffff8f, 0xfffffffffffffffe}, 0x30) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = getgid() fchown(r3, r4, r5) 3.207583291s ago: executing program 9 (id=6094): io_setup(0x2007, &(0x7f0000000980)=0x0) r1 = eventfd2(0x39, 0x0) r2 = eventfd(0x7) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x4000, 0x2, 0x0, r1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, r2}]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000100)={0x0, 0xff1f, 0x2, 0x0, 0x2a5}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) r4 = io_uring_setup(0x4ff2, &(0x7f0000000040)={0x0, 0xc89e, 0x20000, 0xb, 0x20002fb, 0x0, r3}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) ioctl$RTC_AIE_OFF(r5, 0x7002) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000000) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x7, 0x6, 0x8, 0x0, 0xb, 0x104, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x1000}, 0x4210, 0xd, 0x5, 0x8, 0x8, 0x3, 0x0, 0x0, 0x647, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x6, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x7, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x796, 0x5, 0x931, 0x1000101, 0x3, 0x1000000000008001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6a7, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x10001, 0x8, 0x80008000, 0x8000000000000000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x1, 0x4, 0x8000, 0x2, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0x3, 0xb, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0xe, 0x4, 0x8, 0x7, 0x3, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x9, 0x6, 0x5, 0xfffffffffffffffd, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2000c12, &(0x7f0000000400)=ANY=[@ANYBLOB='check=relaxed,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d61703d6e6f726d616c2c6f76657272696465726f636b7065726d2c636865636b3d7374726963742c73657373696f6e3d3078303030303030303030303030303033622c7362736563746f723d3078303030303030303030303030303030312c696f636861727365743d6d6163726f6d5a6e2c636865ee18d70e88636b3d72656c617865642c6e6f6a6f6c6965742c686964652c73657373696f6e3d3078303030303030303030303030303035642c00"], 0x4, 0xa24, &(0x7f0000001380)="$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") setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) open$dir(0x0, 0x480, 0x10) 3.117557823s ago: executing program 7 (id=6095): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x5, 0x9, 0x10, @remote, @mcast1, 0x1, 0x1, 0x81, 0x7ff}}) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="a50100000100000004"], 0x18) sendmmsg$inet6(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)='GPL\x00', 0x204283, &(0x7f0000000280)={@align=0x4, {0x5, 0x3, 0x80000001, 0x6}}, 0x40, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xf43}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x0, 0x4, 0x9, 0x9, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r5, &(0x7f0000000140)=0x7fd, 0x12) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000500)=""/155, &(0x7f00000005c0)=0x9b) 3.037406346s ago: executing program 7 (id=6096): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.876501611s ago: executing program 9 (id=6097): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x101000c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfd, 0x64e, &(0x7f0000019200)="$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") r2 = fsmount(r1, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a300000000009e2030073797a320000000030000000060a010400000008000b404000000008000a40000000020900010073797a3000000000140000001100010000000000000000000300000a558cdb723fa6d718711fdcf478f90dcfecc6320943300accf096f56bb6576bfca934fae8975907f431d7581441e5854dfe645b03e9ef060bc0221eaa93713c92"], 0xa4}}, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', &(0x7f0000000480)={0x2ac402, 0x4, 0x21}, 0x18) move_mount(r0, &(0x7f0000000280)='./file1\x00', r6, &(0x7f00000004c0)='./file1\x00', 0x26) write$cgroup_pid(r5, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000240), r3) socket$unix(0x1, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, &(0x7f0000000100)=0x4, 0xc3000000) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x939a0bed736b351}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2.676908337s ago: executing program 8 (id=6098): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000240)={0x0, 0x4, 0x6, 0x0, @vifc_lcl_ifindex, @multicast2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x2, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 2.667400577s ago: executing program 4 (id=6099): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback, 0xffffffffffffffff, 0xc, 0x2014}, 0x20) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847}, 0x40000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=ANY=[@ANYBLOB="b8000000000105050000000000000000020000003c0002802c0001"], 0xb8}}, 0x0) 2.553826691s ago: executing program 9 (id=6100): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r0}, 0x38) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (fail_nth: 3) 2.387427006s ago: executing program 9 (id=6101): socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1400000004000000040000000200010000180000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x5, 0xfff, 0xe9, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sg(0x0, 0x0, 0x9840) ioctl$SG_IO(r3, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @scatter={0x1, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/166, 0xa6}]}, &(0x7f0000000000)="75934a995a06", 0x0, 0x0, 0x4, 0x0, 0x0}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x100300, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000540000a44000000090a0d0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a4007000000080003400000013014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getrlimit(0xc, &(0x7f0000000280)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.298451699s ago: executing program 1 (id=6102): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x44880) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x20208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6043440a000040433cb17e060000000821f7622a00348973e77b00"/50], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendfile(r3, r2, 0x0, 0xfffa83) 2.179909093s ago: executing program 8 (id=6103): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) (fail_nth: 3) 1.812333064s ago: executing program 4 (id=6104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e05cd52774833bfeef5b6fe49bed7f0b2347f9641b109f238ea8f1034accf6c58794e6e506f7b204aa86769d3af06bb37433aa94cda5dbeff64e501a23482c4cdd622c29879a62fa2c165dd660fd0a5443925c471937e227412c5151a7e4c705c547da9ffb6a4d7fabf1f6f7ffffffffff"], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "48a91af4b4472d0c", "f5e06150009e1c9a7de902e9fc4a207891d92c8f7e0072da53f3e77b0b7e9d08", '\rHwC', "d6f3419e9f033463"}, 0x38) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66cf7e6a5", 0x7}], 0x1) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x1) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0xc, [@fwd={0xe}, @struct={0x2, 0xa, 0x0, 0x4, 0x1, 0x401, [{0x10, 0x5, 0x2}, {0x1, 0x3, 0x3f07}, {0x1, 0x5, 0x4}, {0xa, 0x1, 0x1}, {0xb, 0x0, 0x6fb73b61}, {0xb, 0x2, 0x7}, {0x8, 0x4, 0x9}, {0x7, 0x1, 0xa}, {0x1, 0x5}, {0xe, 0x0, 0x8}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x0, 0x5f, 0x0, 0x61, 0x61, 0x0, 0x2e]}}, &(0x7f0000000e40)=""/4096, 0xb4, 0x1000, 0x0, 0x8001, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x2e, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@jmp={0x5, 0x0, 0x2, 0x4, 0x7, 0x20, 0xfffffffffffffff5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query, @tail_call, @alu={0x4, 0x1, 0xc, 0x3, 0xb, 0x6, 0x10}, @jmp={0x5, 0x0, 0x3, 0x1, 0x2, 0xfffffffffffffffe, 0x10}, @ringbuf_query, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0xffffffff, 0x43, &(0x7f0000000840)=""/67, 0x41100, 0x0, '\x00', r1, 0x18, r4, 0x8, &(0x7f00000008c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x6, 0x5}, 0x10, 0x17015, 0xffffffffffffffff, 0x0, &(0x7f00000009c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a00), 0x10, 0x8001}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0xaf, 0x10000}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c7643600000088ff", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xffffffffffffff10, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x10000, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.672198239s ago: executing program 7 (id=6105): sendto$llc(0xffffffffffffffff, &(0x7f0000000000)="381eed546eb0adb566c160ed8c6a229d5576e284885d667283860d87bc9d393870d04db3c26ca1f309c0e3dc95ae2459f25a1ea75bd87a0526d302f312790db3316ac2da46fc424aaa238ba7f5979b94af9cab99", 0x54, 0x4004, &(0x7f0000000080)={0x1a, 0x1b, 0x2, 0x0, 0x1, 0x4, @multicast}, 0x10) (async) r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setns(r1, 0x10000000) (async) r2 = socket(0x23, 0x5, 0x1) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) (async) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000001c0)=0x7, 0x4) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x75, "a96b69683f06bd36f452c076face82f0bc6e3f9fbeb6a6eabf877717ba393cb0671877d565dfa3b8648e8b1e2dbdc69b0a5d2403c5259cb08f458b8bd64154c8e80a07ccacf00cafe2b4bc4704facd5c37585f0716bc1a8b15d6d98991935c0d2c8cd05b6c1d70553e0fd2935c9cf354edf6bb2690"}, &(0x7f0000000280)=0x7d) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x140c, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}]}, 0x30}}, 0x800) (async) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000003c0)=0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x1b, 0x5, 0x4b8, 0x1e0, 0x2f8, 0xffffffff, 0x0, 0x0, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xf8c797645a8557b4, @ipv6=@mcast2, @ipv4=@broadcast, @port=0x4e20, @port=0x4e24}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff], [0xff, 0x0, 0xff000000], 'pimreg1\x00', 'vlan0\x00', {}, {}, 0x0, 0x85, 0xf255e977dc34212c, 0x48}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, @ipv6=@private1, @gre_key=0x3, @gre_key=0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv6=@mcast1, @port=0x4e22, @port=0x4e23}}}, {{@ipv6={@loopback, @remote, [0xff000000, 0xff000000, 0xffffffff, 0x8000007f], [0xffffffff, 0xff, 0xff000000, 0xff000000], 'dvmrp0\x00', 'pimreg1\x00', {}, {}, 0x0, 0x5f, 0x2, 0x48}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv6=@private0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, @icmp_id=0x81, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) (async) r4 = openat$cgroup_ro(r1, &(0x7f00000009c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000a00)={r3, 0x8, 0x2}, &(0x7f0000000a40)=0x8) (async) r5 = dup(r2) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000a80)) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)=@gettclass={0x24, 0x2a, 0xc1fff46cf5eef702, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xc, 0x3}, {0x10, 0x4}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x20000000) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) mkdirat(r1, &(0x7f0000000bc0)='./file0\x00', 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000c40)={r6, 0x1, 0x6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000d00)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000d40)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000d80)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000dc0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000e00)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 1.61916154s ago: executing program 1 (id=6106): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x27, 0xe, 0x0, &(0x7f0000000180)="378b23e1e6d4996a3356d4a6c293", 0x0, 0x5, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x20, 0x84, 0x8, "fe8000000000000002"}], 0x20}, 0x41) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x4}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 1.555520432s ago: executing program 7 (id=6107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='>E'], 0x4c}}, 0x4000015) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000140)="08cb7e355d3232e6301ba6d90a058d7845", 0x11}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}, @IFLA_PROP_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000003c0)={0x0, 0xff00, 0x100}, 0x8) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 1.555311852s ago: executing program 8 (id=6108): r0 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) io_setup(0x239f, &(0x7f0000000380)=0x0) io_destroy(r2) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) keyctl$describe(0x6, r0, &(0x7f0000001000)=""/61, 0x3d) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) 1.036856099s ago: executing program 9 (id=6109): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@grpjquota}]}, 0x1, 0x625, &(0x7f0000000800)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$eJzs281rHOUfAPDvTF77mvz66++ltWq0CEExadKqPXhRFEQqCnqox7jZltBtI00E+4KNIp4EKehZPIr+BeJFBFFPgifBkycpFM2lrafI7M4k2U02bZJNtnY/H9js88w8O/N8d+aZeeZ5NgF0rKHsTxKxOyJ+jYiBWra+wFDt7eb85dKt+culJBYWXv0jqZa7MX+5VBQtPrcrzwynEen7Sb6TejMXLp6ZqFTK5/P86OzZvjw5cbp8unxu/PjxY0fHnnpy/ImWxJnFdePgO9OHDrzw+tWXSievvvHDl1l9d+frl8exTr+MNlkxlAX+50JV47pHNrizu9WeZemku40VYV268ldPtf0PRFcsHbyBeP69tlYO2FLZvamv+eq5BeAelkS7awC0R3Gj3znfVcqegVc+Bw9sZfej7a4/E5E98mRx38xftTXdkeZlehqeb1tpKCJOzv31afaKzY1DAADckQ9Ln5zojYhLt754Met7LPX20u7/Vt9/q/7dm/cEByPiXxGxLyL+HRH7I+I/EZGV/V9E/H+T9VnZ/0mvbXKTa8r6f0/nc1v1/b+i9xeDXXluTzX+nuTUVKV8JP9OhqOnL8uPrbGPb577+aNm65b3/7JXtv+iL5jX41p3wwDd5MTsRLVT2gLX34042J0kK+NPFmcCkog4EBEH17fpvUVi6tHPDzUrdPv419CCeaaFz7Lw5rLjPxcN8ReS2vzkm6MzFy4+PnW2cX5ytD8q5SOjxVmx0o8/ffBKs/3X4u/Pc6vHv2PzYTZ1vVx7X3b8l61dbANL87Uzrd3/Bs//tDd5rTrP3Jsve3tidvb8WERvcqKar1s+vvTZIl+Uz87/4cOrt/99+Wey439fRGQn8f0R8UBEPJjX/aGIeDgiDq8R4/fP3j7+SDdw/rdAFv/kqte/xfN/MKk7/utPdJ357qtm+7+z43+smhrOl1Svfw2Shvxq1emO6Gus4Ga/PwAAAPgnSKu/gU/SkcV0mo6M1H7Dvz92ppXpmdnHTk2/dW6y9lv5wehJi5GugXw8tDJVKY8lc/kWa+Oj4/lYcTFeejQfN/64a0c1P1Karky2OXbodLuatP/M713trh2wxeqnl4oJ4PHetlQG2GaN8+hpffbKy+FiAPcq/68Nnes27T/drnoA28/9HzrXau3/SkPeXADcm9z/oXNp/9Ch0m9XXfz1tlcEaAf3f+hIm/m//i1M9N8d1WhPYrsPSqyrcBSJtO1fVKsS/XFXVGPjiUt5a27lltt8YQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiRvwMAAP//6zPa6w==") lsetxattr$security_selinux(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000700)=@deltaction={0x14, 0x31, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 849.396424ms ago: executing program 4 (id=6110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000040)}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000001c000480180001800e000100627974656f72646572040000040002800600074033590000140000001100010000000000000000000000000a"], 0x78}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) r4 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r4, &(0x7f0000007240), 0x0, 0x1c000) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x9}, 0x4000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) r5 = socket(0x1d, 0x2, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="090300000000000000002e"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0400420046d266", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf250d00000008000500010000800800060006000000"], 0x24}, 0x1, 0x0, 0x0, 0x20060000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x61001, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[], 0x70}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r9) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x800) setsockopt$inet6_buf(r5, 0x29, 0xd2, &(0x7f0000000280)="218b983e07c040a3aa27", 0xa) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r10 = dup3(r0, r1, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x100}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1) 849.008654ms ago: executing program 1 (id=6111): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 631.374831ms ago: executing program 1 (id=6112): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYBLOB="0000000000000000b705000008000000850000006a000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300004b000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) futex(&(0x7f00000018c0), 0x7, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x19, &(0x7f0000000180), 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40042, 0x101) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @rand_addr=0xdffffc13}}) io_setup(0x4, &(0x7f00000014c0)=0x0) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="02000826c400000000002d0058afb41a89927bf62cb100000000000b200007000000ffff"], 0x24, 0x3) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000740)={0x8, 0xffffe1ac, 0x4, 0x6, 0x7}) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r5, 0x0}]) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x5c, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x3e269}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) io_submit(0x0, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 630.816161ms ago: executing program 4 (id=6113): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x4c, 0x1a, 0x0, 0x73, 0x250, 0x258, 0x258, 0x250, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x5, 0x576, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x380) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x28, 0x3, 0x5c}, 0x2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) rseq(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(0x0, r6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFC_CMD_DISABLE_SE(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, r7, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000001ac0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x50, r8, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000a00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)={0x4bc, r5, 0x5a697397f1c7a8af, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x178, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "09dae3a1fd6ff229668390bc5b869c3a43b89e1e3996dd07e8345d95f13c3fca"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4ebc8eb31be12cf5592cdc14b23a4b4a33083733dc7b0f0c46738e6e29271489"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "427dc138d97e55784535441071fcbe625fbd589d4844d1d7ee2107619d9cc0bd"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4c2077a0f300fb130548cb5f5f2e71ce8fcf51a2af22a1706ff523e6d88fa314"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "35185b9e8b7d0b15d97713cd39c3d830"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3c6b}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x54, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3ff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2ac173377e267ecc21f578126f53698cbf175909a919f55ba7d8e4b22eace93b"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x114, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbb}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b8e9d7f97ecfa7a144bf299cdd3b097b33e467d3a5b4aa231cda087ffd6cb3fc"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6f196d5b3d4f02af8946e61dd7bbf94ac5320988d5a29cbe02c420656154b22c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4fe75500e78af273542758593168d87105a4aa14b88a32bc391d1a58ae7effe4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9785d0a730b8f88339f221ed6bbfad6f31dd8d17e23a0792bcd5691089b70096"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9f01dc054b40a0eacf6b5006ba0c32954201f547af04d25669b8e15239d3b78e"}]}, @NL802154_ATTR_SEC_KEY={0x124, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9a48110735ea7a8078b12554efd0be208ee0ff7e38f24197fed39af16b4330b5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9cddb6d38d50449094ce7370ad373950143aa2198edd5328b611acf34ddca75e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8591e3b3641138d22cb3878c89e85dbba1c98f7fb873db1def279bbf55edd6d4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5ef1b7060161b5bea6e5fb86384b5561"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "602c1bb96e68622fee572be2f0bee09f"}, @NL802154_KEY_ATTR_ID={0x58, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8e2b868aec7c5b8d9240efd7dff6992ee07e845ce009f7f2e1ae2db72941e616"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}, @NL802154_ATTR_SEC_KEY={0xe4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8a1867edb153b32cadb599b9f24a3cc9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "870478f99b35936a85c40b4173c8727a68b288d689570f2620664b373cbbe557"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4936}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x5555555555550081}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8010) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000ffdbdf252e00000008002f000000000005003700010000000c0005005702aaaaaaaaaaaa050036007e0000000a0001007770616e30"], 0x44}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4044) 581.351853ms ago: executing program 7 (id=6114): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 425.773298ms ago: executing program 8 (id=6115): prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x2}, 0x103002, 0x32, 0x43a1bd56, 0x7, 0x8000000000000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000ff1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, 0x94) 416.035317ms ago: executing program 4 (id=6116): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="6233f15b4203a5e0ff691c87a1e870000000ffffffffffffaaaaaaaaaabb0800450022452c00000000002f9078ac1e0001e00000010000655800180000000000"], 0xfdef) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x20, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6, 0x2, 0x140c4850}]}]}, 0x20}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000100)=0xffffffff, 0x4) r5 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e00440002800600020001000000080009000100030008000300", @ANYRES16], 0x84}}, 0x20008040) fchmod(r5, 0x1fe) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="6233f15b4203a5e0ff691c87a1e870000000ffffffffffffaaaaaaaaaabb0800450022452c00000000002f9078ac1e0001e00000010000655800180000000000"], 0xfdef) (async) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x20, r2, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6, 0x2, 0x140c4850}]}]}, 0x20}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000100)=0xffffffff, 0x4) (async) memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e00440002800600020001000000080009000100030008000300", @ANYRES16], 0x84}}, 0x20008040) (async) fchmod(r5, 0x1fe) (async) 0s ago: executing program 9 (id=6117): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x44880) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x200, 0x20208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6043440a000040433cb17e060000000821f7622a00348973e77b00"/50], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) sendfile(r3, r2, 0x0, 0xfffa83) kernel console output (not intermixed with test programs): ied { write } for pid=23777 comm="syz.4.5715" lport=56970 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 951.260115][T23787] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5717'. [ 951.275682][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.310894][ T28] audit: type=1400 audit(2000001145.811:3213): avc: denied { ioctl } for pid=23777 comm="syz.4.5715" path="socket:[76948]" dev="sockfs" ino=76948 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 951.335727][ T28] audit: type=1400 audit(2000001145.871:3214): avc: denied { create } for pid=23786 comm="syz.4.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 951.355994][ T28] audit: type=1400 audit(2000001145.871:3215): avc: denied { write } for pid=23786 comm="syz.4.5717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 951.447110][T23798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 951.465328][T23798] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 951.637660][T23803] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 951.804545][T23807] xt_TCPMSS: Only works on TCP SYN packets [ 951.924826][T23816] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5729'. [ 951.952323][T23816] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5729'. [ 951.989355][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5729'. [ 952.040891][T23816] syzkaller0: entered promiscuous mode [ 952.040924][T23816] syzkaller0: entered allmulticast mode [ 952.049912][T23816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23816 comm=syz.8.5729 [ 952.145038][T23830] xt_CT: You must specify a L4 protocol and not use inversions on it [ 952.224504][T23830] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 952.226430][T11153] IPVS: starting estimator thread 0... [ 952.322453][T23835] IPVS: using max 2304 ests per chain, 115200 per kthread [ 952.488371][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5737'. [ 952.488399][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5737'. [ 952.488912][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5737'. [ 952.488926][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5737'. [ 952.520998][T23852] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5738'. [ 952.521019][T23852] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5738'. [ 952.580106][T23863] xt_TCPMSS: Only works on TCP SYN packets [ 952.818191][T23857] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.818331][T23857] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.888024][T23881] loop9: detected capacity change from 0 to 512 [ 952.920861][T23881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 952.930630][T23881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 952.930711][T23881] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.036086][T23857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.054442][T23857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.098399][T23857] bridge1: left promiscuous mode [ 953.106694][T22359] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.121628][T22359] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.135392][T22359] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.152599][T22359] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.164778][T23841] gre0 speed is unknown, defaulting to 1000 [ 953.170804][T22359] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.184517][T22359] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.214931][T22359] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 953.242477][T22359] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.272994][T23895] FAULT_INJECTION: forcing a failure. [ 953.272994][T23895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.287099][T23895] CPU: 1 UID: 0 PID: 23895 Comm: syz.8.5745 Tainted: G W syzkaller #0 PREEMPT(full) [ 953.287175][T23895] Tainted: [W]=WARN [ 953.287182][T23895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 953.287269][T23895] Call Trace: [ 953.287279][T23895] [ 953.287297][T23895] __dump_stack+0x1d/0x30 [ 953.287329][T23895] dump_stack_lvl+0x95/0xd0 [ 953.287358][T23895] dump_stack+0x15/0x1b [ 953.287382][T23895] should_fail_ex+0x263/0x280 [ 953.287420][T23895] should_fail+0xb/0x20 [ 953.287520][T23895] should_fail_usercopy+0x1a/0x20 [ 953.287559][T23895] _copy_from_iter+0xcf/0xea0 [ 953.287610][T23895] ? alloc_pages_mpol+0x217/0x260 [ 953.287643][T23895] copy_page_from_iter+0x161/0x1f0 [ 953.287747][T23895] tun_get_user+0xbe3/0x27e0 [ 953.287785][T23895] ? ref_tracker_alloc+0x1eb/0x2f0 [ 953.287820][T23895] tun_chr_write_iter+0x15e/0x210 [ 953.287901][T23895] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 953.287997][T23895] vfs_write+0x5a6/0x9f0 [ 953.288061][T23895] ksys_write+0xdc/0x1a0 [ 953.288102][T23895] __x64_sys_write+0x40/0x50 [ 953.288140][T23895] x64_sys_call+0x27e1/0x3020 [ 953.288188][T23895] do_syscall_64+0x12c/0x3b0 [ 953.288220][T23895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.288283][T23895] RIP: 0033:0x7fe89a03d68e [ 953.288304][T23895] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 953.288328][T23895] RSP: 002b:00007fe898acefb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.288390][T23895] RAX: ffffffffffffffda RBX: 00007fe898acf6c0 RCX: 00007fe89a03d68e [ 953.288405][T23895] RDX: 000000000000003e RSI: 0000200000000700 RDI: 00000000000000c8 [ 953.288418][T23895] RBP: 00007fe898acf090 R08: 0000000000000000 R09: 0000000000000000 [ 953.288433][T23895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.288501][T23895] R13: 00007fe89a2f6038 R14: 00007fe89a2f5fa0 R15: 00007ffe49761988 [ 953.288521][T23895] [ 953.527866][T23841] xfrm0 speed is unknown, defaulting to 1000 [ 954.060077][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.108006][T22365] bridge_slave_1: left allmulticast mode [ 954.152166][T23907] loop8: detected capacity change from 0 to 512 [ 954.154085][T22365] bridge_slave_1: left promiscuous mode [ 954.179791][T22365] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.201732][T23912] loop1: detected capacity change from 0 to 512 [ 954.233100][T22365] bridge_slave_0: left allmulticast mode [ 954.245640][T22365] bridge_slave_0: left promiscuous mode [ 954.254363][T23913] loop7: detected capacity change from 0 to 512 [ 954.260868][T22365] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.311494][T23907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 954.325863][T23912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 954.369461][T23913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 954.386101][T23912] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.423782][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.439774][T23913] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 954.500301][T22365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.534825][T22365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.565710][T22365] bond0 (unregistering): Released all slaves [ 954.627240][T22365] tipc: Disabling bearer [ 954.643733][T22365] tipc: Left network mode [ 954.871711][T23940] pim6reg: entered allmulticast mode [ 954.905570][T22365] hsr_slave_0: left promiscuous mode [ 954.926704][T22365] hsr_slave_1: left promiscuous mode [ 954.950895][T22365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.106473][T23940] pim6reg: left allmulticast mode [ 955.144935][T23951] loop9: detected capacity change from 0 to 512 [ 955.240040][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 955.242614][T23951] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 955.275282][T23951] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.275519][ T3024] 8021q: adding VLAN 0 to HW filter on device eth21 [ 955.408908][T23841] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.422255][T23841] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.429739][T23841] bridge_slave_0: entered allmulticast mode [ 955.436556][T23841] bridge_slave_0: entered promiscuous mode [ 955.443694][T23841] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.450833][T23841] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.458263][T23841] bridge_slave_1: entered allmulticast mode [ 955.464854][T23841] bridge_slave_1: entered promiscuous mode [ 955.485166][T23841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.495871][T23841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.524901][T23965] loop8: detected capacity change from 0 to 1024 [ 955.543073][T23841] team0: Port device team_slave_0 added [ 955.551960][T23841] team0: Port device team_slave_1 added [ 955.574557][T23841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.583674][T23841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.611090][T23965] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 955.621466][T23965] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 955.632272][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 955.654043][T23841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.690101][T23965] EXT4-fs error (device loop8): ext4_get_journal_inode:5896: inode #32: comm syz.8.5756: iget: special inode unallocated [ 955.720026][T23965] loop8: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 955.720191][T23965] EXT4-fs (loop8): no journal found [ 955.729439][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 955.729486][ C0] EXT4-fs (loop8): initial error at time 2000001150: ext4_get_journal_inode:5896: inode 32 [ 955.729522][ C0] EXT4-fs (loop8): last error at time 2000001150: ext4_get_journal_inode:5896: inode 32 [ 955.767418][T23841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.802093][T23841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.831562][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.848474][T23965] EXT4-fs (loop8): can't get journal size [ 955.872662][T23841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.872756][T23965] EXT4-fs (loop8): filesystem is read-only [ 955.931746][ T3024] 8021q: adding VLAN 0 to HW filter on device eth22 [ 955.933536][T23965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 955.965893][T23841] hsr_slave_0: entered promiscuous mode [ 955.973236][T23841] hsr_slave_1: entered promiscuous mode [ 955.982289][T23841] debugfs: 'hsr0' already exists in 'hsr' [ 956.060780][T23841] Cannot create hsr debugfs directory [ 956.081839][T22365] IPVS: stop unused estimator thread 0... [ 956.289046][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 956.289061][ T28] audit: type=1400 audit(2000001150.901:3269): avc: denied { map } for pid=23990 comm="syz.9.5761" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 956.393957][ T28] audit: type=1400 audit(2000001150.901:3270): avc: denied { read write } for pid=23990 comm="syz.9.5761" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=77346 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 957.019267][ T28] audit: type=1400 audit(2000001151.631:3271): avc: denied { ioctl } for pid=23990 comm="syz.9.5761" path="socket:[77343]" dev="sockfs" ino=77343 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 957.152252][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.161854][ T28] audit: type=1400 audit(2000001151.731:3272): avc: denied { write } for pid=23993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.191847][T24014] tmpfs: Too few inodes for current use [ 957.215290][T24015] loop9: detected capacity change from 0 to 512 [ 957.226523][T24009] loop7: detected capacity change from 0 to 128 [ 957.241769][T24015] EXT4-fs: Ignoring removed oldalloc option [ 957.246828][T24017] loop1: detected capacity change from 0 to 512 [ 957.258924][ T28] audit: type=1400 audit(2000001151.801:3273): avc: denied { remount } for pid=24008 comm="syz.7.5763" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 957.276613][T24009] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 957.303706][ T28] audit: type=1400 audit(2000001151.801:3274): avc: denied { getopt } for pid=24013 comm="syz.9.5764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 957.324662][T24015] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 957.338012][T24017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 957.350957][ T28] audit: type=1400 audit(2000001151.901:3275): avc: denied { write } for pid=24018 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.373912][T24009] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 957.386623][T24015] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.5764: invalid indirect mapped block 83886080 (level 1) [ 957.401026][T24017] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.422438][T24015] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 957.432403][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 957.448079][ C0] EXT4-fs (loop9): initial error at time 2000001152: ext4_free_branches:1023: inode 16 [ 957.457796][ C0] EXT4-fs (loop9): last error at time 2000001152: ext4_free_branches:1023: inode 16 [ 957.528456][T24015] EXT4-fs (loop9): Remounting filesystem read-only [ 957.538952][T24009] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.5763: checksumming directory block 0 [ 957.571488][T24015] EXT4-fs (loop9): 1 orphan inode deleted [ 957.604090][T24015] EXT4-fs (loop9): 1 truncate cleaned up [ 957.623107][T24015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.658742][T24015] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.741308][T23841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 957.773537][T23841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.887618][T23841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 957.937796][T23841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.945964][T23841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 957.961431][ T28] audit: type=1400 audit(2000001152.561:3276): avc: denied { write } for pid=24028 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 957.996203][T23112] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 958.005854][T23841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 958.017659][T23841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 958.032198][ T28] audit: type=1400 audit(2000001152.561:3277): avc: denied { write } for pid=24044 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.096754][T23841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.107389][T24047] __nla_validate_parse: 2 callbacks suppressed [ 958.107429][T24047] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5764'. [ 958.198675][T24047] 9pnet_virtio: no channels available for device /dev/nbd9 [ 958.284621][ T28] audit: type=1400 audit(2000001152.631:3278): avc: denied { unmount } for pid=23112 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 958.686350][T23841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.806222][T23841] 8021q: adding VLAN 0 to HW filter on device team0 [ 958.821342][T22368] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.828495][T22368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.842034][T22368] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.849399][T22368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.870691][T23841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 958.882028][T23841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.914533][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 958.995738][T24073] loop7: detected capacity change from 0 to 512 [ 959.039530][T24073] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 959.170690][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5771'. [ 959.209651][T24090] loop9: detected capacity change from 0 to 512 [ 959.219973][T24073] EXT4-fs (loop7): 1 truncate cleaned up [ 959.226272][T24073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.238931][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5771'. [ 959.264147][T23841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.293057][T24090] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 959.463378][T24090] EXT4-fs (loop9): 1 truncate cleaned up [ 959.469614][T24090] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.805590][T23841] veth0_vlan: entered promiscuous mode [ 959.830900][T23841] veth1_vlan: entered promiscuous mode [ 959.838408][T24139] loop1: detected capacity change from 0 to 1024 [ 959.865823][T24139] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 959.890890][T23841] veth0_macvtap: entered promiscuous mode [ 959.904194][T24139] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 959.919555][T23841] veth1_macvtap: entered promiscuous mode [ 959.941893][T24139] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.5775: iget: special inode unallocated [ 959.968267][T23841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.984258][T24139] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 959.985020][T24139] EXT4-fs (loop1): no journal found [ 959.994322][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 959.994347][ C1] EXT4-fs (loop1): initial error at time 2000001154: ext4_get_journal_inode:5896: inode 32 [ 959.994385][ C1] EXT4-fs (loop1): last error at time 2000001154: ext4_get_journal_inode:5896: inode 32 [ 960.027366][T23841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.048187][T22360] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.071327][T22360] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.092437][T24139] EXT4-fs (loop1): can't get journal size [ 960.099879][T24139] EXT4-fs (loop1): filesystem is read-only [ 960.106136][T22360] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.122913][T24139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 960.133944][T22360] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.314541][T24147] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5777'. [ 960.591650][T24149] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24149 comm=syz.8.5777 [ 960.835905][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 961.975041][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 961.975093][ T28] audit: type=1400 audit(2000001156.591:3299): avc: denied { sqpoll } for pid=24171 comm="syz.8.5782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 962.037886][ T28] audit: type=1400 audit(2000001156.611:3300): avc: denied { read write } for pid=24171 comm="syz.8.5782" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 962.100601][T24172] loop8: detected capacity change from 0 to 1764 [ 962.111257][ T28] audit: type=1400 audit(2000001156.611:3301): avc: denied { open } for pid=24171 comm="syz.8.5782" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 962.146309][T24172] iso9660: Unknown parameter 'cheî׈ck' [ 962.173009][ T28] audit: type=1400 audit(2000001156.621:3302): avc: denied { ioctl } for pid=24171 comm="syz.8.5782" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 962.531083][T24190] loop1: detected capacity change from 0 to 1024 [ 962.610937][ T28] audit: type=1400 audit(2000001157.141:3303): avc: denied { mount } for pid=24186 comm="syz.4.5787" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 962.704056][T24187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5787'. [ 962.748671][T24190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 962.765355][T24190] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.793730][ T28] audit: type=1400 audit(2000001157.401:3304): avc: denied { write } for pid=24189 comm="syz.1.5788" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 962.826233][T24190] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.5788: Freeing blocks not in datazone - block = 0, count = 16 [ 962.872019][ T28] audit: type=1400 audit(2000001157.401:3305): avc: denied { write } for pid=24189 comm="syz.1.5788" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 962.962905][ T28] audit: type=1400 audit(2000001157.401:3306): avc: denied { map } for pid=24189 comm="syz.1.5788" path="/531/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 962.991509][ T28] audit: type=1400 audit(2000001157.581:3307): avc: denied { name_bind } for pid=24189 comm="syz.1.5788" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 963.014385][T24190] IPVS: set_ctl: invalid protocol: 33 172.20.20.20:20002 [ 963.100943][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.115290][T22365] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 112: padding at end of block bitmap is not set [ 963.153022][T22365] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 963.182512][T22365] EXT4-fs (loop1): This should not happen!! Data will be lost [ 963.182512][T22365] [ 963.202468][T22365] EXT4-fs (loop1): Total free blocks count 0 [ 963.209948][T22365] EXT4-fs (loop1): Free/Dirty block details [ 963.222405][T22365] EXT4-fs (loop1): free_blocks=0 [ 963.232464][T22365] EXT4-fs (loop1): dirty_blocks=16 [ 963.242470][T22365] EXT4-fs (loop1): Block reservation details [ 963.252405][T22365] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 963.264355][T13781] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 963.291995][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 963.514272][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.938184][T24212] loop1: detected capacity change from 0 to 512 [ 1050.940694][T24219] loop9: detected capacity change from 0 to 1024 [ 1050.958395][ T28] audit: type=1400 audit(2000001245.571:3308): avc: denied { connect } for pid=24213 comm="syz.4.5793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1050.958662][T24218] loop4: detected capacity change from 0 to 512 [ 1050.994944][T24218] EXT4-fs: Ignoring removed nobh option [ 1051.004954][T24219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.017232][T24218] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.5793: corrupted in-inode xattr: invalid ea_ino [ 1051.035702][T24219] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.039326][T24218] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1051.053561][T24212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.081791][T24212] ext4 filesystem being mounted at /532/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.092289][ T28] audit: type=1400 audit(2000001245.691:3309): avc: denied { write } for pid=24215 comm="syz.9.5791" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1051.092601][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1051.092618][ C1] EXT4-fs (loop4): initial error at time 2000001245: ext4_iget_extra_inode:5128: inode 15 [ 1051.092654][ C1] EXT4-fs (loop4): last error at time 2000001245: ext4_iget_extra_inode:5128: inode 15 [ 1051.134635][T24218] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5793: couldn't read orphan inode 15 (err -117) [ 1051.142631][ T28] audit: type=1400 audit(2000001245.731:3310): avc: denied { ioctl } for pid=24215 comm="syz.9.5791" path="/478/file1/file1" dev="loop9" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1051.180517][ T28] audit: type=1400 audit(2000001245.791:3311): avc: denied { write } for pid=24211 comm="syz.1.5790" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1051.203116][T24218] loop4: lost filesystem error report for type 5 error -117 [ 1051.203891][T24218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.224808][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1051.234696][ T28] audit: type=1400 audit(2000001245.851:3312): avc: denied { read } for pid=24211 comm="syz.1.5790" path="/532/file1/blkio.bfq.io_wait_time" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1051.306909][T24233] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5795'. [ 1051.330842][T24235] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5794'. [ 1051.349729][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.382248][T24237] loop1: detected capacity change from 0 to 1024 [ 1051.393413][T24237] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1051.395498][T24218] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.5793: deleted inode referenced: 15 [ 1051.403488][T24237] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1051.405535][T24237] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.5796: iget: special inode unallocated [ 1051.442057][T24237] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1051.442360][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1051.452768][T24237] EXT4-fs (loop1): no journal found [ 1051.457997][ C0] EXT4-fs (loop1): initial error at time 2000001246: ext4_get_journal_inode:5896: inode 32 [ 1051.464032][T24237] EXT4-fs (loop1): can't get journal size [ 1051.473281][ C0] EXT4-fs (loop1): last error at time 2000001246: ext4_get_journal_inode:5896: inode 32 [ 1051.490619][T24237] EXT4-fs (loop1): filesystem is read-only [ 1051.497311][T24237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1051.589623][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.708935][ T28] audit: type=1400 audit(2000001246.321:3313): avc: denied { watch watch_reads } for pid=24245 comm="syz.4.5799" path="/3/file0" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1051.772051][ T28] audit: type=1400 audit(2000001246.381:3314): avc: denied { create } for pid=24245 comm="syz.4.5799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1052.093461][T24240] syzkaller0: entered promiscuous mode [ 1052.099119][T24240] syzkaller0: entered allmulticast mode [ 1052.325168][ T28] audit: type=1400 audit(2000001246.921:3315): avc: denied { create } for pid=24254 comm="syz.8.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1052.355360][ T28] audit: type=1400 audit(2000001246.921:3316): avc: denied { write } for pid=24254 comm="syz.8.5800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1052.389289][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.428620][T24260] loop1: detected capacity change from 0 to 512 [ 1052.465940][T24260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.483248][T24260] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.511735][ T28] audit: type=1326 audit(2000001247.111:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24254 comm="syz.8.5800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1052.546981][T24269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5801'. [ 1052.556306][T24268] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5803'. [ 1052.623841][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.677413][T24273] loop1: detected capacity change from 0 to 1024 [ 1052.688324][T24273] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1052.701888][T24273] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1052.729744][T24273] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.5805: iget: special inode unallocated [ 1052.749761][T24273] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1052.749954][T24273] EXT4-fs (loop1): no journal found [ 1052.759271][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1052.759298][ C0] EXT4-fs (loop1): initial error at time 2000001247: ext4_get_journal_inode:5896: inode 32 [ 1052.759337][ C0] EXT4-fs (loop1): last error at time 2000001247: ext4_get_journal_inode:5896: inode 32 [ 1052.791751][T24273] EXT4-fs (loop1): can't get journal size [ 1052.830221][T24273] EXT4-fs (loop1): filesystem is read-only [ 1052.837457][T24273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1053.003770][T24283] loop9: detected capacity change from 0 to 128 [ 1053.941734][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.309790][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5811'. [ 1054.337660][T24295] loop7: detected capacity change from 0 to 1024 [ 1054.349555][T24293] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5811'. [ 1054.364685][T24295] EXT4-fs: test_dummy_encryption option not supported [ 1054.398469][T24293] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5811'. [ 1054.551450][T24293] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5811'. [ 1054.660525][T24300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=24300 comm=syz.7.5812 [ 1054.733522][T24300] loop7: detected capacity change from 0 to 512 [ 1055.508486][T24308] loop8: detected capacity change from 0 to 512 [ 1055.520230][T24308] EXT4-fs: Ignoring removed oldalloc option [ 1055.732624][T24308] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1055.751700][T24311] EXT4-fs: Ignoring removed oldalloc option [ 1056.139242][T24311] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1056.166633][T24308] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.5813: invalid indirect mapped block 83886080 (level 1) [ 1056.189191][T24300] EXT4-fs (loop7): 1 orphan inode deleted [ 1056.196449][T24300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.210051][T24300] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.261004][T24311] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5815: invalid indirect mapped block 83886080 (level 1) [ 1056.274919][T24311] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1056.277675][T24311] EXT4-fs (loop1): Remounting filesystem read-only [ 1056.294049][T22360] __quota_error: 59 callbacks suppressed [ 1056.294062][T22360] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1056.315082][T24308] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1056.315888][T24308] EXT4-fs (loop8): Remounting filesystem read-only [ 1056.332358][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1056.338922][ C0] EXT4-fs (loop8): initial error at time 2000001250: ext4_free_branches:1023: inode 16 [ 1056.349017][ C0] EXT4-fs (loop8): last error at time 2000001250: ext4_free_branches:1023: inode 16 [ 1056.358555][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1056.365107][ C0] EXT4-fs (loop1): initial error at time 2000001250: ext4_free_branches:1023: inode 16 [ 1056.375430][ C0] EXT4-fs (loop1): last error at time 2000001250: ext4_free_branches:1023: inode 16 [ 1056.547051][T22360] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 1 [ 1056.559334][T24311] EXT4-fs (loop1): 1 orphan inode deleted [ 1056.565793][T24308] EXT4-fs (loop8): 1 orphan inode deleted [ 1056.572007][T24311] EXT4-fs (loop1): 1 truncate cleaned up [ 1056.577759][T24308] EXT4-fs (loop8): 1 truncate cleaned up [ 1056.584581][T24311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.598409][T24308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.612307][T24311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.622607][T24308] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.708669][T24317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1056.802967][T11153] IPVS: starting estimator thread 0... [ 1056.811865][T24317] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1056.983982][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.002545][T24321] IPVS: using max 2304 ests per chain, 115200 per kthread [ 1057.064461][T24325] set_capacity_and_notify: 1 callbacks suppressed [ 1057.064482][T24325] loop7: detected capacity change from 0 to 512 [ 1057.077866][T24326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1057.081696][T24327] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5813'. [ 1057.135676][T24326] 9pnet_virtio: no channels available for device /dev/nbd1 [ 1057.170202][T24327] 9pnet_virtio: no channels available for device /dev/nbd8 [ 1057.178697][T24325] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.198422][T24331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5821'. [ 1057.210162][ T28] audit: type=1400 audit(2000001251.821:3377): avc: denied { write } for pid=24324 comm="syz.7.5819" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1057.674738][ T28] audit: type=1400 audit(2000001252.291:3378): avc: denied { execute } for pid=24340 comm="syz.4.5823" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=2734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1058.097853][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.405750][T24348] gre0 speed is unknown, defaulting to 1000 [ 1058.949477][T24348] xfrm0 speed is unknown, defaulting to 1000 [ 1059.025092][T24354] sit0: entered allmulticast mode [ 1059.061523][T24359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5828'. [ 1059.306855][T24361] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5829'. [ 1059.422811][T24375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5833'. [ 1059.443842][T24375] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1059.451122][T24375] netlink: 'syz.1.5833': attribute type 30 has an invalid length. [ 1059.550767][ T28] audit: type=1400 audit(2000001254.161:3379): avc: denied { read write } for pid=24382 comm="syz.9.5836" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1059.575361][ T28] audit: type=1400 audit(2000001254.171:3380): avc: denied { open } for pid=24382 comm="syz.9.5836" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1059.600250][T24383] loop9: detected capacity change from 0 to 1024 [ 1059.707793][T24383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.724570][T24383] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.750582][T24383] netlink: 'syz.9.5836': attribute type 1 has an invalid length. [ 1059.786730][ T28] audit: type=1400 audit(2000001254.401:3381): avc: denied { map } for pid=24382 comm="syz.9.5836" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1059.817217][T24383] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5836: bg 0: block 112: padding at end of block bitmap is not set [ 1059.837622][T24390] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1059.852608][T24395] loop7: detected capacity change from 0 to 1024 [ 1059.869974][T24395] /dev/loop7: Can't open blockdev [ 1059.881054][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5840'. [ 1059.915078][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5840'. [ 1059.951114][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1059.976872][T24407] FAULT_INJECTION: forcing a failure. [ 1059.976872][T24407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1059.989969][T24407] CPU: 0 UID: 0 PID: 24407 Comm: syz.1.5845 Tainted: G W syzkaller #0 PREEMPT(full) [ 1059.990037][T24407] Tainted: [W]=WARN [ 1059.990046][T24407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1059.990122][T24407] Call Trace: [ 1059.990130][T24407] [ 1059.990139][T24407] __dump_stack+0x1d/0x30 [ 1059.990163][T24407] dump_stack_lvl+0x95/0xd0 [ 1059.990187][T24407] dump_stack+0x15/0x1b [ 1059.990239][T24407] should_fail_ex+0x263/0x280 [ 1059.990274][T24407] should_fail+0xb/0x20 [ 1059.990380][T24407] should_fail_usercopy+0x1a/0x20 [ 1059.990412][T24407] _copy_from_user+0x1c/0xb0 [ 1059.990442][T24407] input_event_from_user+0x5e/0x190 [ 1059.990489][T24407] ? input_inject_event+0xc1/0x100 [ 1059.990524][T24407] evdev_write+0x1b0/0x2b0 [ 1059.990567][T24407] ? __pfx_evdev_write+0x10/0x10 [ 1059.990670][T24407] vfs_write+0x269/0x9f0 [ 1059.990749][T24407] ? __rcu_read_unlock+0x4e/0x70 [ 1059.990769][T24407] ? __fget_files+0x184/0x1c0 [ 1059.990794][T24407] ksys_write+0xdc/0x1a0 [ 1059.990849][T24407] __x64_sys_write+0x40/0x50 [ 1059.990886][T24407] x64_sys_call+0x27e1/0x3020 [ 1059.990931][T24407] do_syscall_64+0x12c/0x3b0 [ 1059.991044][T24407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.991066][T24407] RIP: 0033:0x7fda6961ce59 [ 1059.991085][T24407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.991108][T24407] RSP: 002b:00007fda68077028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1059.991177][T24407] RAX: ffffffffffffffda RBX: 00007fda69895fa0 RCX: 00007fda6961ce59 [ 1059.991196][T24407] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 000000000000000c [ 1059.991214][T24407] RBP: 00007fda68077090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.991231][T24407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.991248][T24407] R13: 00007fda69896038 R14: 00007fda69895fa0 R15: 00007ffd1dfb48d8 [ 1059.991275][T24407] [ 1059.992025][ T28] audit: type=1400 audit(2000001254.591:3382): avc: denied { write } for pid=24406 comm="syz.1.5845" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1060.169291][T24401] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5841'. [ 1060.216400][ T28] audit: type=1400 audit(2000001254.591:3383): avc: denied { open } for pid=24406 comm="syz.1.5845" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1060.227490][T24401] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5841'. [ 1060.283824][ T28] audit: type=1400 audit(2000001254.591:3384): avc: denied { ioctl } for pid=24406 comm="syz.1.5845" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1060.347614][ T28] audit: type=1400 audit(2000001254.661:3385): avc: denied { getopt } for pid=24406 comm="syz.1.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1060.449568][T24417] netlink: 'syz.9.5848': attribute type 10 has an invalid length. [ 1060.481055][T24419] can0: slcan on ptm0. [ 1060.528630][T24417] team0: Failed to send options change via netlink (err -105) [ 1060.552305][T24417] team0: Port device dummy0 added [ 1060.612564][T24419] can0 (unregistered): slcan off ptm0. [ 1060.737344][T24440] FAULT_INJECTION: forcing a failure. [ 1060.737344][T24440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1060.779744][T24438] loop1: detected capacity change from 0 to 1024 [ 1060.788961][T24440] CPU: 0 UID: 0 PID: 24440 Comm: syz.7.5854 Tainted: G W syzkaller #0 PREEMPT(full) [ 1060.789077][T24440] Tainted: [W]=WARN [ 1060.789084][T24440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1060.789140][T24440] Call Trace: [ 1060.789151][T24440] [ 1060.789203][T24440] __dump_stack+0x1d/0x30 [ 1060.789232][T24440] dump_stack_lvl+0x95/0xd0 [ 1060.789314][T24440] dump_stack+0x15/0x1b [ 1060.789339][T24440] should_fail_ex+0x263/0x280 [ 1060.789378][T24440] should_fail+0xb/0x20 [ 1060.789406][T24440] should_fail_usercopy+0x1a/0x20 [ 1060.789445][T24440] _copy_to_user+0x20/0xa0 [ 1060.789494][T24440] simple_read_from_buffer+0xb5/0x130 [ 1060.789559][T24440] proc_fail_nth_read+0x10e/0x150 [ 1060.789679][T24440] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1060.789718][T24440] vfs_read+0x1ab/0x7f0 [ 1060.789754][T24440] ? __rcu_read_unlock+0x4e/0x70 [ 1060.789858][T24440] ? __fget_files+0x184/0x1c0 [ 1060.789879][T24440] ? mutex_lock+0x57/0x90 [ 1060.789910][T24440] ksys_read+0xdc/0x1a0 [ 1060.789975][T24440] __x64_sys_read+0x40/0x50 [ 1060.790015][T24440] x64_sys_call+0x2886/0x3020 [ 1060.790074][T24440] do_syscall_64+0x12c/0x3b0 [ 1060.790114][T24440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.790136][T24440] RIP: 0033:0x7f6ff4c6d68e [ 1060.790151][T24440] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1060.790174][T24440] RSP: 002b:00007f6ff3706fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1060.790199][T24440] RAX: ffffffffffffffda RBX: 00007f6ff37076c0 RCX: 00007f6ff4c6d68e [ 1060.790240][T24440] RDX: 000000000000000f RSI: 00007f6ff37070a0 RDI: 0000000000000004 [ 1060.790258][T24440] RBP: 00007f6ff3707090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.790275][T24440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.790360][T24440] R13: 00007f6ff4f26038 R14: 00007f6ff4f25fa0 R15: 00007fffba1312a8 [ 1060.790386][T24440] [ 1061.016205][T24448] loop8: detected capacity change from 0 to 1024 [ 1061.100240][T24448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.100475][T24438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1061.115985][T24448] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.125327][T24438] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.159432][T24452] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1061.216070][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1061.278015][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1061.278036][ T28] audit: type=1400 audit(2000001255.871:3391): avc: denied { write } for pid=24435 comm="syz.1.5852" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1061.316958][T24468] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 1061.316958][T24468] program syz.8.5858 not setting count and/or reply_len properly [ 1061.353909][ T28] audit: type=1400 audit(2000001255.931:3392): avc: denied { write } for pid=24466 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.376194][T24452] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1061.408931][T24471] loop9: detected capacity change from 0 to 164 [ 1061.488355][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1061.505502][ T28] audit: type=1400 audit(2000001255.931:3393): avc: denied { append } for pid=24467 comm="syz.8.5858" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1061.592766][T24471] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 1061.599490][ T28] audit: type=1400 audit(2000001256.101:3394): avc: denied { write } for pid=24474 comm="syz.8.5860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1061.622696][T24478] loop8: detected capacity change from 0 to 512 [ 1061.708680][T24478] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.5860: corrupted inode contents [ 1061.729213][T24478] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1061.729408][T24478] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.5860: mark_inode_dirty error [ 1061.752387][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1061.758915][ C0] EXT4-fs (loop8): initial error at time 2000001256: ext4_do_update_inode:5690: inode 16 [ 1061.768839][ C0] EXT4-fs (loop8): last error at time 2000001256: ext4_do_update_inode:5690: inode 16 [ 1061.784001][T24478] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1061.784244][T24478] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.5860: corrupted inode contents [ 1061.807468][T24478] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1061.807655][T24478] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.5860: mark_inode_dirty error [ 1061.828605][ T28] audit: type=1400 audit(2000001256.431:3395): avc: denied { write } for pid=24473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.858102][T24478] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1061.859319][T24478] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.5860: corrupted inode contents [ 1061.891257][ T28] audit: type=1400 audit(2000001256.501:3396): avc: denied { write } for pid=24495 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.930658][T24478] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1061.936781][T24478] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1061.964073][T24478] loop8: lost filesystem error report for type 5 error -117 [ 1061.974001][T24478] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.5860: corrupted inode contents [ 1062.012460][T24478] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1062.012902][T24478] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.5860: mark_inode_dirty error [ 1062.045756][ T28] audit: type=1400 audit(2000001256.661:3397): avc: denied { connect } for pid=24497 comm="syz.9.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1062.067580][T24478] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1062.067805][T24478] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1062.082495][ T28] audit: type=1400 audit(2000001256.661:3398): avc: denied { write } for pid=24497 comm="syz.9.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1062.107930][T24499] gre0 speed is unknown, defaulting to 1000 [ 1062.116685][T24478] loop8: lost filesystem error report for type 5 error -117 [ 1062.131633][T24478] EXT4-fs (loop8): 1 truncate cleaned up [ 1062.164893][T22360] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1062.175207][T22360] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 1 [ 1062.191751][T22360] loop8: lost filesystem error report for type 5 error -117 [ 1062.196511][T24503] loop9: detected capacity change from 0 to 2048 [ 1062.217652][T24478] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.230796][T24478] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.281400][T24503] syzkaller0: entered promiscuous mode [ 1062.287356][T24503] syzkaller0: entered allmulticast mode [ 1062.287955][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.316799][ T28] audit: type=1400 audit(2000001256.881:3399): avc: denied { create } for pid=24497 comm="syz.9.5863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1062.341426][T24499] xfrm0 speed is unknown, defaulting to 1000 [ 1062.354358][T24509] loop8: detected capacity change from 0 to 128 [ 1062.402077][T24509] FAULT_INJECTION: forcing a failure. [ 1062.402077][T24509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.432470][T24509] CPU: 1 UID: 0 PID: 24509 Comm: syz.8.5867 Tainted: G W syzkaller #0 PREEMPT(full) [ 1062.432513][T24509] Tainted: [W]=WARN [ 1062.432521][T24509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1062.432609][T24509] Call Trace: [ 1062.432619][T24509] [ 1062.432629][T24509] __dump_stack+0x1d/0x30 [ 1062.432655][T24509] dump_stack_lvl+0x95/0xd0 [ 1062.432680][T24509] dump_stack+0x15/0x1b [ 1062.432779][T24509] should_fail_ex+0x263/0x280 [ 1062.432807][T24509] should_fail+0xb/0x20 [ 1062.432838][T24509] should_fail_usercopy+0x1a/0x20 [ 1062.432912][T24509] copy_folio_from_iter_atomic+0x24d/0x10b0 [ 1062.432945][T24509] ? strcmp+0x22/0x50 [ 1062.433040][T24509] ? fat_write_begin+0x52/0xe0 [ 1062.433065][T24509] ? __pfx_fat_get_block+0x10/0x10 [ 1062.433169][T24509] generic_perform_write+0x2c1/0x490 [ 1062.433204][T24509] __generic_file_write_iter+0x9e/0x120 [ 1062.433231][T24509] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1062.433257][T24509] generic_file_write_iter+0x8d/0x310 [ 1062.433352][T24509] ? _parse_integer_limit+0x170/0x190 [ 1062.433454][T24509] ? _parse_integer+0x27/0x40 [ 1062.433481][T24509] ? kstrtoull+0x111/0x140 [ 1062.433511][T24509] ? selinux_file_permission+0x194/0x320 [ 1062.433546][T24509] ? avc_policy_seqno+0x15/0x30 [ 1062.433580][T24509] ? selinux_file_permission+0x1e1/0x320 [ 1062.433657][T24509] ? __pfx_generic_file_write_iter+0x10/0x10 [ 1062.433685][T24509] vfs_write+0x5a6/0x9f0 [ 1062.433728][T24509] ksys_write+0xdc/0x1a0 [ 1062.433764][T24509] __x64_sys_write+0x40/0x50 [ 1062.433863][T24509] x64_sys_call+0x27e1/0x3020 [ 1062.433898][T24509] do_syscall_64+0x12c/0x3b0 [ 1062.434005][T24509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.434122][T24509] RIP: 0033:0x7fe89a07ce59 [ 1062.434197][T24509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.434248][T24509] RSP: 002b:00007fe898acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1062.434275][T24509] RAX: ffffffffffffffda RBX: 00007fe89a2f5fa0 RCX: 00007fe89a07ce59 [ 1062.434303][T24509] RDX: 000000000208e24b RSI: 0000200000000040 RDI: 0000000000000004 [ 1062.434321][T24509] RBP: 00007fe898acf090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.434337][T24509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.434350][T24509] R13: 00007fe89a2f6038 R14: 00007fe89a2f5fa0 R15: 00007ffe49761988 [ 1062.434392][T24509] [ 1062.437566][T24512] __nla_validate_parse: 2 callbacks suppressed [ 1062.437609][T24512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5868'. [ 1062.720488][T24512] team0: Port device team_slave_0 removed [ 1063.011339][T24520] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1063.046324][T24520] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1063.125196][T24522] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1063.141675][T24522] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1063.269607][T24526] loop4: detected capacity change from 0 to 164 [ 1063.327777][T24526] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82 [ 1063.337562][T24526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5873'. [ 1063.352091][T24526] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5873'. [ 1063.525786][T24530] loop7: detected capacity change from 0 to 512 [ 1063.532838][T24530] EXT4-fs: Ignoring removed oldalloc option [ 1063.638951][T24530] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1064.077288][T24530] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.5875: invalid indirect mapped block 83886080 (level 1) [ 1064.554064][T24548] loop4: detected capacity change from 0 to 128 [ 1064.731939][T24530] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1064.732357][T24530] EXT4-fs (loop7): Remounting filesystem read-only [ 1064.795416][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1064.801898][ C1] EXT4-fs (loop7): initial error at time 2000001259: ext4_free_branches:1023: inode 16 [ 1064.811592][ C1] EXT4-fs (loop7): last error at time 2000001259: ext4_free_branches:1023: inode 16 [ 1065.821450][T24530] EXT4-fs (loop7): 1 orphan inode deleted [ 1065.827286][T24530] EXT4-fs (loop7): 1 truncate cleaned up [ 1065.834097][T24530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.849647][T24554] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5882'. [ 1066.119312][T24554] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5882'. [ 1066.281334][T24556] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5884'. [ 1066.326291][T24556] loop9: detected capacity change from 0 to 512 [ 1066.370196][T24530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.386463][T24556] __quota_error: 6 callbacks suppressed [ 1066.386518][T24556] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1066.485418][T24556] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.524139][T24556] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.5884: Failed to acquire dquot type 1 [ 1066.590066][T24556] loop9: lost filesystem error report for type 5 error -117 [ 1066.591156][T24556] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1066.610015][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1066.610041][ C0] EXT4-fs (loop9): last error at time 2000001261: ext4_acquire_dquot:7034 [ 1066.687463][T24556] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.697488][T24556] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.5884: Failed to acquire dquot type 1 [ 1066.708929][T24556] loop9: lost filesystem error report for type 5 error -117 [ 1066.709845][T24556] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5884: bg 0: block 248: padding at end of block bitmap is not set [ 1066.758364][T24556] loop9: lost filesystem error report for type 5 error -117 [ 1066.758762][T24556] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1066.775039][T24556] loop9: lost filesystem error report for type 5 error -117 [ 1066.775672][T24556] Quota error (device loop9): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1066.793415][T24556] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1066.803551][T24556] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.5884: Failed to acquire dquot type 1 [ 1066.814961][T24556] loop9: lost filesystem error report for type 5 error -117 [ 1066.816163][T24556] EXT4-fs (loop9): 1 orphan inode deleted [ 1066.957416][T24556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.970216][T24556] ext4 filesystem being mounted at /498/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.995831][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.133857][T24569] sg_write: data in/out 417792/136 bytes for SCSI command 0x0-- guessing data in; [ 1067.133857][T24569] program syz.9.5889 not setting count and/or reply_len properly [ 1067.377174][T24571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5890'. [ 1067.638296][T24583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5893'. [ 1067.689638][ T28] audit: type=1400 audit(2000001262.271:3406): avc: denied { create } for pid=24580 comm="syz.9.5894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1067.758976][T24589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24589 comm=syz.9.5896 [ 1067.824614][T24593] loop1: detected capacity change from 0 to 512 [ 1067.831211][T24593] EXT4-fs: Ignoring removed oldalloc option [ 1067.846031][T24593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1067.863379][T24593] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.5897: invalid indirect mapped block 83886080 (level 1) [ 1067.864394][T24596] can0: slcan on ptm0. [ 1067.922585][T24589] loop9: detected capacity change from 0 to 2048 [ 1067.935411][T24593] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1067.935695][T24593] EXT4-fs (loop1): Remounting filesystem read-only [ 1067.951727][T24593] EXT4-fs (loop1): 1 orphan inode deleted [ 1067.957547][T24593] EXT4-fs (loop1): 1 truncate cleaned up [ 1067.963700][T24593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.976673][T24593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.148010][T24589] loop9: p2 p3 p7 [ 1068.173416][T24220] loop9: p2 p3 p7 [ 1068.237411][T24601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5897'. [ 1068.380842][T24602] 9pnet_virtio: no channels available for device /dev/nbd1 [ 1068.608865][T24604] syz_tun: entered allmulticast mode [ 1068.619743][T24604] pimreg: entered allmulticast mode [ 1068.631449][T24604] pimreg: left allmulticast mode [ 1068.800876][ T28] audit: type=1400 audit(2000001263.411:3407): avc: denied { connect } for pid=24603 comm="syz.8.5900" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1068.822380][T24605] veth0: entered allmulticast mode [ 1068.834881][T24605] raw_sendmsg: syz.8.5900 forgot to set AF_INET. Fix it! [ 1068.845889][ T28] audit: type=1400 audit(2000001263.411:3408): avc: denied { write } for pid=24603 comm="syz.8.5900" laddr=172.20.20.170 lport=256 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1069.032209][T24596] can0 (unregistered): slcan off ptm0. [ 1069.094659][T24220] udevd[24220]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 1069.110189][T24420] udevd[24420]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 1069.122597][T24221] udevd[24221]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 1069.331408][ T28] audit: type=1400 audit(2000001263.931:3409): avc: denied { getopt } for pid=24621 comm="syz.1.5905" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1069.364468][T24622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5905'. [ 1069.401554][T24624] loop4: detected capacity change from 0 to 512 [ 1069.470144][T24622] loop1: detected capacity change from 0 to 1024 [ 1069.487817][T24603] syz_tun: left allmulticast mode [ 1069.496415][T24622] EXT4-fs: Ignoring removed mblk_io_submit option [ 1069.515047][T24624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1069.530879][T24624] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.549894][T24631] loop8: detected capacity change from 0 to 512 [ 1069.599456][T24631] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1069.612238][T24631] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.634686][T24622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.646954][T24622] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.659189][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.675897][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.693916][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1069.708775][T24640] FAULT_INJECTION: forcing a failure. [ 1069.708775][T24640] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.721679][T24640] CPU: 0 UID: 0 PID: 24640 Comm: syz.4.5910 Tainted: G W syzkaller #0 PREEMPT(full) [ 1069.721712][T24640] Tainted: [W]=WARN [ 1069.721721][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1069.721738][T24640] Call Trace: [ 1069.721748][T24640] [ 1069.721758][T24640] __dump_stack+0x1d/0x30 [ 1069.721789][T24640] dump_stack_lvl+0x95/0xd0 [ 1069.721814][T24640] dump_stack+0x15/0x1b [ 1069.721868][T24640] should_fail_ex+0x263/0x280 [ 1069.721944][T24640] should_failslab+0x8c/0xb0 [ 1069.721979][T24640] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1069.722077][T24640] ? __alloc_skb+0x2d6/0x690 [ 1069.722107][T24640] __alloc_skb+0x2d6/0x690 [ 1069.722130][T24640] ? __alloc_skb+0x200/0x690 [ 1069.722152][T24640] netlink_alloc_large_skb+0xbf/0xf0 [ 1069.722268][T24640] netlink_sendmsg+0x40c/0x6f0 [ 1069.722313][T24640] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.722393][T24640] ____sys_sendmsg+0x563/0x5b0 [ 1069.722432][T24640] ___sys_sendmsg+0x195/0x1e0 [ 1069.722483][T24640] __x64_sys_sendmsg+0xd4/0x160 [ 1069.722515][T24640] x64_sys_call+0x194c/0x3020 [ 1069.722603][T24640] do_syscall_64+0x12c/0x3b0 [ 1069.722638][T24640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.722662][T24640] RIP: 0033:0x7fd37f9bce59 [ 1069.722679][T24640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.722752][T24640] RSP: 002b:00007fd37e417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.722780][T24640] RAX: ffffffffffffffda RBX: 00007fd37fc35fa0 RCX: 00007fd37f9bce59 [ 1069.722798][T24640] RDX: 0000000000000010 RSI: 0000200000000a00 RDI: 0000000000000003 [ 1069.722812][T24640] RBP: 00007fd37e417090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.722898][T24640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.722921][T24640] R13: 00007fd37fc36038 R14: 00007fd37fc35fa0 R15: 00007ffc1faf8218 [ 1069.722948][T24640] [ 1070.071861][T24649] loop4: detected capacity change from 0 to 512 [ 1070.086962][T24649] EXT4-fs: Ignoring removed oldalloc option [ 1070.105153][T24649] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1070.128803][T24649] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5914: invalid indirect mapped block 83886080 (level 1) [ 1070.143123][T24649] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1070.143715][T24649] EXT4-fs (loop4): Remounting filesystem read-only [ 1070.163237][T24649] EXT4-fs (loop4): 1 orphan inode deleted [ 1070.169112][T24649] EXT4-fs (loop4): 1 truncate cleaned up [ 1070.175570][T24649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.204850][T24649] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.302161][T24658] can0: slcan on ptm0. [ 1070.547479][T24678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5914'. [ 1070.572876][T24678] 9pnet_virtio: no channels available for device /dev/nbd4 [ 1070.615869][T24681] loop7: detected capacity change from 0 to 1024 [ 1070.645987][T24681] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1070.721963][T24681] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1070.764387][T24681] EXT4-fs error (device loop7): ext4_get_journal_inode:5896: inode #32: comm syz.7.5918: iget: special inode unallocated [ 1070.793239][T24692] netlink: 'syz.8.5917': attribute type 1 has an invalid length. [ 1070.801039][T24692] netlink: 'syz.8.5917': attribute type 2 has an invalid length. [ 1070.822861][T24681] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1070.823299][T24681] EXT4-fs (loop7): no journal found [ 1070.837852][T24681] EXT4-fs (loop7): can't get journal size [ 1070.844100][T24681] EXT4-fs (loop7): filesystem is read-only [ 1070.852115][T24681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1071.022605][T24658] can0 (unregistered): slcan off ptm0. [ 1071.428973][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1071.429001][ T28] audit: type=1400 audit(2000001266.031:3419): avc: denied { write } for pid=24710 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.513592][T24714] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1071.513592][T24714] The task syz.4.5919 (24714) triggered the difference, watch for misbehavior. [ 1071.557188][T24718] loop8: detected capacity change from 0 to 512 [ 1071.659430][ T28] audit: type=1400 audit(2000001266.261:3420): avc: denied { write } for pid=24720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.751605][ T28] audit: type=1400 audit(2000001266.311:3421): avc: denied { write } for pid=24732 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.809965][T24731] loop4: detected capacity change from 0 to 128 [ 1071.821524][T24731] msdos: Unknown parameter 'dots0000000™Mśo­ŮţƒWť›2iscard' [ 1071.846028][T24706] 9p: Bad value for 'rfdno' [ 1071.866974][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.943103][T24718] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.956062][T24718] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.983841][T24740] loop7: detected capacity change from 0 to 512 [ 1072.010369][ T28] audit: type=1400 audit(2000001266.591:3422): avc: denied { write } for pid=24717 comm="syz.8.5921" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1072.113627][T24742] iso9660: Unknown parameter 'cheî׈ck' [ 1072.187647][T24750] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 1072.209224][T24750] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5926'. [ 1072.218411][T24750] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5926'. [ 1072.251271][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1072.292240][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5926'. [ 1072.301288][T24750] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5926'. [ 1072.497445][T24758] random: crng reseeded on system resumption [ 1072.515284][ T28] audit: type=1400 audit(2000001267.101:3423): avc: denied { write } for pid=24757 comm="syz.8.5927" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1072.538722][ T28] audit: type=1400 audit(2000001267.101:3424): avc: denied { open } for pid=24757 comm="syz.8.5927" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1072.705753][T24758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1072.732127][ T28] audit: type=1400 audit(2000001267.321:3425): avc: denied { ioctl } for pid=24757 comm="syz.8.5927" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x6e8c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1072.757652][ T28] audit: type=1400 audit(2000001267.321:3426): avc: denied { ioctl } for pid=24757 comm="syz.8.5927" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1072.826758][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.077716][T24772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5933'. [ 1073.088723][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5935'. [ 1073.116035][T24776] netlink: 59 bytes leftover after parsing attributes in process `syz.7.5935'. [ 1073.138513][T24776] set_capacity_and_notify: 3 callbacks suppressed [ 1073.138533][T24776] loop7: detected capacity change from 0 to 512 [ 1073.194690][T24780] loop1: detected capacity change from 0 to 512 [ 1073.238281][T24780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.265277][T24776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.278046][T24776] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.297920][T24780] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.309415][ T28] audit: type=1400 audit(2000001267.881:3427): avc: denied { write } for pid=24779 comm="syz.1.5937" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1073.374526][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.389670][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.448912][T24793] FAULT_INJECTION: forcing a failure. [ 1073.448912][T24793] name failslab, interval 1, probability 0, space 0, times 0 [ 1073.501822][T24793] CPU: 0 UID: 0 PID: 24793 Comm: syz.9.5941 Tainted: G W syzkaller #0 PREEMPT(full) [ 1073.501875][T24793] Tainted: [W]=WARN [ 1073.501882][T24793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1073.501898][T24793] Call Trace: [ 1073.501906][T24793] [ 1073.501916][T24793] __dump_stack+0x1d/0x30 [ 1073.501945][T24793] dump_stack_lvl+0x95/0xd0 [ 1073.501967][T24793] dump_stack+0x15/0x1b [ 1073.502058][T24793] should_fail_ex+0x263/0x280 [ 1073.502097][T24793] ? alloc_pipe_info+0xad/0x340 [ 1073.502197][T24793] should_failslab+0x8c/0xb0 [ 1073.502238][T24793] __kmalloc_cache_noprof+0x5f/0x400 [ 1073.502332][T24793] alloc_pipe_info+0xad/0x340 [ 1073.502370][T24793] splice_direct_to_actor+0x591/0x670 [ 1073.502424][T24793] ? __file_has_perm+0x3d9/0x430 [ 1073.502618][T24793] ? __pfx_direct_splice_actor+0x10/0x10 [ 1073.502666][T24793] ? selinux_file_permission+0x2ef/0x320 [ 1073.502757][T24793] do_splice_direct+0x119/0x1a0 [ 1073.502802][T24793] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1073.502834][T24793] do_sendfile+0x382/0x650 [ 1073.502936][T24793] __x64_sys_sendfile64+0xb8/0x150 [ 1073.503008][T24793] x64_sys_call+0x2dc4/0x3020 [ 1073.503041][T24793] do_syscall_64+0x12c/0x3b0 [ 1073.503131][T24793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1073.503161][T24793] RIP: 0033:0x7f39a3bace59 [ 1073.503180][T24793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1073.503202][T24793] RSP: 002b:00007f39a2607028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1073.503228][T24793] RAX: ffffffffffffffda RBX: 00007f39a3e25fa0 RCX: 00007f39a3bace59 [ 1073.503246][T24793] RDX: 0000200000000100 RSI: 0000000000000005 RDI: 0000000000000004 [ 1073.503326][T24793] RBP: 00007f39a2607090 R08: 0000000000000000 R09: 0000000000000000 [ 1073.503343][T24793] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000001 [ 1073.503371][T24793] R13: 00007f39a3e26038 R14: 00007f39a3e25fa0 R15: 00007fff97618258 [ 1073.503397][T24793] [ 1073.507909][T24793] sctp: [Deprecated]: syz.9.5941 (pid 24793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1073.507909][T24793] Use struct sctp_sack_info instead [ 1073.508469][ T28] audit: type=1400 audit(2000001268.121:3428): avc: denied { append } for pid=24794 comm="syz.4.5942" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1073.973479][T24817] loop4: detected capacity change from 0 to 512 [ 1074.074643][T24817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.127077][T24817] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.286167][T24827] netlink: 666 bytes leftover after parsing attributes in process `syz.7.5940'. [ 1074.329553][T24827] loop7: detected capacity change from 0 to 8192 [ 1075.222054][T24835] gre0 speed is unknown, defaulting to 1000 [ 1075.229010][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5954'. [ 1075.546873][T24835] xfrm0 speed is unknown, defaulting to 1000 [ 1075.615945][T24840] gre0 speed is unknown, defaulting to 1000 [ 1075.712378][T24840] xfrm0 speed is unknown, defaulting to 1000 [ 1075.852487][T24835] loop9: detected capacity change from 0 to 512 [ 1075.972923][T24835] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1076.069462][T24835] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.5953: corrupted inode contents [ 1076.092726][T24835] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1076.094551][T24835] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1076.104351][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1076.104387][ C0] EXT4-fs (loop9): initial error at time 2000001270: ext4_do_update_inode:5690: inode 15 [ 1076.104444][ C0] EXT4-fs (loop9): last error at time 2000001270: ext4_do_update_inode:5690: inode 15 [ 1076.223275][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.312646][T24835] loop9: lost filesystem error report for type 5 error -117 [ 1076.313006][T24835] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #15: comm syz.9.5953: corrupted inode contents [ 1076.399502][T24835] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1076.399770][T24835] EXT4-fs error (device loop9): ext4_evict_inode:315: inode #15: comm syz.9.5953: mark_inode_dirty error [ 1076.421885][T24835] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1076.424318][T24835] EXT4-fs (loop9): 1 orphan inode deleted [ 1076.450258][T24835] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1076.563146][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.623196][T24862] veth0_vlan: entered allmulticast mode [ 1076.633613][T24861] FAULT_INJECTION: forcing a failure. [ 1076.633613][T24861] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.646453][T24861] CPU: 1 UID: 0 PID: 24861 Comm: syz.9.5960 Tainted: G W syzkaller #0 PREEMPT(full) [ 1076.646484][T24861] Tainted: [W]=WARN [ 1076.646521][T24861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1076.646537][T24861] Call Trace: [ 1076.646544][T24861] [ 1076.646554][T24861] __dump_stack+0x1d/0x30 [ 1076.646582][T24861] dump_stack_lvl+0x95/0xd0 [ 1076.646604][T24861] dump_stack+0x15/0x1b [ 1076.646662][T24861] should_fail_ex+0x263/0x280 [ 1076.646691][T24861] ? netlbl_mgmt_add_common+0x4a7/0x960 [ 1076.646727][T24861] should_failslab+0x8c/0xb0 [ 1076.646799][T24861] __kmalloc_cache_noprof+0x5f/0x400 [ 1076.646846][T24861] netlbl_mgmt_add_common+0x4a7/0x960 [ 1076.646890][T24861] netlbl_mgmt_add+0x1bc/0x1f0 [ 1076.646915][T24861] genl_family_rcv_msg_doit+0x187/0x1f0 [ 1076.646966][T24861] genl_rcv_msg+0x432/0x470 [ 1076.646992][T24861] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 1076.647023][T24861] netlink_rcv_skb+0x123/0x220 [ 1076.647062][T24861] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1076.647096][T24861] genl_rcv+0x28/0x40 [ 1076.647154][T24861] netlink_unicast+0x5a8/0x680 [ 1076.647190][T24861] netlink_sendmsg+0x5c8/0x6f0 [ 1076.647223][T24861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1076.647319][T24861] ____sys_sendmsg+0x563/0x5b0 [ 1076.647356][T24861] ___sys_sendmsg+0x195/0x1e0 [ 1076.647464][T24861] __x64_sys_sendmsg+0xd4/0x160 [ 1076.647502][T24861] x64_sys_call+0x194c/0x3020 [ 1076.647526][T24861] do_syscall_64+0x12c/0x3b0 [ 1076.647557][T24861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.647652][T24861] RIP: 0033:0x7f39a3bace59 [ 1076.647672][T24861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.647692][T24861] RSP: 002b:00007f39a2607028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1076.647713][T24861] RAX: ffffffffffffffda RBX: 00007f39a3e25fa0 RCX: 00007f39a3bace59 [ 1076.647757][T24861] RDX: 0000000020040084 RSI: 0000200000000480 RDI: 0000000000000004 [ 1076.647842][T24861] RBP: 00007f39a2607090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.647860][T24861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.647873][T24861] R13: 00007f39a3e26038 R14: 00007f39a3e25fa0 R15: 00007fff97618258 [ 1076.647893][T24861] [ 1076.982762][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1076.982808][ T28] audit: type=1400 audit(2000001271.571:3431): avc: denied { execute } for pid=24849 comm="syz.1.5957" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=80103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1077.035671][T24866] netlink: 'syz.9.5961': attribute type 1 has an invalid length. [ 1077.067297][T24852] vlan1: entered promiscuous mode [ 1077.073918][T24852] vlan1: entered allmulticast mode [ 1077.100330][T24866] gretap1: entered allmulticast mode [ 1077.148038][T24854] loop7: detected capacity change from 0 to 32768 [ 1077.438016][T24880] loop4: detected capacity change from 0 to 512 [ 1077.543346][T24880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1077.557242][T24880] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1077.569983][ T28] audit: type=1400 audit(2000001272.181:3432): avc: denied { write } for pid=24877 comm="syz.4.5965" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1077.613240][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.637333][ T28] audit: type=1400 audit(2000001272.251:3433): avc: denied { create } for pid=24884 comm="syz.4.5966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1077.669213][ T28] audit: type=1400 audit(2000001272.271:3434): avc: denied { ioctl } for pid=24884 comm="syz.4.5966" path="socket:[81014]" dev="sockfs" ino=81014 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1077.732193][T24890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5968'. [ 1077.771438][T24888] FAULT_INJECTION: forcing a failure. [ 1077.771438][T24888] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1077.811504][T24888] CPU: 0 UID: 0 PID: 24888 Comm: syz.1.5967 Tainted: G W syzkaller #0 PREEMPT(full) [ 1077.811588][T24888] Tainted: [W]=WARN [ 1077.811597][T24888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1077.811615][T24888] Call Trace: [ 1077.811622][T24888] [ 1077.811630][T24888] __dump_stack+0x1d/0x30 [ 1077.811655][T24888] dump_stack_lvl+0x95/0xd0 [ 1077.811675][T24888] dump_stack+0x15/0x1b [ 1077.811751][T24888] should_fail_ex+0x263/0x280 [ 1077.811787][T24888] should_fail_alloc_page+0xf2/0x100 [ 1077.811875][T24888] __alloc_frozen_pages_noprof+0x108/0x350 [ 1077.811908][T24888] alloc_pages_mpol+0xb3/0x260 [ 1077.811936][T24888] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 1077.812033][T24888] handle_mm_fault+0x1040/0x2e70 [ 1077.812080][T24888] do_user_addr_fault+0x3fd/0x1050 [ 1077.812122][T24888] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 1077.812188][T24888] exc_page_fault+0x62/0xa0 [ 1077.812231][T24888] asm_exc_page_fault+0x26/0x30 [ 1077.812258][T24888] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1077.812295][T24888] Code: 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 1e 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1077.812421][T24888] RSP: 0018:ffffc9000257f7a0 EFLAGS: 00050206 [ 1077.812473][T24888] RAX: ffff888104ee9c00 RBX: ffffc9000257fe18 RCX: 0000000000000b80 [ 1077.812495][T24888] RDX: 0000000000000000 RSI: ffff888122cf0480 RDI: 0000200000004000 [ 1077.812514][T24888] RBP: 0000000000003000 R08: 0000000000000063 R09: 0000000000000000 [ 1077.812532][T24888] R10: 0001888122cf0000 R11: 0001888122cf0fff R12: ffffc9000257fe00 [ 1077.812552][T24888] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000 [ 1077.812639][T24888] _copy_to_iter+0x2df/0xea0 [ 1077.812685][T24888] ? finish_task_switch+0x132/0x320 [ 1077.812719][T24888] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1077.812757][T24888] __skb_datagram_iter+0x2f4/0x680 [ 1077.812926][T24888] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1077.812964][T24888] skb_copy_datagram_iter+0x3f/0xf0 [ 1077.812999][T24888] unix_stream_read_actor+0x43/0x70 [ 1077.813045][T24888] unix_stream_read_generic+0x6b8/0x1620 [ 1077.813109][T24888] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1077.813156][T24888] unix_stream_recvmsg+0xfc/0x130 [ 1077.813295][T24888] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1077.813340][T24888] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1077.813385][T24888] sock_recvmsg+0xf5/0x120 [ 1077.813502][T24888] ____sys_recvmsg+0xf5/0x280 [ 1077.813572][T24888] ___sys_recvmsg+0x11f/0x3b0 [ 1077.813619][T24888] do_recvmmsg+0x1ef/0x560 [ 1077.813681][T24888] ? fput+0x8f/0xc0 [ 1077.813709][T24888] __x64_sys_recvmmsg+0xe5/0x170 [ 1077.813748][T24888] x64_sys_call+0x80f/0x3020 [ 1077.813793][T24888] do_syscall_64+0x12c/0x3b0 [ 1077.813831][T24888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.813858][T24888] RIP: 0033:0x7fda6961ce59 [ 1077.813876][T24888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1077.813943][T24888] RSP: 002b:00007fda68077028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1077.813964][T24888] RAX: ffffffffffffffda RBX: 00007fda69895fa0 RCX: 00007fda6961ce59 [ 1077.814013][T24888] RDX: 040000000000013c RSI: 00002000000034c0 RDI: 0000000000000005 [ 1077.814032][T24888] RBP: 00007fda68077090 R08: 0000000000000000 R09: 0000000000000000 [ 1077.814049][T24888] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 1077.814066][T24888] R13: 00007fda69896038 R14: 00007fda69895fa0 R15: 00007ffd1dfb48d8 [ 1077.814093][T24888] [ 1078.436213][T24902] loop4: detected capacity change from 0 to 8192 [ 1078.606416][T24906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5974'. [ 1079.120635][T24916] loop8: detected capacity change from 0 to 512 [ 1079.248408][T24916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.291460][T24916] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1079.432430][ T28] audit: type=1400 audit(2000001274.001:3435): avc: denied { write } for pid=24914 comm="syz.8.5976" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1079.807544][T24923] loop7: detected capacity change from 0 to 512 [ 1079.818853][ T28] audit: type=1400 audit(2000001274.431:3436): avc: denied { listen } for pid=24924 comm="syz.1.5979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1079.842044][T24923] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1079.872421][ T28] audit: type=1400 audit(2000001274.471:3437): avc: denied { ioctl } for pid=24921 comm="syz.7.5978" path="socket:[81077]" dev="sockfs" ino=81077 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1079.910421][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.966449][T24932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1080.140277][T24932] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1081.616877][ T28] audit: type=1400 audit(2000001276.221:3438): avc: denied { write } for pid=24947 comm="syz.8.5987" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1081.882522][T24950] loop1: detected capacity change from 0 to 512 [ 1081.992076][T24950] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1082.668180][T24955] FAULT_INJECTION: forcing a failure. [ 1082.668180][T24955] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.760245][T24955] CPU: 1 UID: 0 PID: 24955 Comm: syz.8.5989 Tainted: G W syzkaller #0 PREEMPT(full) [ 1082.760278][T24955] Tainted: [W]=WARN [ 1082.760325][T24955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1082.760359][T24955] Call Trace: [ 1082.760366][T24955] [ 1082.760374][T24955] __dump_stack+0x1d/0x30 [ 1082.760404][T24955] dump_stack_lvl+0x95/0xd0 [ 1082.760429][T24955] dump_stack+0x15/0x1b [ 1082.760448][T24955] should_fail_ex+0x263/0x280 [ 1082.760611][T24955] should_failslab+0x8c/0xb0 [ 1082.760641][T24955] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1082.760688][T24955] ? do_getname+0x2e/0x1c0 [ 1082.760774][T24955] do_getname+0x2e/0x1c0 [ 1082.760872][T24955] getname_flags+0x1d/0x30 [ 1082.760895][T24955] do_mq_open+0xbc/0x4f0 [ 1082.760977][T24955] ? __fget_files+0x184/0x1c0 [ 1082.761004][T24955] __x64_sys_mq_open+0xcb/0x100 [ 1082.761035][T24955] x64_sys_call+0x289c/0x3020 [ 1082.761059][T24955] do_syscall_64+0x12c/0x3b0 [ 1082.761097][T24955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.761123][T24955] RIP: 0033:0x7fe89a07ce59 [ 1082.761144][T24955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.761237][T24955] RSP: 002b:00007fe898acf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 1082.761263][T24955] RAX: ffffffffffffffda RBX: 00007fe89a2f5fa0 RCX: 00007fe89a07ce59 [ 1082.761282][T24955] RDX: 00000000000001a0 RSI: 0000000000000040 RDI: 0000200000000100 [ 1082.761299][T24955] RBP: 00007fe898acf090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.761311][T24955] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1082.761324][T24955] R13: 00007fe89a2f6038 R14: 00007fe89a2f5fa0 R15: 00007ffe49761988 [ 1082.761344][T24955] [ 1083.120063][T24962] loop7: detected capacity change from 0 to 512 [ 1083.141060][ T28] audit: type=1400 audit(2000001277.741:3439): avc: denied { setopt } for pid=24961 comm="syz.8.5993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1083.195000][T24962] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.208559][T24962] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.302155][ T28] audit: type=1400 audit(2000001277.911:3440): avc: denied { connect } for pid=24968 comm="syz.8.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1083.380271][ T28] audit: type=1400 audit(2000001277.941:3441): avc: denied { write } for pid=24960 comm="syz.7.5992" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1083.491926][T24975] loop9: detected capacity change from 0 to 128 [ 1083.542419][T24975] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000f0b) [ 1083.550309][T24975] FAT-fs (loop9): Filesystem has been set read-only [ 1083.590370][ T28] audit: type=1400 audit(2000001278.181:3442): avc: denied { ioctl } for pid=24973 comm="syz.9.5995" path="socket:[81153]" dev="sockfs" ino=81153 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1083.621580][T24975] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000f0b) [ 1083.629587][ T28] audit: type=1400 audit(2000001278.231:3443): avc: denied { getopt } for pid=24973 comm="syz.9.5995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1083.693470][T24975] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000f0b) [ 1084.367328][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.516728][T24986] loop4: detected capacity change from 0 to 1764 [ 1084.526597][T24993] netlink: 'syz.8.6001': attribute type 1 has an invalid length. [ 1084.541330][T24986] iso9660: Unknown parameter 'cheî׈ck' [ 1084.547640][T24993] bond1: entered promiscuous mode [ 1084.554318][T24993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1086.389619][T24995] bond1: (slave bridge2): making interface the new active one [ 1086.398153][T24995] bridge2: entered promiscuous mode [ 1086.410436][T24995] bridge2: left promiscuous mode [ 1086.501720][ T28] audit: type=1400 audit(2000001281.111:3444): avc: denied { read } for pid=25002 comm="syz.9.6004" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1086.556528][ T28] audit: type=1400 audit(2000001281.111:3445): avc: denied { open } for pid=25002 comm="syz.9.6004" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1087.353991][T25016] loop8: detected capacity change from 0 to 128 [ 1088.948937][T25022] loop9: detected capacity change from 0 to 512 [ 1089.177277][T25022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.341390][T25022] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.408246][ T28] audit: type=1400 audit(2000001283.991:3446): avc: denied { write } for pid=25021 comm="syz.9.6007" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1089.910364][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.152397][T25036] loop1: detected capacity change from 0 to 8192 [ 1090.939267][T25037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6012'. [ 1090.963058][T25038] loop7: detected capacity change from 0 to 256 [ 1091.138530][T25038] vfat: Unknown parameter '0xffffffffffffffff' [ 1094.559382][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6015'. [ 1095.172135][T25056] loop7: detected capacity change from 0 to 164 [ 1095.665319][T25056] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82 [ 1095.675760][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6016'. [ 1095.684769][T25056] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6016'. [ 1096.028602][T25057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6016'. [ 1096.037759][T25057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6016'. [ 1096.086092][T25059] loop1: detected capacity change from 0 to 512 [ 1096.093831][T25059] EXT4-fs: Ignoring removed oldalloc option [ 1096.106509][T25059] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1096.237880][T25059] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.6017: invalid indirect mapped block 83886080 (level 1) [ 1096.298906][T25059] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1096.301137][T25059] EXT4-fs (loop1): Remounting filesystem read-only [ 1096.317031][T25059] EXT4-fs (loop1): 1 orphan inode deleted [ 1096.322778][T25059] EXT4-fs (loop1): 1 truncate cleaned up [ 1096.328863][T25059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.369425][T25059] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.458785][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6021'. [ 1096.625661][T25074] syz_tun: entered allmulticast mode [ 1096.634044][T25074] pimreg: entered allmulticast mode [ 1096.640697][T25071] pimreg: left allmulticast mode [ 1096.646159][T25071] syz_tun: left allmulticast mode [ 1096.780762][T25078] loop8: detected capacity change from 0 to 512 [ 1097.942748][T25079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6017'. [ 1099.161402][T25079] 9pnet_virtio: no channels available for device /dev/nbd1 [ 1099.180075][T25078] EXT4-fs (loop8): 1 orphan inode deleted [ 1099.186212][T25078] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.199212][T25078] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.244328][ T28] audit: type=1326 audit(2000001293.861:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1099.596704][ T28] audit: type=1326 audit(2000001293.861:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1099.632461][ T28] audit: type=1326 audit(2000001293.861:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1099.736797][T25090] loop9: detected capacity change from 0 to 8192 [ 1100.626022][ T28] audit: type=1326 audit(2000001293.861:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1100.652700][ T28] audit: type=1326 audit(2000001293.861:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1100.837175][ T28] audit: type=1326 audit(2000001294.001:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1100.865251][ T28] audit: type=1326 audit(2000001294.001:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1101.659478][ T28] audit: type=1326 audit(2000001294.001:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1101.720219][ T28] audit: type=1326 audit(2000001294.001:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1101.746495][ T28] audit: type=1326 audit(2000001294.001:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25070 comm="syz.8.6023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89a07ce59 code=0x7ffc0000 [ 1102.165894][T25099] sg_write: data in/out 768/136 bytes for SCSI command 0x0-- guessing data in; [ 1102.165894][T25099] program syz.9.6029 not setting count and/or reply_len properly [ 1102.981289][T25104] loop9: detected capacity change from 0 to 164 [ 1102.994889][T25104] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 1103.009268][T25104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6031'. [ 1103.018409][T25104] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6031'. [ 1103.065537][T25104] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6031'. [ 1103.074833][T25104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6031'. [ 1103.108862][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.329685][T25114] No such timeout policy "syz1" [ 1103.541423][T25121] loop7: detected capacity change from 0 to 256 [ 1103.567683][T25121] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1103.584346][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6037'. [ 1103.605016][T25121] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1103.614503][T25121] FAT-fs (loop7): Filesystem has been set read-only [ 1103.629988][T25127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1103.640511][T25127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1104.225252][T25142] can0: slcan on ptm0. [ 1104.271264][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 1104.271362][ T28] audit: type=1326 audit(2000001298.881:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1104.303188][ T28] audit: type=1326 audit(2000001298.881:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1104.408465][T25146] loop4: detected capacity change from 0 to 512 [ 1104.498085][ T28] audit: type=1326 audit(2000001299.001:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1104.528084][T25142] can0 (unregistered): slcan off ptm0. [ 1104.591000][T25146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.663086][ T28] audit: type=1326 audit(2000001299.001:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1104.692437][T25146] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.830466][ T28] audit: type=1326 audit(2000001299.001:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1105.088581][ T28] audit: type=1326 audit(2000001299.001:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1105.634354][T25166] 9p: Bad value for 'port' [ 1105.695275][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.936003][ T28] audit: type=1326 audit(2000001299.001:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1106.179439][ T28] audit: type=1326 audit(2000001299.001:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fda695dd68e code=0x7ffc0000 [ 1107.199004][ T28] audit: type=1326 audit(2000001299.001:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1107.526882][T25178] loop4: detected capacity change from 0 to 1764 [ 1107.816767][ T28] audit: type=1326 audit(2000001299.001:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25128 comm="syz.1.6041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6961ce59 code=0x7ffc0000 [ 1107.909758][T25185] loop8: detected capacity change from 0 to 512 [ 1107.970039][T25185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1108.023487][T25195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=25195 comm=syz.1.6051 [ 1108.035721][T25185] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.064738][T25205] loop7: detected capacity change from 0 to 512 [ 1108.110577][T25207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1108.122502][T25207] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1108.223249][T25205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.257900][T25205] netlink: 72 bytes leftover after parsing attributes in process `syz.7.6055'. [ 1108.316364][T23112] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.565346][T25222] tmpfs: Bad value for 'mpol' [ 1110.246615][T14697] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1110.538224][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1110.538242][ T28] audit: type=1400 audit(2000001305.151:3583): avc: denied { create } for pid=25238 comm="syz.9.6064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1110.755644][T25248] 9p: Bad value for 'rfdno' [ 1110.790234][T25248] loop9: detected capacity change from 0 to 512 [ 1111.523740][T25251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1111.532753][T25248] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1111.555388][T25251] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1111.584244][T25239] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1111.642204][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1111.695258][T25253] netlink: 59 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1111.710155][T25258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1111.738423][T25258] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1111.752432][T25257] loop4: detected capacity change from 0 to 512 [ 1111.784195][T25257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.834474][T25257] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.929971][ T28] audit: type=1400 audit(2000001306.541:3584): avc: denied { setopt } for pid=25262 comm="syz.8.6071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1111.967507][T25264] loop8: detected capacity change from 0 to 764 [ 1112.003216][ T28] audit: type=1400 audit(2000001306.581:3585): avc: denied { mount } for pid=25262 comm="syz.8.6071" name="/" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1112.025700][ T28] audit: type=1400 audit(2000001306.581:3586): avc: denied { mounton } for pid=25262 comm="syz.8.6071" path="/591/file2" dev="loop8" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 1112.184571][T25265] loop9: detected capacity change from 0 to 2048 [ 1112.236266][T25265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.248981][T25265] ext4 filesystem being mounted at /547/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.331339][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.655373][T25269] loop7: detected capacity change from 0 to 164 [ 1112.668615][ T28] audit: type=1400 audit(2000001307.281:3587): avc: denied { read write } for pid=25270 comm="syz.9.6072" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1112.673232][T25269] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82 [ 1112.709499][T25271] bridge_slave_1: left allmulticast mode [ 1112.722077][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.733842][T25271] bridge_slave_1: left promiscuous mode [ 1112.744641][T25271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.761064][ T28] audit: type=1400 audit(2000001307.281:3588): avc: denied { open } for pid=25270 comm="syz.9.6072" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1112.787258][T25271] loop9: detected capacity change from 0 to 128 [ 1112.800628][T25271] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1112.835492][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6073'. [ 1112.844517][T25269] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6073'. [ 1112.855756][T25269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6073'. [ 1112.864755][T25269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6073'. [ 1112.905208][ T28] audit: type=1400 audit(2000001307.511:3589): avc: denied { create } for pid=25273 comm="syz.7.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1112.937683][T25271] ext4 filesystem being mounted at /548/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1112.982983][ T28] audit: type=1400 audit(2000001307.511:3590): avc: denied { setopt } for pid=25273 comm="syz.7.6075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1113.007890][ T28] audit: type=1400 audit(2000001307.511:3591): avc: denied { ioctl } for pid=25273 comm="syz.7.6075" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=80799 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1113.058660][T25278] loop7: detected capacity change from 0 to 256 [ 1113.098301][T25278] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1113.118401][ T28] audit: type=1400 audit(2000001307.511:3592): avc: denied { write } for pid=25273 comm="syz.7.6075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1113.138162][T25278] FAT-fs (loop7): Filesystem has been set read-only [ 1113.515889][T15516] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1113.629618][T25285] loop4: detected capacity change from 0 to 1024 [ 1113.642539][T25285] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1113.664413][T25285] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1113.707824][T25285] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #32: comm syz.4.6074: iget: special inode unallocated [ 1113.735431][T25291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1113.738811][T25285] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1113.744223][T25285] EXT4-fs (loop4): no journal found [ 1113.759080][T25285] EXT4-fs (loop4): can't get journal size [ 1113.765351][T25285] EXT4-fs (loop4): filesystem is read-only [ 1113.772071][T25285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1113.792776][T25291] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1113.921360][T25297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6083'. [ 1114.033126][T25297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6083'. [ 1115.143563][T25313] loop8: detected capacity change from 0 to 512 [ 1115.159458][T25313] EXT4-fs: Ignoring removed oldalloc option [ 1115.181920][T25313] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1115.209649][T25313] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.6087: invalid indirect mapped block 83886080 (level 1) [ 1115.211894][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.266557][T25313] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1115.267669][T25313] EXT4-fs (loop8): Remounting filesystem read-only [ 1115.283790][T25313] EXT4-fs (loop8): 1 orphan inode deleted [ 1115.289650][T25313] EXT4-fs (loop8): 1 truncate cleaned up [ 1115.300539][T25313] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.326695][T25313] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.405341][T25322] loop4: detected capacity change from 0 to 1024 [ 1115.444890][T25322] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1115.579034][T25322] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1115.604543][T25325] loop7: detected capacity change from 0 to 512 [ 1115.611512][T25325] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1115.638690][T25322] EXT4-fs error (device loop4): ext4_get_journal_inode:5896: inode #32: comm syz.4.6089: iget: special inode unallocated [ 1115.651706][T25322] loop4: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1115.656753][T25322] EXT4-fs (loop4): no journal found [ 1115.671329][T25322] EXT4-fs (loop4): can't get journal size [ 1115.677551][T25322] EXT4-fs (loop4): filesystem is read-only [ 1115.689102][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1115.689180][ C0] EXT4-fs (loop4): initial error at time 2000001310: ext4_get_journal_inode:5896: inode 32 [ 1115.689224][ C0] EXT4-fs (loop4): last error at time 2000001310: ext4_get_journal_inode:5896: inode 32 [ 1115.770956][T25329] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6087'. [ 1115.823394][T25322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1115.888884][T25330] 9pnet_virtio: no channels available for device /dev/nbd8 [ 1116.760291][T25340] loop9: detected capacity change from 0 to 1764 [ 1116.774413][T25340] iso9660: Unknown parameter 'cheî׈ck' [ 1116.924150][T25348] loop9: detected capacity change from 0 to 164 [ 1116.957238][T25348] isofs_fill_super: bread failed, dev=loop9, iso_blknum=41, block=82 [ 1117.057710][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6097'. [ 1117.066840][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6097'. [ 1117.101312][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6097'. [ 1117.111057][T23841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.120434][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6097'. [ 1117.145668][T25350] syz_tun: entered allmulticast mode [ 1117.175016][T25350] pimreg: entered allmulticast mode [ 1117.183416][T25350] pimreg: left allmulticast mode [ 1117.215593][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1117.215613][ T28] audit: type=1400 audit(2000001311.821:3596): avc: denied { cmd } for pid=25351 comm="syz.4.6099" path="socket:[81994]" dev="sockfs" ino=81994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1117.244733][ T28] audit: type=1400 audit(2000001311.821:3597): avc: denied { setopt } for pid=25351 comm="syz.4.6099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1117.296309][T25353] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1117.305627][T25353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1117.348279][T25353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6099'. [ 1117.537903][T25349] syz_tun: left allmulticast mode [ 1117.615591][T25362] FAULT_INJECTION: forcing a failure. [ 1117.615591][T25362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.680775][T25362] CPU: 0 UID: 0 PID: 25362 Comm: syz.8.6103 Tainted: G W syzkaller #0 PREEMPT(full) [ 1117.680836][T25362] Tainted: [W]=WARN [ 1117.680846][T25362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1117.680860][T25362] Call Trace: [ 1117.680867][T25362] [ 1117.680875][T25362] __dump_stack+0x1d/0x30 [ 1117.680981][T25362] dump_stack_lvl+0x95/0xd0 [ 1117.681004][T25362] dump_stack+0x15/0x1b [ 1117.681029][T25362] should_fail_ex+0x263/0x280 [ 1117.681066][T25362] should_fail+0xb/0x20 [ 1117.681174][T25362] should_fail_usercopy+0x1a/0x20 [ 1117.681284][T25362] _copy_from_user+0x1c/0xb0 [ 1117.681314][T25362] copy_from_sockptr_offset+0x66/0xa0 [ 1117.681354][T25362] do_ipt_set_ctl+0x612/0x8e0 [ 1117.681383][T25362] ? kstrtoull+0x111/0x140 [ 1117.681411][T25362] ? _raw_spin_lock_bh+0x56/0xb0 [ 1117.681497][T25362] nf_setsockopt+0x199/0x1b0 [ 1117.681521][T25362] ip_setsockopt+0x102/0x110 [ 1117.681554][T25362] tcp_setsockopt+0x98/0xb0 [ 1117.681593][T25362] sock_common_setsockopt+0x69/0x80 [ 1117.681705][T25362] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1117.681750][T25362] __sys_setsockopt+0x184/0x200 [ 1117.681813][T25362] __x64_sys_setsockopt+0x64/0x80 [ 1117.681890][T25362] x64_sys_call+0x2327/0x3020 [ 1117.681913][T25362] do_syscall_64+0x12c/0x3b0 [ 1117.682018][T25362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.682047][T25362] RIP: 0033:0x7fe89a07ce59 [ 1117.682065][T25362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.682083][T25362] RSP: 002b:00007fe898acf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1117.682103][T25362] RAX: ffffffffffffffda RBX: 00007fe89a2f5fa0 RCX: 00007fe89a07ce59 [ 1117.682181][T25362] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 1117.682197][T25362] RBP: 00007fe898acf090 R08: 0000000000000360 R09: 0000000000000000 [ 1117.682210][T25362] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1117.682223][T25362] R13: 00007fe89a2f6038 R14: 00007fe89a2f5fa0 R15: 00007ffe49761988 [ 1117.682242][T25362] [ 1117.935550][T25360] loop1: detected capacity change from 0 to 256 [ 1118.112434][T25360] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1118.121995][T25360] FAT-fs (loop1): Filesystem has been set read-only [ 1118.775989][T25387] loop9: detected capacity change from 0 to 1024 [ 1118.793607][T25387] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1118.809715][T25387] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1118.828623][T25387] EXT4-fs error (device loop9): ext4_get_journal_inode:5896: inode #32: comm syz.9.6109: iget: special inode unallocated [ 1118.847561][T25387] loop9: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1118.847953][T25387] EXT4-fs (loop9): no journal found [ 1118.857390][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1118.857409][ C1] EXT4-fs (loop9): initial error at time 2000001313: ext4_get_journal_inode:5896: inode 32 [ 1118.857435][ C1] EXT4-fs (loop9): last error at time 2000001313: ext4_get_journal_inode:5896: inode 32 [ 1118.902428][T25387] EXT4-fs (loop9): can't get journal size [ 1118.916160][T25387] EXT4-fs (loop9): filesystem is read-only [ 1118.927325][T25387] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1119.101219][T25396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1119.138752][T25395] loop1: detected capacity change from 0 to 512 [ 1119.146121][T25396] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1119.184421][T25395] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.6112: inode has both inline data and extents flags [ 1119.273260][T25395] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1119.274692][T25395] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6112: couldn't read orphan inode 15 (err -117) [ 1119.312354][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1119.318859][ C1] EXT4-fs (loop1): initial error at time 2000001313: ext4_orphan_get:1397: inode 15 [ 1119.328327][ C1] EXT4-fs (loop1): last error at time 2000001313: ext4_orphan_get:1397: inode 15 [ 1119.393085][T25395] loop1: lost filesystem error report for type 5 error -117 [ 1119.409513][T25395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.450935][T25404] netlink: 'syz.4.6116': attribute type 2 has an invalid length. [ 1119.498478][T25410] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6114'. [ 1119.653728][ T28] audit: type=1400 audit(2000001314.251:3598): avc: denied { setattr } for pid=25393 comm="syz.1.6112" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1119.766806][T15516] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.802693][T15516] ================================================================== [ 1119.810872][T15516] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 1119.818472][T15516] [ 1119.820867][T15516] read-write to 0xffff888237c266e8 of 1 bytes by task 25377 on cpu 0: [ 1119.829064][T15516] folio_add_lru+0xaa/0x1f0 [ 1119.833636][T15516] shmem_get_folio_gfp+0x7b0/0xd60 [ 1119.838791][T15516] shmem_write_begin+0xfc/0x1f0 [ 1119.843723][T15516] generic_perform_write+0x183/0x490 [ 1119.849062][T15516] shmem_file_write_iter+0xc5/0xf0 [ 1119.854230][T15516] __kernel_write_iter+0x319/0x590 [ 1119.859393][T15516] dump_user_range+0xa73/0xd00 [ 1119.864202][T15516] elf_core_dump+0x21a2/0x2330 [ 1119.869007][T15516] coredump_write+0xacc/0xdd0 [ 1119.873711][T15516] vfs_coredump+0x26dd/0x31e0 [ 1119.878413][T15516] get_signal+0xd5c/0xf20 [ 1119.882773][T15516] arch_do_signal_or_restart+0x96/0x480 [ 1119.888453][T15516] exit_to_user_mode_loop+0x6f/0x820 [ 1119.893848][T15516] do_syscall_64+0x232/0x3b0 [ 1119.898470][T15516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.904442][T15516] [ 1119.906790][T15516] read to 0xffff888237c266e8 of 1 bytes by task 15516 on cpu 1: [ 1119.914449][T15516] __lru_add_drain_all+0x17e/0x450 [ 1119.919584][T15516] lru_add_drain_all+0x10/0x20 [ 1119.924457][T15516] invalidate_bdev+0x47/0x70 [ 1119.929068][T15516] ext4_put_super+0x610/0x7b0 [ 1119.933771][T15516] generic_shutdown_super+0xee/0x220 [ 1119.939093][T15516] kill_block_super+0x2a/0x70 [ 1119.943800][T15516] ext4_kill_sb+0x42/0x80 [ 1119.948165][T15516] deactivate_locked_super+0x75/0x1c0 [ 1119.953747][T15516] deactivate_super+0x97/0xa0 [ 1119.958465][T15516] cleanup_mnt+0x2bb/0x330 [ 1119.962908][T15516] __cleanup_mnt+0x19/0x20 [ 1119.967354][T15516] task_work_run+0x130/0x1a0 [ 1119.971966][T15516] exit_to_user_mode_loop+0x211/0x820 [ 1119.977363][T15516] do_syscall_64+0x232/0x3b0 [ 1119.982073][T15516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.987987][T15516] [ 1119.990327][T15516] value changed: 0x0b -> 0x0e [ 1119.995020][T15516] [ 1119.997358][T15516] Reported by Kernel Concurrency Sanitizer on: [ 1120.003528][T15516] CPU: 1 UID: 0 PID: 15516 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1120.014672][T15516] Tainted: [W]=WARN [ 1120.018504][T15516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1120.028581][T15516] ================================================================== [ 1120.057621][T25414] loop9: detected capacity change from 0 to 256 [ 1120.104836][T25414] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1120.137773][T13781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.159809][T25414] FAT-fs (loop9): Filesystem has been set read-only