last executing test programs: 3m3.288830968s ago: executing program 32 (id=71): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000000)={0x14, r2, 0xf1aad47e89fb43b5, 0xfffffffe, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x184, r2, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0xefa8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8000}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x101}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xaa}, {0x6, 0x11, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x7fff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xdf4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xffff}}]}, 0x184}, 0x1, 0x0, 0x0, 0x8800}, 0x840) r3 = fsopen(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2c4602) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) r5 = fsmount(r4, 0x1, 0xf0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r5}}}, &(0x7f00000001c0)='GPL\x00', 0x80, 0xd8, &(0x7f0000000480)=""/216, 0x41000, 0x4, '\x00', r6, 0x0, r5, 0x8, &(0x7f00000005c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xa, 0xf92, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[r5, r5], &(0x7f0000000680)=[{0x4, 0x5, 0x5, 0x4}, {0x4, 0x4, 0x0, 0x7}, {0x0, 0x1, 0xd}, {0x5, 0x1, 0x9, 0xb}], 0x10, 0xfffff18b}, 0x94) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) sendmsg$inet(r8, &(0x7f0000000a00)={&(0x7f0000000780)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f00000007c0)="8039d40afec8a8b334f0ec0d5b9f7401f4169e889076381bb8c9680aa049daa83d6ab978213ff3d2e0df86aca8430e239e728c0a9784d82a3675327bab7d5074057bc2836d3ddbc38014c007eabfa80b62411f3f1fcc63e88368ce7803a4d68ac58f6288ed6885369985a6dec1d654fe1e60841782baf99f0014fe416e0fa196ec1e515e85331f7f0bff8e5defefb4676f834a0a4d", 0x95}, {&(0x7f0000000880)="fef155c11f042875297a7e596c47cc1b9180b63a737fa8bbeac6b997422f88a1b392cc7babafcb96a60fdd575a112d70a5c68217ef64d8fbccffbf6b553b5287a9781ab3c438c44ce051b02d1aa8f4013190731611392616e77a7dfd1a00d74d9cec", 0x62}, {&(0x7f0000000900)="05fe5ab83dddad194150708e803013285c8809714bd6c31ea8", 0x19}, {&(0x7f0000000940)="1e92bcb79b95d0bbb10c40a3907e4dd562754ecd00a98fa60f383f66020c7dab96b940c8e72c98ebf30fe1dd6b6ed013c3fd2246d5158e6319bb18444c46069c5015b21d8ed575861e5b9658f96ad78cf3ccd946d27600b4dbc5d9abb36c0227977b190300e5d69d04f944e135c0c13f3bef75e8b323d4f4067b3e4d2cd6b92e347501c7116dcc5c57388f4d564db51dd9c8a2c2c952dd6c20700c48ddfee00e4d57f51ece0f3e6bcee9f4a30ab9b841788de50a102461631c2214", 0xbb}, {&(0x7f0000001200)="1e59cc3592755602406076b292c773a6bed352fb1af52f2bb99a9bf72778553d06dba5230566aadc8718948e7563703fe39d5ba8620f84b3639e121963c02a6899dfc9dc05c89c266df08a62b2", 0x4d}, {&(0x7f0000001340)="d14270b4db231fa92e75e692dcfe3d3ad4ec314f230ee1405293decf7b70ee6cd6bc5674a87726c29ba85012aa67c6391d5beb356966576b96c83823bae1ecff7bf7885d7151928fca8b24a6eb0d911522a1f5fd6d22217ab36a6d54e7189e864de2ae43235d12238448290f90c9b960f63771b69af238272950b68ae87c29f057cdee3b5fc06f1cd00e7c96585bb13ed01dec51cc479854186ccfa95d75cd149866b52c19cc72cd2e9ef0e66baf9ca9bacc40b9fbf5aba6107fb57ba7472216581de8", 0xc3}], 0x6, &(0x7f0000001480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x380000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x48}, 0x8080) write$UHID_INPUT(r8, 0x0, 0x0) r9 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0xa) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="100000003d10"], 0x10}], 0x1, 0x0, 0x0, 0x5800}, 0x500) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000001440), 0x1, 0x79b, &(0x7f0000000a40)="$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") socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f0000001300)) 2m42.518996259s ago: executing program 0 (id=234): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r0 = socket(0x11, 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2400c045) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) write$tun(0xffffffffffffffff, 0x0, 0x9a) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f00000001c0)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000340)={0x1, 0xb}, 0x8) rmdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) fspick(0xffffffffffffffff, 0x0, 0x1) r2 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001340)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/115, 0x73, 0x1, &(0x7f0000001280)=""/131, 0x83}, &(0x7f0000001380)=0x40) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4, 0x4, {0x1, 0xf1}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=@deltaction={0xa4, 0x31, 0x20, 0x70bd25, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x29}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 2m42.444722587s ago: executing program 0 (id=237): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0xbd3a7481b18b840b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x3, @perf_bp={&(0x7f0000000200), 0xf}, 0x200, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x4, 0x78, 0x7, 0x9}, [{0x70000000, 0xfffffff7, 0x2, 0x9, 0x41000101, 0x1, 0x9, 0xa}, {0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}, {0x6474e551, 0x2, 0xc, 0x43fb, 0xfff, 0xe94, 0x9, 0x7ff}, {0x6474e551, 0x10001, 0xc4e7, 0x10001, 0xa, 0x1cd2f15f, 0xfffffffffffffff9, 0x1}]}, 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000000008000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085100000feffffff18000000ff03000000000000800000008db3500008000000185400000b0000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000f9ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018150000", @ANYRES32=r2, @ANYBLOB="0200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x18, &(0x7f00000005c0)=""/24, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x0, 0x8001, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000680)=[r2, r2, 0x1, r2], &(0x7f00000006c0)=[{0x3, 0x3, 0xd, 0x4}, {0x0, 0x5, 0x4}, {0x0, 0x3, 0xe, 0x8}, {0x4, 0x3, 0x4, 0xe}, {0x4, 0x2, 0x0, 0x8}, {0x5, 0x3, 0xf, 0x6}, {0x2, 0x2, 0x8, 0x4}, {0x5, 0x2, 0x10, 0x1}, {0x2, 0x4, 0x10, 0x9}], 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)={0xffffffffffffffff, r3}) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={[{@subsystem='net_prio'}, {@favordynmods}, {@name={'name', 0x3d, '%&'}}, {@name={'name', 0x3d, 'NLBL_CALIPSO\x00'}}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x8200, 0x0) openat(r6, &(0x7f0000000b40)='./file0\x00', 0x109800, 0x1e) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000b00)={&(0x7f0000000a00)=""/236, 0x104000, 0x1c00, 0xa, 0x1}, 0x20) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fe5fdf2510000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x8088}, 0x8004) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x20}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8}]}, 0x64}}, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000b80)={0x8, 'gretap0\x00', {'nicvf0\x00'}, 0x101}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="00012dbd7000ffdbdf2501000000080002000200000008000100000000000800020002000000080001000000000008000100040000000800020002000000080001feffffff00080001000300000008000200020000000800020002000000"], 0x64}}, 0x8000) 2m42.424969284s ago: executing program 0 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, 0x0, 0x60000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6, 0x0, 0xfffe}, 0x38) 2m39.760761816s ago: executing program 0 (id=261): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40ebe4ecbca503e7}, 0xc0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="39135b", 0x3}], 0x1, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000800000001000004f7ffffff0400000001000000000000000030615f5f5f2a2e5f"], 0x0, 0x46, 0x0, 0x9, 0x6}, 0x28) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") timer_gettime(r2, &(0x7f0000000000)) pipe(&(0x7f0000000440)={0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000000400)='pids.current\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000700000000000052323050cf00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff93, 0x0, 0x0, 0x0}, 0x94) close(r4) splice(r3, 0x0, r4, 0x0, 0x3000, 0x100000000000000d) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x541b, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r9) ptrace$peeksig(0x4209, r9, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {r7, r8}}, './file0\x00'}) openat$cgroup(r3, &(0x7f0000000380)='syz1\x00', 0x200002, 0x0) 2m38.821063429s ago: executing program 0 (id=272): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0xbd3a7481b18b840b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x3, @perf_bp={&(0x7f0000000200), 0xf}, 0x200, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x7, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x4, 0x78, 0x7, 0x9}, [{0x70000000, 0xfffffff7, 0x2, 0x9, 0x41000101, 0x1, 0x9, 0xa}, {0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}, {0x6474e551, 0x2, 0xc, 0x43fb, 0xfff, 0xe94, 0x9, 0x7ff}, {0x6474e551, 0x10001, 0xc4e7, 0x10001, 0xa, 0x1cd2f15f, 0xfffffffffffffff9, 0x1}]}, 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000005000000000000000008000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085100000feffffff18000000ff03000000000000800000008db3500008000000185400000b0000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000f9ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018150000", @ANYRES32=r2, @ANYBLOB="0200000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x5, 0x18, &(0x7f00000005c0)=""/24, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0x0, 0x8001, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f0000000680)=[r2, r2, 0x1, r2], &(0x7f00000006c0)=[{0x3, 0x3, 0xd, 0x4}, {0x0, 0x5, 0x4}, {0x0, 0x3, 0xe, 0x8}, {0x4, 0x3, 0x4, 0xe}, {0x4, 0x2, 0x0, 0x8}, {0x5, 0x3, 0xf, 0x6}, {0x2, 0x2, 0x8, 0x4}, {0x5, 0x2, 0x10, 0x1}, {0x2, 0x4, 0x10, 0x9}], 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890c, &(0x7f0000000100)={0xffffffffffffffff, r3}) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)={[{@subsystem='net_prio'}, {@favordynmods}, {@name={'name', 0x3d, '%&'}}, {@name={'name', 0x3d, 'NLBL_CALIPSO\x00'}}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x8200, 0x0) openat(r6, &(0x7f0000000b40)='./file0\x00', 0x109800, 0x1e) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000b00)={&(0x7f0000000a00)=""/236, 0x104000, 0x1c00, 0xa, 0x1}, 0x20) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fe5fdf2510000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x8088}, 0x8004) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000840), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r7, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x20}}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8}]}, 0x64}}, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000b80)={0x8, 'gretap0\x00', {'nicvf0\x00'}, 0x101}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r5) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000ffdbdf2501000000080002000200000008000100000000000800020002000000080001000000000008000100040000000800020002000000080001feffffff00080001000300000008000200020000000800020002000000"], 0x64}}, 0x8000) 2m38.214203853s ago: executing program 0 (id=275): r0 = getpid() r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x808) syz_pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) socket$nl_generic(0x10, 0x3, 0x10) delete_module(&(0x7f0000000080)='ethtool\x00', 0x200) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) 2m38.196055901s ago: executing program 33 (id=275): r0 = getpid() r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x808) syz_pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) socket$nl_generic(0x10, 0x3, 0x10) delete_module(&(0x7f0000000080)='ethtool\x00', 0x200) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) listen(r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) 2m19.767896689s ago: executing program 3 (id=450): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000300)={0xff, "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"}) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000b40)="c1188619b95d02ff4284860186dd", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$setsig(r2, 0xa, 0x12) recvmsg$unix(r2, &(0x7f0000000980)={&(0x7f0000000540), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/57, 0x39}], 0x3, &(0x7f0000000880)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x2060) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x2400, 0x0) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@abort}]}, 0x0, 0x5e6, &(0x7f0000000ac0)="$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") write$vga_arbiter(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="6c6f636b20696fd5edb31bde05ee4882505d018fccc67f1caefd75f35b0962f58311d4b74ac0a151b571347f5a141d0d387c70cc48f05d317735efa1e0f00a8930921b4223fc263abdcdfcdefe04f1030d6c8726901b88c1d0a869cd254380a9a433ea22756c1478306e33b9ad372b8312519031bb06f3d5a805ff5a79f28db7dec09f36d6bbae3f1bcb5f75e77ba40f5f220e87fb5a134e67fb2be1bfecc6564ee7bcb8"], 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 2m18.760600511s ago: executing program 3 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x81}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x40, 0xfd}, {0x6, 0xba, 0xa, 0xfffb}]}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4040181, 0x0, 0x59) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) 2m18.487964579s ago: executing program 3 (id=466): socket$phonet_pipe(0x23, 0x5, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a7) gettimeofday(&(0x7f00000000c0), 0x0) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/127, 0xda, 0x40012022, 0x0, 0x0) shutdown(r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffff000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r5, 0x202, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x20004001) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) setuid(r7) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m18.336726605s ago: executing program 3 (id=471): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x10000, 0xfffd, 0x8, 0x6, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x7, 0x20840) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) 2m18.025503136s ago: executing program 3 (id=474): syz_read_part_table(0x1054, &(0x7f00000004c0)="$eJzsz8GJAjEYBeAXZnczuexOB+vFNrxagfUodmELlmQzIxkRpgER4fsOCXmB9/OHt2olSVkFU12u+nwPy7ndfeernJL/HDPP9TI9fnvUzX/D2Htu+3ZuydiS/CT5XTWXntRsVtMO15cuBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf4h4AAP//6BkJCQ==") prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40042, 0x13) creat(&(0x7f0000000080)='./file0\x00', 0x10) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 2m17.778724407s ago: executing program 3 (id=478): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x3484, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0xdb}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb3678000000000801fdfd00", 0x4, 0x200}) 2m17.73763157s ago: executing program 34 (id=478): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_io_uring_setup(0x3484, &(0x7f0000000500)={0x0, 0xd2a7, 0x10100, 0x1000, 0xdb}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb3678000000000801fdfd00", 0x4, 0x200}) 1m43.669681565s ago: executing program 1 (id=861): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001c000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 1m43.63496836s ago: executing program 1 (id=863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1046, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x40) ptrace$setsig(0x4203, r1, 0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x6, 0x5b0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003dc0)=ANY=[@ANYBLOB="280000001300010600000000e4fedbdf25000000", @ANYRES32=r3, @ANYBLOB="242400002019000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x20048000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) gettimeofday(0x0, 0x0) unshare(0x2040400) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) 1m43.246089469s ago: executing program 1 (id=867): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') (async) r1 = memfd_create(&(0x7f0000000100)='\x00'/12, 0x4) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000000000000000000000000095043feeae2d4ff06fd5b13f9fdff653ff479d73d3d1e2e7193672b54ae8e30ad6bf7c4f13578fc63e580257f4b48ed7824c3f15e05e333774653c414df2cc07fa37eb0d7c675afa16d1b16d59258a396beb6c4caff688892b34adfdf3b6ff8883e21e65a1864e3a779d0a07641cc5e3ed539ea08c95d36286d04b97de8d31bc28fa0e2dcfbcae4ea0c30e6f82cfad1480d870532f59bf7fdd843ca28c4484d8764329fe54030e11e71f9253a09c47d52d4e0652e249e292b3c537224893da639802c6d71485fc41533e12a45fac89a43427f90d8fcdbb1331f5725c276c0b7cc21eed0a672e14fb891aeb723e2e2b56cce2281235090b2953fefa2af27dd9cfc5bd89ab58f7a0a732a8f245ce6a5df24204bc965e0afef6c0c23f5bbac1da1a708112809dad52891b64c25ba83a147b7a284c255ce52543259c24b46e84aa0bc0b3dd217aaedd716091580e2a0ff2cec0a0bd44dd2c7ec1d4374b9c5e3c8f0100000000000000339cf560de9c4914c5d191b4bdbf9aa00d1bd2f539958b611c5d247ce29e362dd6cb93f42d15061ce5d62093e27ce9124ea7687acf741c556530d522fd56b6c84249ef33c6b6dcc39e2f1a22e1078bde3977339e284c16fa083256a5c90619ff5f4df5fd2ce2a44bbf941b4f3c73d7299d73982010d609000000000000087ceeb055548fdaf755702417537e6f4706da04744deeff85795731153e9bb8267f17ab23e61ec90577b95c9c14ea1da0e335d405b05dc8af05008255fdafa3a160fe64f46cf75e60ab750045a1c5fab48bd71c5ba3019b56d81088eafa6fe02c12e9838eb000714e6229578f4294729f2cf762f1771e202ea734fb0cc9694fd3052c63bf8a91a9eeb61e95543cd3652e6f81c07ff938eaefcccbc99fcb3c02fb0832a4a7a6efb0eb56c810e92e4e2db560f7c7a22a09bc1c6d5a02b2471e7061891f0585d7d9391a491d28c09de24c9ba4cfc07f5d94000000000000000000000000bede43bf1e7ac3580a330a5f783ac7da37af424817c639bc57cea8e2c3f7b8bd20d4c5d143081ac7fd3fe84a87b05544475b8bd645c88b00a3e526e0d6496694c6b64cd3bf55db91262de4c4d85f33d82807124acf8eca483bee342bd821e0d7b5d66a098e486af18952294ecf0a5e4ea60c8277c38d4cf3e025436d7b2cfe2b768a1de7794f723fcc61636311511caee2213f78009ecaa83b936a90a446dde5cafc5151bfa5b0d4cf8bdbd303fbc03873547bbd823887be5a7477d78a53a85e7ca9e5a30438ff"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r1, 0x0) (async) ftruncate(r1, 0x1000000) (async) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141a42, 0x20) sendfile(r6, r0, 0x0, 0xffffffff) 1m43.168340117s ago: executing program 1 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000900800034000000007080004402400000f0800014000000000240005800c0001007061796c6f6164000800028008000340000040b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) 1m42.889256333s ago: executing program 1 (id=875): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000080)={[{@data_err_ignore}]}, 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000000)={0xc551, 0x40000000000003, 0xd, 0xb, 0x7, 0x1}) 1m42.834704355s ago: executing program 1 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x400000000000000) 1m27.677615676s ago: executing program 35 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x400000000000000) 1m8.77102015s ago: executing program 8 (id=1139): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000000004, 0x511, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) 1m8.466289102s ago: executing program 8 (id=1141): openat$autofs(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1m8.242393177s ago: executing program 8 (id=1143): fspick(0xffffffffffffffff, 0x0, 0x1) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000ffa400000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005000000"], 0x310) 1m8.025937693s ago: executing program 8 (id=1144): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0x60, 0x8000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000c00)={&(0x7f0000000a80)="80441f6fe632e705f8fbb99e", &(0x7f0000000ac0)=""/226, &(0x7f0000001340)="eb46705e1e2075e0907850b1ca0a284c6d3babf68ef793bd82595220a7d8cce14e338bb3bfa558e4eeb0d10c5a87eb59a2117a97c29715ff5888a8238aba13d7882e082277af07d7d062e9b1c89ae1a64a72a5de55a12c16381659460449f0c56d34e0a8dd902208c92db652f20fa0040da88ec22d62dcc4c494815ac55fd1fcdc52e5d9105d84ac268998e9c5059f6f2babf3fc077b348739cfa9942bf10cbd58ba9fb6698c48db18a2d07068e866ba5b0294b1adb7b6ccc5502672249965895c5f9f5182985dd183fca9710f27705b3911aace28ea10a8c3a80e406fe80ff37c714bf4b917bf0afdc798b7824bd43048abd308cf0edad1dad98c2544c4ddebc5d79e05ac375466a57115528dae787c9a747e379180a671919ac8a63cccb9bb96bab23f691fac118c9a12e5c86c626d3ca616b81dc2b2523399ab45878ca9f7bfba103c89ae76d801ed8cea5fcf667e9d2d62da0cc9a5603ff89987f84b3ab5af1c79d7686e967b9a6ba4302b77aae691571341fdad710149f6ed6589ac5e67ea29c6fa98a8a5f29bff3e449291aea44d6df8d9792e630b954ed08fd1484cb2e08fe66ddd49386b762e4bbdd4940dff9226452cf49920a9fd67d8f2be081e872e98aa3921f9e5226d0b1c66bb9a38b894a4f7584f03ea8657f8e06167d0a9683846e2aef629eb4231406783d787847326a88cfadcd707458601a8260c06bb5df8b975058b67c04da2e5790f75a278d31096f0c45849b7512fb3e086412deea9fa6226400dc965ff4bc90ad7c05383b1c065b5d4d7a842404d9179cb06ee20e130bebf9908729f049596ef665208d0c966a6ecf84282a93077ac086e57e5e851c50e8c81fb81aa36d990a963912098a8f05a1307cffc2b19d5ed8b4b08f758f91a1c0bd2e655915fb11b0247ed7506017865c18991aea7fd7b4323c9fea56936d3558f6f898105346e7fff9829b2ef9725866d3b0e0a5f7081d0754f07c4597b3373cf22bc16a1e9d7b3baca025e0d2b30bd5bd79bfdbdaab6ef66e2c68d96140a7a7e08b5d3b0100fefe1a6660640d5142b42e92a2ab12511dbd49374e445dc2dc55ff68625b220e75671110e73c1175f8c6a22bc4133859dc8579da9da2cd533b0e8735db51b3a4ed924f0aeb28927bba5304e2a1e7129a75a0a79c0cf47ff230b596feb96b33f07e548fc16db1e698d04c68ea8e3447add22bc332a30f396a104ab992f97e94fa18dff961dd06183c544451d01a1f33cd0a136e5304bdc2f62a39a7c277b0db7b3e7d254b86b65949f30d5289599a8c5f95c618ad4966cc6bb89a24b370887a9eb072d82986524066335309b392fe2452c0706f8e464679eb39e5dd6a9a485fadb2600a0c7b1abebd347b4cdd02e18ebe0c419447760c6f855f6b7f37f41f058a9f534f8747431e4820253f83619df465fe07fb2efb3b92065fa982032629627535d98a92781e3d80372f2538fa7ceb087bf492f1a2cfaefb00ac58b1ba264a090ba2e1338e192c07a2b083877473c72332e3b8cc0581bc16e9d5427781660a3690fdde20045436da8b0053647f3db3940b00b5503d2381622030952f56830e65f573231d6a304042c91c904e3e6e81802821441c40b795ce6ec8453e767a03f06da78f739b3fc9c95187771256abb5a482db2d942d84d95535ecade9b359d3e5ce8c3b492a460d26ca882e4cee138fe56f475856781b6ea14f0b62b1de465bbd5d56b98187c0c58f9c7a62cd2d5be5be7677208971faac507de199b23628ec906e30c06b97d613e5d168049a1273f6b9ccdbe339eddab04391172dd793b4d4dc55e78a865de4adea7d336a72a92d317f7c9ad9f6d80fd174bd295ae693191a56442894b8d27572bac0be26189d94d1a90f69cf5a0cef69d3af834be0b27584c6214d4a292002d2fedb0877f51293c727e3ea251c64621703307a68c5bfa13c290b2c219c9c4ea98a38c25c69328eecdaeb6f4db0c027938b4150526bafe2137f22772c2f34d333402173aaf7159914899105339c780b320a8ef886308d8a9c3409129c9b46141da991aec72c1e0af7b60181ceee4863b01d71841b17bb830da8b558b9255c9057c2e5a0db8cc1020355c0cbb9be3f4ac6efb9344cda8e08c7142babb2a73fdb34af5dd07ae35cc288726686de09d26431cc8ff62b85128d02a72ca4f5798c3e40f3a69adac0c5b817a55cc565c0ccd7cfd7c05a9e04bb08daf3ef7697451186cd05e00a066dd811c716a7d8601ab531fad2164ff62a27932f710c4ef106ad2b378a08ef06ad8eb6db72ce1c7c3554b21932a85d1b9e2e75090d017e7cad3aa1e24e3255a35342aaa9b82d9e1dc46c4b49ba368184169f8c97f88ddca2cbd9fc3f363bd4d7c6ef67154652db3331a0e0fa1d2563eb3c6d2fcfa5776f3547e0aee5bd0ae25cf56e312ea744be72d9bed7864dea36ce1dbf2c60ed2934af291e98b6892a01c259864d1335d9f974f9ece25eb68b3adf41f6d4f2610d503f54fe091418772056937643bd59ff593fe03c09206a8bfbca2e3d30a856fea1c0085fdf9b0c44ae331998a26261ee84fb7d84eadf8fff095ca9071175650c1646fd9192575c522327cb50a0b7516b1000193fcde73ae789cc3c96b4b23547683407e0d927dc4a1ada089e1e4cfc4cef88eee15d7ec8a126b69a626383316a58a2da19f29c866602dfb4cb5ff48597db7554bd0c26af779d4c467c5cf0edd0b256f049eef61a685c9a21bb613597624d36afbb33cfdeb987c59a3c643d3693acf4634483efc5259d590dc02457b39fac8ba9aa07a2163763b81c969a6a29d3665b0f186861cf104690009c9c075c4c76f56f50b213f7d97c7d723ba9bc35acf628a9dd1032702a3631f4db0b6e937640fcb75020039300fd50d42e1287b67c9bf4860459b2c2094327e83924e6b9d8bd80186c0fed0c906fc5fe9ca64b27ca97ba580ddcbdb530ca862dbb1a774630b5c47648588200909f0da5c427b4e2fd2dc74fe4646d351b526d28ff1f2728cc2562166c2295b7c265affc9590b579a13269051d224115638be77c528a08eff6c0297fa1e9da6cd104178acd9653e40c2f1096eb7a1206b97dfb14684373a8c640cd1c3234b10c5a6e76c1b4ead231e65353d3cae2cdc8bdb035544117e70b431fd259155dc68822313b7772c92159321c49c64b9c55e47beac6fab7405287b7f12ab74a62129840946d2f8d34848538ff42cf6b8fe85fdcb1436ce940e01f10e037d99ac72d57e405629f14aab0e5f2bb98dd5645ed0e856df2cf154cc9cc74ef65b35d8a97acf8c760d704aa021fee87e6aea12289171e52b95c4bafec15213f91973a6c8338f0101c7cf2ad8b7496700ac27f6c70f930e73273f98181b44c2d0df34914def930d580aa59a76625ca8c2db1e5f72eea66058f389f0802a3fe9cbfedffecb2401ec024fe9dd7ff04f63dcdbb01f9462c9ff8cf682b74f7cef40c384054c2b4f99075ba91c92a88bb010a48bde56a10fb27347714d001d71f216f42353149bb7eff645aa7b7d4494163e5e9fc4bb1e42c9af1f5f6d7775ec924a760f6d2623bdd71b8313347b83e234a0ee164a6307c8af4eab61890b2cbf6d26f9f0e032b6e91d7a24b7fd1167783bc05437c6d7a9c42e54d0322c37c6e50828e5532e5085c24623d7a99698f669d22cfee8e1bbf59a7e388d80d730bf65e86d3f74750c52a62939bd4f4f607e5991b49e97ea77cecbd7f2204f7886130f1b583276af2830f71f691cb50867137fe4030a3024d0be6d84c58cdb9cf30514ee35aa499c1d303bf5a3c041beeea3fcd3ba8f4cdcaada1e31a94edd009051e2fcacab416138409d6cb9dae939fe057e4ecbb4c2cb4c207c05bfd9ea9b0f05344e06310a4e08b11d350c7210cb5957b78518a645f57725f2efae6e0bd21c0b430118d558bd6262ec520a28cb39d3b5b5ae8354e5c60e478e54b7ccc9976bb50f464171b13a9574cd6e96bbc7b0362e4a25a363369f0c0f41c520cf68c87b821ca939e6e68da2402be8420c485fbf4c5906cdc4490df3aecd80f292821d9bc072e8e5d8738e02e579a4c40b85531f7912f5dd9a352d73914f713d708be35e616f67943237445d4c4c0b2d1c129a2394733bd5e607db0df8184dfe950e09d503dbceda5e4009ce4a8dfafad3fc253d1504fd6d9f945bc4aea121213884fcbdaff50fcdd403f2a5de6a2032711e08d8489a49fd58d3372847d4acdfe01981511a4a401eabe953183bb38a5dc97e84127161dd10e2506ac0f7587e8e00fb014b8397a151168644c19c26def1fd57e8510d5aa7def4867751c42becdf01ab83884fa5f672075931f15ee096af60e95c3ff7651febcc5008dba42740b50808c7cea8216019c6b64a3ac4fe380bca4be50d10985b07d8aaa1ace509da07a17ac0d5abdea47ddc317030b086e80306c7fea17df513d7fc22d795ca94c85026949180dfe638eecd7a67e35dafca95f56d9c4bd69d30bbcbf90fed227ba1dc60494960089d9b2029155861d03f3c25a72ba6ff3ed607cdc240fbfe68c9c6887baa2de5a3fd723de114a0ad6bd8dbde7087e47a1641aaad64bf7ac170b65d4182eaa41ce864f37c7407fb6720663dc894e98195d1fe4d4b4fd0ba1186bf78163966728a275f96875a7e6d9afcecfb3ecfbfe9a4475751319df3311fdfcdd02ccffde739330907521f55beb8ef31e4c7c83aaa89069d71ab34d2a6516e63a0709afcf86174466c51f51a58baf9da33b2c6d3621f862e39075ebc2e6f2db3aca6169c67f05011b1315f960d0398381303d3db4d768b5a61f862a33fb8bf053db5cd9d33b4b0c436858837b84b62382a8317d7cbc0ca04899c256c87772522d099fdbee91f6880d616a1599b4f180abdad24c00996ba0f6a5f6a3608062e5032cfa8c5c6677127bce0405042e1780d8dd20dcfcaa6f798db0c720f8732fddc164b6a54e546e97dd5dde5a81cc70e7be479541d0d388f2339da834f15f4806d65d3d69dbe8570a0d8ac8b599e049f81ba4c135ea4878f24cc361bb5431c3b1e0e33c3cb7c999957242634909810890000424ad7d52fd47d075f26577e058c9b10c5e14a8cc4d347bc1c9588eae105f9c06aef1e0e6ac351564ea15fdb4f12786834aec71ee5b6287f508ea37dca960ba4aafeffed744bf7efa5b7d7e8d22f851714ae56649c1b81cd695294959d9856b59e9f29dd2b19d0b003d591135c72a3ee338cdfa574e12b1d505270a74b755d2e9ae4e3cbf9b7c387aec143058158f3125f27e495b5745e8c4791db66b98c17543896a666445c85feb90317e60d75415db4679e4fa98d3087a887daf2e5e2c7710bb906a0bce31939a1d6f4953f43af5845c39d7d16d52b4462efdbb0e533bc920cff7d9dfc5c786d9bed875707ce650935f6404348850161ae4abc63aef416fd7ebba84692da440588e5ae5108c6e741832ceef4bd93c7f97c6721bf9e6cca64a4ae62df5ec221920ced4f9a71a07e0ff9d062a935ca5ad8b1cc0ef9d83c0eb638f4986c663d08591c43bfc35d98673774a7e638217e524a0ffb7590d703134cdf4f58df6b3a8d2d013cf8e6030138c64f9a978b51718622a51e2d4b0d37a655b406effe2ba31a337c0d81e0d4ff220444374cd31b0b68f4e745ce469db96cf6e63b745b200fd656eeebd19326becacd21d6ca5a1709920a87f0bc634946a0c5758b335f19ad17ccad150f511808b2616fc9a226083cb930dafa7144ae4a015c7c05cc343725408aae98f8e2df36658c3bd2c6e40f241859aeec2f68d0145b", &(0x7f0000000bc0), 0x0, 0x1}, 0x38) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe2(&(0x7f0000000500), 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r8, &(0x7f0000000d00)="ae37", 0x2) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x2010, r5, 0x9b356000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={r10, 0x1}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 1m5.983671693s ago: executing program 8 (id=1156): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x124b, &(0x7f0000000200)={0x0, 0xaac5, 0x8, 0x40000005, 0xbc}, &(0x7f0000000400)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000380)=[r1, 0xffffffffffffffff], 0x2, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000540)={0x0, 0x800ce90, 0x10, 0x3, 0x40014333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) epoll_create1(0x80000) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, 0x0) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) timer_delete(0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="93445cb899c921d5"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) socket$key(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') 1m4.926247937s ago: executing program 8 (id=1165): set_mempolicy(0x4005, 0x0, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x3f420f00, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x8000000, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_route(r0, 0x0, 0x20040000) 49.707158398s ago: executing program 36 (id=1165): set_mempolicy(0x4005, 0x0, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x3f420f00, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x8000000, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$nl_route(r0, 0x0, 0x20040000) 47.905623996s ago: executing program 5 (id=1270): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x80000fb, @remote, 0x9000000}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[], 0xf}, 0x0) 47.789629368s ago: executing program 5 (id=1272): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb", 0x19, 0x800, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) (async) shutdown(r1, 0x0) (async, rerun: 32) write(r1, &(0x7f0000000080)="91", 0x1) (rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (rerun: 32) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 46.995622143s ago: executing program 5 (id=1274): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r5}, 0x38) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000040), 0x4, r5}, 0x38) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_ZONE={0x6, 0x4, 0x73}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x4014850) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r2, r2, 0x24, 0x3, 0xffffffffffffffff, @void, @value=r2, @void, @void, r6}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd61b341af00180000fe8800c2caf8731889cc00ff0700000000000000000101fc000000000000000000000000000001ff02070800"/78], 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b4003a", 0x29}], 0x1}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r9 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r10, 0x2000) fallocate(r10, 0x0, 0x8003, 0x7) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020660b, &(0x7f0000000240)={0x0, 0x800e3, 0x0, 0x100, 0x1, 0x0, [{0x7, 0x3c, 0x0, '\x00', 0x280}]}) 46.225640793s ago: executing program 5 (id=1280): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x100000000000000) 45.630728899s ago: executing program 5 (id=1283): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], 0x0) 45.150278104s ago: executing program 5 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1ff}, 0x1a2d, 0x9, 0x7fc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$FIOCLEX(r0, 0x5451) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f0000000c00)="b800000500000000ea483c8b97e2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x2b, 0x1, 0x1) bind$unix(r1, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c000600000000000000000008000b00"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) utime(&(0x7f0000000240)='./bus\x00', 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x28, 0x0, 0x0) 29.941541747s ago: executing program 37 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x27, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x1ff}, 0x1a2d, 0x9, 0x7fc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$FIOCLEX(r0, 0x5451) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={0xffffffffffffffff, 0xfca804a0, 0xe, 0x0, &(0x7f0000000c00)="b800000500000000ea483c8b97e2", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x2b, 0x1, 0x1) bind$unix(r1, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000007010100000000000400001e0000080c000640001fffe000000000080005"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d00000c000600000000000000000008000b00"], 0x60}, 0x1, 0x0, 0x0, 0x2001}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_io_uring_setup(0x10b4, &(0x7f0000000380)={0x0, 0x60d1, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) utime(&(0x7f0000000240)='./bus\x00', 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x28, 0x0, 0x0) 5.628332723s ago: executing program 4 (id=1521): r0 = memfd_secret(0x80000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, 0x0, 0x9}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'pim6reg1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x8001, 0x10000006, 0x78000000, 0x8a7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x700) socket$phonet_pipe(0x23, 0x5, 0x2) 5.142114506s ago: executing program 4 (id=1524): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0xfe, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x240088c1}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd2b, 0x0, {0xa, 0x1, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 4.914572721s ago: executing program 4 (id=1528): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @loopback, 0x4}}, 0x3b}, &(0x7f0000000000)=0x90) 4.702850008s ago: executing program 4 (id=1530): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000c9f40900006100"], 0x0, 0x53}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ebf6ffff0000000008000000911191000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r2 = dup(r1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) lstat(0x0, 0x0) unshare(0x2c040480) r4 = syz_io_uring_setup(0x5e48, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x4}, 0x8) write$UHID_CREATE2(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0xcac3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x5, 0x0, r2, 0x1, '\x00', r3, r0, 0x1, 0x0, 0x2}, 0x50) 4.344029321s ago: executing program 4 (id=1534): prlimit64(0x0, 0xf, &(0x7f0000000280)={0x8, 0x800001000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(0x0, r0, 0x8, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x3a}, 0x20) socket$kcm(0xa, 0x3, 0x73) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x0, {0x0, 0xfe, 0x1}, 0xff}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0x9}, 0x0, 0x0, 0x800000, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, r3, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x20001, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) 3.894003871s ago: executing program 7 (id=1538): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.809118697s ago: executing program 7 (id=1540): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1, 0x0, 0xfffffffffffffe35}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000100)=""/8, 0x8}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x1, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x6, 0x0, 0x1, 0xa, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x20000000002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x7ffffffe) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, 0x0, 0x0) ptrace$cont(0x21, r4, 0x80000001, 0x4) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) unshare(0x6a040000) socket$kcm(0x29, 0x76c1e339db381d5d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cff00000000000000000000000000200000ff020000000000000000000000000001"], 0x0) 3.648235792s ago: executing program 2 (id=1542): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ftruncate(r0, 0xffffffffffff1a23) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) (async, rerun: 64) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'bond0\x00', {0x2, 0x0, @private}}) (rerun: 64) r1 = syz_socket_connect_nvme_tcp() ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x7, r1, 'id1\x00'}) sendto$inet(r2, &(0x7f0000000200)="17cee4a1f0ef0d04924fe0688f72ed604fa59681e81ceb2567906b26a65cb251b3b03becdf8c20dde07e760a9fff96450ff26d4de56a8f600c1695dda563cd8fabe81b27ca6ebf64bfd2cc1b92c9ddd3d50d6f1a205afbd06b0946c1c2f7dc906e65413f8fa9b5c890b624d62d49f6f95ba4c488467eb8ad1d8846eeb0aada2f37f14f68267afc383195a56789003614773093ffde6cb50d9baa7f41f3bfd8f858bbc54e3d7e71331eeb2e5efa3d5c32c231a1b3e830885e0ef0d5863d31a683be89ebc21583eef0ac39029cf07b3ab5bf003049af78989b338f9228a7bbb04924cedb85068604", 0xe7, 0x391334a8fd3334c6, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) (async) r3 = gettid() (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000340)) (async, rerun: 32) mkdir(&(0x7f0000000380)='./file0\x00', 0x10) (rerun: 32) r4 = getuid() quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000003c0)=@nullb, r4, &(0x7f0000000400)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) (async, rerun: 32) r5 = openat$cgroup_int(r2, &(0x7f0000000480)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) (rerun: 32) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='smb3\x00', 0x41, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000880)={{r2, &(0x7f0000000580)='/dev/loop', 0x84600, &(0x7f00000005c0)={@_ha_fsid={[0x7, 0xfffffff8]}, {0x9, 0x4, 0x1d32, 0xffffffff}}, 0x1fde, &(0x7f0000000600), &(0x7f0000000640)=0x3}, 0x2, &(0x7f0000000840)=[{0x1, 0x800, &(0x7f0000000680)='#/\x00', &(0x7f00000006c0)="fa64649aa7c8037ca0b02381f8f014f588e02c71f2c84a16500cd49ca287989ad9d7bff7126090b58301298313dad44ac2c9ccc04e0814f0528b429eee60b4041d45e7d4e971d0ed7fbcae2f4586e131c4a8243c0eace4361a630ecd002403a510e3a781bd1d4549bd1a29e1ca65d6209274ee8b6b740ec3984640deb9dd61fd1a8cb3ba95b073f8b4aebe548310f740f6ae4fbde242749ce4e97a4bdbf3bf31fc071b1425c79a647e9b932ca01d7270aa422f29e28479361bdfc94bf08ea8cc4cbcb075005e1e2de14b82717004465b7cf03b0a973677800e8cdab087ff7d14cd8f03c542", 0xe5, 0x28}, {0x3, 0x96, &(0x7f00000007c0)='blkio.throttle.write_bps_device\x00', &(0x7f0000000800)}]}) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x1, 0x82000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000000940)={0x8000, r7, 'id0\x00'}) sendmsg$DEVLINK_CMD_RATE_DEL(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, 0x0, 0xdc0d3d3453e97d80, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040800}, 0x4080) (async) perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x6, 0x54, 0xc, 0x5, 0x0, 0x2, 0x28020, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x99, 0xc4}, 0x1, 0xff, 0xff, 0x9, 0x5, 0xffffff46, 0x2, 0x0, 0x8, 0x0, 0x1}, r3, 0x0, r8, 0x2) mount$cgroup2(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x200000, &(0x7f0000000c00)={[{@memory_recursiveprot}], [{@measure}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, 'id0\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}]}) (async) write$cgroup_int(r2, &(0x7f0000000c80), 0x12) (async) mount$tmpfs(0x0, &(0x7f0000000cc0)='./file1\x00', &(0x7f0000000d00), 0x3080, &(0x7f0000000d40)={[{@huge_within_size}, {@grpquota_inode_hardlimit={'grpquota_inode_hardlimit', 0x3d, [0x78, 0x39, 0x2d, 0x33, 0x65, 0x74, 0x31]}}, {@huge_never}, {@nr_blocks={'nr_blocks', 0x3d, [0x35]}}, {@uid={'uid', 0x3d, r4}}, {@mpol={'mpol', 0x3d, {'default', '', @void}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x78, 0x39, 0x38, 0x25, 0x67, 0x25, 0x36, 0x65]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x37, 0x70, 0x79, 0x0, 0x30, 0x36]}}]}) (async) fsopen(&(0x7f0000000e00)='reiserfs\x00', 0x1) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000e40)={0x9, [0x0, 0x6, 0x0, 0x4, 0x8000, 0x1, 0x5, 0xf, 0x597]}, 0x16) (async, rerun: 32) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000e80)={0x0, 0xfffffffa}, &(0x7f0000000ec0)=0x8) (async) symlink(&(0x7f0000000f00)='./file1/file0\x00', &(0x7f0000000f40)='./file0\x00') (async, rerun: 32) connect$inet(r8, &(0x7f0000000f80)={0x2, 0x4e21, @remote}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'team_slave_0\x00'}) 3.428712638s ago: executing program 2 (id=1543): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) r2 = syz_io_uring_setup(0x2c95, &(0x7f00000005c0)={0x0, 0x3cfa, 0x8, 0x1, 0x21f}, &(0x7f0000000640)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) creat(&(0x7f00000000c0)='./file0\x00', 0x18c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000000)={@loopback, r7}, 0x14) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e15, 0x9, @empty, 0x1}, 0x1c) mprotect(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x1000009) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 3.047658938s ago: executing program 9 (id=1545): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000009c0)="b9ff5742c5a47ce5521c94590300600d698c", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, 0x0, 0x0, 0x20000010, &(0x7f00000000c0)={0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, &(0x7f00000000c0)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r10, &(0x7f0000000780), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x38, 0x0, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 2.274222667s ago: executing program 2 (id=1547): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1d, 0x2, 0x3, &(0x7f00000006c0)) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2, &(0x7f0000000040), 0x7, 0x4eb, &(0x7f0000000140)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) getdents(r1, &(0x7f0000000280)=""/237, 0xed) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x7fff) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000001800010000000000fcdbdf251d01080005000d000100000063f500771a2b48ff8fe4f9a816f764b99f2b970273ccb85061233775e848fc39ece8faaf8893c6d1d572bd073f23ad478e608fa95615b48fc056616ea78fa01f069e4d83ac317f372572e175b232c2658d8b17"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.273503257s ago: executing program 9 (id=1548): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x26}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x10, 0x0, 0x0, 0xc, 0x5}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}, @func={0x1, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f00000001c0)=""/143, 0x40, 0x8f, 0x1, 0x100, 0x10000}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x44041}, 0x40) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.067485474s ago: executing program 9 (id=1549): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@generic={0x3, 0x8, 0xc}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x9, 0x2, 0xffff, 0x7fffffffffffffff, 0x100]}, &(0x7f0000000240)=0x78) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000005) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000280)=ANY=[@ANYBLOB="000300000000000004010a0000000000"], 0x10) io_cancel(0x0, 0xfffffffffffffffc, 0x0) fremovexattr(r3, &(0x7f0000000180)=@known='user.incfs.id\x00') 1.933046463s ago: executing program 6 (id=1550): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.874357874s ago: executing program 9 (id=1551): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x80) (fail_nth: 3) 1.810769524s ago: executing program 6 (id=1552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee00) r1 = getpid() r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@local}, &(0x7f0000000140)=0x14) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x11, r3, 0x5, &(0x7f0000000480)) getpriority(0x2, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "3ea609b18692a8d4", "3f65572ac4c0f894163ab1e50a082e27", "f6628c27", "76432909f2fbb585"}, 0x28) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000feff000035000000"], 0x1c}}, 0x0) 1.59448673s ago: executing program 2 (id=1553): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000340)=""/222, 0xde, 0x0, &(0x7f0000000540)=""/246, 0xf6}}, 0x10) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x100010, r2, 0x5988000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x6}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x6198, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x3}, 0x200, 0x1ff, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r7, 0x2) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4db, &(0x7f00000005c0)="$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") setregid(0xffffffffffffffff, r6) r8 = getegid() setresgid(r6, r8, 0xee01) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80e0) r10 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) accept4$packet(r10, 0x0, &(0x7f0000000000), 0x80000) setuid(r5) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000010000030900020073797a31000000000500010007000000280007800c00018008000140e79a01020c00148008000140ac1414100c00028008000140"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) clock_adjtime(0x0, &(0x7f0000000740)={0x2, 0x2, 0x5, 0x5, 0x8, 0x2, 0x7fffffff, 0xfffffffffffffbff, 0x3, 0xffffffffffffff34, 0x9, 0x19, 0x7, 0x8, 0x9, 0x4, 0x0, 0xe, 0x9, 0x40a0f187, 0x3, 0x4, 0x8000000000000000, 0x9, 0x2, 0x6}) 1.422124383s ago: executing program 6 (id=1554): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x140, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r5, @ANYRES16=r4, @ANYRES16=r6, @ANYRESDEC, @ANYRES16=r3, @ANYRES16, @ANYBLOB="9a7f40ad4c7145903a868b9020e1e8899ed5747db23004fc9d248900abcaa6b065cf0800930a71dcd8b8955d93c78b9d4e5e06d8d5c9ac9b75d177754d6eba23e6d2be546c0dfecdf61baf732950a5729c01fbdc11e36cb411be200a9135657acd97d21ee46aac313ebdddd9265af16558dd3e5ba4836659a6abfe08aad84276acf949bdaa34bdf7f7b2dfb2fe8b9d6d225dcecebeb6e15f649994728842bd99fc94897d24315ac2d17bf6c2acfbfa8464d80f36304f88b906b78ab359be3479db5b0e7555f04416807c2202d6551f2425440be741dbe053e0bfeb845623e722a9293843f1cf0a71119dcadf7e353af4da52aed3086d6e5a095774248be9a1b1418dec1c03a2cb0ece0840ebeaaf7b67867da45943b700e2d6dad775ae6f33e55aa86ca84c336c91e3b7d7224f7a9a10d5b45a6ce0769d875415bea136b5508e5e0a88290792da3b11b2284a3d757c301cec78b55d3fcfa073615ccb089f66c5b9a5c84f6c1bb78c3370c4687eab260711fa05525687c7709e15cddea061f70798cbf940ad929eb80f33ad8bb4fcd322dd0558f111d7d01351147976b425a27e573402490055054cf3d80bebde6a89f3086170633740f08780aac3a73f17eaeda8deb642c2887962596b4d78c0ffffb28d0e64073b0641f89cf83a69afaaea03ba6070838fdbdaccb81630a6fdaa77fc10146013b9fd79e965a320daf81c1a51f032a3f462f2740e579eb116cad80b4e233326bf94fea52184517accf608b1fbfb395942869841b9ca0f314beff6b2dc0a74d7599012274b24775f0382e72907c1f0c571b994f048c0266feb775d893fec84e5733cd66a96cd45b60f63743b17b05d99c427a2d00a27fef17cadf128059a2e227b80701755b0bc706f32255c8cd619fa995cc7649f28337361a62cff46669fa4cf095a2d148987a9fafa6e1fb9f59b5ac5ff10a4c62e0187a3c75a983f7f5211142c6c09170a13e29c2044e5568bda8055cee4722e445e83ea01307c42cbe63a5bc529e1200e5874f7500275abacd6cc0e3bf8fd38ab7bab39f54d180d60892e2e3a713a3e654c89b8e9ba4474909991844514c04b655c66ccd6f2a17e29ff69d343ebac7ac5e1510ad4ff52e6a932a97bb0d814259da6545022152dd63f06219a1d66ec2278b694876ed6195b0543b8c9289b8438e8ee57dd38bcdb045a6fc4cede28effaa0354afbd4190fcbccd9a0e91508e4399e0e30a0bfdedcc19454b6dd7c2785a6e4fe74a0ece1d683ad07d76eafec02fb0d88debfeacd3531413185da0ffa4fb9b5e6d5a916f7bb5d51efc8ab61e4953fc6b2d1e670769f3ca56d51b804ceb118278acc90422e1f51e448a27d2fe4f93c88cf7c6148474bf650902dd6dd96541044113d244cf938150ec426e7ed63e1f153bbe328f4232552b104c8dee60b0c4e4c25f2605e97cc6f4263d32e8340be2d167137682373ae4cd501fdc9c5359b40f52803a5e4c0e04a5de0412c5cbd4d05e6135a1209d4b2dff50d39e481f1d1b01ed71004fb0c18e736af8ab176f833a439a85c9132e6d2296f665771c6a284eadc08c94ffa520dcc37fd6426c152364699514b15d4df6732fff39834e8ba29688b19db27a970d9d7fbee973c76bee04fb6164963969ebde0f785606781d63726736d8b60a713d5f72207a23f6f00420fdf24d14c069f36a7e236620481cc7a63857cc1355bac8d4f9a3f32785ad4d9d81719077a816b33b98006c322ee473aa9f8f83fae86a4d421104b298a9e42357c44b773e3504b3f9eb5b29330411b776b78fdb6dd9713dd1aee0cc9c7ee8bd23a50d4c8babaf6d74bc25377009a8c57c941f80e58ac08c93a275656cbad3864df9e791305d66103ab30983b07553ede5b5d5b0aab157f805eb6c11c75dd7f297c2cc9110551131a797164dec422b13799f1c261464c765a62c201eb9c8686eee94642d59f429cd137cba0d1a8126dcdfc28ea5c201526c61164a86f480dfde0c60fdf6afd3cd64719de1d89b5a362e058054a9db73aaffac324b04e8903060e1f14ca4ac31c82183066e6d581685efbe3452a20a665166b03808220770d66051971b61d8114376e22a4511cae9fdf7bbed68bb9f45b57eee1c15775730ef1434731d7b82a7cbcd6155396263984edfcea62196189da0ba9908d7d5ef514d75a3e1d4ae42654365083873fc4ce969fa4fac51d640be8d948bb9464d1a7e494c8df98bd5a569ff7fe1aca542c34610148a8f1dc9d60ff0f761270577f286a362f32164184ffce3ad132637e9f0381e9ce76a11f296f9d1e835cdc44926104e1df4d0a282a84b9fbc23064bfcab0d221c6e3124ae8ba6022e62f170dcc2d655f73b40f83fd65f5c705bc1f9e8df13adeadff9e1fe4660a55be7dc969cfffaed607190162dcd09d0cd86a297b22142b88f0eb28dd1a45152a4f4f2dca0d96d39fa594349040f486cd486af619b7083236cf90324cddc6f1ed0f6a103c8d936d7f2f31d420ef50931838e66721bff7494617b6b4bc385f3e51b3f81cf5d6953ac7fddc0f3466682911b38bc7f082e0c18e3ae0badf7f3fd3e186ebc2bab71fa26f77bb14cd97e6761c93c8c25887c0ef1f3dc1d8d86ce0fb73190f66f4deca77977e8d6064bfeeac3fad2bc50488c144e2a1a82fcc1e1c12ac54bf3e2d468e8f53241e4a6ad9e466746a45b053452ded5caa20461881d78d8235e986ba8b77e83601655d2650bf1b64ce17c75314216b43bbd1101a2e12e57525bb7d3b136a70635bdac8af24367a24ce2fe2a72ef2b0e56ff8dc62a82946f86f9b6b1418a89b1971372dfe7d5ce2e6611befff721f04a19bce7f90b1551a4cdead136662c50513fdde6f9d4a199c3907ed8799f231f54dd8347c71d829ff8ddc5d96b5aac2fe58652c81ff7f54e2568119dff2763ef435aa420630dacc7e9414340ee8688f46c7a8ab96d860937641042b3cdf6857ff1d2d4e47cec1f23e65fe541f38cb96b132666f999002e89cd1896ca58c2e63b87382e1a6c1ee9afa56cf3ba923fa9c989e20bff313f37252632fdcff03fbdd2d334ee93baf75c1bdae30feaa81fb2ac1b63c42dda06f20ce8c9d003eb3efed7931def342fb874fce92763f6f477c7f589b75d2129419fc4cb7a8893a1d3f94533ed9fdf9f21fc254fd80aa74750833d390327a2107e761240928d35a36c5eaca61fd848116b8dd7ec8157928bc2dd87f7756aa517cf6a61d2009fd4ba0579ca3b3129cfd5403546f5ab6d0575799a008fc67da9658427636d8f806d9b8cad64aee438d0a9b45957f31a5afe3ed894add9acadfd347246099c6ff0b4ec6f19ac61557daf8739e528185ab1468ca72d6d72e4f026e371e540b774b6576df3014dcc9e91b2cd1f0403a4fcaa6627b22682bb54f92150c2917acaee1972b2b03bc2bd37fdb9e7352c654d94ef196b7229e4da5ee62b7d395ecdd5177f2563242ea49ff78151a4a816a94e89b03f41c7e6684f8be3e5802e9338e7cbd3b43f708c062f944a59f31b02ca9a177e6b681accee8785d2467d2d78636be4330febaa3f6907db07992a2de74e459f3ae8ee6adae20cbc75aabd2d5d3424de0ddcc3ddd981c3a4966c57f8fdb1c42db87395f0bc800ff8ddb4c228a7d793d8a997885494a8578f5433d3f82886ea573641bf16065efbc25718c88f7277ce04c94af560d8deb7968496f849d3fad78741272b08bf7aec3f3c777428d3b8b897333ae5afb6823af63cb7347601ee2e8d4e21b21a12e6d42f66a1aac26d296bc68a998d8ba179ed5f756c2efd8a7acc0e3f08093bb4a83d37f15b4fe07c90858058ad1ff0e21bb7bf4363079c5d452dba5972b21c8f41daf6f11a51d321d3c1d544190238036d907d965ff469ce4895eb7675f3e94a15f83b837b892a40390d87d76e9b15eda02366299d3dd93943466bceeb2f9e465adccc08e1a02c3ac01815931627ed327e0ffbe09563221a365b88c4f2449bd3634920d5bfbde7cdc92c4cb16a579f35f07dafc87ce6ce4de7bf9e8ff0e80b81cdab8f2164a25a0a6929679ce9ae0dc2ac7ed41a787446676f091597551dc2e8c054224bac6652bba5fb675c0b2c94d2faac160f11b7b96fc96415aca8a47fa03658b8afa24b6bd97f7dbeead9ae5f7ec1cb0d000055f41a5043c6c4c97212398b168b5cb9ee650726eabcc31b6712e815fdaae77885350884fb36d6d5444d5e5500a7d636d4eced14b9d411c765b36a4be06ca9be2965d6d6c06c3b6bcb38babeb2999ee71295d48926bf6e39363fabf74de5e57aa0b59f9dddeca142d0c50ab7ff198196c69c971e6ab591220f4e42d6525e2dbd99b6c57949c854e4ee0e4581f9e3e160b3f66b01f23f4d0472c0a1f307837ac8dac0a257d09ab82975148dcd764fe6359a5f21b9cbe2ae7b9b277489a8b3285b8289a84ff854508b4488ffcf68f47ec7a5c18a8c3d06e26b32f754ac74ea8e93a554147fd3b3daf1fbe924e2e389cac13a5f80f3a21dbd250d3917f7b5acfc739a63f2b3d6b3f099efb4be7a842215c89fc87bd8550d11ba2a4af0f111ab124503b26feeae3be3ee24168dd4553a226b9168edb11c3e61bc850adf995b4d6f1aace6db0b91f805c3d1789a3e6b470e5470968f429d5b05c8f76ca2981e37f5bde4ad00a09755c76774ead7d93f3f41255b1d56152e3699b133b2e0b277427c992323d1b4d8c438434e9e901ddd43788f80cb9a975e9dd1671ce16be5ff8033d5da824f00fd78b540edbcd69a2e9aff03e31af9afefb809434f52b4a1239fdd241ed3a268258addde19d1724155a1a4c877bd59b0659b7a786886f6ffcb5999d1f9c007d615020926f7165a9ddd4aaa3c7b631d30cc951e328131d99282ac06a18f88373092320ea5308f06c376e711aecda4cd1c2b639d9ea7a2613d4e9eaa9a0ef72774fdec622f7d131b45135d577897bf686b460a371083070139ea544bda15012251d6c8e7163c25412841faefba76765648ca7cd1b423403a654b6b5754588ae6c309621477db20f7c9236af1e422ebd3fb6d6a712e7a6d00d58416b7d65a53a2514bf51bedfe9207f16a4d79418600389b98ea8b9e06b8da708a86f191e567925af39a09ac9fd7902e8f8e77567baf1b75c05ba1eb7089b424801405afc982a8d79c80fada184a1ab3bab526a3b0a5e20d2dc6bcdd2c5cb7c49f735f3e8f4d36a388ca805876ae08f0e3acca5dd864c1fa1552068bf799095221480374fd2dcaeddb74be93470eff4fe278e190f0a131f32340ada9cca518af769f42943875f4c5707beee2179771da21cd66405b9973648bd047a516d1cf902fa1f0fcdcbc3f4c1f20fc22f9a7e9f4c3a52576399604c46f83ede44f542d06d54e6e8a1e693a2cfcbb16c178d1bace976133e72cc4533bd02b1c4ec2cc22097435aff5a682ca7227414895450831560fa682493f4814ce8fbdb190f8ce2b533ed9582638511bda93aeae5d0690f745b788db622864ba3fb60952f119427fbe66754c5c038c5fb2cb87c326d65862e353c14950bd1fa7c70e36323e9cf90c81f6275e59c7926acac1560a0b6bbc7a850817f2effa19d485315a219d49e293f871278294d02765cf72caa2f438de3337ed205bf68ff6ddaaa5e4b80de5fba022dfcf9cf074a319678df11eb77b3ef66e512b67ba5182265a60eaf457691e973d23cbaf6000537f886695074ebb616f9cdad9de7c6fe9ecfbd13d537d64c34a7c90ca56b50e60d6a7067e391e63561793edf6ed3c2eeb8555909a59ce73da1f096d41fb42de44494128324a9", @ANYRES32=r0, @ANYRES32=r2], 0x5, 0x0, &(0x7f0000000000)) 1.327386558s ago: executing program 9 (id=1555): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x23a, &(0x7f0000000000)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/18, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}}, 0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000001440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x58, &(0x7f00000002c0)}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x208810, &(0x7f0000000100), 0xff, 0x4c4, &(0x7f00000001c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt(r0, 0xa, 0x5, &(0x7f0000000040), 0x0) 1.301832104s ago: executing program 7 (id=1556): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30000000180001000000000000ee000002000200000100080000000006001500040200"], 0x30}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000008000000000000f8ffffff18110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="00000000000000008932060000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001100)='syzkaller\x00', 0x8, 0x78, &(0x7f0000001140)=""/120, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000011c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001200)={0x3, 0x0, 0xfffffffa, 0xfffffffe}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0xffffffffffffffff], &(0x7f0000001280)=[{0x4, 0x5, 0x6, 0x1c}, {0x1, 0x4, 0xe, 0xa}], 0x10, 0x2a8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x9, 0x29, 0x80, 0x9, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x7, 0x7fffffff}}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x3aa8, 0x7}}, @TCA_NETEM_LOSS={0x4}, @TCA_NETEM_DELAY_DIST={0xc, 0x2, "1fec3497f3dbd724"}]}}}]}, 0x80}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000014c0)={0x0, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r1, r3, 0x25, 0x5, @val=@uprobe_multi={&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=[0x9, 0x3], &(0x7f0000001480)=[0x0], 0x2, 0x2, 0x0, r4}}, 0x40) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x4, r0, 'id0\x00'}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x52, 0x4d, 0xbf, 0xff, 0x0, 0x9, 0x810, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x100, 0x9, 0x3, 0x7, 0xfffffffffffffff8, 0x200, 0x4, 0x0, 0x6, 0x0, 0x10000000000000}, r4, 0x10, r5, 0x8) 1.130586017s ago: executing program 6 (id=1557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x80001) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r3, &(0x7f00000000c0)='/+^}!+,+($\a\x00', 0x82000, &(0x7f0000000140)={@align=0x8, {0x9, 0x8, 0x8}}, 0x694ed9bb, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x3}) recvmsg$unix(r4, &(0x7f0000000cc0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f0000000980)=""/192, 0xc0}, {&(0x7f0000000a40)=""/180, 0xb4}, {&(0x7f0000000b00)=""/144, 0x90}], 0x8, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x62) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@grpjquota}, {@usrquota}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5d4, &(0x7f0000001080)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) fcntl$addseals(r7, 0x409, 0xa) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r7, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb, 0x80000001}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc90}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x55ce29afe10411a5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r15 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r15, 0x40047211, &(0x7f0000000d00)=0x2) 1.002179617s ago: executing program 7 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) clock_nanosleep(0xa, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3fc10000", @ANYRES16=r1, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x22, 0x2, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0xb, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@p, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x4, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000b40)={0x54, 0x1, 0x1, {0x0, 0x1}, {0x60, 0x2}, @period={0x59, 0x0, 0x8, 0x2, 0x448, {0x2, 0x8, 0x679c, 0x401}, 0x0, 0x0}}) syz_emit_ethernet(0x36, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) getsockopt$inet6_tcp_int(r2, 0x6, 0x18, &(0x7f0000000000), &(0x7f0000000140)=0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x128, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xaf}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2102175e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8105}, 0x4085) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000002c0)=0x802, 0x3) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r7, 0xffffffff) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f00000001c0)=0x7, 0x4) pipe2$watch_queue(&(0x7f0000000200), 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c1) 772.800561ms ago: executing program 4 (id=1559): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000000440)="6b6b8e97bceaa2f1ae18", 0xa) sendfile(r1, r0, 0x0, 0x3ffff) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)=@buf={0x5d, &(0x7f0000000000)="0cc5a801113ce85e671ad9f6968073f9c887120fc81fbc56c07eefda43ea5e651722ad9a2842500440187733b9814ae4dc303e0c6158776605e7e1f6fb6a133631a837d0e2f6731bcbb528ae2e23a37392765aad46fd66350ff1948ce7"}) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000900)={0x1d, r3, 0x1}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x130, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x5, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x47ba, 0x0, 0x28, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r8, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r7, &(0x7f0000000180), 0x100000000000003c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d8a95d3ffc3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 522.346582ms ago: executing program 7 (id=1560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x21, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b2"}}, 0x2f) 480.758055ms ago: executing program 2 (id=1561): r0 = socket(0x2a, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x101100, 0x1) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000100)=0x1ede7e8a, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) tkill(0x0, 0x2f) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x68040200) syz_open_dev$tty20(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) epoll_create(0x3ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x800000000000002, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000001c0)={0xffbfff41, 0x4000403, 0x68, 0x17, 0x8, "ffffff7f87680000000000001000007fcb3678", 0x9, 0x202}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4091}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x4d8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0xe}, {0x0, 0x1}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0xf2}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @filter_kind_options=@f_bpf={{0x8}, {0x47c, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x7, 0x2}}, @TCA_BPF_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x3, 0x9, 0x8, {0x9, 0x2, 0x583b, 0x2, 0xffff, 0x6}, {0x1, 0x1, 0xffe0, 0x0, 0xfff, 0xe4d5}, 0x8000, 0x1000, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffa, 0x1, 0xffff, 0x8000, 0x80, 0x2, 0x0, 0x5, 0x7, 0x0, 0x2, 0xffffffff, 0x7d, 0x7f, 0x3, 0x648, 0x0, 0x7ff, 0x9, 0x8, 0x763, 0x5, 0x7f, 0x50000000, 0xfff, 0x3, 0x6d, 0x0, 0xfffffff8, 0x4715, 0x643, 0x8, 0x4, 0x9, 0x80000001, 0xad, 0x3, 0x8, 0x2, 0xc, 0x2, 0x1, 0x3, 0x3, 0x826, 0x1a0, 0x0, 0x1f2, 0xf, 0x90, 0x5, 0x7, 0x6, 0x5, 0x6, 0x1, 0x5802, 0x5, 0x7, 0x4, 0x34f, 0xfffff6ed, 0x65b, 0x8, 0x6, 0x9, 0x8001, 0x0, 0x9, 0x7, 0x8, 0x5f6, 0xc8, 0x96051f7, 0x200, 0x8, 0x0, 0x81, 0x1, 0x0, 0x7, 0x7fffffff, 0x8, 0x200, 0x90cd, 0x1, 0x2, 0x401, 0x80, 0x3, 0x4, 0x7, 0xfffffff3, 0xad, 0xa427, 0x2, 0x70, 0x5, 0x9, 0x7, 0x9bed, 0x1, 0x5, 0x3ff, 0x80000000, 0x7, 0x5, 0x42, 0xee6, 0x80, 0x4, 0x1, 0x81, 0x2, 0x1000, 0x8, 0x800, 0x1, 0x6, 0xfffffffd, 0x8, 0x1, 0x5, 0x5, 0xf, 0x5, 0xfffffff7, 0x2, 0x4, 0x0, 0x6, 0x7f74, 0x5, 0x4, 0x3, 0xe1, 0x0, 0x2, 0x3, 0x9, 0x8, 0x101, 0xa, 0x8, 0x7, 0x5, 0x7207, 0x3ff, 0x7, 0x6, 0x1, 0x5, 0x497d, 0x81, 0x5199e687, 0x3ff, 0xfe, 0x2, 0x8, 0x0, 0x80, 0x10000, 0x1, 0x1ff, 0x9, 0xff, 0x4, 0xffff, 0x7fffffff, 0x0, 0x8, 0x80000000, 0x4, 0xf2c, 0x6, 0x5, 0x8177, 0x9, 0x0, 0x981, 0x9, 0x9, 0x9, 0xa3, 0xc, 0x8, 0xaeee, 0x3, 0x9, 0x7, 0xc1ce, 0xfffffff9, 0x6, 0x1, 0x6, 0x7, 0x3, 0x8, 0x9, 0x81, 0x1, 0x200, 0x7ff, 0x6, 0xce, 0x7, 0x1c, 0x44fd, 0xfffffff8, 0x3bd0, 0x8, 0x3, 0xf, 0x8, 0x6, 0x10e5, 0x8000, 0x0, 0x6, 0xd0fd, 0x6, 0x8, 0x1f, 0xfff, 0x4, 0x1, 0x1, 0x7fff, 0x401, 0xfffffff7, 0x9, 0x5, 0x0, 0x10000, 0x5, 0x0, 0x0, 0x8, 0x9, 0x8, 0x82c6, 0x7fffffff, 0x4, 0x9, 0x524d, 0x9, 0xfffffffc, 0xae, 0x8, 0x508a, 0x2, 0x400, 0x6, 0x7fff, 0x7fff]}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x1ffe2}}]}}]}, 0x4d8}}, 0x24004814) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x87, @empty, 0x4e22, 0x0, 'nq\x00', 0x4, 0x19, 0x66}, {@rand_addr=0x64010100, 0x4e20, 0x3, 0x5, 0x3, 0x1fffe000}}, 0x44) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 427.839797ms ago: executing program 6 (id=1562): epoll_create1(0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040), 0x0) syz_open_dev$hidraw(0x0, 0x1, 0x803) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) setrlimit(0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x50, 0xffffffffffffffff, 0x679f4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 254.17756ms ago: executing program 6 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2, &(0x7f0000000340)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x3, 0x46b, &(0x7f0000001380)="$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") sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='uni_xlate\x00\x00,iocharset=iso8859-5,shortname=winnt,nonumtail=0,uni_xlate=1,utf8=0,iocharset=maccroatian,iocharset=macgaelic,allow_utime=00000000000000000000527,nfs,nonumtail=0,iocharset=cp865,uid=', @ANYBLOB="dbebdec402a7b694b2b22189fe12bccd0da3a5fe7e5a", @ANYBLOB="2c636f64657061673835352c004c87a56b54e381762bf87fb98d86d772421a964d437fff01c5e125acb191c121f8030000000001009dba05feee081e91fc61a0fef55112510000"], 0x1, 0x238, &(0x7f0000000500)="$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") unshare(0x60000600) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) timer_gettime(r2, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x121000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r3, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) mq_open(&(0x7f0000000000)='\x00', 0x0, 0x190, &(0x7f0000000200)={0x0, 0xd86, 0x14cbb78d, 0x45}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 141.812742ms ago: executing program 9 (id=1564): pipe2$9p(&(0x7f0000000100), 0x0) epoll_create1(0x80000) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x10, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x54}}, 0x0) capset(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) syz_io_uring_setup(0x35e3, &(0x7f0000000000)={0x0, 0xcd95, 0x2, 0x0, 0x268}, &(0x7f0000000100), &(0x7f00000003c0)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 103.796406ms ago: executing program 7 (id=1565): fsmount(0xffffffffffffffff, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x2e, &(0x7f00000001c0)=0xffffb1e0, 0x4) 0s ago: executing program 2 (id=1566): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f8539, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4005, 0xa600000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x1000001000, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x100000000000000, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 02 compat=0 ip=0x7f1e71bdc629 code=0x7fc00000 [ 144.218364][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.231644][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.239100][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.265479][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.283622][ T3979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.312663][ T7323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.426971][ T3979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.476464][ T7437] EXT4-fs error (device loop7): ext4_init_orphan_info:583: comm syz.7.1023: inode #0: comm syz.7.1023: iget: illegal inode # [ 144.495372][ T7323] team0: Port device team_slave_0 added [ 144.509917][ T7437] loop7: lost filesystem error report for type 5 error -117 [ 144.510080][ T7437] EXT4-fs (loop7): get orphan inode failed [ 144.517533][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 144.517556][ C1] EXT4-fs (loop7): initial error at time 1772082440: ext4_init_orphan_info:583 [ 144.517586][ C1] EXT4-fs (loop7): last error at time 1772082440: ext4_init_orphan_info:583 [ 144.549709][ T7296] hsr_slave_0: entered promiscuous mode [ 144.556013][ T7296] hsr_slave_1: entered promiscuous mode [ 144.562024][ T7296] debugfs: 'hsr0' already exists in 'hsr' [ 144.567830][ T7296] Cannot create hsr debugfs directory [ 144.574493][ T7323] team0: Port device team_slave_1 added [ 144.587806][ T7437] EXT4-fs (loop7): mount failed [ 144.615910][ T3979] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.680272][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.705169][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.774672][ T7323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.815625][ T7323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.832856][ T7323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.895200][ T7323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.184824][ T7344] lo speed is unknown, defaulting to 1000 [ 145.237655][ T7323] hsr_slave_0: entered promiscuous mode [ 145.249536][ T7323] hsr_slave_1: entered promiscuous mode [ 145.262699][ T7323] debugfs: 'hsr0' already exists in 'hsr' [ 145.274420][ T7323] Cannot create hsr debugfs directory [ 145.380176][ T3979] bridge_slave_1: left allmulticast mode [ 145.394979][ T3979] bridge_slave_1: left promiscuous mode [ 145.404867][ T3979] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.432790][ T3979] bridge_slave_0: left allmulticast mode [ 145.442640][ T3979] bridge_slave_0: left promiscuous mode [ 145.452859][ T3979] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.576052][ T3979] bond1 (unregistering): (slave geneve2): Releasing active interface [ 145.675525][ T7467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1030'. [ 145.705167][ T7465] set_capacity_and_notify: 17 callbacks suppressed [ 145.705188][ T7465] loop7: detected capacity change from 0 to 512 [ 145.719796][ T7465] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 145.732763][ T3979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.744059][ T3979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.753274][ T7465] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1029: bad orphan inode 131083 [ 145.764837][ T7465] loop7: lost filesystem error report for type 5 error -117 [ 145.765244][ T3979] bond0 (unregistering): Released all slaves [ 145.784689][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 145.791161][ C0] EXT4-fs (loop7): initial error at time 1772082441: ext4_orphan_get:1417 [ 145.799746][ C0] EXT4-fs (loop7): last error at time 1772082441: ext4_orphan_get:1417 [ 145.803507][ T3979] bond1 (unregistering): Released all slaves [ 145.810084][ T7465] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.830903][ T28] audit: type=1400 audit(1772082441.548:1212): avc: denied { append } for pid=7461 comm="syz.7.1029" path="/116/bus/cgroup.controllers" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 145.861187][ T7344] lo speed is unknown, defaulting to 1000 [ 145.888426][ T3979] tipc: Disabling bearer [ 145.893765][ T3979] tipc: Left network mode [ 145.968482][ T3979] hsr_slave_0: left promiscuous mode [ 145.976515][ T3979] hsr_slave_1: left promiscuous mode [ 145.984472][ T3979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.992238][ T3979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.006723][ T3979] veth1_macvtap: left promiscuous mode [ 146.012373][ T3979] veth0_macvtap: left promiscuous mode [ 146.018129][ T3979] veth1_vlan: left allmulticast mode [ 146.023658][ T3979] veth1_vlan: left promiscuous mode [ 146.029116][ T3979] veth0_vlan: left promiscuous mode [ 146.137078][ T3979] macvlan0 (unregistering): left allmulticast mode [ 146.168761][ T3979] team0 (unregistering): Port device team_slave_1 removed [ 146.213996][ T311] smc: removing ib device syU× [ 146.243909][ T23] lo speed is unknown, defaulting to 1000 [ 146.259925][ T23] infiniband syz0: ib_query_port failed (-19) [ 146.340537][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.397015][ T7296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.442392][ T7296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.458383][ T7296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.484447][ T7296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.520310][ T7323] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 146.572747][ T7323] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 146.597645][ T7323] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 146.623201][ T28] audit: type=1400 audit(1772082442.338:1213): avc: denied { watch } for pid=7494 comm="syz.4.1032" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.655276][ T7323] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 146.693351][ T3979] IPVS: stop unused estimator thread 0... [ 146.907999][ T7296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.930278][ T7520] process '/newroot/166/file0' started with executable stack [ 146.976163][ T7296] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.988690][ T28] audit: type=1400 audit(1772082442.708:1214): avc: denied { create } for pid=7528 comm="syz.4.1036" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rxrpc_socket permissive=1 [ 147.042766][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.049900][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.071454][ T28] audit: type=1326 audit(1772082442.788:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.6.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a763c629 code=0x7ffc0000 [ 147.076898][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1038'. [ 147.105955][ T7535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1038'. [ 147.118935][ T7323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.171822][ T7323] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.182265][ T28] audit: type=1326 audit(1772082442.788:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.6.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a763c629 code=0x7ffc0000 [ 147.216504][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.223667][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.263701][ T28] audit: type=1326 audit(1772082442.788:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.6.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd5a763c629 code=0x7ffc0000 [ 147.289929][ T28] audit: type=1326 audit(1772082442.788:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.6.1038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5a763c629 code=0x7ffc0000 [ 147.293280][ T3979] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.320693][ T3979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.342133][ T3979] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.349289][ T3979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.360170][ T7535] loop6: detected capacity change from 0 to 512 [ 147.450012][ T7323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.472746][ T7323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.582789][ T7296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.739874][ T7323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.130306][ T7296] veth0_vlan: entered promiscuous mode [ 148.167406][ T7296] veth1_vlan: entered promiscuous mode [ 148.236729][ T7296] veth0_macvtap: entered promiscuous mode [ 148.254545][ T7296] veth1_macvtap: entered promiscuous mode [ 148.304330][ T7625] loop4: detected capacity change from 0 to 136 [ 148.316619][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.359780][ T7631] loop6: detected capacity change from 0 to 136 [ 148.370771][ T7296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.428387][ T3520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.502107][ T3520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.534117][ T3520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.575999][ T3520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.627153][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 148.627171][ T28] audit: type=1400 audit(1772082444.348:1307): avc: denied { mounton } for pid=7296 comm="syz-executor" path="/root/syzkaller.fWQMyp/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 148.656934][ T7323] veth0_vlan: entered promiscuous mode [ 148.729955][ T28] audit: type=1400 audit(1772082444.348:1308): avc: denied { mounton } for pid=7296 comm="syz-executor" path="/root/syzkaller.fWQMyp/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 148.766966][ T7323] veth1_vlan: entered promiscuous mode [ 148.845698][ T28] audit: type=1400 audit(1772082444.348:1309): avc: denied { mounton } for pid=7296 comm="syz-executor" path="/root/syzkaller.fWQMyp/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23553 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 148.899452][ T7323] veth0_macvtap: entered promiscuous mode [ 148.968362][ T7323] veth1_macvtap: entered promiscuous mode [ 148.981707][ T28] audit: type=1400 audit(1772082444.388:1310): avc: denied { mounton } for pid=7296 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 149.012001][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.059154][ T7662] loop5: detected capacity change from 0 to 512 [ 149.068425][ T7323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.077123][ T7662] EXT4-fs: inline encryption not supported [ 149.083099][ T7662] EXT4-fs: Ignoring removed i_version option [ 149.111330][ T3970] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.140589][ T28] audit: type=1400 audit(1772082444.388:1311): avc: denied { mount } for pid=7296 comm="syz-executor" name="/" dev="gadgetfs" ino=3703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 149.188061][ T3979] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.207957][ T7662] EXT4-fs (loop5): 1 orphan inode deleted [ 149.214362][ T7662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.224534][ T7676] loop6: detected capacity change from 0 to 128 [ 149.234009][ T3979] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.270467][ T7678] tipc: Can't bind to reserved service type 0 [ 149.286968][ T3979] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.351043][ T7296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.475038][ T28] audit: type=1400 audit(1772082445.198:1312): avc: denied { getopt } for pid=7688 comm="syz.8.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.519114][ T7681] loop6: detected capacity change from 0 to 256 [ 149.577897][ T7681] vfat: Unknown parameter '' [ 149.637152][ T3389] IPVS: starting estimator thread 0... [ 149.745136][ T7704] IPVS: using max 1680 ests per chain, 84000 per kthread [ 149.771300][ T7681] Invalid ELF header magic: != ELF [ 149.784887][ T28] audit: type=1400 audit(1772082445.478:1313): avc: denied { module_load } for pid=7680 comm="syz.6.1057" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 149.831638][ T7709] 9p: Bad value for 'wfdno' [ 149.927609][ T7714] EXT4-fs (loop5): unable to read superblock [ 150.021304][ T7723] FAULT_INJECTION: forcing a failure. [ 150.021304][ T7723] name failslab, interval 1, probability 0, space 0, times 0 [ 150.099438][ T7723] CPU: 0 UID: 0 PID: 7723 Comm: syz.4.1067 Tainted: G W syzkaller #0 PREEMPT(full) [ 150.099490][ T7723] Tainted: [W]=WARN [ 150.099497][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.099510][ T7723] Call Trace: [ 150.099517][ T7723] [ 150.099541][ T7723] __dump_stack+0x1d/0x30 [ 150.099571][ T7723] dump_stack_lvl+0x95/0xd0 [ 150.099598][ T7723] dump_stack+0x15/0x1b [ 150.099621][ T7723] should_fail_ex+0x263/0x280 [ 150.099654][ T7723] should_failslab+0x8c/0xb0 [ 150.099676][ T7723] __kmalloc_noprof+0xb8/0x4e0 [ 150.099746][ T7723] ? nla_strdup+0x78/0xc0 [ 150.099773][ T7723] nla_strdup+0x78/0xc0 [ 150.099797][ T7723] nf_tables_newset+0xf79/0x16d0 [ 150.099841][ T7723] nfnetlink_rcv+0xc1e/0x1720 [ 150.099893][ T7723] netlink_unicast+0x5c0/0x690 [ 150.099922][ T7723] netlink_sendmsg+0x5c8/0x6f0 [ 150.100014][ T7723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.100045][ T7723] ____sys_sendmsg+0x5af/0x600 [ 150.100148][ T7723] ___sys_sendmsg+0x195/0x1e0 [ 150.100263][ T7723] __x64_sys_sendmsg+0xd4/0x160 [ 150.100305][ T7723] x64_sys_call+0x194c/0x3020 [ 150.100339][ T7723] do_syscall_64+0x12c/0x370 [ 150.100431][ T7723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.100515][ T7723] RIP: 0033:0x7f819831c629 [ 150.100535][ T7723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.100557][ T7723] RSP: 002b:00007f8196d6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.100578][ T7723] RAX: ffffffffffffffda RBX: 00007f8198595fa0 RCX: 00007f819831c629 [ 150.100627][ T7723] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 150.100643][ T7723] RBP: 00007f8196d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.100659][ T7723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.100674][ T7723] R13: 00007f8198596038 R14: 00007f8198595fa0 R15: 00007ffd7e17b428 [ 150.100700][ T7723] [ 150.824129][ T7714] IPVS: You probably need to specify IP address on multicast interface. [ 150.834166][ T28] audit: type=1400 audit(1772082446.548:1314): avc: denied { bind } for pid=7761 comm="syz.4.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 150.870694][ T7714] IPVS: Error connecting to the multicast addr [ 150.939278][ T7768] openvswitch: netlink: Message has 8 unknown bytes. [ 150.946794][ T28] audit: type=1400 audit(1772082446.648:1315): avc: granted { setsecparam } for pid=7765 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 151.028982][ T28] audit: type=1400 audit(1772082446.648:1316): avc: granted { setsecparam } for pid=7765 comm="syz.6.1072" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 151.137748][ T7770] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 151.321518][ T7780] loop6: detected capacity change from 0 to 256 [ 152.801632][ T7810] xt_hashlimit: size too large, truncated to 1048576 [ 152.889572][ T7813] smc: net device gretap0 applied user defined pnetid SYZ0 [ 153.635915][ T28] kauditd_printk_skb: 559 callbacks suppressed [ 153.635931][ T28] audit: type=1400 audit(1772082449.358:1876): avc: denied { prog_load } for pid=7840 comm="syz.5.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 153.805057][ T28] audit: type=1400 audit(1772082449.358:1877): avc: denied { bpf } for pid=7840 comm="syz.5.1089" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.834985][ T7853] loop6: detected capacity change from 0 to 2048 [ 153.864420][ T7823] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.875435][ T7853] EXT4-fs: Ignoring removed orlov option [ 153.894749][ T28] audit: type=1400 audit(1772082449.358:1878): avc: denied { perfmon } for pid=7840 comm="syz.5.1089" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.921012][ T7853] EXT4-fs: Ignoring removed oldalloc option [ 153.926309][ T7823] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 153.934626][ T7823] audit: backlog limit exceeded [ 153.936208][ T7853] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.948648][ T7861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 153.955538][ T7853] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 153.963420][ T7853] audit: backlog limit exceeded [ 154.186650][ T7853] 9p: Bad value for 'rfdno' [ 154.254743][ T7870] loop4: detected capacity change from 0 to 2048 [ 154.325759][ T7870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.452993][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.476065][ T7890] FAULT_INJECTION: forcing a failure. [ 154.476065][ T7890] name failslab, interval 1, probability 0, space 0, times 0 [ 154.490403][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.7.1098 Tainted: G W syzkaller #0 PREEMPT(full) [ 154.490502][ T7890] Tainted: [W]=WARN [ 154.490511][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 154.490526][ T7890] Call Trace: [ 154.490536][ T7890] [ 154.490546][ T7890] __dump_stack+0x1d/0x30 [ 154.490581][ T7890] dump_stack_lvl+0x95/0xd0 [ 154.490606][ T7890] dump_stack+0x15/0x1b [ 154.490632][ T7890] should_fail_ex+0x263/0x280 [ 154.490677][ T7890] should_failslab+0x8c/0xb0 [ 154.490703][ T7890] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 154.490738][ T7890] ? sidtab_sid2str_get+0xa0/0x130 [ 154.490763][ T7890] ? sidtab_sid2str_put+0x1b5/0x360 [ 154.490867][ T7890] kmemdup_noprof+0x2b/0x70 [ 154.490911][ T7890] sidtab_sid2str_get+0xa0/0x130 [ 154.490935][ T7890] security_sid_to_context_core+0x1eb/0x2e0 [ 154.490982][ T7890] security_sid_to_context+0x27/0x40 [ 154.491089][ T7890] avc_audit_post_callback+0x10f/0x540 [ 154.491222][ T7890] ? audit_log_lsm_data+0xb3e/0xbb0 [ 154.491336][ T7890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 154.491445][ T7890] common_lsm_audit+0x1ba/0x230 [ 154.491487][ T7890] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 154.491516][ T7890] slow_avc_audit+0x14c/0x190 [ 154.491544][ T7890] avc_has_perm+0x144/0x190 [ 154.491630][ T7890] selinux_socket_sendmsg+0x192/0x1c0 [ 154.491668][ T7890] security_socket_sendmsg+0x44/0x80 [ 154.491740][ T7890] ____sys_sendmsg+0x361/0x600 [ 154.491776][ T7890] ___sys_sendmsg+0x195/0x1e0 [ 154.491884][ T7890] __x64_sys_sendmsg+0xd4/0x160 [ 154.491926][ T7890] x64_sys_call+0x194c/0x3020 [ 154.492004][ T7890] do_syscall_64+0x12c/0x370 [ 154.492043][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.492080][ T7890] RIP: 0033:0x7f1e71bdc629 [ 154.492096][ T7890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.492139][ T7890] RSP: 002b:00007f1e7062f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.492162][ T7890] RAX: ffffffffffffffda RBX: 00007f1e71e55fa0 RCX: 00007f1e71bdc629 [ 154.492176][ T7890] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 154.492247][ T7890] RBP: 00007f1e7062f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.492263][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.492276][ T7890] R13: 00007f1e71e56038 R14: 00007f1e71e55fa0 R15: 00007ffe8982a988 [ 154.492296][ T7890] [ 154.890412][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1102'. [ 155.038099][ T7914] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 155.161811][ T7914] bond1 (unregistering): Released all slaves [ 155.398951][ T7922] random: crng reseeded on system resumption [ 156.012655][ T7934] loop5: detected capacity change from 0 to 256 [ 156.209288][ T7934] FAT-fs (loop5): Directory bread(block 64) failed [ 156.216014][ T7934] FAT-fs (loop5): Directory bread(block 65) failed [ 156.222651][ T7934] FAT-fs (loop5): Directory bread(block 66) failed [ 156.229324][ T7934] FAT-fs (loop5): Directory bread(block 67) failed [ 156.236152][ T7934] FAT-fs (loop5): Directory bread(block 68) failed [ 156.242898][ T7934] FAT-fs (loop5): Directory bread(block 69) failed [ 156.249572][ T7934] FAT-fs (loop5): Directory bread(block 70) failed [ 156.256289][ T7934] FAT-fs (loop5): Directory bread(block 71) failed [ 156.262896][ T7934] FAT-fs (loop5): Directory bread(block 72) failed [ 156.269485][ T7934] FAT-fs (loop5): Directory bread(block 73) failed [ 156.942264][ T7945] loop7: detected capacity change from 0 to 512 [ 156.981322][ T7945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.056764][ T7945] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.450654][ T7957] lo: Caught tx_queue_len zero misconfig [ 157.510549][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.652652][ T7958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 157.659151][ T7958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.020552][ T7969] random: crng reseeded on system resumption [ 158.645968][ T28] kauditd_printk_skb: 741 callbacks suppressed [ 158.646028][ T28] audit: type=1400 audit(1772082454.368:2552): avc: denied { write } for pid=7982 comm="syz.6.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.705499][ T28] audit: type=1400 audit(1772082454.388:2553): avc: denied { prog_load } for pid=7983 comm="syz.7.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.744700][ T28] audit: type=1400 audit(1772082454.398:2554): avc: denied { bpf } for pid=7983 comm="syz.7.1123" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.769699][ T28] audit: type=1400 audit(1772082454.398:2555): avc: denied { create } for pid=7982 comm="syz.6.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.791922][ T28] audit: type=1400 audit(1772082454.398:2556): avc: denied { write } for pid=7982 comm="syz.6.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.814201][ T28] audit: type=1400 audit(1772082454.398:2557): avc: denied { module_request } for pid=7982 comm="syz.6.1122" kmod="net-pf-16-proto-16-family-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 158.867462][ T28] audit: type=1400 audit(1772082454.398:2558): avc: denied { prog_load } for pid=7983 comm="syz.7.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.914887][ T28] audit: type=1400 audit(1772082454.408:2559): avc: denied { bpf } for pid=7983 comm="syz.7.1123" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.953213][ T28] audit: type=1400 audit(1772082454.408:2560): avc: denied { perfmon } for pid=7983 comm="syz.7.1123" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.014451][ T28] audit: type=1400 audit(1772082454.408:2561): avc: denied { prog_load } for pid=7983 comm="syz.7.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 159.293955][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1126'. [ 159.623339][ T7985] loop7: detected capacity change from 0 to 1024 [ 159.713611][ T8016] loop8: detected capacity change from 0 to 512 [ 159.736597][ T8016] EXT4-fs: inline encryption not supported [ 159.755480][ T7985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 159.767830][ T8016] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 159.776915][ T7985] System zones: 0-1, 3-36 [ 159.813166][ T7985] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1123: bad orphan inode 134217728 [ 159.858336][ T7985] loop7: lost filesystem error report for type 5 error -117 [ 159.864652][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 159.878547][ C1] EXT4-fs (loop7): initial error at time 1772082455: ext4_orphan_get:1417 [ 159.887126][ C1] EXT4-fs (loop7): last error at time 1772082455: ext4_orphan_get:1417 [ 159.904683][ T7985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.227649][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.358193][ T8039] loop7: detected capacity change from 0 to 512 [ 160.380457][ T8039] EXT4-fs error (device loop7): ext4_init_orphan_info:583: comm syz.7.1136: inode #0: comm syz.7.1136: iget: illegal inode # [ 160.404485][ T8039] loop7: lost filesystem error report for type 5 error -117 [ 160.404688][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 160.418512][ C0] EXT4-fs (loop7): initial error at time 1772082456: ext4_init_orphan_info:583 [ 160.427533][ C0] EXT4-fs (loop7): last error at time 1772082456: ext4_init_orphan_info:583 [ 160.436365][ T8039] EXT4-fs (loop7): get orphan inode failed [ 160.442461][ T8039] EXT4-fs (loop7): mount failed [ 160.775343][ T8053] netlink: 'syz.6.1142': attribute type 21 has an invalid length. [ 160.794513][ T8053] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1142'. [ 160.813445][ T8053] netlink: 'syz.6.1142': attribute type 4 has an invalid length. [ 160.839191][ T8053] netlink: 'syz.6.1142': attribute type 5 has an invalid length. [ 160.872335][ T8053] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1142'. [ 161.625942][ T8066] loop8: detected capacity change from 0 to 531 [ 161.638673][ T8079] loop5: detected capacity change from 0 to 512 [ 161.665828][ T8079] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1150: inode #0: comm syz.5.1150: iget: illegal inode # [ 161.717145][ T8079] loop5: lost filesystem error report for type 5 error -117 [ 161.723374][ T8079] EXT4-fs (loop5): get orphan inode failed [ 161.731382][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 161.731405][ C1] EXT4-fs (loop5): initial error at time 1772082457: ext4_init_orphan_info:583 [ 161.731431][ C1] EXT4-fs (loop5): last error at time 1772082457: ext4_init_orphan_info:583 [ 161.845130][ T8066] EXT4-fs error (device loop8): __ext4_fill_super:5563: inode #2: comm syz.8.1144: iget: special inode unallocated [ 161.848253][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1151'. [ 161.861060][ T8079] EXT4-fs (loop5): mount failed [ 161.883023][ T8066] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 161.884665][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 161.900234][ C1] EXT4-fs (loop8): initial error at time 1772082457: __ext4_fill_super:5563: inode 2 [ 161.909765][ C1] EXT4-fs (loop8): last error at time 1772082457: __ext4_fill_super:5563: inode 2 [ 161.929770][ T8066] EXT4-fs (loop8): get root inode failed [ 161.936659][ T8066] EXT4-fs (loop8): mount failed [ 161.943804][ T8071] loop4: detected capacity change from 0 to 164 [ 162.124543][ T8089] loop5: detected capacity change from 0 to 512 [ 162.154403][ T8089] EXT4-fs: Ignoring removed i_version option [ 162.179228][ T8089] EXT4-fs: Ignoring removed bh option [ 162.227098][ T8089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.257400][ T8089] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.941208][ T8095] loop4: detected capacity change from 0 to 512 [ 162.987136][ T8095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.127554][ T7296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.227975][ T3988] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.251811][ T3988] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.288047][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.299356][ T3988] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.464954][ T3988] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.590412][ T8114] loop6: detected capacity change from 0 to 128 [ 163.602867][ T8114] vfat: Unknown parameter '˙˙É‚ŰsǃLž˘ŃłŹŘ´´ęQŘÇë%‹Opb–ĎťĎüNí' [ 163.655563][ T28] kauditd_printk_skb: 736 callbacks suppressed [ 163.655591][ T28] audit: type=1400 audit(1772082459.378:3299): avc: denied { allowed } for pid=8118 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.711379][ T28] audit: type=1400 audit(1772082459.378:3298): avc: denied { read write } for pid=8104 comm="syz.8.1156" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.787785][ T28] audit: type=1400 audit(1772082459.378:3300): avc: denied { map } for pid=8104 comm="syz.8.1156" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.883120][ T28] audit: type=1400 audit(1772082459.408:3301): avc: denied { create } for pid=8118 comm="syz.5.1160" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 163.990315][ T28] audit: type=1400 audit(1772082459.408:3302): avc: denied { map } for pid=8118 comm="syz.5.1160" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.243237][ T28] audit: type=1400 audit(1772082459.408:3303): avc: denied { read write } for pid=8118 comm="syz.5.1160" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=23432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.414682][ T28] audit: type=1400 audit(1772082459.418:3304): avc: denied { open } for pid=8118 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 164.461514][ T8137] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.475036][ T8136] audit: audit_backlog=65 > audit_backlog_limit=64 [ 164.511522][ T8137] audit: audit_lost=28 audit_rate_limit=0 audit_backlog_limit=64 [ 165.601157][ T8144] random: crng reseeded on system resumption [ 165.855408][ T8150] loop7: detected capacity change from 0 to 1024 [ 165.901481][ T8150] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 165.914842][ T8150] System zones: 0-1, 3-36 [ 165.955117][ T8150] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1171: bad orphan inode 134217728 [ 165.967686][ T8157] loop4: detected capacity change from 0 to 512 [ 166.043790][ T8162] Invalid argument reading file caps for ./file0 [ 166.060457][ T8150] loop7: lost filesystem error report for type 5 error -117 [ 166.061036][ T8150] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.082658][ T8160] xt_hashlimit: invalid interval [ 166.117165][ T8162] cgroup: Invalid name [ 166.127096][ T8157] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.1174: inode #0: comm syz.4.1174: iget: illegal inode # [ 166.150277][ T8157] loop4: lost filesystem error report for type 5 error -117 [ 166.154650][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 166.168467][ C1] EXT4-fs (loop4): initial error at time 1772082461: ext4_init_orphan_info:583 [ 166.177484][ C1] EXT4-fs (loop4): last error at time 1772082461: ext4_init_orphan_info:583 [ 166.186265][ T8157] EXT4-fs (loop4): get orphan inode failed [ 166.192517][ T8157] EXT4-fs (loop4): mount failed [ 166.356667][ T8175] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1176'. [ 166.411995][ T8175] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1176'. [ 166.441219][ T8162] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1175'. [ 166.475168][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.496386][ T8179] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1176'. [ 166.526639][ T8175] loop6: detected capacity change from 0 to 512 [ 166.535760][ T8182] netlink: 'syz.4.1177': attribute type 10 has an invalid length. [ 166.553815][ T8179] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1176'. [ 166.587893][ T8182] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.676729][ T8182] bond0: (slave team0): Enslaving as an active interface with an up link [ 166.968478][ T8201] loop6: detected capacity change from 0 to 1024 [ 166.994540][ T8204] loop4: detected capacity change from 0 to 512 [ 167.028003][ T8204] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.1180: inode #0: comm syz.4.1180: iget: illegal inode # [ 167.087928][ T8204] loop4: lost filesystem error report for type 5 error -117 [ 167.088071][ T8204] EXT4-fs (loop4): get orphan inode failed [ 167.095504][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 167.095531][ C1] EXT4-fs (loop4): initial error at time 1772082462: ext4_init_orphan_info:583 [ 167.095563][ C1] EXT4-fs (loop4): last error at time 1772082462: ext4_init_orphan_info:583 [ 167.165028][ T8205] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 167.294022][ T8204] EXT4-fs (loop4): mount failed [ 167.469699][ T8224] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1183'. [ 167.681700][ T8228] loop5: detected capacity change from 0 to 128 [ 167.713965][ T8228] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.789825][ T8228] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.412331][ T8260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8260 comm=syz.4.1191 [ 168.508604][ T8265] loop7: detected capacity change from 0 to 1024 [ 168.565190][ T8265] EXT4-fs: inline encryption not supported [ 168.571162][ T8265] EXT4-fs: Ignoring removed bh option [ 168.657844][ T8274] 9p: Bad value for 'wfdno' [ 168.668102][ T28] kauditd_printk_skb: 1300 callbacks suppressed [ 168.668116][ T28] audit: type=1400 audit(1772082464.388:4596): avc: denied { getattr } for pid=8255 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth17.ipv4ll" dev="tmpfs" ino=8468 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 168.668425][ T8265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.714691][ T28] audit: type=1400 audit(1772082464.428:4597): avc: denied { bpf } for pid=8267 comm="syz.5.1192" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 168.876388][ T28] audit: type=1400 audit(1772082464.428:4598): avc: denied { mount } for pid=8256 comm="syz.7.1190" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 168.953390][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.965457][ T28] audit: type=1400 audit(1772082464.438:4599): avc: denied { read write } for pid=8256 comm="syz.7.1190" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 168.998798][ T8286] loop5: detected capacity change from 0 to 512 [ 169.043830][ T28] audit: type=1400 audit(1772082464.438:4600): avc: denied { open } for pid=8256 comm="syz.7.1190" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.074922][ T8286] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.1195: inode #0: comm syz.5.1195: iget: illegal inode # [ 169.120499][ T8286] loop5: lost filesystem error report for type 5 error -117 [ 169.120668][ T8286] EXT4-fs (loop5): get orphan inode failed [ 169.128108][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 169.128129][ C0] EXT4-fs (loop5): initial error at time 1772082464: ext4_init_orphan_info:583 [ 169.128160][ C0] EXT4-fs (loop5): last error at time 1772082464: ext4_init_orphan_info:583 [ 169.184696][ T28] audit: type=1400 audit(1772082464.458:4601): avc: denied { add_name } for pid=8256 comm="syz.7.1190" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 169.236680][ T28] audit: type=1400 audit(1772082464.458:4602): avc: denied { create } for pid=8256 comm="syz.7.1190" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.284714][ T8286] EXT4-fs (loop5): mount failed [ 169.297599][ T28] audit: type=1400 audit(1772082464.468:4603): avc: denied { write open } for pid=8256 comm="syz.7.1190" path="/146/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.372382][ T28] audit: type=1400 audit(1772082464.478:4604): avc: denied { mounton } for pid=8256 comm="syz.7.1190" path="/146/file1/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.444678][ T28] audit: type=1400 audit(1772082464.508:4605): avc: denied { read append } for pid=8256 comm="syz.7.1190" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.683508][ T8295] loop5: detected capacity change from 0 to 4096 [ 170.928700][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1206'. [ 170.996744][ T8322] loop4: detected capacity change from 0 to 512 [ 171.062599][ T8322] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.1207: inode #0: comm syz.4.1207: iget: illegal inode # [ 171.127464][ T8322] loop4: lost filesystem error report for type 5 error -117 [ 171.128413][ T8322] EXT4-fs (loop4): get orphan inode failed [ 171.135861][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 171.135883][ C1] EXT4-fs (loop4): initial error at time 1772082466: ext4_init_orphan_info:583 [ 171.135905][ C1] EXT4-fs (loop4): last error at time 1772082466: ext4_init_orphan_info:583 [ 171.231304][ T8322] EXT4-fs (loop4): mount failed [ 171.240430][ T8314] loop5: detected capacity change from 0 to 32768 [ 171.721588][ T8336] loop5: detected capacity change from 0 to 512 [ 171.746715][ T8336] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 171.786625][ T8336] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 171.807690][ T8336] EXT4-fs (loop5): failed to initialize system zone (-117) [ 171.825910][ T8336] EXT4-fs (loop5): mount failed [ 171.897930][ T8336] bond1: entered allmulticast mode [ 171.920517][ T8336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.028109][ T8329] loop7: detected capacity change from 0 to 128 [ 172.361568][ T8349] loop5: detected capacity change from 0 to 128 [ 174.119108][ T28] kauditd_printk_skb: 355 callbacks suppressed [ 174.119127][ T28] audit: type=1400 audit(1772082469.838:4949): avc: denied { read write } for pid=4674 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.158687][ T28] audit: type=1400 audit(1772082469.838:4950): avc: denied { open } for pid=4674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.183803][ T28] audit: type=1400 audit(1772082469.838:4951): avc: denied { ioctl } for pid=4674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.222285][ T28] audit: type=1400 audit(1772082469.938:4952): avc: denied { create } for pid=8354 comm="syz.6.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.295153][ T28] audit: type=1400 audit(1772082469.968:4953): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.354466][ T28] audit: type=1400 audit(1772082469.968:4954): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.414853][ T8358] bridge1: entered allmulticast mode [ 174.438927][ T28] audit: type=1400 audit(1772082469.968:4955): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.496782][ T28] audit: type=1400 audit(1772082469.998:4956): avc: denied { unmount } for pid=7296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 174.549480][ T28] audit: type=1400 audit(1772082470.048:4957): avc: denied { write } for pid=8354 comm="syz.6.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 174.579755][ T28] audit: type=1400 audit(1772082470.058:4958): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.622872][ T8364] loop6: detected capacity change from 0 to 1024 [ 174.709501][ T8367] loop5: detected capacity change from 0 to 128 [ 174.729743][ T8367] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.749985][ T8367] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.766267][ T50] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.888133][ T8371] loop5: detected capacity change from 0 to 512 [ 174.906476][ T8371] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.1223: missing EA_INODE flag [ 174.925023][ T8371] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 174.925188][ T8371] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1223: error while reading EA inode 12 err=-117 [ 174.946653][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 174.946677][ C0] EXT4-fs (loop5): initial error at time 1772082470: ext4_xattr_inode_iget:441: inode 12 [ 174.946706][ C0] EXT4-fs (loop5): last error at time 1772082470: ext4_xattr_inode_iget:441: inode 12 [ 174.973021][ T8371] loop5: lost filesystem error report for type 5 error -117 [ 174.975015][ T8371] EXT4-fs (loop5): 1 orphan inode deleted [ 174.986237][ T8375] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.1222'. [ 174.989147][ T8371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.137567][ T7296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.781733][ T8378] random: crng reseeded on system resumption [ 176.744745][ T8398] loop4: detected capacity change from 0 to 512 [ 176.786926][ T8403] netlink: 'syz.5.1234': attribute type 12 has an invalid length. [ 176.826964][ T8398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.938052][ T8398] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.195093][ T8415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8415 comm=syz.6.1237 [ 177.206890][ T8329] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.228670][ T8329] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.262418][ T5472] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.343921][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.417948][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1240'. [ 177.432162][ T8420] loop6: detected capacity change from 0 to 512 [ 177.461748][ T8420] ext2: Unknown parameter 'noacl' [ 177.501899][ T8422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8422 comm=syz.4.1240 [ 178.158102][ T8437] loop4: detected capacity change from 0 to 4096 [ 178.194155][ T8437] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 178.216520][ T8442] netlink: 'syz.6.1248': attribute type 27 has an invalid length. [ 178.253913][ T8440] loop5: detected capacity change from 0 to 4096 [ 178.439205][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.446535][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.506334][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1248'. [ 178.754045][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.787488][ T8442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.849017][ T8442] bridge1: left allmulticast mode [ 178.900284][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.918152][ T8445] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.972920][ T8445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.002439][ T8461] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1251'. [ 179.033869][ T50] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.062679][ T50] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.085632][ T50] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.096121][ T50] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.132802][ T28] kauditd_printk_skb: 672 callbacks suppressed [ 179.132821][ T28] audit: type=1400 audit(1772082474.848:5631): avc: denied { bpf } for pid=8469 comm="syz.7.1255" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.232536][ T28] audit: type=1400 audit(1772082474.878:5632): avc: denied { read append } for pid=8469 comm="syz.7.1255" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.334874][ T28] audit: type=1400 audit(1772082474.878:5633): avc: denied { open } for pid=8469 comm="syz.7.1255" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 179.405129][ T8477] bond0: Caught tx_queue_len zero misconfig [ 179.833553][ T8473] random: crng reseeded on system resumption [ 179.859937][ T28] audit: type=1400 audit(1772082474.888:5634): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.885169][ T28] audit: type=1400 audit(1772082474.888:5635): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.975134][ T28] audit: type=1400 audit(1772082474.888:5636): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 180.064371][ T28] audit: type=1400 audit(1772082474.898:5637): avc: denied { perfmon } for pid=8467 comm="syz.5.1254" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.087845][ T28] audit: type=1400 audit(1772082474.898:5638): avc: denied { tracepoint } for pid=8467 comm="syz.5.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 180.110014][ T28] audit: type=1400 audit(1772082474.898:5639): avc: denied { perfmon } for pid=8467 comm="syz.5.1254" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 180.135984][ T28] audit: type=1400 audit(1772082474.898:5640): avc: denied { kernel } for pid=8467 comm="syz.5.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 180.416151][ T3979] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.522824][ T8493] loop4: detected capacity change from 0 to 128 [ 180.624785][ T3979] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.655949][ T8503] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.749713][ T3979] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.863654][ T8501] tipc: Failed to obtain node identity [ 180.885335][ T8501] tipc: Enabling of bearer rejected, failed to enable media [ 180.896545][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1266'. [ 180.962403][ T8512] tipc: Started in network mode [ 180.976951][ T8512] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 180.993245][ T8512] tipc: Enabled bearer , priority 28 [ 181.101991][ T3979] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.396800][ T8535] FAULT_INJECTION: forcing a failure. [ 181.396800][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.470537][ T8535] CPU: 0 UID: 0 PID: 8535 Comm: syz.4.1273 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.470656][ T8535] Tainted: [W]=WARN [ 181.470663][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.470680][ T8535] Call Trace: [ 181.470688][ T8535] [ 181.470697][ T8535] __dump_stack+0x1d/0x30 [ 181.470778][ T8535] dump_stack_lvl+0x95/0xd0 [ 181.470805][ T8535] dump_stack+0x15/0x1b [ 181.470834][ T8535] should_fail_ex+0x263/0x280 [ 181.470864][ T8535] should_fail+0xb/0x20 [ 181.470889][ T8535] should_fail_usercopy+0x1a/0x20 [ 181.470997][ T8535] _copy_to_user+0x20/0xa0 [ 181.471032][ T8535] simple_read_from_buffer+0xb5/0x130 [ 181.471061][ T8535] proc_fail_nth_read+0x10e/0x150 [ 181.471100][ T8535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 181.471177][ T8535] vfs_read+0x1ab/0x7f0 [ 181.471255][ T8535] ? __rcu_read_unlock+0x4e/0x70 [ 181.471352][ T8535] ? __fget_files+0x184/0x1c0 [ 181.471448][ T8535] ? mutex_lock+0x57/0x90 [ 181.471493][ T8535] ksys_read+0xdc/0x1a0 [ 181.471617][ T8535] __x64_sys_read+0x40/0x50 [ 181.471737][ T8535] x64_sys_call+0x2886/0x3020 [ 181.471784][ T8535] do_syscall_64+0x12c/0x370 [ 181.471832][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.471957][ T8535] RIP: 0033:0x7f81982dcece [ 181.471977][ T8535] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.472002][ T8535] RSP: 002b:00007f8196d6efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.472027][ T8535] RAX: ffffffffffffffda RBX: 00007f8196d6f6c0 RCX: 00007f81982dcece [ 181.472099][ T8535] RDX: 000000000000000f RSI: 00007f8196d6f0a0 RDI: 0000000000000003 [ 181.472117][ T8535] RBP: 00007f8196d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.472134][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.472150][ T8535] R13: 00007f8198596038 R14: 00007f8198595fa0 R15: 00007ffd7e17b428 [ 181.472178][ T8535] [ 182.062790][ T8531] random: crng reseeded on system resumption [ 182.118742][ T3979] bridge_slave_1: left allmulticast mode [ 182.125775][ T3979] bridge_slave_1: left promiscuous mode [ 182.151918][ T3979] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.222902][ T3979] bridge_slave_0: left allmulticast mode [ 182.246710][ T3979] bridge_slave_0: left promiscuous mode [ 182.284946][ T3979] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.468702][ T8550] loop5: detected capacity change from 0 to 1024 [ 182.487979][ T8550] EXT4-fs: inline encryption not supported [ 182.535294][ T3979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.594368][ T8552] Invalid argument reading file caps for ./file0 [ 182.601397][ T3979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.642282][ T3979] bond0 (unregistering): Released all slaves [ 182.672033][ T8550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.703294][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1277'. [ 182.754716][ T3380] tipc: Node number set to 8432298 [ 182.769255][ T8552] cgroup: Invalid name [ 182.797567][ T8562] 9pnet_fd: Insufficient options for proto=fd [ 182.849404][ T8487] chnl_net:caif_netlink_parms(): no params data found [ 182.866611][ T7296] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.934073][ T8552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1276'. [ 182.949924][ T8566] loop6: detected capacity change from 0 to 512 [ 182.978542][ T3979] hsr_slave_0: left promiscuous mode [ 182.997955][ T3979] hsr_slave_1: left promiscuous mode [ 183.045872][ T3979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.053400][ T3979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.151032][ T8577] netlink: 134736 bytes leftover after parsing attributes in process `syz.7.1281'. [ 183.177544][ T8577] netlink: zone id is out of range [ 183.182673][ T3979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.182806][ T3979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.200073][ T8577] netlink: zone id is out of range [ 183.205294][ T8577] netlink: get zone limit has 4 unknown bytes [ 183.251937][ T3979] veth1_macvtap: left promiscuous mode [ 183.280509][ T8583] netlink: 'syz.4.1282': attribute type 21 has an invalid length. [ 183.298538][ T3979] veth0_macvtap: left promiscuous mode [ 183.304221][ T3979] veth1_vlan: left promiscuous mode [ 183.309701][ T3979] veth0_vlan: left promiscuous mode [ 183.681769][ T3979] team0 (unregistering): Port device team_slave_1 removed [ 183.719475][ T3979] team0 (unregistering): Port device team_slave_0 removed [ 183.837289][ T8583] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1282'. [ 184.064287][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.098553][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1285'. [ 184.107712][ T8601] netlink: 'syz.5.1285': attribute type 5 has an invalid length. [ 184.108138][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.123243][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'. [ 184.150886][ T28] kauditd_printk_skb: 751 callbacks suppressed [ 184.150904][ T28] audit: type=1400 audit(1772082479.868:6392): avc: denied { allowed } for pid=8597 comm="syz.5.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.179255][ T8487] bridge_slave_0: entered allmulticast mode [ 184.205276][ T8487] bridge_slave_0: entered promiscuous mode [ 184.229245][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.254690][ T28] audit: type=1400 audit(1772082479.868:6393): avc: denied { create } for pid=8597 comm="syz.5.1285" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.278521][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.293972][ T8487] bridge_slave_1: entered allmulticast mode [ 184.300658][ T8487] bridge_slave_1: entered promiscuous mode [ 184.306637][ T28] audit: type=1400 audit(1772082479.878:6394): avc: denied { map } for pid=8597 comm="syz.5.1285" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.334164][ T8601] geneve2: entered promiscuous mode [ 184.342205][ T8601] geneve2: entered allmulticast mode [ 184.350210][ T8608] netlink: 'syz.6.1284': attribute type 16 has an invalid length. [ 184.360604][ T28] audit: type=1400 audit(1772082479.878:6395): avc: denied { read write } for pid=8597 comm="syz.5.1285" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 184.385507][ T8608] netlink: 'syz.6.1284': attribute type 17 has an invalid length. [ 184.404593][ T28] audit: type=1400 audit(1772082479.908:6396): avc: denied { read write } for pid=5472 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.430766][ T28] audit: type=1400 audit(1772082479.908:6397): avc: denied { open } for pid=5472 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.497250][ T8608] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.535171][ T28] audit: type=1400 audit(1772082479.908:6398): avc: denied { ioctl } for pid=5472 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.584008][ T28] audit: type=1400 audit(1772082479.918:6399): avc: denied { write } for pid=8598 comm="syz.4.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.626580][ T28] audit: type=1400 audit(1772082479.938:6400): avc: denied { create } for pid=8598 comm="syz.4.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.708296][ T3970] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 43404 - 0 [ 184.734467][ T8615] FAULT_INJECTION: forcing a failure. [ 184.734467][ T8615] name failslab, interval 1, probability 0, space 0, times 0 [ 184.734983][ T3970] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 43404 - 0 [ 184.768802][ T8616] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.782816][ T8615] CPU: 0 UID: 0 PID: 8615 Comm: syz.4.1289 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.782855][ T8615] Tainted: [W]=WARN [ 184.782864][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 184.782898][ T8615] Call Trace: [ 184.782907][ T8615] [ 184.782917][ T8615] __dump_stack+0x1d/0x30 [ 184.782959][ T8615] dump_stack_lvl+0x95/0xd0 [ 184.783014][ T8615] dump_stack+0x15/0x1b [ 184.783036][ T8615] should_fail_ex+0x263/0x280 [ 184.783072][ T8615] should_failslab+0x8c/0xb0 [ 184.783097][ T8615] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 184.783120][ T8615] ? __alloc_skb+0x2d6/0x690 [ 184.783165][ T8615] __alloc_skb+0x2d6/0x690 [ 184.783192][ T8615] ? __alloc_skb+0x200/0x690 [ 184.783222][ T8615] netlink_alloc_large_skb+0xbf/0xf0 [ 184.783255][ T8615] netlink_sendmsg+0x40c/0x6f0 [ 184.783337][ T8615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.783374][ T8615] ____sys_sendmsg+0x5af/0x600 [ 184.783491][ T8615] ___sys_sendmsg+0x195/0x1e0 [ 184.783609][ T8615] __x64_sys_sendmsg+0xd4/0x160 [ 184.783643][ T8615] x64_sys_call+0x194c/0x3020 [ 184.783738][ T8615] do_syscall_64+0x12c/0x370 [ 184.783781][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.783804][ T8615] RIP: 0033:0x7f819831c629 [ 184.783824][ T8615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.783867][ T8615] RSP: 002b:00007f8196d6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.783898][ T8615] RAX: ffffffffffffffda RBX: 00007f8198595fa0 RCX: 00007f819831c629 [ 184.783992][ T8615] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000004 [ 184.784009][ T8615] RBP: 00007f8196d6f090 R08: 0000000000000000 R09: 0000000000000000 [ 184.784028][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.784149][ T8615] R13: 00007f8198596038 R14: 00007f8198595fa0 R15: 00007ffd7e17b428 [ 184.784176][ T8615] [ 185.086260][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.103599][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.161001][ T3970] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 43404 - 0 [ 185.169981][ T3970] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 43404 - 0 [ 185.204892][ T8622] loop4: detected capacity change from 0 to 512 [ 185.219183][ T8622] EXT4-fs: Ignoring removed nobh option [ 185.262076][ T8622] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 185.364372][ T8632] loop6: detected capacity change from 0 to 512 [ 185.365372][ T8487] team0: Port device team_slave_0 added [ 185.418748][ T8487] team0: Port device team_slave_1 added [ 185.450226][ T8631] syzkaller0: entered promiscuous mode [ 185.455851][ T8631] syzkaller0: entered allmulticast mode [ 185.487833][ T8636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1293'. [ 186.064836][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.071908][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.174683][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.197165][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.204166][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.331281][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.500147][ T8487] hsr_slave_0: entered promiscuous mode [ 186.533133][ T8487] hsr_slave_1: entered promiscuous mode [ 186.576525][ T8487] debugfs: 'hsr0' already exists in 'hsr' [ 186.593594][ T8487] Cannot create hsr debugfs directory [ 186.879679][ T8676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.137662][ T8487] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 187.170976][ T8487] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 187.227709][ T8487] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 187.258996][ T8487] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 187.275417][ T8692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.515903][ T8692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8692 comm=syz.6.1302 [ 187.660875][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.729003][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.775757][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.782931][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.811499][ T8724] loop4: detected capacity change from 0 to 512 [ 187.866196][ T8724] ext4: Bad value for 'sb' [ 187.874367][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.881577][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.304740][ T8742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1310'. [ 188.332214][ T8742] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1310'. [ 188.359581][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.171930][ T28] kauditd_printk_skb: 812 callbacks suppressed [ 189.171967][ T28] audit: type=1400 audit(1772082484.888:7202): avc: denied { module_request } for pid=8487 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.220124][ T28] audit: type=1400 audit(1772082484.938:7203): avc: denied { sys_module } for pid=8487 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 189.306678][ T28] audit: type=1400 audit(1772082484.938:7204): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.338928][ T8487] veth0_vlan: entered promiscuous mode [ 189.346664][ T8764] SELinux: policydb table sizes (8,1025) do not match mine (8,7) [ 189.354034][ T8487] veth1_vlan: entered promiscuous mode [ 189.354551][ T8764] SELinux: failed to load policy [ 189.365922][ T28] audit: type=1400 audit(1772082484.938:7205): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.436616][ T28] audit: type=1400 audit(1772082484.938:7206): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.480573][ T8487] veth0_macvtap: entered promiscuous mode [ 189.515762][ T8487] veth1_macvtap: entered promiscuous mode [ 189.534761][ T28] audit: type=1400 audit(1772082484.938:7207): avc: denied { module_request } for pid=8487 comm="syz-executor" kmod="virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.574480][ T8769] 9p: Bad value for 'wfdno' [ 189.628015][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.637486][ T28] audit: type=1400 audit(1772082485.008:7208): avc: denied { read write } for pid=4674 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.676442][ T28] audit: type=1400 audit(1772082485.008:7209): avc: denied { open } for pid=4674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.803810][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.818981][ T28] audit: type=1400 audit(1772082485.008:7210): avc: denied { ioctl } for pid=4674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.844863][ T28] audit: type=1400 audit(1772082485.068:7211): avc: denied { load_policy } for pid=8762 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 189.926511][ T3970] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.950349][ T3970] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.981891][ T8789] loop6: detected capacity change from 0 to 512 [ 190.109177][ T3970] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.155992][ T3970] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.199384][ T8795] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1320'. [ 190.413807][ T8799] loop6: detected capacity change from 0 to 8192 [ 190.468927][ T8806] 9p: Bad value for 'wfdno' [ 190.637597][ T8810] loop7: detected capacity change from 0 to 1024 [ 190.723003][ T8810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 190.752158][ T8810] System zones: 0-1, 3-36 [ 190.808060][ T8810] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1325: bad orphan inode 134217728 [ 190.869771][ T8817] loop4: detected capacity change from 0 to 512 [ 190.874716][ T8810] loop7: lost filesystem error report for type 5 error -117 [ 190.879976][ T8810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.902012][ T8817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.027487][ T8817] EXT4-fs (loop4): 1 truncate cleaned up [ 191.471295][ T8819] random: crng reseeded on system resumption [ 191.494241][ T8817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.732848][ T8817] EXT4-fs warning (device loop4): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 192.089905][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.373459][ T8830] unsupported nla_type 210 [ 192.396337][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1329'. [ 192.508212][ T8835] loop6: detected capacity change from 0 to 512 [ 192.839334][ T8840] loop4: detected capacity change from 0 to 128 [ 194.186898][ T28] kauditd_printk_skb: 829 callbacks suppressed [ 194.186918][ T28] audit: type=1400 audit(1772082489.908:8041): avc: denied { create } for pid=8836 comm="syz.4.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 194.314727][ T28] audit: type=1400 audit(1772082489.948:8042): avc: denied { read write } for pid=8836 comm="syz.4.1332" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.418974][ T28] audit: type=1400 audit(1772082489.948:8043): avc: denied { open } for pid=8836 comm="syz.4.1332" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 194.484688][ T28] audit: type=1400 audit(1772082489.978:8044): avc: denied { perfmon } for pid=8838 comm="syz.6.1333" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.567464][ T28] audit: type=1326 audit(1772082489.988:8045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8829 comm="syz.9.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f899557c629 code=0x7ffc0000 [ 194.612690][ T8853] 9p: Bad value for 'wfdno' [ 194.664800][ T28] audit: type=1400 audit(1772082490.038:8046): avc: denied { read write } for pid=8487 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.767078][ T28] audit: type=1400 audit(1772082490.038:8047): avc: denied { open } for pid=8487 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.873230][ T28] audit: type=1400 audit(1772082490.038:8048): avc: denied { ioctl } for pid=8487 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.928520][ T8862] syzkaller0: entered promiscuous mode [ 194.948293][ T8862] syzkaller0: entered allmulticast mode [ 194.958277][ T8864] audit: audit_backlog=65 > audit_backlog_limit=64 [ 194.974244][ T8862] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.366098][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.439133][ T8869] loop6: detected capacity change from 0 to 4096 [ 195.506334][ T8871] loop7: detected capacity change from 0 to 512 [ 195.534658][ T8871] EXT4-fs error (device loop7): ext4_init_orphan_info:583: comm syz.7.1343: inode #0: comm syz.7.1343: iget: illegal inode # [ 195.570482][ T8871] loop7: lost filesystem error report for type 5 error -117 [ 195.570758][ T8871] EXT4-fs (loop7): get orphan inode failed [ 195.578134][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 195.578162][ C1] EXT4-fs (loop7): initial error at time 1772082491: ext4_init_orphan_info:583 [ 195.578205][ C1] EXT4-fs (loop7): last error at time 1772082491: ext4_init_orphan_info:583 [ 195.614435][ T8871] EXT4-fs (loop7): mount failed [ 195.933685][ T8884] loop7: detected capacity change from 0 to 512 [ 195.946347][ T8884] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 196.010439][ T8890] nfs: Unexpected value for 'acl' [ 196.021692][ T8892] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.1348'. [ 196.079882][ T8890] io-wq is not configured for unbound workers [ 196.320479][ T8903] loop4: detected capacity change from 0 to 512 [ 196.379104][ T8909] loop6: detected capacity change from 0 to 512 [ 196.417776][ T8910] loop9: detected capacity change from 0 to 512 [ 196.452106][ T8903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.493891][ T8910] EXT4-fs error (device loop9): ext4_init_orphan_info:583: comm syz.9.1354: inode #0: comm syz.9.1354: iget: illegal inode # [ 196.537936][ T8903] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.567306][ T8910] loop9: lost filesystem error report for type 5 error -117 [ 196.574651][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 196.588512][ C1] EXT4-fs (loop9): initial error at time 1772082492: ext4_init_orphan_info:583 [ 196.597535][ C1] EXT4-fs (loop9): last error at time 1772082492: ext4_init_orphan_info:583 [ 196.607836][ T8910] EXT4-fs (loop9): get orphan inode failed [ 196.613836][ T8910] EXT4-fs (loop9): mount failed [ 196.754025][ T8923] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1355'. [ 196.774081][ T8924] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 196.797431][ T8926] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙00000000000000000005˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 196.940293][ T8929] loop9: detected capacity change from 0 to 512 [ 196.955385][ T8930] cgroup: Invalid name [ 196.970549][ T8929] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 197.010070][ T8929] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 197.031542][ T8929] EXT4-fs (loop9): failed to initialize system zone (-117) [ 197.041556][ T8930] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1357'. [ 197.050669][ T8929] EXT4-fs (loop9): mount failed [ 197.249338][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.919476][ T8955] loop9: detected capacity change from 0 to 512 [ 197.960496][ T8955] EXT4-fs: Ignoring removed bh option [ 197.995811][ T8955] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 198.117306][ T8955] EXT4-fs (loop9): 1 truncate cleaned up [ 198.123436][ T8955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.239749][ T8955] SELinux: Context : is not valid (left unmapped). [ 198.336310][ T8967] loop4: detected capacity change from 0 to 128 [ 198.375179][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.467969][ T8970] ipt_REJECT: TCP_RESET invalid for non-tcp [ 198.696299][ T8982] loop9: detected capacity change from 0 to 512 [ 198.740871][ T8979] loop7: detected capacity change from 0 to 512 [ 198.758570][ T8982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.796603][ T8982] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.807109][ T8979] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 198.906417][ T8987] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 198.906898][ T8979] EXT4-fs error (device loop7): xattr_find_entry:337: inode #15: comm syz.7.1368: corrupted xattr entries [ 198.933444][ T8987] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙00000000000000000005˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 198.990307][ T8979] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.993272][ T8979] EXT4-fs (loop7): 1 orphan inode deleted [ 199.002542][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 199.002562][ C0] EXT4-fs (loop7): initial error at time 1772082494: xattr_find_entry:337: inode 15 [ 199.002591][ C0] EXT4-fs (loop7): last error at time 1772082494: xattr_find_entry:337: inode 15 [ 199.038132][ T8979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.176723][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.199762][ T28] kauditd_printk_skb: 1246 callbacks suppressed [ 199.199848][ T28] audit: type=1400 audit(1772082494.918:9273): avc: denied { read write } for pid=4674 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.295132][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.363778][ T28] audit: type=1400 audit(1772082494.918:9274): avc: denied { open } for pid=4674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.464797][ T28] audit: type=1400 audit(1772082494.918:9275): avc: denied { ioctl } for pid=4674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.511691][ T9002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.522122][ T9003] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.531310][ T9002] audit: audit_lost=48 audit_rate_limit=0 audit_backlog_limit=64 [ 199.546712][ T9004] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.554686][ T9003] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64 [ 199.566973][ T8487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 199.578388][ T9002] audit: backlog limit exceeded [ 199.742784][ T9011] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1374'. [ 200.153221][ T9032] loop4: detected capacity change from 0 to 512 [ 200.198137][ T9034] loop9: detected capacity change from 0 to 512 [ 200.250191][ T311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.277509][ T9034] EXT4-fs error (device loop9): ext4_init_orphan_info:583: comm syz.9.1379: inode #0: comm syz.9.1379: iget: illegal inode # [ 200.281115][ T9032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.306483][ T311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.325485][ T9034] loop9: lost filesystem error report for type 5 error -117 [ 200.325649][ T9034] EXT4-fs (loop9): get orphan inode failed [ 200.338946][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 200.338972][ C0] EXT4-fs (loop9): initial error at time 1772082496: ext4_init_orphan_info:583 [ 200.339001][ C0] EXT4-fs (loop9): last error at time 1772082496: ext4_init_orphan_info:583 [ 200.364300][ T9034] EXT4-fs (loop9): mount failed [ 200.370077][ T9032] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.371095][ T311] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 43404 - 0 [ 200.630420][ T311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.697966][ T9050] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 200.708299][ T311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.735386][ T9052] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙00000000000000000005˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 200.785593][ T311] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 43404 - 0 [ 200.942595][ T311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.005277][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.029350][ T311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.107734][ T311] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 43404 - 0 [ 201.296314][ T311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.357528][ T311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.401646][ T311] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 43404 - 0 [ 201.434736][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1381'. [ 201.528792][ T9066] loop9: detected capacity change from 0 to 1024 [ 201.545020][ T9048] team0: Port device team_slave_0 removed [ 201.569106][ T9066] EXT4-fs: Ignoring removed bh option [ 201.627229][ T9066] EXT4-fs: inline encryption not supported [ 201.669199][ T9066] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.751807][ T9066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 201.795586][ T9066] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.1381: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.828426][ T9066] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 201.836513][ T9066] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.1381: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.845744][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 201.845763][ C0] EXT4-fs (loop9): initial error at time 1772082497: ext4_map_blocks:776: inode 3: block 2 [ 201.845792][ C0] EXT4-fs (loop9): last error at time 1772082497: ext4_map_blocks:776: inode 3: block 2 [ 202.064727][ T9066] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 202.067273][ T9066] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.1381: Failed to acquire dquot type 0 [ 202.104748][ T9066] loop9: lost filesystem error report for type 5 error -117 [ 202.112362][ T9066] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 202.148067][ T311] bridge_slave_1: left allmulticast mode [ 202.157880][ T9066] loop9: lost filesystem error report for type 5 error -117 [ 202.158640][ T9066] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.1381: mark_inode_dirty error [ 202.188383][ T311] bridge_slave_1: left promiscuous mode [ 202.227636][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.258527][ T9066] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 202.258834][ T9066] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 202.305767][ T311] bridge_slave_0: left allmulticast mode [ 202.311479][ T311] bridge_slave_0: left promiscuous mode [ 202.341118][ T9066] EXT4-fs (loop9): 1 orphan inode deleted [ 202.349954][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.357384][ T50] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.387023][ T50] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 202.387408][ T50] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 202.408869][ T9066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.466613][ T9048] netlink: 'syz.9.1381': attribute type 10 has an invalid length. [ 202.474501][ T9048] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1381'. [ 202.809444][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.836085][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.881046][ T311] bond0 (unregistering): Released all slaves [ 202.910949][ T311] bond1 (unregistering): Released all slaves [ 202.999760][ T9048] dummy0: entered promiscuous mode [ 203.019227][ T9048] dummy0: entered allmulticast mode [ 203.061653][ T9048] bridge0: port 3(dummy0) entered blocking state [ 203.094771][ T9048] bridge0: port 3(dummy0) entered disabled state [ 203.115028][ T9048] bridge0: port 3(dummy0) entered blocking state [ 203.121551][ T9048] bridge0: port 3(dummy0) entered forwarding state [ 203.182832][ T9004] chnl_net:caif_netlink_parms(): no params data found [ 203.221520][ T9093] bridge0: port 3(syz_tun) entered blocking state [ 203.239189][ T9093] bridge0: port 3(syz_tun) entered disabled state [ 203.260056][ T9093] syz_tun: entered allmulticast mode [ 203.280711][ T9093] syz_tun: entered promiscuous mode [ 203.300206][ T9093] bridge0: port 3(syz_tun) entered blocking state [ 203.306774][ T9093] bridge0: port 3(syz_tun) entered forwarding state [ 203.347254][ T311] tipc: Disabling bearer [ 203.466188][ T9107] loop7: detected capacity change from 0 to 512 [ 203.474735][ T311] tipc: Left network mode [ 203.475563][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.516222][ T9107] EXT4-fs error (device loop7): ext4_init_orphan_info:583: comm syz.7.1390: inode #0: comm syz.7.1390: iget: illegal inode # [ 203.532367][ T8487] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 203.561165][ T9107] loop7: lost filesystem error report for type 5 error -117 [ 203.561356][ T9107] EXT4-fs (loop7): get orphan inode failed [ 203.568928][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 203.568951][ C1] EXT4-fs (loop7): initial error at time 1772082499: ext4_init_orphan_info:583 [ 203.568980][ C1] EXT4-fs (loop7): last error at time 1772082499: ext4_init_orphan_info:583 [ 203.594027][ T8487] loop9: lost filesystem error report for type 5 error -117 [ 203.599637][ T9107] EXT4-fs (loop7): mount failed [ 203.609620][ T8487] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 203.646310][ T311] hsr_slave_0: left promiscuous mode [ 203.646468][ T8487] loop9: lost filesystem error report for type 5 error -117 [ 203.651892][ T8487] EXT4-fs error (device loop9): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 203.674258][ T8487] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 203.674546][ T311] hsr_slave_1: left promiscuous mode [ 203.732188][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.758524][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.801535][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.816835][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.879288][ T311] veth1_macvtap: left promiscuous mode [ 203.895813][ T311] veth0_macvtap: left promiscuous mode [ 203.908728][ T311] veth1_vlan: left promiscuous mode [ 203.920808][ T311] veth0_vlan: left promiscuous mode [ 204.037283][ T311] team0 (unregistering): Port device team_slave_1 removed [ 204.048927][ T311] team0 (unregistering): Port device team_slave_0 removed [ 204.064635][ T9118] loop9: detected capacity change from 0 to 512 [ 204.105601][ T9118] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 204.126823][ T9110] veth0_to_bond: entered promiscuous mode [ 204.135872][ T9110] veth0_to_bond: entered allmulticast mode [ 204.139669][ T9118] EXT4-fs (loop9): 1 truncate cleaned up [ 204.148644][ T9110] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 204.169068][ T9118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.211151][ T28] kauditd_printk_skb: 815 callbacks suppressed [ 204.211168][ T28] audit: type=1400 audit(1772082499.928:10038): avc: denied { create } for pid=9116 comm="syz.9.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 204.294686][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.301920][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.310028][ T9004] bridge_slave_0: entered allmulticast mode [ 204.325365][ T9004] bridge_slave_0: entered promiscuous mode [ 204.346219][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.359747][ T9132] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.368995][ T9129] audit: audit_backlog=66 > audit_backlog_limit=64 [ 204.370218][ T28] audit: type=1400 audit(1772082499.928:10039): avc: denied { read write } for pid=4674 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 204.377871][ T9128] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.409166][ T9130] audit: audit_backlog=65 > audit_backlog_limit=64 [ 204.410217][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.428643][ T9132] audit: audit_lost=67 audit_rate_limit=0 audit_backlog_limit=64 [ 204.437230][ T9129] audit: audit_lost=68 audit_rate_limit=0 audit_backlog_limit=64 [ 204.445383][ T9004] bridge_slave_1: entered allmulticast mode [ 204.452224][ T9130] audit: audit_lost=69 audit_rate_limit=0 audit_backlog_limit=64 [ 204.456437][ T9132] audit: backlog limit exceeded [ 204.469893][ T9004] bridge_slave_1: entered promiscuous mode [ 204.583260][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.636769][ T9135] netlink: 'syz.9.1392': attribute type 3 has an invalid length. [ 204.661236][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.780429][ T9004] team0: Port device team_slave_0 added [ 204.810720][ T9004] team0: Port device team_slave_1 added [ 204.888439][ T311] IPVS: stop unused estimator thread 0... [ 204.894838][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.901867][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.939700][ T9143] ALSA: seq fatal error: cannot create timer (-19) [ 204.967357][ T9004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.990321][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.011108][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.018395][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.108382][ T9004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.574521][ T9173] loop6: detected capacity change from 0 to 512 [ 205.718643][ T9152] loop4: detected capacity change from 0 to 128 [ 206.007397][ T9004] hsr_slave_0: entered promiscuous mode [ 206.030005][ T9004] hsr_slave_1: entered promiscuous mode [ 206.046617][ T9004] debugfs: 'hsr0' already exists in 'hsr' [ 206.066713][ T9004] Cannot create hsr debugfs directory [ 206.209093][ T9178] loop9: detected capacity change from 0 to 8192 [ 206.343133][ T9191] loop4: detected capacity change from 0 to 256 [ 206.371583][ T9191] FAT-fs (loop4): bogus sectors per cluster 0 [ 206.396946][ T9188] netlink: 'syz.7.1410': attribute type 2 has an invalid length. [ 206.437690][ T9191] FAT-fs (loop4): Can't find a valid FAT filesystem [ 206.450344][ T9196] 9p: Bad value for 'wfdno' [ 206.836556][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1413'. [ 207.621892][ T9004] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.707938][ T9004] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.767846][ T9004] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.829913][ T9004] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.915160][ T9232] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1420'. [ 207.985245][ T9234] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1421'. [ 208.016576][ T9241] 9p: Bad value for 'wfdno' [ 208.486734][ T9263] loop6: detected capacity change from 0 to 164 [ 208.509113][ T9263] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 208.557524][ T9263] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 208.603785][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.278921][ T9280] random: crng reseeded on system resumption [ 209.325362][ T28] kauditd_printk_skb: 1019 callbacks suppressed [ 209.325382][ T28] audit: type=1400 audit(1772082504.598:11049): avc: denied { open } for pid=9279 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.360834][ T28] audit: type=1400 audit(1772082504.598:11050): avc: denied { perfmon } for pid=9279 comm="syz.4.1430" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.382933][ T28] audit: type=1400 audit(1772082504.598:11051): avc: denied { kernel } for pid=9279 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.407008][ T28] audit: type=1400 audit(1772082504.598:11052): avc: denied { perfmon } for pid=9279 comm="syz.4.1430" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.428715][ T28] audit: type=1400 audit(1772082504.618:11053): avc: denied { prog_load } for pid=9279 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.448963][ T28] audit: type=1400 audit(1772082504.618:11054): avc: denied { bpf } for pid=9279 comm="syz.4.1430" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.470576][ T28] audit: type=1400 audit(1772082504.628:11055): avc: denied { open } for pid=9279 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.490513][ T28] audit: type=1400 audit(1772082504.628:11056): avc: denied { perfmon } for pid=9279 comm="syz.4.1430" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.517038][ T28] audit: type=1400 audit(1772082504.628:11057): avc: denied { kernel } for pid=9279 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.537370][ T28] audit: type=1400 audit(1772082504.648:11058): avc: denied { prog_load } for pid=9279 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 209.846508][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.865698][ T3520] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.872877][ T3520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.908949][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.916149][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.946782][ T9302] loop7: detected capacity change from 0 to 195 [ 209.976631][ T9302] EXT4-fs error (device loop7): __ext4_fill_super:5563: inode #2: comm syz.7.1433: iget: checksum invalid [ 210.002887][ T9302] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 210.003109][ T9302] EXT4-fs (loop7): get root inode failed [ 210.012688][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 210.012705][ C1] EXT4-fs (loop7): initial error at time 1772082505: __ext4_fill_super:5563: inode 2 [ 210.012758][ C1] EXT4-fs (loop7): last error at time 1772082505: __ext4_fill_super:5563: inode 2 [ 210.043891][ T9302] EXT4-fs (loop7): mount failed [ 210.260757][ T9323] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1434'. [ 210.951885][ T9342] loop4: detected capacity change from 0 to 1024 [ 210.998472][ T9342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 211.013588][ T9348] loop9: detected capacity change from 0 to 256 [ 211.053630][ T9342] ext4 filesystem being mounted at /317/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.119713][ T9342] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.1441: lblock 0 mapped to illegal pblock 0 (length 6) [ 211.150394][ T9342] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 211.176808][ T9353] loop7: detected capacity change from 0 to 256 [ 211.227815][ T9342] EXT4-fs (loop4): This should not happen!! Data will be lost [ 211.227815][ T9342] [ 211.367696][ T70] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 211.386811][ T9353] FAT-fs (loop7): Directory bread(block 64) failed [ 211.411857][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.424884][ T9353] FAT-fs (loop7): Directory bread(block 65) failed [ 211.437432][ T9353] FAT-fs (loop7): Directory bread(block 66) failed [ 211.449393][ T70] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 211.489777][ T9353] FAT-fs (loop7): Directory bread(block 67) failed [ 211.492104][ T70] EXT4-fs (loop4): This should not happen!! Data will be lost [ 211.492104][ T70] [ 211.524838][ T9353] FAT-fs (loop7): Directory bread(block 68) failed [ 211.537754][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 211.569126][ T9353] FAT-fs (loop7): Directory bread(block 69) failed [ 211.606170][ T9353] FAT-fs (loop7): Directory bread(block 70) failed [ 211.636116][ T9353] FAT-fs (loop7): Directory bread(block 71) failed [ 211.654869][ T9353] FAT-fs (loop7): Directory bread(block 72) failed [ 211.668706][ T9353] FAT-fs (loop7): Directory bread(block 73) failed [ 211.738426][ T9377] syz_tun: entered allmulticast mode [ 211.767253][ T9376] syz_tun: left allmulticast mode [ 212.302595][ T9004] veth0_vlan: entered promiscuous mode [ 212.397208][ T9407] loop7: detected capacity change from 0 to 256 [ 212.596090][ T9004] veth1_vlan: entered promiscuous mode [ 213.060452][ T9004] veth0_macvtap: entered promiscuous mode [ 213.196991][ T9004] veth1_macvtap: entered promiscuous mode [ 213.259962][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1442'. [ 213.300858][ T9407] FAT-fs (loop7): Directory bread(block 64) failed [ 213.307495][ T9407] FAT-fs (loop7): Directory bread(block 65) failed [ 213.314070][ T9407] FAT-fs (loop7): Directory bread(block 66) failed [ 213.321317][ T9407] FAT-fs (loop7): Directory bread(block 67) failed [ 213.328127][ T9407] FAT-fs (loop7): Directory bread(block 68) failed [ 213.334734][ T9407] FAT-fs (loop7): Directory bread(block 69) failed [ 213.341322][ T9407] FAT-fs (loop7): Directory bread(block 70) failed [ 213.348163][ T9407] FAT-fs (loop7): Directory bread(block 71) failed [ 213.354837][ T9407] FAT-fs (loop7): Directory bread(block 72) failed [ 213.361431][ T9407] FAT-fs (loop7): Directory bread(block 73) failed [ 213.609080][ T9407] syz_tun: left allmulticast mode [ 213.615115][ T9407] syz_tun: left promiscuous mode [ 213.624156][ T9407] bridge0: port 3(syz_tun) entered disabled state [ 214.317557][ T9407] bridge_slave_0: left allmulticast mode [ 214.324386][ T9407] bridge_slave_0: left promiscuous mode [ 214.332437][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.388600][ T9407] bridge_slave_1: left allmulticast mode [ 214.395253][ T9407] bridge_slave_1: left promiscuous mode [ 214.402980][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.412240][ T28] kauditd_printk_skb: 1077 callbacks suppressed [ 214.412259][ T28] audit: type=1400 audit(1772082510.128:12134): avc: denied { search } for pid=9431 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.475794][ T9433] loop6: detected capacity change from 0 to 512 [ 214.494958][ T9434] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.505158][ T28] audit: type=1400 audit(1772082510.138:12135): avc: denied { open } for pid=9421 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 214.512526][ T9434] audit: audit_lost=74 audit_rate_limit=0 audit_backlog_limit=64 [ 214.540107][ T9433] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.547008][ T9434] audit: backlog limit exceeded [ 214.551922][ T9434] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.562803][ T9433] audit: audit_lost=75 audit_rate_limit=0 audit_backlog_limit=64 [ 214.564701][ T9434] audit: audit_lost=76 audit_rate_limit=0 audit_backlog_limit=64 [ 214.571684][ T9437] audit: audit_backlog=65 > audit_backlog_limit=64 [ 214.611659][ T9407] bond0: (slave bond_slave_0): Releasing backup interface [ 214.688128][ T9407] bond0: (slave bond_slave_1): Releasing backup interface [ 214.786031][ T9407] team0: Port device team_slave_0 removed [ 214.849532][ T9407] team0: Port device team_slave_1 removed [ 214.879205][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.887445][ T9407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.926264][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.934364][ T9407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.978027][ T9407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.001955][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.112342][ T9451] loop6: detected capacity change from 0 to 512 [ 215.122720][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.209756][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.271725][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.304426][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.355290][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.475186][ T9463] cgroup2: Unknown parameter 'memory_hug' [ 216.153545][ T9470] random: crng reseeded on system resumption [ 216.669729][ T9507] netlink: 'syz.9.1466': attribute type 4 has an invalid length. [ 216.749117][ T9509] loop7: detected capacity change from 0 to 512 [ 216.779985][ T9509] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.1467: bad orphan inode 15 [ 216.814428][ T9509] loop7: lost filesystem error report for type 5 error -117 [ 216.814628][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 216.828511][ C0] EXT4-fs (loop7): initial error at time 1772082512: ext4_orphan_get:1417 [ 216.837085][ C0] EXT4-fs (loop7): last error at time 1772082512: ext4_orphan_get:1417 [ 216.846410][ T9509] ext4_test_bit(bit=14, block=5) = 0 [ 216.852154][ T9509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.336435][ T5472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.885529][ T9640] lo speed is unknown, defaulting to 1000 [ 218.891411][ T9640] lo speed is unknown, defaulting to 1000 [ 218.897461][ T9640] lo speed is unknown, defaulting to 1000 [ 218.905845][ T9640] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 218.964114][ T9641] loop9: detected capacity change from 0 to 512 [ 219.009718][ T9640] lo speed is unknown, defaulting to 1000 [ 219.016562][ T9640] lo speed is unknown, defaulting to 1000 [ 219.022894][ T9640] lo speed is unknown, defaulting to 1000 [ 219.029838][ T9640] lo speed is unknown, defaulting to 1000 [ 219.036728][ T9640] lo speed is unknown, defaulting to 1000 [ 219.102953][ T9631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1481'. [ 219.356805][ T9637] loop4: detected capacity change from 0 to 1024 [ 219.419871][ T28] kauditd_printk_skb: 1784 callbacks suppressed [ 219.419890][ T28] audit: type=1400 audit(1772082515.138:13916): avc: denied { create } for pid=9647 comm="syz.6.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.449554][ T9637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.614825][ T28] audit: type=1400 audit(1772082515.138:13917): avc: denied { search } for pid=9646 comm="sed" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.661221][ T9627] EXT4-fs error (device loop4): ext4_xattr_set_entry:1670: inode #15: comm syz.4.1481: corrupted xattr entries [ 219.684831][ T28] audit: type=1400 audit(1772082515.138:13918): avc: denied { read } for pid=9646 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.712263][ T28] audit: type=1400 audit(1772082515.138:13919): avc: denied { read open } for pid=9646 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.737986][ T28] audit: type=1400 audit(1772082515.138:13920): avc: denied { getattr } for pid=9646 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 219.763352][ T28] audit: type=1400 audit(1772082515.148:13921): avc: denied { bpf } for pid=9633 comm="syz.7.1482" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 219.804812][ T9627] EXT4-fs error (device loop4): ext4_xattr_block_set:2220: inode #15: comm syz.4.1481: bad block 113 [ 219.809578][ T9630] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.816696][ T9631] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.831119][ T9634] audit: audit_backlog=65 > audit_backlog_limit=64 [ 219.840864][ T9634] audit: audit_lost=78 audit_rate_limit=0 audit_backlog_limit=64 [ 219.857648][ T9631] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.1481: corrupted xattr block 113: invalid header [ 220.083158][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.194505][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1485'. [ 220.219477][ T9665] openvswitch: netlink: Flow key attr not present in new flow. [ 220.530986][ T9683] loop6: detected capacity change from 0 to 8192 [ 220.644633][ T9690] netlink: 'syz.7.1490': attribute type 3 has an invalid length. [ 220.740137][ T9695] loop4: detected capacity change from 0 to 512 [ 220.757218][ T9698] loop9: detected capacity change from 0 to 512 [ 220.780593][ T9695] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 220.833888][ T9698] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.880314][ T9698] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.085501][ T9698] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 221.140112][ T9714] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 221.245579][ T9695] lo speed is unknown, defaulting to 1000 [ 221.294154][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.738132][ T9731] syzkaller1: entered promiscuous mode [ 221.750937][ T9731] syzkaller1: entered allmulticast mode [ 221.874267][ T9744] loop4: detected capacity change from 0 to 512 [ 221.910920][ T9744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 221.958961][ T9744] EXT4-fs (loop4): 1 truncate cleaned up [ 221.979747][ T9744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.038878][ T9744] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1500: bg 0: block 4: invalid block bitmap [ 222.077841][ T9758] netlink: 'syz.2.1502': attribute type 6 has an invalid length. [ 222.089276][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1500'. [ 222.158434][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.263097][ T9767] Invalid argument reading file caps for ./file0 [ 222.442800][ T9774] loop2: detected capacity change from 0 to 512 [ 222.500734][ T9773] lo speed is unknown, defaulting to 1000 [ 222.528226][ T9774] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 222.566203][ T9774] EXT4-fs (loop2): mount failed [ 222.820243][ T9789] loop6: detected capacity change from 0 to 512 [ 222.965718][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1513'. [ 223.006450][ T9795] xt_bpf: check failed: parse error [ 223.176649][ T9800] syzkaller1: entered promiscuous mode [ 223.195844][ T9800] syzkaller1: entered allmulticast mode [ 223.297928][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1517'. [ 223.493458][ T9814] loop2: detected capacity change from 0 to 512 [ 223.590614][ T9814] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 223.631303][ T9814] EXT4-fs (loop2): mount failed [ 223.778952][ T9829] netlink: 'syz.6.1522': attribute type 6 has an invalid length. [ 223.809280][ T9829] batadv_slave_1: entered promiscuous mode [ 223.937763][ T9833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=9833 comm=syz.6.1522 [ 223.981949][ T9835] Invalid argument reading file caps for ./file0 [ 224.034525][ T9829] batadv_slave_1: left promiscuous mode [ 224.142014][ T9846] loop9: detected capacity change from 0 to 512 [ 224.171820][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1527'. [ 224.255002][ T9846] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.359555][ T9846] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.437024][ T28] kauditd_printk_skb: 2022 callbacks suppressed [ 224.437043][ T28] audit: type=1400 audit(1772082520.158:15824): avc: denied { read write } for pid=9844 comm="syz.9.1525" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.517244][ T9846] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 224.543377][ T28] audit: type=1400 audit(1772082520.158:15825): avc: denied { read write open } for pid=9844 comm="syz.9.1525" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 224.599933][ T9865] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 224.654982][ T9870] FAULT_INJECTION: forcing a failure. [ 224.654982][ T9870] name failslab, interval 1, probability 0, space 0, times 0 [ 224.679880][ T28] audit: type=1400 audit(1772082520.158:15826): avc: denied { search } for pid=9858 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.701919][ T9872] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.714481][ T9004] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.727780][ T3316] audit: audit_backlog=65 > audit_backlog_limit=64 [ 224.734335][ T3316] audit: audit_lost=119 audit_rate_limit=0 audit_backlog_limit=64 [ 224.735131][ T9872] audit: audit_lost=120 audit_rate_limit=0 audit_backlog_limit=64 [ 224.742310][ T9870] CPU: 1 UID: 0 PID: 9870 Comm: syz.7.1529 Tainted: G W syzkaller #0 PREEMPT(full) [ 224.742497][ T9870] Tainted: [W]=WARN [ 224.742525][ T9870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.742622][ T9870] Call Trace: [ 224.742650][ T9870] [ 224.742674][ T9870] __dump_stack+0x1d/0x30 [ 224.742771][ T9870] dump_stack_lvl+0x95/0xd0 [ 224.742849][ T9870] dump_stack+0x15/0x1b [ 224.742963][ T9870] should_fail_ex+0x263/0x280 [ 224.743039][ T9870] should_failslab+0x8c/0xb0 [ 224.743180][ T9870] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 224.743262][ T9870] ? __alloc_skb+0x2d6/0x690 [ 224.743396][ T9870] __alloc_skb+0x2d6/0x690 [ 224.743516][ T9870] ? __alloc_skb+0x200/0x690 [ 224.743595][ T9870] skb_copy_expand+0xfb/0x560 [ 224.743777][ T9870] ? sctp_chunk_put+0x107/0x140 [ 224.743967][ T9870] sctp_ulpevent_make_send_failed_event+0x42/0x400 [ 224.744052][ T9870] sctp_datamsg_put+0x24b/0x310 [ 224.744134][ T9870] sctp_chunk_free+0x34/0x50 [ 224.744210][ T9870] __sctp_outq_teardown+0x42a/0x530 [ 224.744294][ T9870] sctp_outq_free+0x15/0x20 [ 224.744437][ T9870] sctp_association_free+0x160/0x590 [ 224.744511][ T9870] sctp_do_sm+0x2c67/0x3330 [ 224.744640][ T9870] sctp_primitive_SHUTDOWN+0x74/0x90 [ 224.744770][ T9870] sctp_shutdown+0xc1/0xe0 [ 224.744877][ T9870] ? __pfx_sctp_shutdown+0x10/0x10 [ 224.744993][ T9870] inet_shutdown+0x1c2/0x210 [ 224.745115][ T9870] __x64_sys_shutdown+0xd6/0x130 [ 224.745249][ T9870] x64_sys_call+0xdcc/0x3020 [ 224.745342][ T9870] do_syscall_64+0x12c/0x370 [ 224.745478][ T9870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.745626][ T9870] RIP: 0033:0x7f1e71bdc629 [ 224.745681][ T9870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.745746][ T9870] RSP: 002b:00007f1e7049c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 224.745875][ T9870] RAX: ffffffffffffffda RBX: 00007f1e71e56180 RCX: 00007f1e71bdc629 [ 224.745921][ T9870] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 224.745964][ T9870] RBP: 00007f1e7049c090 R08: 0000000000000000 R09: 0000000000000000 [ 224.746009][ T9870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.746052][ T9870] R13: 00007f1e71e56218 R14: 00007f1e71e56180 R15: 00007ffe8982a988 [ 224.746192][ T9870] [ 224.766010][ T28] audit: type=1400 audit(1772082520.158:15827): avc: denied { search } for pid=9858 comm="rm" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.824375][ T9872] audit: backlog limit exceeded [ 225.050756][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.198630][ T9883] loop6: detected capacity change from 0 to 512 [ 225.287224][ T9883] lo speed is unknown, defaulting to 1000 [ 225.301160][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1539'. [ 225.489816][ T9909] ipvlan1: entered promiscuous mode [ 225.527431][ T9909] ipvlan1: entered allmulticast mode [ 225.537922][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1536'. [ 225.573488][ T9909] veth0_vlan: entered allmulticast mode [ 225.779699][ T9926] wg1: entered promiscuous mode [ 225.801041][ T9926] wg1: entered allmulticast mode [ 225.886548][ T9927] random: crng reseeded on system resumption [ 226.803666][ T9904] lo speed is unknown, defaulting to 1000 [ 226.995497][T10004] loop2: detected capacity change from 0 to 512 [ 227.015942][T10000] can: request_module (can-proto-3) failed. [ 227.040696][T10004] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.1547: corrupted in-inode xattr: e_value out of bounds [ 227.064150][T10004] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 227.065035][T10004] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1547: couldn't read orphan inode 15 (err -117) [ 227.086142][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 227.086178][ C0] EXT4-fs (loop2): initial error at time 1772082522: ext4_iget_extra_inode:5025: inode 15 [ 227.086213][ C0] EXT4-fs (loop2): last error at time 1772082522: ext4_iget_extra_inode:5025: inode 15 [ 227.242937][T10004] loop2: lost filesystem error report for type 5 error -117 [ 227.246903][T10004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.277518][T10017] loop9: detected capacity change from 0 to 512 [ 227.309226][T10017] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 227.334649][T10017] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 227.342698][T10017] System zones: 0-1, 15-15, 18-18, 34-34 [ 227.374848][T10017] EXT4-fs (loop9): orphan cleanup on readonly fs [ 227.381335][T10017] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 227.411546][T10017] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 227.427250][T10017] EXT4-fs (loop9): 1 truncate cleaned up [ 227.433386][T10017] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 227.471667][T10017] FAULT_INJECTION: forcing a failure. [ 227.471667][T10017] name failslab, interval 1, probability 0, space 0, times 0 [ 227.536763][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1552'. [ 227.546082][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.9.1551 Tainted: G W syzkaller #0 PREEMPT(full) [ 227.546117][T10017] Tainted: [W]=WARN [ 227.546125][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.546222][T10017] Call Trace: [ 227.546229][T10017] [ 227.546239][T10017] __dump_stack+0x1d/0x30 [ 227.546324][ T9004] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.546444][T10017] dump_stack_lvl+0x95/0xd0 [ 227.546543][T10017] dump_stack+0x15/0x1b [ 227.546624][T10017] should_fail_ex+0x263/0x280 [ 227.546693][T10017] should_failslab+0x8c/0xb0 [ 227.546829][T10017] kmem_cache_alloc_noprof+0x66/0x400 [ 227.546932][T10017] ? alloc_empty_file+0x76/0x200 [ 227.547052][T10017] alloc_empty_file+0x76/0x200 [ 227.547136][T10017] path_openat+0x65/0x2050 [ 227.547242][T10017] ? _parse_integer_limit+0x170/0x190 [ 227.547381][T10017] ? _parse_integer+0x27/0x40 [ 227.547488][T10017] ? kstrtoull+0x111/0x140 [ 227.547629][T10017] ? kstrtouint+0x76/0xc0 [ 227.547776][T10017] do_file_open+0x16c/0x290 [ 227.548056][T10017] do_sys_openat2+0x94/0x130 [ 227.548151][T10017] __x64_sys_openat+0xf2/0x120 [ 227.548232][T10017] x64_sys_call+0x1e39/0x3020 [ 227.548419][T10017] do_syscall_64+0x12c/0x370 [ 227.548537][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.548611][T10017] RIP: 0033:0x7f899557c629 [ 227.548668][T10017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.548799][T10017] RSP: 002b:00007f8993fd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 227.548871][T10017] RAX: ffffffffffffffda RBX: 00007f89957f5fa0 RCX: 00007f899557c629 [ 227.548924][T10017] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 227.548976][T10017] RBP: 00007f8993fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.549017][T10017] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 227.549060][T10017] R13: 00007f89957f6038 R14: 00007f89957f5fa0 R15: 00007fff70b795a8 [ 227.549204][T10017] [ 227.825369][ T8487] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.856189][T10030] loop6: detected capacity change from 0 to 512 [ 227.916236][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1556'. [ 227.989872][T10038] loop9: detected capacity change from 0 to 128 [ 228.037444][T10038] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.140575][T10040] loop6: detected capacity change from 0 to 1024 [ 228.145083][T10038] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.218673][T10037] loop2: detected capacity change from 0 to 1024 [ 228.237363][T10050] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.275287][T10037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.438403][T10061] loop4: detected capacity change from 0 to 128 [ 228.645348][ T9004] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.892532][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1563'. [ 228.964814][ T8487] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.980952][T10074] loop6: detected capacity change from 0 to 512 [ 229.059562][T10074] EXT4-fs: Ignoring removed mblk_io_submit option [ 229.111306][T10074] EXT4-fs: inline encryption not supported [ 229.126000][T10066] ================================================================== [ 229.134149][T10066] BUG: KCSAN: data-race in filemap_read / filemap_splice_read [ 229.141649][T10066] [ 229.144000][T10066] write to 0xffff88811a6f8228 of 8 bytes by task 10061 on cpu 0: [ 229.151737][T10066] filemap_splice_read+0x523/0x780 [ 229.156894][T10066] splice_direct_to_actor+0x26e/0x670 [ 229.162300][T10066] do_splice_direct+0x119/0x1a0 [ 229.167186][T10066] do_sendfile+0x382/0x650 [ 229.171643][T10066] __x64_sys_sendfile64+0x105/0x150 [ 229.176868][T10066] x64_sys_call+0x2dc4/0x3020 [ 229.181585][T10066] do_syscall_64+0x12c/0x370 [ 229.186259][T10066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.192181][T10066] [ 229.194536][T10066] write to 0xffff88811a6f8228 of 8 bytes by task 10066 on cpu 1: [ 229.202311][T10066] filemap_read+0x98d/0xa10 [ 229.206852][T10066] generic_file_read_iter+0x79/0x330 [ 229.212180][T10066] __io_read+0x463/0xc50 [ 229.216458][T10066] io_read+0x4a/0x190 [ 229.220476][T10066] __io_issue_sqe+0xfd/0x2d0 [ 229.225103][T10066] io_issue_sqe+0x206/0xc00 [ 229.229682][T10066] io_wq_submit_work+0x5bc/0x830 [ 229.234681][T10066] io_worker_handle_work+0x41e/0x950 [ 229.240006][T10066] io_wq_worker+0x23d/0x970 [ 229.244542][T10066] ret_from_fork+0x150/0x360 [ 229.249173][T10066] ret_from_fork_asm+0x1a/0x30 [ 229.253970][T10066] [ 229.256309][T10066] value changed: 0x00000000000000d8 -> 0x00000000000014f0 [ 229.263434][T10066] [ 229.265777][T10066] Reported by Kernel Concurrency Sanitizer on: [ 229.271955][T10066] CPU: 1 UID: 0 PID: 10066 Comm: iou-wrk-10063 Tainted: G W syzkaller #0 PREEMPT(full) [ 229.283180][T10066] Tainted: [W]=WARN [ 229.287004][T10066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 229.297093][T10066] ================================================================== [ 229.306278][T10074] EXT4-fs: test_dummy_encryption option not supported [ 229.417941][T10078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.426273][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1563'. [ 229.471418][ T28] kauditd_printk_skb: 1063 callbacks suppressed [ 229.471433][ T28] audit: type=1400 audit(1772082525.188:16875): avc: denied { read write } for pid=10071 comm="syz.6.1563" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.559722][ T28] audit: type=1400 audit(1772082525.238:16876): avc: denied { read write open } for pid=10071 comm="syz.6.1563" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.630353][T10074] lo speed is unknown, defaulting to 1000 [ 229.652287][ T28] audit: type=1400 audit(1772082525.238:16877): avc: denied { ioctl } for pid=10071 comm="syz.6.1563" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.695857][ T28] audit: type=1400 audit(1772082525.248:16878): avc: denied { ioctl } for pid=10071 comm="syz.6.1563" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.801161][ T28] audit: type=1400 audit(1772082525.258:16879): avc: denied { read write } for pid=9004 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.923672][ T28] audit: type=1400 audit(1772082525.258:16880): avc: denied { open } for pid=9004 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 229.960198][ T28] audit: type=1400 audit(1772082525.258:16881): avc: denied { ioctl } for pid=9004 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.066754][ T28] audit: type=1400 audit(1772082525.328:16882): avc: denied { prog_load } for pid=10071 comm="syz.6.1563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.131919][ T28] audit: type=1400 audit(1772082525.328:16883): avc: denied { allowed } for pid=10075 comm="syz.9.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 230.156011][ T28] audit: type=1400 audit(1772082525.328:16884): avc: denied { bpf } for pid=10071 comm="syz.6.1563" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1