last executing test programs: 9m6.491823022s ago: executing program 32 (id=20): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x42) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x105842, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x9, @empty, 0xfffffffb}}, 0xfff0, 0x4}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@loopback, @in=@remote}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x10001, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x40) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000880)={{r8}, 0x9, 0x3, 0x8}) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) 8m18.549271779s ago: executing program 2 (id=427): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$eJzs3d1rW+cZAPBHku3YibN8bIwkgyWQQfZBLH8wYm+DsattF4GxwG42yDxb8TLLkbHkLDa5cLa7XOxibLRQetH7/gW9aa4aAqXXLb3tVUloUxfakoKKjiTHH5KjtraU+Px+cKJzzqvoeV/Zz+uj97xHJ4DUOlf7JxMxHBHvRMSx+ubWJ5yrP6w/vj1TWzJRrV75KJM8r7bdfGrz/x2JiLWIGIyIP/424m+ZnXHLK6vz08ViYamxna8sLObLK6sXry9MzxXmCjfGJi9NTU2OToxP7Vlb7/7nH3cvv/H7gdc/+/fD+/99681atYYbZZvbsZfqTe+PE5v29UXEr/YjWA/kGu0Z6nVF+EZqP7/vRsT5JP+PRS75aXbmyb7WDNhv1Wq1+mX1ULvitSpwYGWTY+BMdiQi6uvZ7MhI/Rj+e3E4WyyVKz+7Vlq+MVs/Vj4e/dlr14uF0cZnhePRn6ltjyXrT7fHt21PRCTHwP/LDSXbIzOl4mx3uzpgmyPb8v/TXD3/gZTo/CM/cNDIf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DerXK/6M9qAfQfbv9/R/oYj2ArvrD5cu1pdq8/n325sryfOnmxdlCeX5kYXlmZKa0tDgyVyrNJdfsLDzr9Yql0uLYz2P5Vr5SKFfy5ZXVqwul5RuVq8l1/VcL/V1pFdCJE2fvvZeJiLVfDCVLbPqTL1fhYKtWM9Hra5CB3sj1ugMCesapP0ivr/EZv+2XhAEvthZf0bth8Ejbol/H4r5UB+iC7G6FTx50ryJA11047fwfpJXxf0gv4/+QXo7xgd3G/6NxL7+WjP/DC2vX8X/gQBtuc/+vo5vu3TUaEd+JiHdz/Yea9/oCDoLsh5nG8f+FYz8a3l46kPk8OUUwEBH/fOXKS7emK5Wlsdr+jzf2V15u7B/vRf2B9raO8DXztJnHAEB6rT++PdNcuhn30W/qkxB2xu9rjE0OJkcwh9czW+YqZPZo7sLanYg41Sp+pnG/8/qZj8PruR3xTzYeM/WXSOrbl9w3vTvxT2+K/8NN8c9863cF0uFerf8ZbZV/2SSnYyP/tvY/w3s0d6LZ/zXnXG+O3+z/cm36v7Mdxvj7q/9qdXo3mez96E7EmZb9bzPeYBJre/xa3S50GP/hX/70/XZl1dfqr9MqflNtLV9ZWMyXV1YvXm/WYvLS1NTk6MT4VD4Zo843R6p3+uWpt++3i19rf0Ob9r+/o/1DjTr9pMP2f/GDB38+t0v8H59v/ft3Mnnc9v5Xqxt1+GmH8T8Z/+Cv7cpq8WfbvP/ZVvGjWRox0WH88v9/59phAHiOlFdW56eLxcKSFStWnu+Vvuhi0Gf1HGvd6aCAffM06XtdEwAAAAAAAAAAAKBT7Wb/3tvD6cS9biMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwVQAAAP//QUvQlg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cc3166c", @ANYRES16=r4, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x43) exit(0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140004"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x922, 0x12) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xa404e, &(0x7f00000004c0), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x440, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xbcfe, 0xa9d}, 0x102640, 0x400, 0x0, 0x1, 0xffffffff, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400000a0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 8m15.409153369s ago: executing program 2 (id=440): sched_setscheduler(0x0, 0x2, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r1 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x20, 0x40, 0x0, 0x0, r0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000002180)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f0000000380)="6ac4abbe75e8", 0x6, 0x7fffffffffffffff, 0x0, 0x2}]) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000300)=""/91, 0x5b}], 0x1, 0x64, 0x100) r7 = eventfd(0x7) io_submit(r5, 0x2, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f0000000000)="f5deea054b35da3634c34c2759ce19a49e1806d769f980b298b32ee90ec4558af6cb76033d0b41", 0x27, 0xe66, 0x0, 0x3, r6}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000200)="1d09756f9d17999bed2c0887f3c91c3c20", 0x11, 0xf23, 0x0, 0x7, r7}]) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) recvmsg$unix(r8, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000003, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r10, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/229, 0xe5}], 0x1, 0x3, 0x0) 8m11.036365447s ago: executing program 2 (id=455): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m10.528244593s ago: executing program 5 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x4, 0x7ffffc, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) setresuid(0x0, 0x0, 0xee00) r3 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000005d40), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000126bd7000fbdbdf2501000000080001007063690011000200303030303a30303a3130b4b4b163a13a8c6301406e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x70}, 0x1, 0x0, 0x0, 0x48001}, 0x44000) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x80, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05072bbd7000ffdbdf2501"], 0x48}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r8) sendmsg$NFC_CMD_LLC_SET_PARAMS(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fedb9f251000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004004) (async) socket(0x10, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) 8m9.957582081s ago: executing program 5 (id=459): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c5}, 0x0) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x0, 0x3}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="141000001000010000000000000000000500000a20000000000a050000ce2b85fa0000000a00000409f2e19dacc22bd82b000000140000000300000aef6876f2bf15aabf9d354471ffaef81fe403326d43de6f2b5e0b6814a76d3bf5724ca59141d16c25a6cb0c347cc6ba4b23c26fc96a0eee0cd9dc5649d7ef761a06bc0c4671dfb024ff724bb53a9ee6bac3de107306f1022029003162d3f6cf6ed3ea23e24ffbc09f3cd6dde635"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10, 0x0}, 0x200088d0) (async) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00"}) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190000020000000000000000ac1414bb00000000000000000900000000000000000000000000000000000000800000004e2200000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010000100000000000000"], 0xc4}}, 0x81) (async) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007000100e092c6b129733a0f8b0010000100000000000000"], 0x1c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) syz_open_pts(r6, 0x141601) 8m9.490747266s ago: executing program 5 (id=462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2208880, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x41, 0x30e, &(0x7f0000000f00)="$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") gettid() (async) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x240, 0x1a8, 0xb0, 0x0, 0xb0, 0x398, 0x398, 0x398, 0x398, 0x398, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x62, 0x1}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x4}}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0x1, 0xfc}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{}, {0xe, "25af", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x493) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4) lseek(r8, 0x100, 0x0) getdents(r8, &(0x7f0000000080)=""/202, 0xca) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000ecf4dae57e8a550e8d24226289690c720175e29085f2aab2f1a43f311c59718724beb37b156f2be468d4a99124d957dfb9d64cf9ffffffffffffff9e8f22f3dae7880f03f5c2e9a8e11503fcdc6489627669ab98b984db2cf8e99a05e9afc5fbf22570c2de46d387ee0234aaf9247eaa23c36896765f539e838d224cd1cd6a97815ec2ee5eefcca3ca17c9a1854ace4f3168c1c43e37f5b2eecae705dff99723df4cbe8de71b1e", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf25150000000a0014002f292b3a5e2c000008000100", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x88040}, 0x0) r10 = dup2(r0, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014006500b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000400)={r10, &(0x7f0000000200)='GPL\x00', 0x200000, &(0x7f0000000340)={@_ha_fsid={[0x6, 0x8]}, {0x5, 0x4, 0x44, 0x6}}, 0x2, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x8}) (async) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000400)={r10, &(0x7f0000000200)='GPL\x00', 0x200000, &(0x7f0000000340)={@_ha_fsid={[0x6, 0x8]}, {0x5, 0x4, 0x44, 0x6}}, 0x2, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES16=r13, @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000050000000083000000636474a1d35cdb0c55090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 8m9.3754245s ago: executing program 5 (id=463): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x8000000000000000, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) close(r2) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x0) close(r1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x900, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x100000003]}, 0x8) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, @perf_bp={0x0, 0x8}, 0x14, 0x8000000000000000, 0x11004, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) (async) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) (async) sendmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) (async) close(r2) (async) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, 0x0}}], 0x1, 0x0) (async) close(r1) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x900, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) (async) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) (async) rt_sigsuspend(&(0x7f0000000040)={[0x100000003]}, 0x8) (async) 8m9.118103287s ago: executing program 2 (id=464): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204004, &(0x7f0000000000)={[{@grpquota}, {@nodioread_nolock}]}, 0x1, 0xbc5, &(0x7f00000013c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$urandom(0xffffffffffffff9c, &(0x7f0000001140), 0x40, 0x0) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m8.946524253s ago: executing program 5 (id=465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x600000000000000) 8m8.758999159s ago: executing program 2 (id=468): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="1800000000000000000000000000000071120400000000009500000000000000ec80489d21eed84e7150d3bc571ee2017341c533b2281160cc48e07958ec4512979a3b4343cb2daabad60cb72bd195f0656d61110d38143ccd21a58fe527de19606177899094c55c254abb075bd369a5eaecac503cbef962b001c5dcc17ba7b5ddd1b6d6801d4b2f333cf6123dbf0b015ce7dc957c5b19cb948e3a2bbbab409c4fce3f9fb70d4d42b2a56f7639ceed1ae747c7504a826f32744de96c51949431c592f2620a8b1357b93b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa0180c20000000800450000240000000000119078000000000000000000004e2000109078829c00008000000000"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES16=r1], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000180000000100000000000900"/40], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000001080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=r4], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0xc}, 0x106200, 0x1, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x60bd2d, 0x25dfdbf9, {0x2, 0x0, 0x80, 0xc, 0xfd, 0x2, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @loopback}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48891}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000f000000000000000000000000000300000a5c0000000c0a050000000000000000000a0000060900020073797a310000000076fe010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c00008000000440ffffffff8000000104000080140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x98, 0x198, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x0, 0x0, 0x41}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x10}, 0x106200, 0x10000, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x2) readv(r8, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000540), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000001000)={0xffffffffffffffff, &(0x7f0000000580)='veth1_macvtap\x00', 0x200800, &(0x7f00000005c0)={@align=0xe99, {0x78, 0x87, 0x9, 0x8e08}}, 0x6, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000740)=0xfff}) 8m8.547890816s ago: executing program 5 (id=470): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x86, 0x1e}}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r7 = syz_io_uring_setup(0xc6d, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r7, 0x3516, 0xa80100, 0x0, 0x0, 0x0) open(0x0, 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 8m8.547606146s ago: executing program 33 (id=470): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r6, 0x89f9, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, 0x86, 0x1e}}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r7 = syz_io_uring_setup(0xc6d, 0x0, 0x0, 0x0, &(0x7f0000000000)) io_uring_enter(r7, 0x3516, 0xa80100, 0x0, 0x0, 0x0) open(0x0, 0x143862, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 8m8.136349578s ago: executing program 2 (id=474): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m7.839326618s ago: executing program 34 (id=474): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m23.360979841s ago: executing program 4 (id=1368): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000200000004f1000000000000063000000000000009500059e00020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x61, 0x0, 0x0, 0x64}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x5}, 0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3ce6ed39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xc, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6, r6, r6, r6], 0x0, 0x10, 0x200}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40ccc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1b0c, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x300, 0x56, 0x0, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90040000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c96", 0x0, 0x2f00, 0x0, 0xe3, 0x0, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed", &(0x7f00000007c0), 0x2, 0x0, 0x10000}, 0x50) 5m22.512360958s ago: executing program 4 (id=1371): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x20000045) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000000)={0x3, 0x800d, 0x102, 0xdd, 0x5, "5f730000a9003f00"}) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5m21.712288943s ago: executing program 4 (id=1374): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188080000003772cc9f1ba1f848430000005e140602000000040e000a000d000000663df4ce571c", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'fq_codel\x00'}], 0xa, "be6b106ab17564cab6d1623f209628beee31c2473903ad03442f46a3025d5baab5e60370ead1535f8c42339e388a6776ebb61c4039cc3e09e13b7c22ec7693337d284a7e2dc51ab88980f89e1b4631ade9612412abd99395b578d96c1110c99d6a377308652e2063585e3585b9d9febbae34a521470e36a88a778169ed026c50b4c82e9d4f07f661e6f8f4ca96295343cf0d46e9485c250809a044b3ddb78dac6fbb3fd842e09d56d6c14a418715bc8f286cda3d53b0b5eeac0b4cb71685e9ac214e0b51a873cce84fb2650b81e9be05418ec324459cbfff5ea13de1b731488b5f0466"}, 0xf8) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b0020000", @ANYRES16=r3, @ANYBLOB="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"], 0x2b0}, 0x1, 0x0, 0x0, 0x4008880}, 0x14000010) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff5}}, [@qdisc_kind_options=@q_tbf={{0xfffffffffffffedf}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x97cb, 0x1, 0xf1, 0xfff}, {0xc, 0x2, 0x1, 0x8, 0xb, 0x9}, 0x0, 0x43b, 0x7d8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x86836312c8e1cc29}]}}]}, 0x6c}}, 0x44080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x9}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xf}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x75}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9b93}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700000f"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 5m21.196378969s ago: executing program 4 (id=1377): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f00000008c0)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@jqfmt_vfsv0}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000001a40)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938000034f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81a058fd0c7bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e44758620d65d7d8aa984c2925980a7eda8087b89c87b56fec34a2f19ad233b5145d3e90ddc82cdca15e0813594a796b4a3aad4072b79b2bbdeccccedede7543c27b3324ed1eab067d8dba09ed692e82d146a304f", @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESDEC=r1], 0xb, 0x0, &(0x7f0000000000)) r2 = syz_clone(0x82000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000ac0)='syscall\x00') pread64(r3, &(0x7f0000000500)=""/15, 0xf, 0x40000000007) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x4, 0x746, 0x6, 0x8, 0x6, 0x6, 0x20000000ffe, 0xf64, 0xffeffffc}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) stat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000500)='./file1\x00', r7, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000c00)={0x12, 0x10, 0xfa00, {&(0x7f0000000540), r9, r10}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8000005, @empty, 0xa096}, {0xa, 0x4e1e, 0x13, @local, 0x800b}, r11, 0x8}}, 0x48) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000380)={0x2, &(0x7f00000000c0)=[{0x7fff, 0x8, 0x2, 0xb45f}, {0x9, 0x0, 0x0, 0x5}]}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000000)=0x1b) writev(r12, &(0x7f0000000480)=[{&(0x7f0000000440)='`', 0x1}], 0x1) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071104a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r13, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m20.622699388s ago: executing program 4 (id=1380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000401000008001e00300b00000800010082"], 0x2c}, 0x1, 0x0, 0x0, 0x402c881}, 0x8000) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@remote, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="8c4124b6d3ae0c07d7c8eca010884f866bf59b1aa26fc85b69cd8a9fb3b471f321dbca76d987d60e0b174ec31b69619d58f41092008ef6e9c5bb63fe9c0efc90edf8d61b4221a343567303ae0964b26efb8f823bdce4e0e1da123070d171fc0a63e3c2", 0x63}, {&(0x7f00000002c0)="a31f61094854af455d59bd5cbb298f08c2c94796c154c2e1cc49eafcfe69fd58da8e8182b6e465793c2e702a687ce8f91d2c955e528c849f3a602a6ac3e0abbb02ce74de5e02ad52be3dc2cd314927e83e29725944ded4cbd81be0cd1a240880aa6cbf314b80d6e4d21854d88d09c6be1cffe6ee85f51769d15c54212d5a7d5fdc17e91fa860b742eaa140370d8b6b4cd586bcc9e0ef5b7ec25cf6f0743a76ce633a7c93c5be8718c9e71c3b74c4ebcf5956a87fa27b962d7c1a2bcf3809da6daa4eb472b393cb72d34efb8600c3a1ebd3", 0xd1}], 0x2, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2a}}], 0x70}, 0x4000090) 5m19.972252878s ago: executing program 4 (id=1383): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYRESOCT=r1], 0x48}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000400)=""/4096) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0xf9, 0x1223, &(0x7f0000001840)="$eJzs3E9rXFUYB+A3Y9pJU/NHrdV2oQfciItLk4UrRYKkIBlQaiO0gnBrJjrMOFNyh8AUsXXl1s/h2p3gN8jGz+Aumy67EK/03k7a1KlFtDMSn2eR+3LO+eXcwwwDZ7hnDt/5/qvubpHt5sNozM1F42ZEupciRSPGXtuqr9eub220WptXUrq8cXXt7Xcj4vWfP/26GRFnP/lx+admHKx+dnh3/deD8wcXDn+/+mWnSJ0i9QfDlKcbg8Ewv9FbTjudopul9FGvnRft1OkX7b1H+ttp962IGKW8v7O0eHOvXRQp749Stz1Kw0Ea7o1S/kXe6acsy9LSYvBEp54+ZPuHe2VZRpTlqTgdZVmWZ2IxzsbzsRTLcSciXogX46U4Fy/H+XglXo0L1ahp3D4AAAAAAAAAAAAAAAAAAAD8f/zV+f+VWHX+HwAAAAAAAAAAAAAAAAAAAKbg42vXtzZarc0rKS1E9L7b397frq91/+r9P71ox6VYid+iOv1fq+vLH7Q2L6XKanzbu/0gf3t/+7kqvzHOr1U/J/AgP1/1jfNrdT4dzzdj8X5+NzpVfj1W4tzk+dcn5hfizTceyWexEr98HoPoxU4198P8N2spvf9h67H8xWocAAAAnARZOjJx/55lT+qv80f766d/P/DY/no+Ls7Pdu1EFKNb3bzRa+9VRW9cLPyp5dkVMcW5/t0i4m5ZFc3jXY1nNGkjjlpOz3rtt7pz/4WX4IQWzZj6pGfieMusP5mYhodvg1nfCQAAAAAAAAAAAH/HP394cK7+R3cmjpmPCU+WvTeDdQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wQ4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//3EQwOE=") r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000000)=""/41, 0x29) getdents64(r9, 0xfffffffffffffffe, 0x29) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fddbdf250f00000005002d000100000005002e000100000008000300", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r11, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x20040004) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r6, @ANYBLOB="08000200ac141476a47172edbd96aaecfcde691e070590a2a715c6c71fa7b4556430bbfecbf4a2f975091533ad3557f2490ece26e56fd9853e726545dba774959f5e61196c5912a6bf3d"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 5m19.92876019s ago: executing program 35 (id=1383): r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYRESOCT=r1], 0x48}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000400)=""/4096) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./bus\x00', 0x804800, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0xf9, 0x1223, &(0x7f0000001840)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000000)=""/41, 0x29) getdents64(r9, 0xfffffffffffffffe, 0x29) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7000fddbdf250f00000005002d000100000005002e000100000008000300", @ANYRES32=r12], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r11, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x20040004) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r6, @ANYBLOB="08000200ac141476a47172edbd96aaecfcde691e070590a2a715c6c71fa7b4556430bbfecbf4a2f975091533ad3557f2490ece26e56fd9853e726545dba774959f5e61196c5912a6bf3d"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 4m29.442777326s ago: executing program 6 (id=1644): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dax_never}, {@barrier}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x0, 0x784, &(0x7f0000000800)="$eJzs3M9rXOUaAOD3nGaa/si9yYW7uHdThRZaKJ0kzaZdGTfiplAouK0hmYSQk0zJTGoSC03dCUJtNiqC6N6lW6HUP8CdFBTcC6I1LtTNyJlMpm06M522k04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEihhv704g4WG8ditjYHrd179p0viVRq136JcmnxVZtuHmspPF4NOpT4n8RcacQcfq9R+NW1tYXprKstNzoj1YXr4xW1tbPzC9OzZXmSkvjE+fHzk1MnBub6FmtJ946f/jWt29sbn73VfXmsYEzSUzW645GbT0L9IDt16QQk7v2L+1FsD5Kuhgz8BzyAACgs/w8/0B+blaI+tn/gU5naU7gAAAA4KVUG6x168+uRwIAAAAvmCT6nQEAAACwt3b+D2Dn3t69ug+2nZ9fj4iRVvEH6vcQRxyKQkQc2Uoeuv0g2Z4Gz2TjRkTcnmzx+evmjubOxu43D/fmiPTa7Xz9mWy1/qTN9SdarD8DO9+d8Izar3/34x9os/5d7DLG15/9v9A2/o3K6vvHWsVPmvGTNvHf7jL+zc0PbrV7rvZFxMmWf3+Sh2J1+H6I0dn5rNWvVjPdO3+dutu+/ogjj8RPknrUpHP9V7qs/92t3xY2OsQ/dbzz+78df/Chefln4sNGHmlE3Go85v3NXTGOL37/zaORk42d+DNtXv/W7/+bzfo/77L+H78cXO1yKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANSlETEUSVpsttO0WIw4GhH/jSNpVq5UT8+WV5Zm8uciRqKQzs5npbGIGN7uJ3l/vN6+3z+7qz8REf/54fB20PmsVJwuZzP9Lh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICmoxExFElajIg0In4fTtNisd9ZAQAAAD030u8EAAAAgD3n+h8AAAD2v6e9/k96nAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwr128cCHfalv3rk3n/ZmraysL5atnZkqVheLiynRxurx8pThXLs9lpeJ0efFxx0sjYvx8rKyOVkuV6mhlbf3yYnllqXp5fnFqrnS5VHguVQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCkhupbkhYjIq2307RYjPhXRIxEIZmdz0pjEfHviLg7XBjM++P9ThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeq6ytL0xlWWn55W7U9lc5XTciiXgB0mjT+KTxrnQak2xE9D3VtJHosxwn4klmXX/My9Lvxit9Wo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOivytr6wlSWlZYr/c4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/kp/SiIi304Onxja/ezB5I/h+mNEvPPppY9Wp6rV5fF8/6/N/dWPG/vPPjDx+vOsAQAAAPa9155k8M51+s51PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLcqa+sLU1lWWt7DRtzod5UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDT+DsAAP//ScK50Q==") r1 = openat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x8042, 0x1f9) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) (async) fadvise64(r1, 0x7f, 0x0, 0x4) (async, rerun: 64) mount$cgroup2(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x280018, &(0x7f0000000100)={[{@pids_localevents}], [{@dont_appraise}, {@appraise_type}, {@seclabel}, {@dont_hash}]}) (rerun: 64) 4m29.248205433s ago: executing program 6 (id=1648): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x80, 0x2, 0x2, 0xfdbd}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000040), 0x3, 0x80000) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000001c0)={r2, &(0x7f0000000080)='\x00', 0x8042, &(0x7f00000000c0)={@align=0x2, {0x7, 0x401, 0x3, 0xc0}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r9, 0x0, 0x8001, 0xd) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x60}}, 0x0) 4m27.881475806s ago: executing program 6 (id=1653): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000001ffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = socket(0xa, 0x801, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000000)="d9", 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, 0xe) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, &(0x7f0000000100)) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x31, &(0x7f00000a2000)={0x0, 0x0}, 0x10) listen(r7, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mknodat$loop(r0, &(0x7f0000000100)='./file0\x00', 0x8000, 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0x48, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xffff}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x0, 0x6e]}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) write$9p(r3, &(0x7f0000000340)="5cd6a80c50bee991187db13c0fe87d3b6d4c2e96bc00c5e47c6cf13249cc162a38bf9d4f4c5dd70727601fddf5a9bde050ed772856010514f2b4794e1fb116f8efb7f7e5b3d95e31c2863c00d729d2227421a29fad5332bae66148364176f9742fc3db32df", 0x65) recvmmsg(r2, &(0x7f00000001c0), 0x0, 0x40, &(0x7f00000002c0)) 4m26.998285344s ago: executing program 6 (id=1656): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x6b}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m26.929674796s ago: executing program 6 (id=1657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000008510000002000000850000008a000000950000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000008510000002000000850000008a000000950000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000100000000000000040001cb00000000100007000000003fc6b4ecb4fdf15e3b659fcc002000060000000000"], 0x24, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x7b8c, &(0x7f0000000300)={0x0, 0xf249, 0x200, 0x2, 0x18a}) (async) r0 = io_uring_setup(0x7b8c, &(0x7f0000000300)={0x0, 0xf249, 0x200, 0x2, 0x18a}) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000200), 0x0) (async) r1 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000200), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000009c0), 0x0) r2 = msgget(0x0, 0x10b) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f00000009c0)=""/232) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x0, 0x218, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xa, 0x1, 0x2, 0x0, 0x0, "13b911e5284250ec81c17349113a3cfb44cacec1b17c5169103aa911ccde13af46942ffe283747525f02c26cacacf4224636c02166494a749e5e3abbd96793dd"}}}, {{@arp={@multicast1, @private=0xa010101, 0xffffff00, 0xff, 0x1, 0x5, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x54, 0x9, 0xf9cf, 0x2, 0x6ef4, 0x8, 'gre0\x00', 'team_slave_1\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@link_local, @empty, @private=0xa010102, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x460) (async) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x0, 0x218, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xa, 0x1, 0x2, 0x0, 0x0, "13b911e5284250ec81c17349113a3cfb44cacec1b17c5169103aa911ccde13af46942ffe283747525f02c26cacacf4224636c02166494a749e5e3abbd96793dd"}}}, {{@arp={@multicast1, @private=0xa010101, 0xffffff00, 0xff, 0x1, 0x5, {@mac=@multicast, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, 0x54, 0x9, 0xf9cf, 0x2, 0x6ef4, 0x8, 'gre0\x00', 'team_slave_1\x00', {0xff}, {}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@link_local, @empty, @private=0xa010102, 0xf, 0x5fa0832aa5fc72f3}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x460) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xd}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x81}]}, 0x40}}, 0x40000800) mkdir(&(0x7f0000000280)='./file0\x00', 0x127) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x7f, 0x6, 0x26, 0x82, 0x0, 0x8, 0x8, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x1, @perf_config_ext={0x40c7, 0x613}, 0x50, 0x80000000, 0x3, 0x9, 0xfffffffffffffffc, 0x37, 0x8000, 0x0, 0x7f, 0x0, 0x800}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xc) (async) r7 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x7f, 0x6, 0x26, 0x82, 0x0, 0x8, 0x8, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x1, @perf_config_ext={0x40c7, 0x613}, 0x50, 0x80000000, 0x3, 0x9, 0xfffffffffffffffc, 0x37, 0x8000, 0x0, 0x7f, 0x0, 0x800}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r7, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r7, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x228f401, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x40001) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000ac0)={[{@gid}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x39, 0x39, 0x63, 0x36, 0x34, 0x62, 0x64], 0x2d, [0x36, 0x64, 0x34, 0x32], 0x2d, [0x64, 0x34, 0x30, 0x36], 0x2d, [0x38, 0x65, 0x39, 0x62], 0x2d, [0x32, 0x34, 0x36, 0x30, 0xf, 0x32, 0x34, 0x66]}}}]}) (async) mount$bpf(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x800000, &(0x7f0000000ac0)={[{@gid}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x39, 0x39, 0x63, 0x36, 0x34, 0x62, 0x64], 0x2d, [0x36, 0x64, 0x34, 0x32], 0x2d, [0x64, 0x34, 0x30, 0x36], 0x2d, [0x38, 0x65, 0x39, 0x62], 0x2d, [0x32, 0x34, 0x36, 0x30, 0xf, 0x32, 0x34, 0x66]}}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x28, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200"], 0x28}}, 0x802) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x28, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200"], 0x28}}, 0x802) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m26.596156196s ago: executing program 6 (id=1658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000ec0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xa, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0xa, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}, @echo={0x8, 0x0, 0x0, 0x1000, 0x3}}}}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x4000004) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x105080) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r10}, 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r12, 0x560e, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x9d, 0x8, 0xffffffffffffffff, 0x8000, r13}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xefffbdda, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 4m11.351611689s ago: executing program 36 (id=1658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000ec0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xa, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0xf, 0xa, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}]}}, @echo={0x8, 0x0, 0x0, 0x1000, 0x3}}}}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x4000004) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000180), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x105080) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r10}, 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x441c, &(0x7f0000000040)={[{@nodiscard}, {@noinit_itable}, {@nodiscard}, {@nomblk_io_submit}, {@barrier_val}, {@jqfmt_vfsv1}]}, 0x1, 0x452, &(0x7f0000000940)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r11, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r12, 0x560e, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000100)={'\x00', 0x7, 0x9d, 0x8, 0xffffffffffffffff, 0x8000, r13}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xefffbdda, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x2f, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x40054) 52.642173034s ago: executing program 8 (id=2869): socket$inet_sctp(0x2, 0x1, 0x84) setpgid(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x5, 0x85, 0x7, 0x100}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1d, 0x5, &(0x7f0000001d80)=ANY=[@ANYRES8=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xcc49516d0bfab8a4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff63, 0x0, 0x0, 0x0, 0x81}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x0, 0x9}}, 0x20) socket$kcm(0x29, 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f00000010c0)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) readv(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f06ebbee2, 0x80010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 52.055557983s ago: executing program 8 (id=2874): r0 = socket$pptp(0x18, 0x1, 0x2) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x238, 0x128, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 'veth1_to_hsr\x00', 'team0\x00', {0xff}, {}, 0x39, 0x2, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}, {0x3, 0x280, 0x0, 0x1}}, @common=@inet=@ecn={{0x28}, {0x11, 0x10, 0x2, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3c39d3cd27a1cde5, 0x3, 0x5, 0x4, 0x2], 0x6, 0x4}, {0x4, [0x4, 0x5, 0x1, 0x4, 0x2, 0x5], 0x2, 0x1}}}}, {{@ip={@multicast1, @remote, 0xffffff00, 0x0, 'tunl0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x1, 0x2, 0x1}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x6, 0x1], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x2, 0x8, 0x0, 0x0, "cdedd148c78b1f3f19dea412a4f322ea9186c2d3833811f77b9d940124eb7f083172afd27a52ecd7d94d22c2c67b686c75c0b0956877297621a785c29674e6fb"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3d}, 0xff, 0xffffff00, 'wg1\x00', 'pimreg\x00', {}, {0xff}, 0xc, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}, [0x0, 0xff000000, 0xffffff00], 0x4e21, 0x4e24, 0x4e23, 0x4e24, 0x80, 0x8, 0x5b, 0x1, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 51.904113717s ago: executing program 8 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x8c014) 51.83307482s ago: executing program 8 (id=2878): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r1, 0x7, 0x7}, 0x8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x810c03, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 48.105910749s ago: executing program 8 (id=2888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x80}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x8c014) 47.419452441s ago: executing program 8 (id=2891): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r0, 0x1, 0x2, &(0x7f0000000180)=""/105, &(0x7f0000000000)=0x69) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) ioctl$BLKROTATIONAL(r1, 0x127e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x1f, 0xa, 0xfffa, 0x4360}, 0x8, 0x6, 0x1, 0x0, 0x1001, 0x101, 0x0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) syz_io_uring_setup(0x4177, &(0x7f0000000000)={0x0, 0x3a97, 0x200, 0x3, 0x33c}, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x4, 0x0, 0x2, 0x87ea}, {0x80, 0x3, 0x4}, {0x45, 0x0, 0x4, 0x80000000}, {0x0, 0xff}, {0x1, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'vlan0\x00', 0x5001}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0xfc81) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 47.345178424s ago: executing program 37 (id=2891): r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_buf(r0, 0x1, 0x2, &(0x7f0000000180)=""/105, &(0x7f0000000000)=0x69) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) ioctl$BLKROTATIONAL(r1, 0x127e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x1f, 0xa, 0xfffa, 0x4360}, 0x8, 0x6, 0x1, 0x0, 0x1001, 0x101, 0x0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) syz_io_uring_setup(0x4177, &(0x7f0000000000)={0x0, 0x3a97, 0x200, 0x3, 0x33c}, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x4, 0x0, 0x2, 0x87ea}, {0x80, 0x3, 0x4}, {0x45, 0x0, 0x4, 0x80000000}, {0x0, 0xff}, {0x1, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'vlan0\x00', 0x5001}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0xfc81) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) 7.236229108s ago: executing program 1 (id=3094): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200), 0x3, 0x44d, &(0x7f0000001080)="$eJzs3MtvG8UfAPDvrp3219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrClqEyhFVQuKIOCLxF3CCCwJOSFzhjipVqJcWTkZr7zaOayex48QN/nykdWd2x5r5dnfsmZ2sAxhYo9lLErEzIn6PiOF6dmmB0fo/t29emv775qXpJKrVt/5KauVu3bw0XRQt3rejyJQj0k+T2N+i3vkLF89MVSqz5/P8+MLZ98fnL1x87vTZqVOzp2bPTR4/fvTIxAvHJp/vSZxZXLf2fTR3YO9r71x7Y/rEtXd//jYp4m+KY2Vf7l5FodHlDj5Zra6+uk1gV0M6KfexIXSkVO+mMVTr/8NRisWTNxyvftLXxgHrqlqtVh9of/hyFfgPS6LfLQD6o/iiz+a/xbZBQ497wo2X6hOgLO7b+VY/Uo40LzPUNL/tpdGIOHH5n6+yLTq+DwEA0Lnvs/HPs63Gf2k03hf6f76GMhIR90XE7og4FhF7IuL+iFrZByPioQ7rb14kuXv8k17vKrBVysZ/L+ZrW0vHf8XoL0ZKeW5XLf6h5OTpyuzh/P/kUAxtzfITy9Txwyu/fd7uWOP4L9uy+ouxYN6O6+WtS98zM7UwtZaYG924ErGv3Cr+5M5KQBIReyNiX5d1nH76mwPtjq0c/zJ6sM5U/Triqfr5vxxN8ReS5dcnx/8XldnD48VVcbdffr36Zrv61xR/D9y4Eun24vqPaBX/SNK4XjvfeR1X//is7Zym2+t/S/L2kn0fTi0snJ+I2JK8Xm/04v7S+cmmcpOL5bPr/9DB1v2/WOTN4t8fEdlF/HBEPBIRj+ZtfyzSeDwiDi4T/08vP/Fe9/Gvryz+mZaff+3O/2JiSzTvaZ0onfnxuyWVjnQSf3b+j9ZSh/I9q/n8W027uruaAQAAYPNJI2JnJOnYnXSajo3V/4Z/T2xPK3PzC8+cnPvg3Ez9GYGRGEqLO13DDfdDJ/JpfZGfbMofye8bf1HaVsuPTc9VZvodPAy4HW36f+bPUr9bB6y77tbR0p63A9h4nteEwaX/w+DS/2Fwtej/2/rRDmDjtfr+/7gP7QA2XrnhNf9NMGBAmP/D4NL/YXDp/zCQ5rfFyg/JS6wpcbHN7yds7kSk90QzJNYp0e9PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN74NwAA//9f2OR1") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x3) r0 = socket(0x2, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)}], 0x1}, 0x4048055) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000200000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000040000080007400000040018000680140004002001000000"], 0xb4}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d657461000000001400028008000140000000100800024000000005140000001100"], 0xf8}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="017000fbdb000001000000080090e495aa2362c1a77dda2ea15b68ca00dd61d6cf414f8d2c"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x4c800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r7, 0x58, &(0x7f0000000300)}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x2f, 0xa, 0x0, 0xc671, 0x41, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x0, 0x10, 0x5, 0x7}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0xc880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x6, '\x00', r8, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r4, 0x4, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'ip6gretap0\x00', &(0x7f0000001240)=@ethtool_cmd={0x4a, 0x400, 0x53be, 0x7, 0x1c, 0x0, 0x25, 0x5, 0x6, 0x6, 0x3ff, 0x100, 0xc, 0x7, 0x8, 0xfffffffe, [0x1b2b8e7c, 0x2f]}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x30c40, 0x24) sync() write$P9_RREADLINK(r9, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 6.441896463s ago: executing program 0 (id=3102): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSSOFTCAR(r4, 0x89f2, &(0x7f0000000080)=0x59b) write(r4, &(0x7f0000000100)="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", 0xfe) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000"], 0x28}, 0xfc40) 5.512255203s ago: executing program 1 (id=3107): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071102c00000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000300fffd140007800800df590000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a3000000000150003006861730a3a69702c556f0000"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={r5, 0x5, 0x20, 0x0, 0x8}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r5, 0x7}, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000400)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xfffffffb, 0x2, 0x5, 0x4, 0x2, 0x200, 0x5}, &(0x7f0000000340)=0x9c) 4.66885921s ago: executing program 0 (id=3109): getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = accept4$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x10, 0x80800) bind$llc(r1, &(0x7f0000000200)={0x1a, 0x339, 0x0, 0x6, 0x9, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0x10, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0xfffffffd, 0x0, 0x0, 0x4, 0x3, 0xfc, 0x80, 0x0, 0x4, 0x0, 0xae1b, 0xfffa, 0xff, 0x1, 0x45, [0x4, 0x4089ff]}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001580)={'erspan0\x00', &(0x7f0000001500)={'tunl0\x00', 0x0, 0x8, 0x1, 0x401, 0xffffff40, {{0x9, 0x4, 0x0, 0x7, 0x24, 0x67, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x89, 0xd, "b226e6d9078abf8aa3849d"}]}}}}}) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3c0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x8d}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @ldst={0x3, 0x3, 0x6, 0x6, 0x2, 0xc, 0x8}]}, &(0x7f00000004c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x6, '\x00', r4, 0xb, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x3, 0x5, 0xd, 0x2}, 0x10, 0x29500, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001640)=[{0x2, 0x3, 0xb, 0x7}, {0x5, 0x4, 0xe}, {0x5, 0x4, 0xf, 0xb}], 0x10, 0xfffffffe}, 0x94) 4.260438903s ago: executing program 0 (id=3113): pipe(&(0x7f0000000080)) unshare(0x22020600) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0xe, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0xfffffeee}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x20, 0x0}, 0x10) 4.144307307s ago: executing program 0 (id=3114): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x31}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 4.03230256s ago: executing program 0 (id=3116): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4000, &(0x7f0000000180)={[{@data_journal}], [{@seclabel}]}, 0x1, 0x51b, &(0x7f0000000c40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x40047452, &(0x7f0000001200)) 3.665417512s ago: executing program 0 (id=3118): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x0, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x6, 0x400000, 0x0, 'queue1\x00', 0x37fffe}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x3, 0x2a, 0x5b, @mcast2, @mcast2, 0x80, 0x7800, 0x80000000, 0x6}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@empty, 0x3a, r3}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00200000000119078000000000000000000014e20009c907801000000000000007b4b143b7461fd777b9f49fcdb15400c26a048835c8c82b8af00000000000000584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d26a3fcb2e83b497c83f8224f6e8d9fe09a15d483374a2952c383cda1aebecd2bb35e823188cd36f65c5f0642aa8fc5ea6cd586af4fb5754c7f0c53eb82eeb06810a8c9160b8fd437ac6c363b858ab8208298c5420ccabdc84787363d5388527a7bacf84832e8d0b19d79771b7889003621748b08ae03b220e5dcd01101a7b386196b158ca5ffbe71b"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {&(0x7f00000005c0)=""/19, 0x13}], 0x2}, 0x2}], 0x1, 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r7, 0x25, 0x0, @void}, 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000340)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x4, &(0x7f0000000800)='|', 0x1, 0x9, 0x7, 0x0, 0x8, 0x9, 0x0}) 2.093548963s ago: executing program 1 (id=3124): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0xffffff83, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c801}, 0x40004) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file2\x00', 0x90, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=r1, @ANYRESDEC], 0x1, 0x27d, &(0x7f0000000540)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30240000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x960a40, 0x6ab858183a7ef6fa) truncate(&(0x7f0000000040)='./file2\x00', 0x800000000001ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) r5 = accept(r0, 0x0, &(0x7f0000000080)) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) fsetxattr(r5, &(0x7f0000000440)=@random={'osx.', 'FREEZING\x00'}, &(0x7f0000000480)='vfat\x00', 0x5, 0x2) r7 = openat$cgroup_int(r4, &(0x7f0000001180)='cgroup.clone_children\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x38) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FREEZING\x00', 0x9) 2.004321396s ago: executing program 9 (id=3125): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r2 = socket(0x10, 0x803, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) futex(0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x35}, 0x28) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r6], 0x68}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.840602271s ago: executing program 3 (id=3127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x11, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003be8c5e687a8a6a003300020100ecff0300000a0001000098fc5a53d3f5b7e4bcdbefde1f30f661a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2d6cf725a1905052e298bf58037e3309c0f5bc080236e2b68c8eec25a02aff06011500000000010000000aff", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'sh\x00', 0x24, 0x8, 0x68}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 0x7, 0x8}}, 0x44) 1.768374503s ago: executing program 7 (id=3128): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4000, &(0x7f0000000180)={[{@data_journal}], [{@seclabel}]}, 0x1, 0x51b, &(0x7f0000000c40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) close(0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047452, &(0x7f0000001200)) 1.738307115s ago: executing program 9 (id=3129): syz_read_part_table(0x59d, &(0x7f0000000000)="$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") (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xab11, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) (async) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0x20, &(0x7f0000001940)={&(0x7f0000000880)=""/137, 0x89, 0x0, &(0x7f0000000940)=""/4096, 0x1000}}, 0x10) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a00)=@generic={&(0x7f00000019c0)='./file0\x00', 0x0, 0x18}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xf, 0x28, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xec5, 0x0, 0x0, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0xfffffff8, 0x0, 0x0, 0x41000, 0x8, '\x00', r3, @fallback=0x33, r4, 0x8, &(0x7f0000000800)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xe, 0x2, 0x10}, 0x10, r5, r6, 0x6, &(0x7f0000001b00)=[r7, r8, r9], &(0x7f0000001b40)=[{0x3, 0x1, 0x10, 0x6}, {0x0, 0x4, 0xd, 0x7dc411faca73b6a9}, {0x5, 0x4, 0x5, 0xc}, {0x2, 0x4, 0xf, 0x9}, {0x4, 0x4, 0xf, 0x3}, {0x4, 0x4, 0x7, 0x6}], 0x10, 0x4}, 0x94) 1.701087975s ago: executing program 3 (id=3130): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x8800, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000580)="$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") syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x209, &(0x7f0000000200)="$eJzs3c9uEmEQAPChpfwxHnozMTFZ40FPjfoENaYmRhKTGg56a2JP5QQX4NI+hq/ge/kApicu5jO4bEGgiERA9Pe7dLrzze4OG5a9MKTIfbn3KWq1Uuwdx3EMSnEYe1G4imnlmS0AwO4YpBRfU+73qz0HAMAuWuLz/9uGTwkAWLN37z+8edFonJxmWS3i+qrb7Dbzv3n+1evGydPsh8Nx1XW329y/yT/Lpp8dhvmDuDPKP8/rs5t0JSKalXjyKM8Pcy/fNrKf66vxcc29AwAAAAAAAAAAAAAAAAAAAADAtjyIrDB3vs/R0XS+Psrn/03MB5qa31OO+8V44PF4oHS5iaYAAAAAAAAAAAAAAAAAAABgx3R6/YuzVuu8PQ6qETG5pTxnze1BabTjpRZvP9iL1crrozZXOGhp9BKtt8H6/Iu7TBDlv+XqrBpkf2qH1eIyz6bqUVpQntIwmP8uKMZi3FpeiYjFJ/b4dNW+Biml1ueH7U4v0sLF43tEdWN3IwAAAAAAAAAAAAAAAAAA+L9NfOt7Rm1/G2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJvX6fWLX/nvX5y1WuftTm/p4DIi7sYvFxfHOoja9hoFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn/Y9AAD//ybtHK4=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r4, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex, 0x13, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x800, &(0x7f0000000ac0)=0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r5, &(0x7f0000001600)=""/4081, 0xff1, 0xd15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r4, &(0x7f0000000040), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c5442, 0xb2) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x44, 0x31, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x20000000) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="320019003781cb3368ec9506cad4e2b395001d240500560dc5f2a889c426c16e9545693250f367d69ee4e727db4d2139eaa74cdb34c3e342dc73185dd5efd14c8d3eede180996ed450874f413c1996655be46f8f63bcc79141c5d91864547e1e0162e349af31779628bd706c0a1532503dd3325eb18bb2455eb8c4f49020849b7af3f9dbb75332362bfb654aa91584a568ad07f4191b90ec271601695135ad4f36065d711232cb8d552079d1a570ce0397fb08e106ee7ad897944f8e2368d65ff75082b25c3db25e433b0041b64c9ed940871eb75f126ab2c377d8a6c448507ea736ed807ca09634be090b8568565a988d0603122f2ce3e990397f3504134b17fbd4af3114d7d592bb78c2a7d066c3132350eba8da", @ANYRES16=r3, @ANYBLOB="000829bd7000fcdbdf25020000000800080000000000050003005c000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x28842) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.612365448s ago: executing program 9 (id=3131): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.490355692s ago: executing program 3 (id=3132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="21b6b1e144ea34572c681ba35b3d0007a50d9a38d0ffc400"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r5, &(0x7f0000000200)="15aa901b5d", 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0xfffffffd}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0x49, 0x0, 0x3c876ec0}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @loopback, 0x227}, 0x1c, 0x0}, 0x922bac8556bdad8e) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 1.258597709s ago: executing program 9 (id=3133): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2299e, &(0x7f0000000140)={[{@nodelalloc}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r1, 0x0, 0x0, 0x1) fcntl$setpipe(r0, 0x407, 0x176) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0xa, 0x5, 0x0) pipe(&(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f0ffe00060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.085081455s ago: executing program 3 (id=3134): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="d8d86e3762", @ANYRES32, @ANYBLOB], 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x41) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="8d", 0x1}], 0x1}, 0x0) (async) close(r3) (async) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x53}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x24000000}, 0x80) 996.474088ms ago: executing program 3 (id=3135): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000840)='net\x00') socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRES64=r2], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x0) syz_clone(0x2b00b100, 0x0, 0x0, 0x0, 0x0, 0x0) 899.981061ms ago: executing program 7 (id=3136): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @loopback}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', r0, 0x4, 0x2, 0x3, 0x1, 0x0, @loopback, @rand_addr=' \x01\x00', 0x7, 0x7800, 0x8, 0x4}}) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f0000000140)={0xffffffffffffffff, 0x9}) fcntl$getownex(r2, 0x10, &(0x7f0000000240)={0x0, 0x0}) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4f, 0x1, 0x80, 0x10, 0x0, 0x10000, 0x800, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x44a, 0x4, @perf_bp={&(0x7f0000000180)}, 0x400, 0x100000000, 0x5, 0x4, 0x44, 0x4, 0x5, 0x0, 0x76, 0x0, 0x401}, r3, 0xd, 0xffffffffffffffff, 0x2) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x29}, @empty, 0x0, "cca616309325017fe80df90419ab659f3e4419f4912f7fdda00c36e0bbc6442f", 0x7, 0x200, 0xffffffff, 0x8e}, 0x3c) r5 = fsopen(&(0x7f00000002c0)='overlay\x00', 0x0) r6 = fsmount(r5, 0x1, 0x88) fallocate(r4, 0x2, 0x1a77, 0x2) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000380)=0xc02, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000400)={@dev={0xac, 0x14, 0x14, 0x41}, @multicast2, 0xffffffffffffffff, "9640c68a256d8cd735ceca59aa52685957a1ee68f078c519d9c3967fbe85eb1a", 0x10000, 0x701d, 0x3f8fd043, 0x7b}, 0x3c) ioctl$F2FS_IOC_COMPRESS_FILE(r6, 0xf518, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @broadcast}, r1}, 0x14) setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000480)={@multicast2, @empty, 0xffffffffffffffff, "a57b0748c2cae9b054a685f42a58e6435d56bdd9c83e9bf412906360622e875b", 0x2, 0x8, 0x3, 0x4bd9b0ae}, 0x3c) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f00000004c0)) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x8000, 0x0) r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, r9, {r6}}, './file0\x00'}) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f00000005c0)={0x0, @can={0x1d, r0}, @can={0x1d, r0}, @ethernet={0x1, @random="3a9415f48fda"}, 0x5, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)='pimreg\x00', 0x800, 0x100000001}) io_uring_enter(r5, 0x6314, 0xd23f, 0x0, &(0x7f0000000640)={[0x9]}, 0x8) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000680)=0x3) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x408, 0x1f8, 0x0, 0x0, 0xc0, 0x160, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, &(0x7f00000006c0), {[{{@ip={@private=0xa010100, @empty, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'ip6tnl0\x00', {0xff}, {}, 0x84, 0x3, 0x88}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xdd2, 0xffff, @multicast1, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'netdevsim0\x00', {0xff}, {}, 0x89, 0x2, 0x71}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x80, 0x1}}}, {{@ip={@local, @remote, 0xff, 0xffffffff, 'veth0_to_bond\x00', 'team0\x00', {0xff}, {0xff}, 0x21, 0x3, 0x10}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x8, 0x1}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) rename(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file1\x00') setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000c40)=0x95, 0x4) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) fgetxattr(r11, &(0x7f0000000cc0)=@known='system.advise\x00', &(0x7f0000000d00)=""/50, 0x32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d40)) 762.250506ms ago: executing program 7 (id=3137): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3ec, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x130e, 0x78}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x2fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x6, 0xfe, 0xfff, 0x5, 0x7, 0xb, 0x5]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0xa}, {0x7, 0x3}, {0x4, 0x8}, {}, {0x4, 0x9}, {0x7, 0x8}, {0x7, 0x9}, {0x7, 0x4}, {0x3, 0x2}, {0x4, 0x6}, {0x2, 0x7}, {0x3, 0xa}, {0x6, 0x6}, {0x4, 0xa}, {0x1, 0x3}, {0x2, 0x3}, {0x6, 0x3}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xd2824076cc7427a2, 0xb, 0xfa43d985a867a43e, 0x2, 0x24, 0xb, 0x9, 0x10, 0x4, 0x9, 0x12, 0x5, 0x2, 0x1b, 0x30, 0x64, 0x48, 0x24, 0xf305380090d5a7be, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe, 0x0, 0x6, 0x2, 0xa8d, 0x8, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x2, 0xc05, 0xba, 0x81, 0xfffb, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x0, 0x7, 0x6, 0xb678, 0xfffb, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe0b8, 0xbb7e, 0xd, 0x1, 0xf7, 0x8000, 0xffff, 0x29b]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0xa}, {0x3, 0x4}, {0x7, 0x16}, {0x3, 0x4}, {0x0, 0x1}, {0x6, 0x9}, {0x1}, {0x6, 0x8}, {0x1, 0x7}, {0x1, 0x4}, {0x2, 0x6}, {0x3, 0x9}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x4, 0x2, 0x60, 0x24, 0x1, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x3959, 0x3127, 0x1, 0x6, 0x54, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x7, 0x3ff, 0x0, 0x80, 0x401, 0x81]}}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0x3, 0x4, 0x18, 0x60, 0x4, 0x1b, 0xc, 0x72]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x8, 0x3, 0x6, 0x5, 0x400, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x0, 0xbd, 0x4, 0x6, 0xff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff, 0x5, 0x7, 0x6, 0x1, 0x5, 0x200]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x7}, {0x2, 0x6}, {0x6}, {0x4, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x6, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x5, 0x4}, {0x4, 0x5}, {0x7, 0x1}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x2}, {0x5, 0xa}, {0x7, 0x5}, {0x5, 0x1}, {0x1, 0x4}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x4, 0x1}, {0x7}, {0x6, 0x6}, {0x5, 0x4}, {0x3, 0x9}, {0x5, 0x3}, {0x1, 0x3}, {0x5, 0x3}, {0x4}, {}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0xf801, 0xc, 0x5b36, 0x8, 0x3, 0x7, 0xff7f]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x30, 0x4, 0x30, 0x4, 0x24, 0x5, 0x3, 0x30, 0x2, 0x60, 0x2, 0x60, 0x16, 0x60, 0xb, 0x60, 0x30, 0x5, 0x4, 0x37, 0x5, 0xb, 0x60, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x1}, {0x5, 0x1}, {0x1, 0x4}, {0x0, 0x2}, {0x6, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x2, 0xa}, {0x3}, {0x2, 0x9}, {0x1}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0xa}, {0x0, 0x5}, {0x7}, {0x6, 0x2}, {0x1, 0x3}, {0x6}, {0x4, 0xa}, {0x1, 0x4}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x2}, {0x7, 0x2}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x7, 0x3}, {0x3, 0x4}, {0x3}, {0x0, 0x2}, {0x6}, {0x4, 0x4}, {0x6}, {0x4, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x4, 0x5}, {0x7, 0x7}, {0x5, 0x6}, {0x7}, {0x7}, {0x2, 0x6}, {0x7, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x7, 0x7}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x60, 0x6, 0x1b, 0x30, 0x2, 0x18, 0x16, 0x6c, 0x36, 0x9, 0x24, 0x6c, 0x12, 0x12, 0x30, 0x12, 0x9, 0x7e, 0x3, 0x18, 0x6c, 0x48, 0x6c, 0x2, 0x24, 0x5, 0x24, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0xfe2, 0x9, 0x3ff, 0x1, 0xac26, 0x80, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc93a, 0x4, 0xdd, 0xd, 0x7, 0x1, 0xffff, 0x9]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x2, 0xa}, {0x4}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x7, 0x9}, {0x2, 0x8}, {0x7, 0x1}, {0x4, 0xa}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x6}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x4}, {0x5, 0x8}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x7}, {0x3, 0x7}, {0x5, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x2, 0x4}, {0x1, 0x3}, {0x2, 0x8}, {0x1, 0x8}, {0x4, 0x1}, {0x6, 0x4}, {0x4, 0x3}, {0x1}, {0x6}, {0x1, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x3}, {0x4, 0x9}, {0x1}, {0x4, 0x5}, {0x4, 0xa}, {0x1, 0x6}, {0x6, 0xa}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x2}, {0x0, 0x18}, {0x7, 0x8}]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffc7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, [{0x16}, {0x24}, {0x4, 0x1}, {0x24, 0x1}, {0x9, 0x1}, {0xb, 0x1}, {0x9, 0x1}, {0x5}, {0x1}, {0x12, 0x1}, {0x6, 0x1}, {0x60, 0x1}, {0x2}, {0x9, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x7}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x92a6}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf, 0x4, 0x9, 0xae2, 0x9, 0x3, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x40, 0xf496, 0x1, 0x1, 0xd, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x4, 0x9, 0x2, 0xa, 0x100, 0x1]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x9}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x9}, {0x0, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x10}, 0x40091) close_range(r0, r0, 0x2) r1 = socket$inet(0x2, 0x800, 0x8) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000004c0), 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000500)=0x4, 0x4) kexec_load(0x3ff, 0x6, &(0x7f00000009c0)=[{&(0x7f0000000540)="bd8c33df786a1d4aa24d351e7b8e7b4b510b5ed5c38bcd97875d2a5897f6a86592d019834d019d572e77189497a22544c32e4e772e438c68c921a04964f2d8a2b79a5608b2645572f6b2c5329f10f90adcf6060bdab912511ef824e35e0016621fa95dd7f4aaa98869e9b7ffe875f7739fb9b43837343f4b4c00f8999b34ccbe3454039dcea24b473caa54a4d951fed3f55db9c8d0307d1fb10bc551d46457b19c8567d0e288c2ea7787d1a5b62ac3c65d1ae779c337760a513b10d49b", 0xbd, 0x8b, 0x8}, {&(0x7f0000000600)="c49332f3ecc9843b2f2ba9970b4c6a587c2ded62e6b4d428d7f73f513916bbd2afb7bd865300159c35cac3663ade47b20f8458", 0x33, 0xa3f7, 0x3}, {&(0x7f0000000640)="beb3317d796b867afacc60faeb3b6b11faec9711c4bab85a8a3cd4ca37e426cdcc2279b9c8f6ee6064acc36275e177b94d9265c73e8523cf9d71225ce4d6b2ed844af8a0948d3aff2669d75bc73cbf9239a677b51a6d08f68a89826d6f87df11f149592a91a6cd36e076dbf7af03553243347b1857da307318387969c70dec9c9fcfdbf2d4498c25ce4e6d7f545492054097d82bf8306954e4409db6b11f1526a1d3728ae942ebcdf83b4a6ed7adfd16cc349b710b4d09f6f1b3a347f262d0b54cfbaffed505e885d4d8f18ad338b394f5127e3a0678abf5d2a95fea8ff2fd3813deafc1e4bed375cd7c553068", 0xed, 0x8, 0x80000001}, {&(0x7f0000000740)="f238ff47a7c20973362dd546e4c5b24b5e1275d6a2f78d2710991d22379a6d2f683f1e183583c1916d9494b849d67832f13a30bcd5910b01ffa171f89c336ea962", 0x41, 0x3, 0x2}, {&(0x7f00000007c0)="5d9bf600f49af207aa42d72c800df8584ac8b70c7a43cb3bde8ab1d58bdef9d68e11e6adc5067e8776841973aedea76a8e0fedf48c46a67a760763c98f851ebddce2591ab22c00c43f566931fb86ade197c40132b1f3658b101d8dde37d3ea7ba60338c2990f202c89c17ccf62deed95566225026dc022f5896bee4fa9428148413eb39ce08e979d74804fb39ca3a833cd1183452ead89b168ea6f3702d7a8291583b5243b645654e9af631691c746955f450427d51e437f4f89bc510d42842c80a17d030c9b1a7a7d0057", 0xcb, 0x800, 0x7}, {&(0x7f00000008c0)="ea79f094d44c4de131797bd3989a4623e5a74542bd6baf8927b148ac0ddf7392175e01153da7c2609aa887a99344d24f89cb489e76db354366880296526887b0badcbf50980687f324aac3a248e654c527759c76904438831363db1d91ecd34aaaf03de2699c3f0c17527163d50300f30ddccfa24eb355bb2efe3f3ef06419850f37f6fdbf3586d34b6e20c96f71869f3287d2a84c3fca74052870a84979211175e2eb0d752f14ce0b3159d505c2f2662a0484452adab69981bba77aaacc2a366c4f7323fc28c976823a90d79ac1b3ca49411568", 0xd4, 0x2, 0x3}], 0xa0000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000ac0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7f}}, 0x10) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000b00)=0x1, 0x4) r3 = syz_open_dev$sg(&(0x7f0000000b40), 0x8, 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000b80)=0x4112) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000bc0)=@assoc_value, &(0x7f0000000c00)=0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000c40)={0x8, 'bond0\x00', {'pim6reg1\x00'}, 0x81}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d80)={0x200, 0x0}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)={0x1b, 0x0, 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x2, 0x4, 0x2}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e40)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x6, '\x00', 0x0, r2, 0x4, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x5, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000cc0)='GPL\x00', 0x3, 0x4, &(0x7f0000000d00)=""/4, 0x41000, 0x48, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x2, 0xd, 0x1, 0x2}, 0x10, r4, r2, 0x2, &(0x7f0000000ec0)=[r5, r6], &(0x7f0000000f00)=[{0x0, 0x2, 0x3, 0x6}, {0x4, 0x5, 0xd, 0x2}]}, 0x94) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001100)={'syztnl1\x00', &(0x7f0000001080)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0xe, 0x4, 0xdbca5c9f1136b87f, @local, @mcast2, 0x10, 0x8, 0x1, 0x6}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x40, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040814}, 0x4000040) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000001200)={0x1, 0x4, 0x7, 0xa, @vifc_lcl_ifindex=r8, @private=0xa010102}, 0x10) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000001240)) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000013c0)=@md0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000001400)=0x0) tkill(r10, 0x6) io_uring_setup(0x5adc, &(0x7f0000001440)={0x0, 0x6eef, 0x20, 0x2, 0xd1, 0x0, r2}) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f00000014c0)={'ipvs\x00'}, &(0x7f0000001500)=0x1e) 620.33929ms ago: executing program 7 (id=3138): syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000300064000000019078ac1e0001ac14142c05aa16e97d771c85d9c1c2d717470da7753490d1fb8ae90c21267ee2c4df781200183f250000000000fffd0d"], 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf860000000000000708"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) (async) request_key(0x0, 0x0, 0x0, 0x0) (async) waitid$P_PIDFD(0x3, r2, 0x0, 0x40000004, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000180)=[{0xb59, 0x7f, 0x0, 0x3}, {0x1000, 0x9, 0xfc, 0x7}, {0x6, 0x4, 0x0, 0x2}]}) (async) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) (async) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="83", 0x1}], 0x1) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000c00)=0x11) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r6, 0x3, r7, 0x3, 0x80000}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000340)={r6, 0x3, r2}) r8 = pidfd_getfd(r2, r2, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000006c00010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9d26a39e0000f1ff130035007465616d5f736c6176655f30000000002c003480"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) io_uring_enter(r8, 0x1b81, 0xd765, 0x53, &(0x7f0000000380)={[0x4000000000]}, 0x8) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@getqdisc={0x28, 0x26, 0x8, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x3}, {0xd, 0xfff1}, {0x6, 0x5}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 619.9225ms ago: executing program 9 (id=3139): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$9p_unix(&(0x7f0000003600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$FIONCLEX(r0, 0x5450) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000063112c00000000008510000002000000850000000500000095001400000000009500a505000000001bc845d7648c9ff90b584d9bb83d37c04e612438851f4a512d9ea09e2c45f868c29f53c322de76ce6cb1e3bedad5b79b3c02c99b58423064"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 585.108471ms ago: executing program 7 (id=3140): r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef43a000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001bc0)=@newtfilter={0x904, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8d4, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7fff, 0x3, 0x3}, {0x1, 0x7, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xa, 0x1, 0x7}, {0x7, 0x10001, 0xfffc, 0x2, 0x3, 0x3, 0x2}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x8000, 0x4, 0x8}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0x7}, {0x31, 0x1, 0x84, 0x4, 0x4, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9, 0x1, 0xffff}, {0xb5, 0x92, 0xd, 0x4, 0xf, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xc035, 0x3, 0x8}, {0x0, 0x1, 0x7a9a, 0xffffffff}}}]}]}, @TCA_FLOW_POLICE={0x82c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x8, 0xfa0, 0x1, 0x5, 0x5, 0xffff0001, 0x9, 0x1, 0x2, 0x2, 0x101, 0x9, 0xffffff04, 0x1, 0xa, 0x401, 0x5, 0x0, 0x100, 0x400, 0x1, 0xf1, 0x100, 0x7ff, 0x7fff, 0xfffffeff, 0x17fc, 0x100, 0xb, 0x7, 0x1, 0xfffffff8, 0x5, 0x2, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x7fff, 0x7, 0x1, 0x8, 0x7d4, 0x2, 0x3, 0x6, 0x1, 0xb1, 0xcc00, 0x80f, 0xffffffff, 0x9cfc, 0x3, 0x10, 0xfffff801, 0x4, 0x6, 0x5ec, 0xfffffffa, 0x80, 0xf710, 0x7, 0x5, 0x2, 0x9, 0x0, 0x89, 0xfffffff9, 0x101, 0xfd3079e4, 0x4, 0xcb, 0x99e5, 0x54, 0x7, 0x8001, 0x4, 0xfa, 0x6, 0x8000, 0x6b, 0x18000000, 0x101, 0x3, 0x0, 0xc6, 0x81, 0x6, 0x7ff, 0x6, 0xfffffffb, 0x2, 0x0, 0x3, 0xbf65, 0xa8, 0x7e, 0xfffffffe, 0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x1, 0x5, 0x6de, 0xfffffffd, 0x40, 0x4, 0x2, 0x9, 0x0, 0x3ff, 0xe, 0x6, 0x90b, 0x0, 0x1, 0x568fc9d1, 0x1, 0x6a, 0x4, 0x5, 0x2, 0x5, 0x6, 0xffff, 0x7, 0x9, 0x3, 0x7, 0x5, 0x9, 0x1, 0x3, 0xfffffffb, 0x0, 0x2, 0x19, 0xeea, 0x9, 0x3, 0x5, 0xffffffff, 0x3, 0x5, 0xd8, 0x7, 0x1, 0x0, 0x1, 0x7, 0x5, 0x2, 0x0, 0x7, 0x2, 0x8, 0x0, 0x5, 0xd, 0x2, 0xfffffffe, 0x5, 0x100, 0x174, 0x4, 0x7fff, 0x0, 0x7, 0x7, 0x639, 0x6, 0x4, 0x0, 0x4, 0x200, 0x101, 0x6, 0x8, 0x9, 0x10001, 0x7, 0x4, 0x4, 0x4, 0x6c0cf91c, 0x80000000, 0x4, 0x5, 0x10000, 0x9, 0x6, 0x1000, 0x9, 0x3, 0x1, 0x1, 0x44, 0x3ff, 0x0, 0x0, 0xffff1063, 0x112, 0x800, 0x208, 0x3, 0x7, 0x3d, 0x3, 0x4000, 0x1, 0xe43a, 0x9, 0x2, 0x3, 0x7fffffff, 0x7, 0x1ff, 0x1, 0x81, 0xffff, 0x7ff, 0x8001, 0x10001, 0x8, 0xab, 0xffffff16, 0x2, 0x9, 0xfffffffe, 0x80000000, 0x0, 0x9e1f, 0xfffffffa, 0x7, 0x0, 0x7, 0x4, 0x4, 0x2, 0x3, 0x7, 0x7, 0x4, 0x0, 0x6, 0x7f, 0x2, 0xdd, 0x74]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x307, 0x8001, 0x3afd, 0x3, 0x4, 0x0, 0x3, 0x8, 0x6, 0x4, 0x8, 0x9, 0x2, 0x9, 0x400, 0x5, 0x8, 0x9, 0x521c, 0xe02, 0x80000001, 0x3, 0x21, 0x9, 0x4, 0x5, 0x30fefb1a, 0x5, 0x8, 0x2, 0x2, 0x0, 0x8, 0x600000, 0x2, 0x9, 0x4, 0x6, 0x6, 0x1, 0x0, 0xc, 0x1562, 0x3, 0x6cb, 0x8, 0x8, 0x3, 0x6, 0x1, 0x1, 0x4, 0x463, 0xffffff01, 0x511, 0x5, 0x1, 0x1ff, 0x8, 0xa, 0x1, 0x2, 0xa5c, 0x8, 0x3ff, 0xffffffff, 0xffffffff, 0xffffff01, 0xffffffff, 0x7, 0x1, 0x80000000, 0x3, 0xfffffeff, 0x13, 0x80000001, 0x7ff, 0x1, 0x8, 0x7c, 0x2, 0x2, 0x71273600, 0x4, 0x9, 0x3ff, 0x9, 0x8, 0xd, 0xff, 0x800, 0x8, 0x78a, 0xfba3, 0xe9, 0x9, 0x7, 0xffffff7f, 0x3, 0x1, 0x7ff, 0x68167afb, 0x3, 0xcde9, 0x9, 0xffffff01, 0x4, 0xffff8838, 0xfffffffa, 0x3, 0xf, 0x0, 0xffffffff, 0x3, 0x9, 0x8, 0x9f1, 0x0, 0x6, 0xf, 0x200, 0xff, 0x400, 0x8, 0x10001, 0x401, 0x2, 0x3, 0x8, 0x3, 0x8001, 0x4, 0x0, 0x4, 0x7, 0x3, 0xda, 0xfffffffe, 0x0, 0x3, 0x9, 0x83f, 0xffffffff, 0xffffffff, 0x6, 0x400, 0x3, 0x3, 0x6, 0x7, 0x2, 0x100, 0x3, 0x6, 0x9, 0x1, 0xc, 0x1, 0xffff, 0x34, 0x26d3, 0x10, 0xc4, 0x7f, 0x9, 0xff, 0x8, 0xf88, 0x4, 0x10001, 0x99ef, 0x9, 0x8, 0xc2, 0x4, 0x0, 0x8204, 0x2, 0xb, 0xff19, 0x3, 0x10, 0x1, 0x9, 0x7, 0x4, 0x6, 0x1, 0xf7e, 0x4, 0xa6, 0x4, 0x7, 0x6, 0x7, 0xf, 0x4, 0x21c7, 0x400, 0x6, 0x7fff, 0x2b66, 0x1, 0x5, 0xf501, 0x9, 0x7, 0x5, 0x2, 0x6, 0x0, 0xfffffffd, 0x3, 0xfff, 0xffffffff, 0x36, 0x8, 0x5, 0x71, 0x197, 0x5, 0x9, 0x3, 0x5, 0x6, 0x7, 0x9, 0xa121, 0x8, 0xf, 0x5, 0x6, 0xfffffffc, 0x9, 0x5, 0x7ff, 0x0, 0x2b8d, 0x9419, 0x1ff, 0x40, 0x4e, 0x3ff, 0x101, 0x6, 0xa8f, 0x8, 0x9, 0x8000, 0x53, 0xc, 0x2800000, 0x3, 0xc]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffff2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5e}]}]}}]}, 0x904}, 0x1, 0x4000000, 0x0, 0x50}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r5) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="ab7a29bd7000050f0000100074646500000f00000008000b00810e0000060011005000000008001300a2fb008009001400"/61], 0x54}}, 0x80c4) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x48001) (async) r7 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c43, 0x0, 0x1, 0x2}) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x4) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) (async) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r9, 0x400, 0x0) r10 = openat$cgroup_freezer_state(r9, 0x0, 0x2, 0x0) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r9, 0x4058587a, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000640)={0x0, 0x0}) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x81, 0x2, 0x10, 0x9, 0x0, 0x93f, 0x40000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x76, 0x4, @perf_config_ext={0x87, 0x8000000000000001}, 0x202, 0x80000000, 0x80000001, 0x1, 0x8000000000000001, 0x9, 0x3, 0x0, 0x9, 0x0, 0x2}, r11, 0x3, r9, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async) fcntl$lock(r9, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x713a, 0x65a}) close_range(r7, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000048040)=""/102371, 0x18fe3) signalfd4(r0, &(0x7f00000007c0)={[0x8]}, 0x8, 0x0) (async) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 543.907872ms ago: executing program 1 (id=3141): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x20000036, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$can_bcm(0x1d, 0x2, 0x2) close(r5) (async) close(r5) getsockopt(r2, 0x200000000114, 0x271d, 0x0, &(0x7f0000000400)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="f64d10ba369286257f17ab895d92", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="f64d10ba369286257f17ab895d92", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast2, 0x5}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="5a10c86d962043c731cbbb75f8e69278f7452f424cb029056d584f810502ae728badfafc9a6e822d54519f83b532f453db27562b2ed5e3da", 0x38}], 0x1}}], 0x2, 0x40840) (async) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast2, 0x5}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="5a10c86d962043c731cbbb75f8e69278f7452f424cb029056d584f810502ae728badfafc9a6e822d54519f83b532f453db27562b2ed5e3da", 0x38}], 0x1}}], 0x2, 0x40840) 496.358354ms ago: executing program 9 (id=3142): syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a5bd76, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) r2 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=0x1, r4, 0x2f, 0x20}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYRES16=r0], 0xe8}}, 0x0) close(r0) 350.576989ms ago: executing program 7 (id=3143): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x2, 0x80805, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1a, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', 0x0}) ptrace$setregset(0x4205, r2, 0x3, &(0x7f0000000000)={&(0x7f0000000340)="ac024ad5351d5cb7df7b082e85e19f987b170c0a5a06a71aa3e7d32008cb1e12c2798695e1789fbd4f0893e83a89efd9031024017f0417a97b5e2d991ff96aeb75bb5638fcd1c400b3c10d7dceb0ca3c6e21ae5d2686ed7b81ac665531c00171903ece38bc8381ae355370139fb52820f802f08b1c29bb588347a7d048faca489230cee8a02f23dc3609c8c6343dfc5ae8ac8ed5c4bc0b", 0x97}) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r8, &(0x7f0000000580)=[{&(0x7f0000000080)=""/162, 0xa2}, {&(0x7f0000001600)=""/46, 0x2e}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000000340)=""/26, 0x1a}], 0x5, 0x3, 0x8) unshare(0x6a040000) 229.623452ms ago: executing program 1 (id=3144): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r0, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x3da}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000700)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}, 0xd4ecd58d42aceaea) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.freeze\x00', 0x26e1, 0x0) close(r1) io_uring_enter(r1, 0x512, 0xe415, 0x3a, &(0x7f0000000180)={[0x696]}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='(@--:\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getitimer(0x2, &(0x7f0000000000)) (async) getitimer(0x2, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n'], 0xa) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r3, r1}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r3, r1}) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) (async) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 189.95µs ago: executing program 1 (id=3145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="21b6b1e144ea34572c681ba35b3d0007a50d9a38d0ffc400"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0x7005, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r5, &(0x7f0000000200)="15aa901b5d", 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x0, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0xfffffffd}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x3, 0x0, 0x49, 0x0, 0x3c876ec0}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0xa, 0x2f, 0x4, @loopback, 0x227}, 0x1c, 0x0}, 0x922bac8556bdad8e) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 0s ago: executing program 3 (id=3146): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f0000000100)=r3}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x4000, &(0x7f0000000180)={[{@data_journal}], [{@seclabel}]}, 0x1, 0x51b, &(0x7f0000000c40)="$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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) close(0xffffffffffffffff) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047452, &(0x7f0000001200)) kernel console output (not intermixed with test programs): 387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.014021][T14880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.038440][T14863] rdma_rxe: rxe_newlink: failed to add lo [ 494.064062][T14880] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.080908][ T5420] Process accounting resumed [ 494.114030][T14888] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2614'. [ 494.198980][T14751] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 494.227633][T14871] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 494.333597][T14751] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 494.411087][T14751] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 494.460696][T14751] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 494.638794][T14751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.660081][T14751] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.670939][ T7738] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.678047][ T7738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.738030][ T8761] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.745232][ T8761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.806960][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.276568][T14880] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.711333][T14751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.881214][T14948] lo speed is unknown, defaulting to 1000 [ 496.026794][T14751] veth0_vlan: entered promiscuous mode [ 496.049546][T14948] lo speed is unknown, defaulting to 1000 [ 496.067627][T14751] veth1_vlan: entered promiscuous mode [ 496.140492][T14751] veth0_macvtap: entered promiscuous mode [ 496.165468][T14751] veth1_macvtap: entered promiscuous mode [ 496.172568][T14977] loop8: detected capacity change from 0 to 128 [ 496.228847][T14751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 496.241971][T14977] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 496.278366][T14751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.329085][ T7724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.348111][ T7724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.373991][T14977] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 496.416654][ T7724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.432869][ T7724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.449892][T14948] xfrm0 speed is unknown, defaulting to 1000 [ 496.509067][T14977] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.773528][T12435] Bluetooth: hci0: Frame reassembly failed (-84) [ 496.862437][T15011] loop3: detected capacity change from 0 to 512 [ 496.879005][T15011] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 496.900265][T15011] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2625: bad orphan inode 131083 [ 496.922840][T15011] loop3: lost filesystem error report for type 5 error -117 [ 496.924389][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 496.938283][ C1] EXT4-fs (loop3): initial error at time 2000000328: ext4_orphan_get:1423 [ 496.946836][ C1] EXT4-fs (loop3): last error at time 2000000328: ext4_orphan_get:1423 [ 497.062323][T15011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.273813][ T28] kauditd_printk_skb: 1366 callbacks suppressed [ 498.273839][ T28] audit: type=1400 audit(2000000329.484:59043): avc: denied { open } for pid=15010 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 498.353919][ T28] audit: type=1400 audit(2000000329.484:59044): avc: denied { perfmon } for pid=15010 comm="syz.3.2625" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.375116][ T28] audit: type=1400 audit(2000000329.484:59045): avc: denied { kernel } for pid=15010 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 498.447618][T15014] lo speed is unknown, defaulting to 1000 [ 498.494795][ T28] audit: type=1400 audit(2000000329.664:59046): avc: denied { write } for pid=15010 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 498.550309][T15023] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.589797][ T28] audit: type=1400 audit(2000000329.684:59047): avc: denied { open } for pid=15010 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 498.609945][ T28] audit: type=1400 audit(2000000329.684:59048): avc: denied { perfmon } for pid=15010 comm="syz.3.2625" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.631832][ T28] audit: type=1400 audit(2000000329.684:59049): avc: denied { kernel } for pid=15010 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 498.651707][T15023] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 498.655435][ T28] audit: type=1400 audit(2000000329.694:59050): avc: denied { perfmon } for pid=15010 comm="syz.3.2625" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 498.662496][T15023] netdevsim netdevsim9 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 498.701074][ T28] audit: type=1400 audit(2000000329.714:59051): avc: denied { tracepoint } for pid=15010 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 498.721688][T15014] lo speed is unknown, defaulting to 1000 [ 498.758722][T15014] xfrm0 speed is unknown, defaulting to 1000 [ 498.770140][ T28] audit: type=1400 audit(2000000329.774:59052): avc: denied { create } for pid=15010 comm="syz.3.2625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 498.796943][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.823492][ T3795] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 498.829643][T15007] Bluetooth: hci0: command 0x1003 tx timeout [ 498.868278][T15023] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.981159][T15023] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 499.033079][T15023] netdevsim netdevsim9 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 499.083410][T15035] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2627'. [ 499.091331][T15025] siw: device registration error -23 [ 499.100004][T15025] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2628'. [ 499.158554][T15041] loop8: detected capacity change from 0 to 512 [ 499.181204][T15025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.204324][T15041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.217270][T15041] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.266237][T15028] loop1: detected capacity change from 0 to 8192 [ 499.275127][T15025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.284911][T15025] bond0 (unregistering): Released all slaves [ 499.296528][T15023] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.323279][T15023] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 499.328747][T15041] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.340610][T15023] netdevsim netdevsim9 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 499.437829][T15023] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.458071][T15023] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 499.469245][T15023] netdevsim netdevsim9 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 499.581570][T15048] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2634'. [ 499.669928][ T7724] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.680072][ T7724] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 499.690761][ T7724] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 499.699212][ T7724] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.707875][ T7724] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 499.716255][ T7724] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 499.724540][ T7724] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.732740][ T7724] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 499.979488][ T7724] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 502.012104][T15058] loop3: detected capacity change from 0 to 512 [ 502.315085][T15060] loop8: detected capacity change from 0 to 512 [ 502.359872][T15060] EXT4-fs: Ignoring removed oldalloc option [ 502.378575][T15060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 502.390734][T15060] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.2638: iget: bad i_size value: 38620345925642 [ 502.406378][T15060] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 502.406530][T15060] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2638: couldn't read orphan inode 15 (err -117) [ 502.415689][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 502.415710][ C0] EXT4-fs (loop8): initial error at time 2000000333: ext4_orphan_get:1397: inode 15 [ 502.415738][ C0] EXT4-fs (loop8): last error at time 2000000333: ext4_orphan_get:1397: inode 15 [ 502.453705][T15060] loop8: lost filesystem error report for type 5 error -117 [ 502.454299][T15060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.506832][ T50] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.517660][ T50] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 502.527057][ T50] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 502.692697][ T9670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.998372][T15073] syzkaller1: entered promiscuous mode [ 503.012468][T15073] syzkaller1: entered allmulticast mode [ 503.477077][ T28] kauditd_printk_skb: 230 callbacks suppressed [ 503.477097][ T28] audit: type=1400 audit(2000000334.517:59283): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.662528][T15084] lo speed is unknown, defaulting to 1000 [ 503.732352][ T28] audit: type=1400 audit(2000000334.517:59284): avc: denied { read write open } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.759093][ T28] audit: type=1400 audit(2000000334.517:59285): avc: denied { ioctl } for pid=3313 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 503.786680][ T28] audit: type=1400 audit(2000000334.547:59286): avc: denied { open } for pid=15071 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 503.833677][T15084] lo speed is unknown, defaulting to 1000 [ 503.854223][ T28] audit: type=1400 audit(2000000334.547:59287): avc: denied { perfmon } for pid=15071 comm="syz.3.2643" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 503.870165][T15084] xfrm0 speed is unknown, defaulting to 1000 [ 504.003686][ T28] audit: type=1400 audit(2000000334.547:59288): avc: denied { kernel } for pid=15071 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 504.034308][ T28] audit: type=1400 audit(2000000334.547:59289): avc: denied { write } for pid=15071 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 504.062883][ T28] audit: type=1400 audit(2000000334.867:59290): avc: denied { create } for pid=15083 comm="syz.1.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 504.139485][ T28] audit: type=1400 audit(2000000334.867:59291): avc: denied { create } for pid=15083 comm="syz.1.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 504.146166][T15092] lo speed is unknown, defaulting to 1000 [ 504.163488][ T28] audit: type=1400 audit(2000000334.867:59292): avc: denied { getopt } for pid=15083 comm="syz.1.2640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 504.194983][T15092] lo speed is unknown, defaulting to 1000 [ 504.231409][T15092] xfrm0 speed is unknown, defaulting to 1000 [ 504.271567][T15101] net_ratelimit: 11 callbacks suppressed [ 504.271585][T15101] netlink: set zone limit has 8 unknown bytes [ 504.293347][T15101] loop8: detected capacity change from 0 to 256 [ 504.307425][T15101] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 504.324461][T15101] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 504.485494][T15102] lo speed is unknown, defaulting to 1000 [ 505.166300][T15114] loop8: detected capacity change from 0 to 128 [ 505.227984][T15102] lo speed is unknown, defaulting to 1000 [ 505.413083][T15119] lo speed is unknown, defaulting to 1000 [ 505.437460][T15122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.493051][T15119] lo speed is unknown, defaulting to 1000 [ 505.556551][T15102] xfrm0 speed is unknown, defaulting to 1000 [ 505.676685][T15119] xfrm0 speed is unknown, defaulting to 1000 [ 505.785983][T15126] loop8: detected capacity change from 0 to 512 [ 506.387671][T15134] loop7: detected capacity change from 0 to 2048 [ 506.554016][ T3303] loop7: p1 p2 [ 506.597563][T15134] loop7: p1 p2 [ 506.869782][T15140] lo speed is unknown, defaulting to 1000 [ 506.882139][T15162] loop9: detected capacity change from 0 to 128 [ 506.942707][T15140] lo speed is unknown, defaulting to 1000 [ 507.033276][T15140] xfrm0 speed is unknown, defaulting to 1000 [ 507.196277][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'. [ 507.266156][T15167] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2661'. [ 508.389279][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 508.406218][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 508.482276][ T28] kauditd_printk_skb: 527 callbacks suppressed [ 508.482293][ T28] audit: type=1400 audit(2000000339.819:59820): avc: denied { search } for pid=15198 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.538721][ T28] audit: type=1400 audit(2000000339.849:59821): avc: denied { execmem } for pid=15195 comm="syz.8.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 508.578627][ T28] audit: type=1400 audit(2000000339.849:59822): avc: denied { search } for pid=15198 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.678574][ T28] audit: type=1400 audit(2000000339.849:59823): avc: denied { search } for pid=15198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.931873][T15200] syz.7.2667 (15200) used obsolete PPPIOCDETACH ioctl [ 509.182543][ T28] audit: type=1400 audit(2000000339.849:59824): avc: denied { search } for pid=15198 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.230975][ T28] audit: type=1400 audit(2000000339.859:59825): avc: denied { ioctl } for pid=15191 comm="syz.7.2667" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 509.264274][ T28] audit: type=1400 audit(2000000339.909:59826): avc: denied { open } for pid=15191 comm="syz.7.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 509.295304][ T28] audit: type=1400 audit(2000000339.909:59827): avc: denied { perfmon } for pid=15191 comm="syz.7.2667" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 509.387017][ T28] audit: type=1400 audit(2000000339.949:59828): avc: denied { ioctl } for pid=15191 comm="syz.7.2667" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 509.403107][T15207] lo speed is unknown, defaulting to 1000 [ 509.418264][ T28] audit: type=1400 audit(2000000339.989:59829): avc: denied { kernel } for pid=15191 comm="syz.7.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 509.586341][T15207] lo speed is unknown, defaulting to 1000 [ 509.654159][T15207] xfrm0 speed is unknown, defaulting to 1000 [ 510.053444][T15235] autofs4:pid:15235:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 510.115730][T15239] loop3: detected capacity change from 0 to 512 [ 510.167589][T15235] loop7: detected capacity change from 0 to 512 [ 510.224680][T15235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 510.385885][T15237] lo speed is unknown, defaulting to 1000 [ 510.423546][T15237] lo speed is unknown, defaulting to 1000 [ 510.462594][T15237] xfrm0 speed is unknown, defaulting to 1000 [ 510.480609][T15235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.520707][T15235] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.553755][T15235] EXT4-fs warning (device loop7): verify_group_input:156: Last group not full [ 511.062151][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.093655][T15260] loop9: detected capacity change from 0 to 1024 [ 511.113192][T15260] EXT4-fs: inline encryption not supported [ 511.200655][T15260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 511.223852][T15260] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.248808][T15260] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2677: bg 0: block 112: padding at end of block bitmap is not set [ 511.265272][T15260] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 1 with error 28 [ 511.277719][T15260] EXT4-fs (loop9): This should not happen!! Data will be lost [ 511.277719][T15260] [ 511.287396][T15260] EXT4-fs (loop9): Total free blocks count 0 [ 511.293492][T15260] EXT4-fs (loop9): Free/Dirty block details [ 511.302043][T15260] EXT4-fs (loop9): free_blocks=0 [ 511.307400][T15260] EXT4-fs (loop9): dirty_blocks=16 [ 511.313117][T15260] EXT4-fs (loop9): Block reservation details [ 511.313138][T15260] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 511.722838][ T8761] EXT4-fs error (device loop9): ext4_map_blocks:828: inode #15: comm kworker/u8:43: lblock 0 mapped to illegal pblock 0 (length 1) [ 511.757667][ T8761] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 511.789764][T11306] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 511.806120][T15288] loop1: detected capacity change from 0 to 512 [ 511.815619][T15286] loop3: detected capacity change from 0 to 1024 [ 511.835179][T15286] EXT4-fs: test_dummy_encryption option not supported [ 512.094252][T15288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.250490][T15288] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.653087][T15307] loop3: detected capacity change from 0 to 512 [ 512.720701][T15318] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2685'. [ 512.840352][T15320] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2685'. [ 512.851717][T15307] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 512.937625][T15314] lo speed is unknown, defaulting to 1000 [ 512.952405][T15301] loop3: detected capacity change from 0 to 512 [ 512.992841][T15314] lo speed is unknown, defaulting to 1000 [ 513.029681][T15314] xfrm0 speed is unknown, defaulting to 1000 [ 513.056251][T15301] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 513.151431][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.439052][T15326] loop7: detected capacity change from 0 to 512 [ 513.559634][ T28] kauditd_printk_skb: 817 callbacks suppressed [ 513.559653][ T28] audit: type=1400 audit(2000000344.812:60647): avc: denied { create } for pid=15324 comm="syz.8.2688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.559723][ T28] audit: type=1400 audit(2000000344.812:60648): avc: denied { sys_module } for pid=15324 comm="syz.8.2688" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 513.559821][ T28] audit: type=1400 audit(2000000344.812:60649): avc: denied { module_request } for pid=15324 comm="syz.8.2688" kmod="bridge0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 513.559842][ T28] audit: type=1400 audit(2000000344.831:60650): avc: denied { name_bind } for pid=15324 comm="syz.8.2688" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 513.559920][ T28] audit: type=1400 audit(2000000344.840:60651): avc: denied { name_bind } for pid=15324 comm="syz.8.2688" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 513.563314][ T28] audit: type=1400 audit(2000000344.859:60652): avc: denied { create } for pid=15329 comm="syz.3.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 513.597111][ T28] audit: type=1400 audit(2000000344.868:60653): avc: denied { create } for pid=15329 comm="syz.3.2691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.600458][ T28] audit: type=1400 audit(2000000344.896:60654): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 513.654019][ T28] audit: type=1400 audit(2000000344.896:60655): avc: denied { setopt } for pid=15329 comm="syz.3.2691" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.654046][ T28] audit: type=1400 audit(2000000344.943:60656): avc: denied { write } for pid=15329 comm="syz.3.2691" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 513.783789][T15339] 9p: Bad value for 'source' [ 515.928792][T15326] vlan0: entered promiscuous mode [ 515.945805][T15351] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2686'. [ 516.263298][T15386] loop8: detected capacity change from 0 to 512 [ 516.282845][T15386] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 516.353137][T15386] EXT4-fs error (device loop8): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 516.369721][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 516.376204][ C0] EXT4-fs (loop8): initial error at time 2000000347: mb_free_blocks:2049: inode 11: block 64 [ 516.386467][ C0] EXT4-fs (loop8): last error at time 2000000347: mb_free_blocks:2049: inode 11: block 64 [ 516.398068][T15351] loop1: detected capacity change from 0 to 8192 [ 516.408740][T15392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.418104][T15392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.430781][T15386] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #11: comm syz.8.2697: corrupted inode contents [ 516.462485][T15386] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 516.463526][T15386] EXT4-fs error (device loop8): ext4_dirty_inode:6495: inode #11: comm syz.8.2697: mark_inode_dirty error [ 516.486405][T15386] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 516.498019][T15386] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2697: invalid indirect mapped block 1 (level 1) [ 516.612321][T15386] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 516.612725][T15386] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #11: comm syz.8.2697: corrupted inode contents [ 516.692047][T15386] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 516.692462][T15386] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 516.712133][T15386] loop8: lost filesystem error report for type 5 error -117 [ 516.719501][T15386] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #11: comm syz.8.2697: corrupted inode contents [ 516.745637][T15386] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 516.745795][T15386] EXT4-fs error (device loop8): ext4_truncate:4602: inode #11: comm syz.8.2697: mark_inode_dirty error [ 516.771349][T15386] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 516.771592][T15386] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 516.790112][T15386] loop8: lost filesystem error report for type 5 error -117 [ 516.790332][T15386] EXT4-fs (loop8): 1 truncate cleaned up [ 516.804208][T15386] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.838609][ T9670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.369601][T15432] loop7: detected capacity change from 0 to 512 [ 517.894475][T15432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.930586][T15432] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.962907][T15436] loop1: detected capacity change from 0 to 512 [ 517.969680][T15432] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #2: comm syz.7.2708: corrupted inode contents [ 518.020287][T15432] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #2: comm syz.7.2708: mark_inode_dirty error [ 518.031994][T15432] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #2: comm syz.7.2708: corrupted inode contents [ 518.044205][T15432] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.2708: mark_inode_dirty error [ 518.362349][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.719869][T15481] loop8: detected capacity change from 0 to 512 [ 518.757648][T15494] netlink: 'syz.7.2714': attribute type 10 has an invalid length. [ 518.790873][T15481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.820010][ T9670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.843772][T15498] loop7: detected capacity change from 0 to 128 [ 518.861794][T15498] ext4: Unknown parameter 'euid>00000000000000000000' [ 518.915399][ T28] kauditd_printk_skb: 1047 callbacks suppressed [ 518.915416][ T28] audit: type=1400 audit(2000000349.875:61704): avc: denied { write } for pid=15497 comm="syz.7.2719" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 519.004534][ T28] audit: type=1400 audit(2000000349.875:61705): avc: denied { execmem } for pid=15497 comm="syz.7.2719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 519.058483][ T28] audit: type=1400 audit(2000000349.875:61706): avc: denied { read write } for pid=5467 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.079464][T15506] netlink: 'syz.7.2721': attribute type 4 has an invalid length. [ 519.107127][ T28] audit: type=1400 audit(2000000349.875:61707): avc: denied { open } for pid=5467 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.130633][T15502] netlink: 'syz.7.2721': attribute type 4 has an invalid length. [ 519.132849][ T28] audit: type=1400 audit(2000000349.875:61708): avc: denied { ioctl } for pid=5467 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.204483][ T28] audit: type=1400 audit(2000000349.941:61709): avc: denied { read write } for pid=9670 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.285771][ T28] audit: type=1400 audit(2000000349.941:61710): avc: denied { open } for pid=9670 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.318781][ T28] audit: type=1400 audit(2000000349.941:61711): avc: denied { ioctl } for pid=9670 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 519.356017][ T28] audit: type=1400 audit(2000000349.950:61712): avc: denied { module_request } for pid=15501 comm="syz.7.2721" kmod="netdev-netpci0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 519.389230][ T28] audit: type=1400 audit(2000000349.978:61713): avc: denied { sys_module } for pid=15501 comm="syz.7.2721" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 520.110776][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2726'. [ 520.140293][T15530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15530 comm=syz.1.2726 [ 520.280935][T15536] loop7: detected capacity change from 0 to 256 [ 520.437751][T15536] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2727'. [ 520.610670][T15538] can0: slcan on ttyS3. [ 520.814784][T15539] can0 (unregistered): slcan off ttyS3. [ 521.245910][T15542] loop3: detected capacity change from 0 to 512 [ 522.002785][T15542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.015611][T15542] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 522.032918][T15542] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2730: corrupted inode contents [ 522.049076][T15542] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #2: comm syz.3.2730: mark_inode_dirty error [ 522.061068][T15542] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2730: corrupted inode contents [ 522.082189][T15542] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2730: mark_inode_dirty error [ 522.167520][T15542] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.2730: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 522.167520][T15542] [ 522.187813][T15542] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #2: comm syz.3.2730: corrupted inode contents [ 522.204694][T15542] EXT4-fs error (device loop3): ext4_append:88: inode #2: comm syz.3.2730: mark_inode_dirty error [ 522.215714][T15542] EXT4-fs error (device loop3) in ext4_append:100: Corrupt filesystem [ 522.232361][T15557] EXT4-fs (loop3): shut down requested (1) [ 522.279121][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.385045][T15560] loop3: detected capacity change from 0 to 512 [ 522.406386][T15560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 522.418544][T15560] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 522.433305][T15560] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 522.446293][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 522.446324][ C0] EXT4-fs (loop3): initial error at time 2000000353: ext4_mb_generate_buddy:1317 [ 522.446345][ C0] EXT4-fs (loop3): last error at time 2000000353: ext4_mb_generate_buddy:1317 [ 522.473093][T15560] EXT4-fs (loop3): 1 truncate cleaned up [ 522.479329][T15560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.535555][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.539980][T15567] loop1: detected capacity change from 0 to 512 [ 522.792073][T15571] lo speed is unknown, defaulting to 1000 [ 522.938195][T15571] lo speed is unknown, defaulting to 1000 [ 523.071944][T15571] xfrm0 speed is unknown, defaulting to 1000 [ 523.462052][T15600] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 524.035313][T15613] lo speed is unknown, defaulting to 1000 [ 524.074810][T15613] lo speed is unknown, defaulting to 1000 [ 524.867490][ T28] kauditd_printk_skb: 557 callbacks suppressed [ 524.867512][ T28] audit: type=1400 audit(2000000354.770:62271): avc: denied { execmem } for pid=15621 comm="syz.3.2759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 524.884335][T15613] xfrm0 speed is unknown, defaulting to 1000 [ 524.929005][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2758'. [ 524.945666][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2758'. [ 525.039790][T15632] loop8: detected capacity change from 0 to 512 [ 525.134116][T15631] syzkaller0: entered promiscuous mode [ 525.139627][T15631] syzkaller0: entered allmulticast mode [ 525.165787][ T28] audit: type=1400 audit(2000000354.770:62272): avc: denied { prog_load } for pid=15620 comm="syz.8.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 525.185231][ T28] audit: type=1400 audit(2000000354.770:62273): avc: denied { bpf } for pid=15620 comm="syz.8.2758" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 525.188098][T15632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.206289][ T28] audit: type=1400 audit(2000000354.864:62274): avc: denied { create } for pid=15614 comm="syz.7.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 525.223166][T15632] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.406437][ T28] audit: type=1400 audit(2000000354.910:62275): avc: denied { prog_load } for pid=15614 comm="syz.7.2757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 525.422024][T15641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.427145][ T28] audit: type=1400 audit(2000000354.910:62276): avc: denied { bpf } for pid=15614 comm="syz.7.2757" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 525.433308][T15641] audit: audit_lost=400 audit_rate_limit=0 audit_backlog_limit=64 [ 525.462522][T15637] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.469222][T15637] audit: audit_lost=401 audit_rate_limit=0 audit_backlog_limit=64 [ 525.477657][T15641] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 525.573458][ T9670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.756371][T15652] loop8: detected capacity change from 0 to 512 [ 525.767616][T15652] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.2766: dx entry: limit 0 != root limit 125 [ 525.780400][T15652] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2766: Corrupt directory, running e2fsck is recommended [ 525.795025][T15652] EXT4-fs error (device loop8): ext4_map_blocks:786: inode #2: block 8: comm syz.8.2766: lblock 11 mapped to illegal pblock 8 (length 1) [ 525.813500][T15652] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 525.814147][T15652] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 525.823241][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 525.823272][ C1] EXT4-fs (loop8): initial error at time 2000000356: ext4_map_blocks:786: inode 2: block 8 [ 525.823311][ C1] EXT4-fs (loop8): last error at time 2000000356: ext4_map_blocks:786: inode 2: block 8 [ 525.859135][T15652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.016236][T15655] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2767'. [ 526.034364][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2766'. [ 526.245077][T15667] loop3: detected capacity change from 0 to 512 [ 526.470003][T15672] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2768'. [ 526.514395][T15667] batadv0: entered promiscuous mode [ 526.522352][T15667] vlan2: entered promiscuous mode [ 526.761358][ T9670] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.774557][T15684] x_tables: duplicate underflow at hook 3 [ 526.877125][T15684] batman_adv: batadv0: Interface deactivated: dummy0 [ 526.884421][T15684] vlan1: left allmulticast mode [ 526.889311][T15684] veth0_vlan: left allmulticast mode [ 526.894736][T15684] ip6tnl1: left allmulticast mode [ 526.899962][T15684] gretap1: left allmulticast mode [ 527.184228][T15705] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2783'. [ 527.490032][T15716] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2789'. [ 527.514073][T15716] bond3: option lacp_active: invalid value (5) [ 527.549551][T15731] loop9: detected capacity change from 0 to 512 [ 527.598206][T15716] bond3 (unregistering): Released all slaves [ 528.310632][T15731] vlan2: entered promiscuous mode [ 528.379398][T15740] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2797'. [ 528.554574][T15742] lo speed is unknown, defaulting to 1000 [ 529.217968][T15752] loop3: detected capacity change from 0 to 128 [ 529.231202][T15752] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 529.253836][T15752] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 529.258333][T15753] loop9: detected capacity change from 0 to 512 [ 529.276719][T15742] lo speed is unknown, defaulting to 1000 [ 529.364247][T15756] netlink: 'syz.3.2802': attribute type 1 has an invalid length. [ 529.437380][T15753] EXT4-fs error (device loop9): ext4_iget_extra_inode:5040: inode #15: comm syz.9.2799: corrupted in-inode xattr: invalid size in ea xattr [ 529.472508][T15758] gretap1: entered allmulticast mode [ 529.499108][T15755] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2803'. [ 529.506722][T15753] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 529.508496][T15753] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2799: couldn't read orphan inode 15 (err -117) [ 529.517742][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 529.517761][ C0] EXT4-fs (loop9): initial error at time 2000000359: ext4_iget_extra_inode:5040: inode 15 [ 529.517790][ C0] EXT4-fs (loop9): last error at time 2000000359: ext4_iget_extra_inode:5040: inode 15 [ 529.555795][T15753] loop9: lost filesystem error report for type 5 error -117 [ 529.558364][T15753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.631346][T15742] xfrm0 speed is unknown, defaulting to 1000 [ 529.659224][T15753] EXT4-fs (loop9): shut down requested (1) [ 529.735976][T15753] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 529.786420][T15753] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 529.843707][T15753] 9p: Bad value for 'rfdno' [ 530.025357][T11306] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.036760][ T50] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 530.219573][ T28] kauditd_printk_skb: 736 callbacks suppressed [ 530.219589][ T28] audit: type=1400 audit(2000000360.451:63002): avc: denied { write } for pid=15777 comm="syz.9.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 530.249900][ T28] audit: type=1400 audit(2000000360.470:63003): avc: denied { create } for pid=15777 comm="syz.9.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 530.276052][ T28] audit: type=1400 audit(2000000360.470:63004): avc: denied { create } for pid=15777 comm="syz.9.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 530.298901][ T28] audit: type=1400 audit(2000000360.470:63005): avc: denied { create } for pid=15777 comm="syz.9.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 530.320477][ T28] audit: type=1400 audit(2000000360.488:63006): avc: denied { create } for pid=15777 comm="syz.9.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 530.346939][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2810'. [ 530.356826][ T28] audit: type=1400 audit(2000000360.517:63007): avc: denied { setopt } for pid=15777 comm="syz.9.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 530.377950][ T28] audit: type=1400 audit(2000000360.563:63008): avc: denied { create } for pid=15763 comm="syz.1.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.377977][ T28] audit: type=1400 audit(2000000360.573:63009): avc: denied { setopt } for pid=15763 comm="syz.1.2804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 530.378772][ T28] audit: type=1400 audit(2000000360.582:63010): avc: denied { create } for pid=15781 comm="syz.7.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.397096][ T28] audit: type=1400 audit(2000000360.610:63012): avc: denied { read write } for pid=9670 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 530.613937][T15795] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2811'. [ 530.627899][T15783] syzkaller0: entered promiscuous mode [ 530.627921][T15783] syzkaller0: entered allmulticast mode [ 531.192804][T15800] ipvlan2: entered promiscuous mode [ 531.192825][T15800] ipvlan2: entered allmulticast mode [ 531.192888][T15800] syz_tun: entered allmulticast mode [ 531.568835][T15831] SET target dimension over the limit! [ 531.693779][T15794] loop1: detected capacity change from 0 to 164 [ 531.808514][T15827] loop8: detected capacity change from 0 to 512 [ 531.883860][T15794] iso9660: Unknown parameter '' [ 531.909311][T15827] EXT4-fs warning (device loop8): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 531.972231][T15827] EXT4-fs (loop8): mount failed [ 532.218066][T15834] vti0: entered promiscuous mode [ 532.681669][T15900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15900 comm=syz.3.2817 [ 532.744141][T15899] netlink: 'syz.3.2817': attribute type 1 has an invalid length. [ 532.778974][T15899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15899 comm=syz.3.2817 [ 532.819380][T15899] bond2: (slave bridge1): making interface the new active one [ 532.835981][T15899] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 533.539417][T15915] loop8: detected capacity change from 0 to 1024 [ 533.547460][T15915] EXT4-fs: inline encryption not supported [ 533.556990][T15915] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 533.556990][T15915] [ 533.729081][T15920] dummy0: entered promiscuous mode [ 533.735686][T15914] loop7: detected capacity change from 0 to 512 [ 533.761162][T15920] macvlan2: entered promiscuous mode [ 533.786060][T15920] macvlan2: entered allmulticast mode [ 533.829027][T15920] dummy0: entered allmulticast mode [ 533.939371][T15914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 534.044142][T15914] System zones: 0-2, 18-18, 34-34 [ 534.127330][T15921] lo speed is unknown, defaulting to 1000 [ 534.141257][T15914] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2819: bg 0: block 248: padding at end of block bitmap is not set [ 534.227486][T15921] lo speed is unknown, defaulting to 1000 [ 534.238243][T15914] loop7: lost filesystem error report for type 5 error -117 [ 534.238459][T15914] EXT4-fs error (device loop7): ext4_acquire_dquot:7026: comm syz.7.2819: Failed to acquire dquot type 1 [ 534.245880][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 534.245903][ C0] EXT4-fs (loop7): last error at time 2000000364: ext4_validate_block_bitmap:441 [ 534.315505][T15921] xfrm0 speed is unknown, defaulting to 1000 [ 534.322122][T15926] xt_hashlimit: size too large, truncated to 1048576 [ 534.496126][T15914] loop7: lost filesystem error report for type 5 error -117 [ 534.524430][T15914] EXT4-fs (loop7): 1 truncate cleaned up [ 534.545348][T15914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.595090][T15914] ext4 filesystem being mounted at /477/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.338511][T15951] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 535.652112][ T28] kauditd_printk_skb: 485 callbacks suppressed [ 535.652191][ T28] audit: type=1400 audit(2000000365.533:63492): avc: denied { read write } for pid=14751 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.688652][ T28] audit: type=1400 audit(2000000365.533:63493): avc: denied { open } for pid=14751 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.720119][ T28] audit: type=1400 audit(2000000365.533:63494): avc: denied { ioctl } for pid=14751 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 535.752534][ T28] audit: type=1400 audit(2000000365.570:63495): avc: denied { create } for pid=15948 comm="syz.9.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 535.774175][T15949] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2828'. [ 535.867091][ T28] audit: type=1400 audit(2000000365.589:63496): avc: denied { getopt } for pid=15948 comm="syz.9.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 535.889319][ T28] audit: type=1400 audit(2000000365.589:63497): avc: denied { map_create } for pid=15948 comm="syz.9.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 535.909553][ T28] audit: type=1400 audit(2000000365.589:63498): avc: denied { allowed } for pid=15948 comm="syz.9.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 535.929870][ T28] audit: type=1400 audit(2000000365.589:63499): avc: denied { create } for pid=15948 comm="syz.9.2828" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 535.951524][ T28] audit: type=1400 audit(2000000365.636:63500): avc: denied { create } for pid=15948 comm="syz.9.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 535.973320][ T28] audit: type=1400 audit(2000000365.655:63501): avc: denied { write } for pid=15948 comm="syz.9.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 536.590815][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.505805][T15998] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2837'. [ 537.538807][T15978] loop1: detected capacity change from 0 to 8192 [ 537.583295][T15981] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2835'. [ 537.831264][T16013] loop9: detected capacity change from 0 to 2048 [ 537.904589][T15978] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2833'. [ 537.934258][T16023] loop8: detected capacity change from 0 to 2048 [ 537.942011][T16023] ext4: Unknown parameter 'appraise' [ 538.010594][T15978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.723675][T15978] lo speed is unknown, defaulting to 1000 [ 538.763751][T16030] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2844'. [ 538.923343][T15978] lo speed is unknown, defaulting to 1000 [ 539.201872][T16050] 9p: Bad value for 'source' [ 540.900398][T15978] xfrm0 speed is unknown, defaulting to 1000 [ 541.013516][ T28] kauditd_printk_skb: 844 callbacks suppressed [ 541.013554][ T28] audit: type=1400 audit(2000000370.549:64346): avc: denied { search } for pid=16070 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.062661][ T28] audit: type=1400 audit(2000000370.587:64347): avc: denied { search } for pid=16070 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.168222][ T28] audit: type=1400 audit(2000000370.587:64348): avc: denied { search } for pid=16070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.240873][ T28] audit: type=1400 audit(2000000370.587:64349): avc: denied { search } for pid=16070 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.302766][T16070] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.322586][T16070] audit: audit_lost=406 audit_rate_limit=0 audit_backlog_limit=64 [ 541.332529][ T28] audit: type=1400 audit(2000000370.587:64350): avc: denied { search } for pid=16071 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.356875][ T9670] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.364848][T16085] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.372236][T16070] audit: backlog limit exceeded [ 541.452172][T16089] loop8: detected capacity change from 0 to 128 [ 541.632170][T16092] loop7: detected capacity change from 0 to 512 [ 541.660839][T16085] lo speed is unknown, defaulting to 1000 [ 541.718238][T16092] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 541.765169][T16092] EXT4-fs (loop7): mount failed [ 541.994109][T16085] lo speed is unknown, defaulting to 1000 [ 542.167607][T16106] netlink: 'syz.1.2854': attribute type 4 has an invalid length. [ 542.175538][T16106] netlink: 'syz.1.2854': attribute type 2 has an invalid length. [ 542.372093][T16085] xfrm0 speed is unknown, defaulting to 1000 [ 542.656912][T16124] futex_wake_op: syz.8.2862 tries to shift op by 32; fix this program [ 542.733089][T16121] macsec1: entered allmulticast mode [ 542.738483][T16121] batadv0: entered allmulticast mode [ 542.755058][T16121] batadv0: left allmulticast mode [ 542.857795][T16124] loop8: detected capacity change from 0 to 8192 [ 542.896031][T16126] loop7: detected capacity change from 0 to 512 [ 543.029086][ T5103] loop8: p1 < > p3 p4 < > [ 543.036167][T16126] EXT4-fs (loop7): 1 orphan inode deleted [ 543.049291][ T5103] loop8: p3 start 986112 is beyond EOD, truncated [ 543.523112][T16126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.530553][T16124] loop8: p1 < > p3 p4 < > [ 543.570038][T16124] loop8: p3 start 986112 is beyond EOD, truncated [ 543.892518][T16151] bond0: entered promiscuous mode [ 543.915429][T16151] bond_slave_0: entered promiscuous mode [ 543.930954][T16151] bond_slave_1: entered promiscuous mode [ 543.953723][T16151] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 543.966733][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 543.982238][ T5103] udevd[5103]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 543.997249][T16151] bond0: left promiscuous mode [ 544.003226][T16151] bond_slave_0: left promiscuous mode [ 544.008772][T16151] bond_slave_1: left promiscuous mode [ 544.121707][ T5103] udevd[5103]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 544.129237][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 544.678828][T16206] sg_write: data in/out 453596/234 bytes for SCSI command 0x0-- guessing data in; [ 544.678828][T16206] program syz.3.2879 not setting count and/or reply_len properly [ 544.811842][T16210] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2880'. [ 544.976849][T16212] netlink: 'syz.3.2881': attribute type 22 has an invalid length. [ 544.988556][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2881'. [ 545.032062][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.405091][ T28] kauditd_printk_skb: 1190 callbacks suppressed [ 546.405118][ T28] audit: type=1400 audit(2000000374.911:65477): avc: denied { open } for pid=16216 comm="syz.1.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 547.369048][T16228] 9p: Bad value for 'source' [ 547.553117][ T28] audit: type=1400 audit(2000000374.911:65478): avc: denied { perfmon } for pid=16216 comm="syz.1.2882" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 547.580533][ T28] audit: type=1400 audit(2000000374.911:65479): avc: denied { kernel } for pid=16216 comm="syz.1.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 548.435426][ T28] audit: type=1400 audit(2000000374.929:65480): avc: denied { prog_load } for pid=16222 comm="syz.7.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 548.458190][ T28] audit: type=1400 audit(2000000374.929:65481): avc: denied { bpf } for pid=16222 comm="syz.7.2885" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 548.480944][ T28] audit: type=1400 audit(2000000375.070:65482): avc: denied { perfmon } for pid=16222 comm="syz.7.2885" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 548.505123][ T28] audit: type=1400 audit(2000000375.070:65483): avc: denied { prog_run } for pid=16222 comm="syz.7.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 548.527058][ T28] audit: type=1400 audit(2000000375.191:65484): avc: denied { open } for pid=16222 comm="syz.7.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 548.550677][ T28] audit: type=1400 audit(2000000375.191:65485): avc: denied { perfmon } for pid=16222 comm="syz.7.2885" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 548.574475][ T28] audit: type=1400 audit(2000000375.191:65486): avc: denied { kernel } for pid=16222 comm="syz.7.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 548.656227][T16225] lo speed is unknown, defaulting to 1000 [ 548.820102][T16225] lo speed is unknown, defaulting to 1000 [ 548.936264][T16225] xfrm0 speed is unknown, defaulting to 1000 [ 549.230718][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 549.241045][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 549.697892][ T50] bond2 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 549.718306][ T50] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 549.795696][T16301] loop1: detected capacity change from 0 to 512 [ 549.804332][T16301] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 549.830644][T16296] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=16296 comm=syz.9.2897 [ 549.833796][T16301] EXT4-fs (loop1): 1 truncate cleaned up [ 549.849743][T16301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.890450][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.900195][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.911720][ T50] bond0 (unregistering): Released all slaves [ 549.920991][ T50] bond1 (unregistering): Released all slaves [ 549.930543][ T50] bond2 (unregistering): Released all slaves [ 549.939311][T16295] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2896'. [ 549.963685][ T50] tipc: Left network mode [ 550.002745][T16262] lo speed is unknown, defaulting to 1000 [ 550.050639][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.090033][T16262] lo speed is unknown, defaulting to 1000 [ 550.243707][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2899'. [ 550.755036][T16262] xfrm0 speed is unknown, defaulting to 1000 [ 550.832052][T16329] netlink: 'syz.3.2903': attribute type 1 has an invalid length. [ 550.867382][T16329] bond3: entered promiscuous mode [ 550.887324][T16329] 8021q: adding VLAN 0 to HW filter on device bond3 [ 550.949496][T16311] team0: No ports can be present during mode change [ 550.952483][T16329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2903'. [ 551.009454][T16344] loop7: detected capacity change from 0 to 512 [ 551.041768][T16344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.057782][T16344] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.136240][T16353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2905'. [ 551.279607][T16361] xt_TCPMSS: Only works on TCP SYN packets [ 551.303649][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.453426][T16367] loop7: detected capacity change from 0 to 512 [ 551.547345][T16262] chnl_net:caif_netlink_parms(): no params data found [ 551.752058][T16390] loop1: detected capacity change from 0 to 512 [ 551.768599][ T28] kauditd_printk_skb: 1250 callbacks suppressed [ 551.768616][ T28] audit: type=1400 audit(2000000380.610:66737): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 551.797416][ T28] audit: type=1400 audit(2000000380.629:66738): avc: denied { mounton } for pid=16388 comm="syz.1.2910" path="/422/bus" dev="tmpfs" ino=2284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 551.864972][ T28] audit: type=1400 audit(2000000380.638:66739): avc: denied { write } for pid=16387 comm="syz.9.2911" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.930967][ T28] audit: type=1400 audit(2000000380.638:66740): avc: denied { ioctl } for pid=16387 comm="syz.9.2911" path="socket:[47857]" dev="sockfs" ino=47857 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 551.932960][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2911'. [ 551.976673][ T28] audit: type=1400 audit(2000000380.638:66741): avc: denied { search } for pid=3038 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.014572][ T28] audit: type=1400 audit(2000000380.638:66742): avc: denied { search } for pid=3038 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 552.041293][ T28] audit: type=1400 audit(2000000380.638:66743): avc: denied { read } for pid=3038 comm="dhcpcd" name="n94" dev="tmpfs" ino=16820 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 552.058374][T16404] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 552.065963][ T5467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 552.072957][T16407] audit: audit_backlog=65 > audit_backlog_limit=64 [ 552.081596][ T50] IPVS: stop unused estimator thread 0... [ 552.093057][T16404] team0: Device dummy0 failed to register rx_handler [ 552.103152][T16407] audit: audit_lost=429 audit_rate_limit=0 audit_backlog_limit=64 [ 552.116335][T16262] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.133401][T16390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.143025][T16262] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.173088][T16262] bridge_slave_0: entered allmulticast mode [ 552.180019][T16262] bridge_slave_0: entered promiscuous mode [ 552.189428][T16262] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.196627][T16262] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.203836][T16262] bridge_slave_1: entered allmulticast mode [ 552.227038][T16413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2917'. [ 552.228133][T16262] bridge_slave_1: entered promiscuous mode [ 552.272089][T16262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.288280][T16262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.337648][T16420] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2916'. [ 552.349043][T16420] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.2916'. [ 552.356025][T16262] team0: Port device team_slave_0 added [ 552.358361][T16420] netlink: zone id is out of range [ 552.364889][T16262] team0: Port device team_slave_1 added [ 552.369046][T16420] netlink: zone id is out of range [ 552.369090][T16420] netlink: zone id is out of range [ 552.369098][T16420] netlink: zone id is out of range [ 552.385372][T16262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.390263][T16420] netlink: zone id is out of range [ 552.390273][T16420] netlink: zone id is out of range [ 552.390281][T16420] netlink: zone id is out of range [ 552.390288][T16420] netlink: zone id is out of range [ 552.390294][T16420] netlink: zone id is out of range [ 552.390302][T16420] netlink: zone id is out of range [ 552.477664][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.517460][T16429] xt_bpf: check failed: parse error [ 552.523459][T16262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.599707][T16390] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.655913][T16262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.663823][T16262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.696763][T16262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.743843][T16262] hsr_slave_0: entered promiscuous mode [ 552.744732][T16262] hsr_slave_1: entered promiscuous mode [ 552.745293][T16262] debugfs: 'hsr0' already exists in 'hsr' [ 552.745317][T16262] Cannot create hsr debugfs directory [ 553.188512][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.297443][T16447] loop1: detected capacity change from 0 to 512 [ 553.307566][T16447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 553.328123][T16447] EXT4-fs (loop1): 1 orphan inode deleted [ 553.440548][T16447] EXT4-fs (loop1): 1 truncate cleaned up [ 553.447589][T16447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.853833][T16262] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 553.874180][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.890833][T16477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=16477 comm=syz.7.2925 [ 553.921204][T16262] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 553.953149][T16462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=16462 comm=syz.3.2926 [ 553.957892][T16262] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 553.979154][T16462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=16462 comm=syz.3.2926 [ 553.999083][T16262] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.019976][T16462] loop3: detected capacity change from 0 to 128 [ 554.397063][T16262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.496290][T16262] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.539396][T12435] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.546500][T12435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.601378][ T7727] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.608471][ T7727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.701118][T16524] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2932'. [ 554.708129][T16262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.533701][T16262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.847779][T16262] veth0_vlan: entered promiscuous mode [ 555.898565][T16591] tipc: Enabled bearer , priority 0 [ 555.932371][T16262] veth1_vlan: entered promiscuous mode [ 556.033564][T16262] veth0_macvtap: entered promiscuous mode [ 556.068019][T16262] veth1_macvtap: entered promiscuous mode [ 556.122988][T16610] macsec0: entered allmulticast mode [ 556.155215][T16610] batadv0: entered allmulticast mode [ 556.199728][T16610] batadv0: left allmulticast mode [ 556.265021][T16262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.292920][T16618] loop7: detected capacity change from 0 to 2048 [ 556.303041][T16262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.356483][T16600] loop3: detected capacity change from 0 to 32768 [ 556.370713][T12437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.384373][T12437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.386212][ T3298] loop7: p2 < > p4 [ 556.418546][T12437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.426723][ T3298] loop7: p4 size 262144 extends beyond EOD, truncated [ 556.428400][T16600] loop3: p1 p3 < > [ 556.461556][T12437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.472540][T16618] loop7: p2 < > p4 [ 556.496745][T16618] loop7: p4 size 262144 extends beyond EOD, truncated [ 556.703797][T16640] loop0: detected capacity change from 0 to 4096 [ 556.757918][T16640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.803424][T16640] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.2892: corrupted inode contents [ 556.828058][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 556.840704][T16640] EXT4-fs error (device loop0): ext4_dirty_inode:6495: inode #15: comm syz.0.2892: mark_inode_dirty error [ 556.862484][T16640] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.2892: corrupted inode contents [ 556.874616][T16640] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2892: mark_inode_dirty error [ 556.888817][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 556.905687][T16640] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.2892: corrupted inode contents [ 556.941695][T16640] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.2892: mark_inode_dirty error [ 556.963728][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 556.976841][T16662] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2892'. [ 556.983898][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 556.997437][T16640] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.2892: corrupted inode contents [ 557.024221][T16662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2892'. [ 557.036249][T16640] EXT4-fs error (device loop0): ext4_truncate:4602: inode #15: comm syz.0.2892: mark_inode_dirty error [ 557.060657][T16640] EXT4-fs error (device loop0) in ext4_setattr:6028: Corrupt filesystem [ 557.090264][ T3567] tipc: Node number set to 3746619577 [ 557.113401][ T28] kauditd_printk_skb: 1858 callbacks suppressed [ 557.113495][ T28] audit: type=1400 audit(2000000385.627:68581): avc: denied { search } for pid=16652 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.163593][ T28] audit: type=1400 audit(2000000385.627:68582): avc: denied { search } for pid=16652 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.171721][T16654] EXT4-fs error (device loop0): ext4_do_update_inode:5602: inode #15: comm syz.0.2892: corrupted inode contents [ 557.186697][ T28] audit: type=1400 audit(2000000385.627:68583): avc: denied { search } for pid=16652 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.221876][ T28] audit: type=1400 audit(2000000385.627:68584): avc: denied { read write } for pid=16638 comm="syz.0.2892" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.246125][ T28] audit: type=1400 audit(2000000385.627:68585): avc: denied { read write open } for pid=16638 comm="syz.0.2892" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 557.296811][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 557.333410][ T28] audit: type=1400 audit(2000000385.627:68586): avc: denied { search } for pid=16652 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.333962][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 557.356033][ T28] audit: type=1400 audit(2000000385.627:68587): avc: denied { search } for pid=16652 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.400189][T16675] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.400847][T16618] lo speed is unknown, defaulting to 1000 [ 557.413837][T16674] audit: audit_backlog=65 > audit_backlog_limit=64 [ 557.416165][T16675] audit: audit_lost=437 audit_rate_limit=0 audit_backlog_limit=64 [ 557.435545][T16262] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.600239][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2950'. [ 557.650615][T16618] lo speed is unknown, defaulting to 1000 [ 558.376421][T16710] loop1: detected capacity change from 0 to 512 [ 558.381667][T16618] xfrm0 speed is unknown, defaulting to 1000 [ 558.384457][T16710] EXT4-fs: Ignoring removed nobh option [ 558.753901][T16728] team0: No ports can be present during mode change [ 558.831931][T16710] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 558.930669][T16718] lo speed is unknown, defaulting to 1000 [ 559.012841][T16718] lo speed is unknown, defaulting to 1000 [ 559.111460][T16745] syzkaller1: entered promiscuous mode [ 559.130453][T16745] syzkaller1: entered allmulticast mode [ 559.199314][T16718] xfrm0 speed is unknown, defaulting to 1000 [ 559.384452][T16762] netlink: 'syz.7.2962': attribute type 7 has an invalid length. [ 559.415258][T16762] program syz.7.2962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.500801][T16788] 9p: Bad value for 'source' [ 561.291604][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2967'. [ 561.351423][T16792] loop1: detected capacity change from 0 to 512 [ 562.382035][T16818] loop0: detected capacity change from 0 to 256 [ 562.453816][T16823] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2970'. [ 562.508099][ T28] kauditd_printk_skb: 1217 callbacks suppressed [ 562.508117][ T28] audit: type=1400 audit(2000000390.671:69802): avc: denied { create } for pid=16821 comm="syz.7.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 562.576867][T16829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.583554][T16829] audit: audit_lost=439 audit_rate_limit=0 audit_backlog_limit=64 [ 562.586367][T16828] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.591434][T16829] audit: backlog limit exceeded [ 562.604080][T16829] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.606208][T16827] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.610590][T16829] audit: audit_lost=440 audit_rate_limit=0 audit_backlog_limit=64 [ 562.627983][T16830] audit: audit_backlog=65 > audit_backlog_limit=64 [ 562.634520][T16830] audit: audit_lost=441 audit_rate_limit=0 audit_backlog_limit=64 [ 563.083364][T16856] loop3: detected capacity change from 0 to 1024 [ 563.120219][T16856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 563.197399][T16856] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.501575][T16868] loop1: detected capacity change from 0 to 512 [ 563.686785][T16868] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 563.696254][T16868] EXT4-fs (loop1): orphan cleanup on readonly fs [ 563.703176][T16868] EXT4-fs warning (device loop1): ext4_enable_quotas:7261: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 563.718908][T16868] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 563.726555][T16868] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.2978: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 563.745388][T16868] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 563.746556][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 563.762421][ C1] EXT4-fs (loop1): last error at time 2000000391: ext4_ext_check_inode:521: inode 13 [ 563.768981][T16868] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2978: couldn't read orphan inode 13 (err -117) [ 563.866045][T16868] loop1: lost filesystem error report for type 5 error -117 [ 564.093337][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2982'. [ 564.267096][T16868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.291934][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 564.683077][T16893] 9p: Bad value for 'source' [ 565.540658][T16890] loop3: detected capacity change from 0 to 1024 [ 565.553801][T16890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.677878][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.775070][T16916] loop7: detected capacity change from 0 to 1024 [ 566.088014][T16916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 566.100642][T16916] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.125390][T16916] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #12: comm syz.7.2987: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 8(4), depth 0(0) [ 566.143113][T16916] EXT4-fs (loop7): Remounting filesystem read-only [ 566.296543][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 566.301556][T16939] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 566.319874][T16939] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 566.321502][T16890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.332708][T16939] netlink: 'syz.1.2986': attribute type 29 has an invalid length. [ 566.544720][T16890] netlink: 'syz.3.2985': attribute type 10 has an invalid length. [ 566.645653][T16948] loop7: detected capacity change from 0 to 4096 [ 566.685811][T16948] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.779411][T16948] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.2988: corrupted inode contents [ 566.860773][T16948] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #15: comm syz.7.2988: mark_inode_dirty error [ 566.880365][T16948] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.2988: corrupted inode contents [ 566.906104][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.908495][T16948] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2988: mark_inode_dirty error [ 566.927309][T16948] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.2988: corrupted inode contents [ 566.966452][T16948] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.2988: mark_inode_dirty error [ 566.980188][T16962] netlink: 6040 bytes leftover after parsing attributes in process `syz.7.2988'. [ 567.037747][T16948] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.2988: corrupted inode contents [ 567.062634][T16967] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2988'. [ 567.143626][T16948] EXT4-fs error (device loop7): ext4_truncate:4602: inode #15: comm syz.7.2988: mark_inode_dirty error [ 567.166274][T16973] team0: No ports can be present during mode change [ 567.189741][T16948] EXT4-fs error (device loop7) in ext4_setattr:6028: Corrupt filesystem [ 567.257834][T16974] loop3: detected capacity change from 0 to 1024 [ 567.269320][T16954] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.2988: corrupted inode contents [ 567.416427][T16974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16974 comm=syz.3.2996 [ 567.860382][ T28] kauditd_printk_skb: 1065 callbacks suppressed [ 567.860475][ T28] audit: type=1400 audit(2000000395.678:70859): avc: denied { search } for pid=16980 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.907629][ T28] audit: type=1400 audit(2000000395.678:70860): avc: denied { create } for pid=16981 comm="syz.9.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 567.932255][ T28] audit: type=1400 audit(2000000395.697:70861): avc: denied { create } for pid=16981 comm="syz.9.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 567.968150][ T28] audit: type=1400 audit(2000000395.706:70862): avc: denied { execmem } for pid=16981 comm="syz.9.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 568.006370][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.016076][ T28] audit: type=1400 audit(2000000395.706:70863): avc: denied { search } for pid=16980 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.075832][ T28] audit: type=1400 audit(2000000395.706:70864): avc: denied { search } for pid=16980 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.099461][ T28] audit: type=1400 audit(2000000395.706:70865): avc: denied { search } for pid=16980 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.220604][T16987] 9p: Bad value for 'source' [ 568.343638][ T28] audit: type=1400 audit(2000000395.706:70866): avc: denied { search } for pid=16980 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.517454][ T28] audit: type=1400 audit(2000000395.706:70867): avc: denied { search } for pid=16980 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.655967][T16979] audit: audit_backlog=65 > audit_backlog_limit=64 [ 569.022553][T16998] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3000'. [ 569.261847][T17011] netlink: 'syz.7.3002': attribute type 10 has an invalid length. [ 569.272654][T17011] geneve1: entered promiscuous mode [ 569.407925][T17018] loop1: detected capacity change from 0 to 128 [ 569.605002][T17024] loop7: detected capacity change from 0 to 512 [ 569.636157][T17024] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 569.933731][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 570.102475][T17034] loop0: detected capacity change from 0 to 512 [ 570.134785][T17034] EXT4-fs: old and new quota format mixing [ 570.272555][T17035] loop9: detected capacity change from 0 to 2048 [ 570.361071][ T5103] loop9: p3 p4 < > [ 570.369342][ T5103] loop9: p3 start 11362048 is beyond EOD, truncated [ 570.404619][T17035] loop9: p3 p4 < > [ 570.412472][T17035] loop9: p3 start 11362048 is beyond EOD, truncated [ 570.680216][T17045] loop3: detected capacity change from 0 to 512 [ 570.693712][T17045] EXT4-fs: Ignoring removed bh option [ 570.705257][T17045] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 570.853655][T17045] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 570.905652][T17045] EXT4-fs (loop3): orphan cleanup on readonly fs [ 571.402316][T17045] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 571.432748][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 571.454544][T17045] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 571.493330][T17045] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3008: Invalid block bitmap block 0 in block_group 0 [ 571.510313][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3010'. [ 571.521972][T17045] loop3: lost filesystem error report for type 5 error -117 [ 571.522131][T17045] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 571.529487][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 571.529509][ C1] EXT4-fs (loop3): last error at time 2000000399: ext4_read_block_bitmap_nowait:483 [ 571.558020][T17056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3010'. [ 571.591252][T17048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.599432][T17053] lo speed is unknown, defaulting to 1000 [ 571.636382][T17045] loop3: lost filesystem error report for type 5 error -117 [ 571.646766][T17045] EXT4-fs (loop3): 1 orphan inode deleted [ 571.663380][T17045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 571.686705][T17056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.695892][T17056] bond1: (slave bond0): making interface the new active one [ 571.705237][T17056] bond1: (slave bond0): Enslaving as an active interface with an up link [ 571.713839][T17053] lo speed is unknown, defaulting to 1000 [ 571.750626][T17053] xfrm0 speed is unknown, defaulting to 1000 [ 571.936564][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.006021][T17062] loop0: detected capacity change from 0 to 8192 [ 572.043026][T17062] bio_check_eod: 32 callbacks suppressed [ 572.043080][T17062] syz.0.3012: attempt to access beyond end of device [ 572.043080][T17062] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 572.076146][T17068] loop3: detected capacity change from 0 to 512 [ 572.078266][T17062] Buffer I/O error on dev loop0, logical block 57847, async page read [ 572.103350][T17068] EXT4-fs: Ignoring removed i_version option [ 572.109457][T17068] EXT4-fs: Ignoring removed bh option [ 572.116007][T17062] syz.0.3012: attempt to access beyond end of device [ 572.116007][T17062] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 572.130862][T17068] ext2: Unknown parameter 'dont_appraise' [ 572.137097][T17062] Buffer I/O error on dev loop0, logical block 57847, async page read [ 572.157063][T17062] syz.0.3012: attempt to access beyond end of device [ 572.157063][T17062] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 572.184978][T17060] loop9: detected capacity change from 0 to 512 [ 572.194182][T17062] Buffer I/O error on dev loop0, logical block 57847, async page read [ 572.214354][T17062] syz.0.3012: attempt to access beyond end of device [ 572.214354][T17062] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 572.233377][T17062] Buffer I/O error on dev loop0, logical block 57847, async page read [ 572.381907][T17062] syz.0.3012: attempt to access beyond end of device [ 572.381907][T17062] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 573.425623][ T28] kauditd_printk_skb: 490 callbacks suppressed [ 573.425643][ T28] audit: type=1400 audit(2000000400.236:71278): avc: denied { open } for pid=17075 comm="syz.3.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 573.437796][T17062] Buffer I/O error on dev loop0, logical block 57847, async page read [ 573.481264][T17082] 9p: Bad value for 'source' [ 573.500754][ T28] audit: type=1400 audit(2000000400.236:71279): avc: denied { perfmon } for pid=17075 comm="syz.3.3017" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 573.522222][ T28] audit: type=1400 audit(2000000400.236:71280): avc: denied { kernel } for pid=17075 comm="syz.3.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 573.766236][ T28] audit: type=1400 audit(2000000400.236:71281): avc: denied { prog_load } for pid=17073 comm="syz.7.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.895840][ T28] audit: type=1400 audit(2000000400.236:71282): avc: denied { bpf } for pid=17073 comm="syz.7.3016" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 573.946920][ T28] audit: type=1400 audit(2000000400.339:71283): avc: denied { perfmon } for pid=17073 comm="syz.7.3016" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 573.974665][ T28] audit: type=1400 audit(2000000400.339:71284): avc: denied { prog_run } for pid=17073 comm="syz.7.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 573.997564][ T28] audit: type=1400 audit(2000000400.470:71285): avc: denied { open } for pid=17073 comm="syz.7.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 574.020827][ T28] audit: type=1400 audit(2000000400.470:71286): avc: denied { perfmon } for pid=17073 comm="syz.7.3016" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 574.045800][ T28] audit: type=1400 audit(2000000400.470:71287): avc: denied { kernel } for pid=17073 comm="syz.7.3016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 575.006663][T17060] vlan2: entered promiscuous mode [ 575.195990][T17110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3022'. [ 575.372281][T17119] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3025'. [ 575.444455][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3023'. [ 575.506599][T17123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.627127][T17136] loop3: detected capacity change from 0 to 1024 [ 575.635315][T17136] EXT4-fs: inline encryption not supported [ 575.641340][T17136] ext4: Bad value for 'max_batch_time' [ 576.725683][T17146] 9p: Bad value for 'source' [ 577.276983][T17159] loop3: detected capacity change from 0 to 512 [ 577.337315][T17159] EXT4-fs (loop3): 1 truncate cleaned up [ 577.365805][T17160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3033'. [ 577.375820][T17159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.444986][T17160] veth3: entered allmulticast mode [ 577.499043][T17159] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 577.570821][T17156] loop7: detected capacity change from 0 to 4096 [ 577.715231][T17156] EXT4-fs: Ignoring removed bh option [ 577.756039][T17156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.775040][T17173] loop0: detected capacity change from 0 to 512 [ 577.785114][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.132099][T17181] loop9: detected capacity change from 0 to 128 [ 578.151851][T17181] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 578.250680][T17181] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 578.414413][T17173] batadv0: entered promiscuous mode [ 578.421304][T17173] vlan2: entered promiscuous mode [ 578.466709][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.547334][T17182] EXT4-fs (loop9): shut down requested (0) [ 578.553466][T17203] EXT4-fs (loop9): shut down requested (0) [ 578.591748][T17206] netlink: 'syz.1.3042': attribute type 10 has an invalid length. [ 578.613626][T17206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3042'. [ 578.648817][T17200] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3040'. [ 578.685565][T17206] macvlan0: entered promiscuous mode [ 578.693224][T17206] net_ratelimit: 30 callbacks suppressed [ 578.693238][T17206] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 578.715183][T11306] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 578.791227][ T28] kauditd_printk_skb: 747 callbacks suppressed [ 578.791244][ T28] audit: type=1400 audit(2000000405.861:72035): avc: denied { prog_load } for pid=17201 comm="syz.7.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 578.823150][ T28] audit: type=1400 audit(2000000405.861:72036): avc: denied { bpf } for pid=17201 comm="syz.7.3041" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.844495][ T28] audit: type=1400 audit(2000000405.861:72037): avc: denied { prog_load } for pid=17201 comm="syz.7.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 578.881035][ T28] audit: type=1400 audit(2000000405.861:72038): avc: denied { perfmon } for pid=17201 comm="syz.7.3041" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.908516][ T28] audit: type=1400 audit(2000000405.861:72039): avc: denied { bpf } for pid=17201 comm="syz.7.3041" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.929892][ T28] audit: type=1400 audit(2000000405.870:72040): avc: denied { read write } for pid=14751 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 578.954398][ T28] audit: type=1400 audit(2000000405.870:72041): avc: denied { open } for pid=14751 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 578.996704][ T28] audit: type=1400 audit(2000000405.870:72042): avc: denied { ioctl } for pid=14751 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 579.057050][ T28] audit: type=1400 audit(2000000405.898:72043): avc: denied { bpf } for pid=17201 comm="syz.7.3041" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 579.545852][ T28] audit: type=1400 audit(2000000405.917:72044): avc: denied { prog_run } for pid=17201 comm="syz.7.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.765145][T17238] all: renamed from bridge_slave_1 (while UP) [ 580.678334][T17256] lo speed is unknown, defaulting to 1000 [ 580.756668][T17256] lo speed is unknown, defaulting to 1000 [ 580.794327][T17256] xfrm0 speed is unknown, defaulting to 1000 [ 580.988970][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 581.032535][T17261] tipc: Started in network mode [ 581.051748][T17261] tipc: Node identity 2d1414aa, cluster identity 4711 [ 581.081340][T17261] tipc: Enabling of bearer rejected, failed to enable media [ 581.974106][T14751] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 581.987033][T14751] CPU: 1 UID: 0 PID: 14751 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 581.987274][T14751] Tainted: [W]=WARN [ 581.987282][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.987296][T14751] Call Trace: [ 581.987304][T14751] [ 581.987313][T14751] __dump_stack+0x1d/0x30 [ 581.987340][T14751] dump_stack_lvl+0x95/0xd0 [ 581.987362][T14751] dump_stack+0x15/0x1b [ 581.987513][T14751] dump_header+0x80/0x240 [ 581.987539][T14751] oom_kill_process+0x295/0x350 [ 581.987561][T14751] out_of_memory+0x97d/0xb80 [ 581.987584][T14751] try_charge_memcg+0x62e/0xa10 [ 581.987691][T14751] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 581.987723][T14751] __swap_cache_prepare_and_add+0x67/0x460 [ 581.987789][T14751] ? alloc_pages_mpol+0x217/0x260 [ 581.987821][T14751] swap_cache_alloc_folio+0xa2/0x120 [ 581.987849][T14751] swap_cluster_readahead+0x26e/0x3d0 [ 581.987919][T14751] swapin_readahead+0xde/0x840 [ 581.987944][T14751] ? __rcu_read_unlock+0x4e/0x70 [ 581.987966][T14751] ? __perf_event_task_sched_in+0xa65/0xad0 [ 581.987995][T14751] ? __list_add_valid_or_report+0x38/0xe0 [ 581.988062][T14751] ? xfd_validate_state+0x45/0xf0 [ 581.988088][T14751] ? __rcu_read_unlock+0x4e/0x70 [ 581.988141][T14751] ? swap_cache_get_folio+0x26f/0x280 [ 581.988175][T14751] do_swap_page+0x2fe/0x21e0 [ 581.988205][T14751] ? __schedule+0x93c/0xd40 [ 581.988315][T14751] ? __rcu_read_lock+0x36/0x50 [ 581.988337][T14751] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 581.988366][T14751] handle_mm_fault+0xb46/0x3020 [ 581.988415][T14751] ? vma_start_read+0x1c7/0x2c0 [ 581.988449][T14751] do_user_addr_fault+0x62f/0x1050 [ 581.988497][T14751] ? trace_page_fault_user+0x1f/0xe0 [ 581.988547][T14751] exc_page_fault+0x62/0xa0 [ 581.988572][T14751] asm_exc_page_fault+0x26/0x30 [ 581.988595][T14751] RIP: 0033:0x7facba637997 [ 581.988615][T14751] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 581.988717][T14751] RSP: 002b:00007ffcb4b5e8d0 EFLAGS: 00010202 [ 581.988735][T14751] RAX: 0000000000000000 RBX: 000055557d90f500 RCX: 00007facba637997 [ 581.988750][T14751] RDX: 00007ffcb4b5e910 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.988815][T14751] RBP: 00007ffcb4b5e97c R08: 0000000000000000 R09: 0000000000000000 [ 581.988884][T14751] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 581.988896][T14751] R13: 00000000000927c0 R14: 000000000008ccf5 R15: 00007ffcb4b5e9d0 [ 581.988918][T14751] [ 581.988959][T14751] memory: usage 307200kB, limit 307200kB, failcnt 4221 [ 582.257761][T17280] loop0: detected capacity change from 0 to 8192 [ 582.260503][T14751] memory+swap: usage 323768kB, limit 9007199254740988kB, failcnt 0 [ 582.272595][T14751] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 582.285585][T14751] Memory cgroup stats for /syz3: [ 582.285936][T14751] cache 8192 [ 582.294165][T14751] rss 16384 [ 582.314002][T14751] shmem 0 [ 582.316564][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3054'. [ 582.320179][T14751] mapped_file 4096 [ 582.339775][T14751] dirty 0 [ 582.349664][T14751] writeback 0 [ 582.353571][T14751] workingset_refault_anon 814 [ 582.358256][T14751] workingset_refault_file 3790 [ 582.369037][T14751] swap 16965632 [ 582.397423][T14751] swapcached 36696064 [ 582.428346][T14751] pgpgin 814580 [ 582.434202][T14751] pgpgout 814573 [ 582.447999][T14751] pgfault 706221 [ 582.458222][T14751] pgmajfault 324 [ 582.465167][T14751] inactive_anon 0 [ 582.476546][T14751] active_anon 16384 [ 582.486755][T14751] inactive_file 0 [ 582.498586][T14751] active_file 8192 [ 582.503131][T14751] unevictable 0 [ 582.506610][T14751] hierarchical_memory_limit 314572800 [ 582.523875][T14751] hierarchical_memsw_limit 9223372036854771712 [ 582.538647][T14751] total_cache 8192 [ 582.544547][T14751] total_rss 16384 [ 582.549031][T14751] total_shmem 0 [ 582.553495][T14751] total_mapped_file 4096 [ 582.558529][T14751] total_dirty 0 [ 582.562577][T14751] total_writeback 0 [ 582.567034][T14751] total_workingset_refault_anon 814 [ 582.575023][T14751] total_workingset_refault_file 3790 [ 582.610447][T14751] total_swap 16965632 [ 582.614472][T14751] total_swapcached 36696064 [ 582.630339][T14751] total_pgpgin 814580 [ 582.634477][T14751] total_pgpgout 814573 [ 582.646938][T14751] total_pgfault 706221 [ 582.652048][T14751] total_pgmajfault 324 [ 582.656133][T14751] total_inactive_anon 0 [ 582.663535][T14751] total_active_anon 16384 [ 582.667977][T14751] total_inactive_file 0 [ 582.682603][T14751] total_active_file 8192 [ 582.687016][T14751] total_unevictable 0 [ 582.695398][T14751] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3050,pid=17234,uid=0 [ 582.723139][T14751] Memory cgroup out of memory: Killed process 17234 (syz.3.3050) total-vm:100580kB, anon-rss:1264kB, file-rss:26564kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 582.745325][T17236] syz.3.3050 (17236) used greatest stack depth: 7096 bytes left [ 582.888617][T17298] loop7: detected capacity change from 0 to 512 [ 583.079846][T17298] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 583.129057][T17298] EXT4-fs (loop7): mount failed [ 583.169320][T17311] loop1: detected capacity change from 0 to 512 [ 584.223619][T17315] lo speed is unknown, defaulting to 1000 [ 584.261901][T17315] lo speed is unknown, defaulting to 1000 [ 584.290260][ T28] kauditd_printk_skb: 492 callbacks suppressed [ 584.290277][ T28] audit: type=1400 audit(2000000410.475:72537): avc: denied { prog_load } for pid=17312 comm="syz.7.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 584.350477][T17315] xfrm0 speed is unknown, defaulting to 1000 [ 584.563918][T17316] lo speed is unknown, defaulting to 1000 [ 584.614353][T17316] lo speed is unknown, defaulting to 1000 [ 584.658355][ T28] audit: type=1400 audit(2000000410.475:72538): avc: denied { bpf } for pid=17312 comm="syz.7.3061" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 584.658779][T17316] xfrm0 speed is unknown, defaulting to 1000 [ 584.713645][ T28] audit: type=1400 audit(2000000410.568:72539): avc: denied { perfmon } for pid=17312 comm="syz.7.3061" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 584.782834][ T28] audit: type=1400 audit(2000000410.568:72540): avc: denied { prog_run } for pid=17312 comm="syz.7.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 584.831082][ T28] audit: type=1400 audit(2000000410.737:72541): avc: denied { open } for pid=17304 comm="syz.3.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 584.854038][T17333] FAULT_INJECTION: forcing a failure. [ 584.854038][T17333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.870072][T17333] CPU: 1 UID: 0 PID: 17333 Comm: syz.3.3064 Tainted: G W syzkaller #0 PREEMPT(full) [ 584.870178][T17333] Tainted: [W]=WARN [ 584.870186][T17333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.870199][T17333] Call Trace: [ 584.870207][T17333] [ 584.870217][T17333] __dump_stack+0x1d/0x30 [ 584.870248][T17333] dump_stack_lvl+0x95/0xd0 [ 584.870310][T17333] dump_stack+0x15/0x1b [ 584.870382][T17333] should_fail_ex+0x263/0x280 [ 584.870409][T17333] should_fail+0xb/0x20 [ 584.870432][T17333] should_fail_usercopy+0x1a/0x20 [ 584.870557][T17333] _copy_from_user+0x1c/0xb0 [ 584.870587][T17333] do_sock_getsockopt+0xf1/0x210 [ 584.870625][T17333] __x64_sys_getsockopt+0x11d/0x1a0 [ 584.870684][T17333] x64_sys_call+0x2dcf/0x3020 [ 584.870714][T17333] do_syscall_64+0x12c/0x370 [ 584.870745][T17333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.870770][T17333] RIP: 0033:0x7facba67c819 [ 584.870832][T17333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.870854][T17333] RSP: 002b:00007facb90d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 584.870878][T17333] RAX: ffffffffffffffda RBX: 00007facba8f5fa0 RCX: 00007facba67c819 [ 584.870895][T17333] RDX: 0000000000002715 RSI: 0000200000000114 RDI: 0000000000000004 [ 584.870909][T17333] RBP: 00007facb90d7090 R08: 0000200000000040 R09: 0000000000000000 [ 584.870922][T17333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.870976][T17333] R13: 00007facba8f6038 R14: 00007facba8f5fa0 R15: 00007ffcb4b5e5d8 [ 584.871034][T17333] [ 585.048287][ T28] audit: type=1400 audit(2000000410.737:72542): avc: denied { perfmon } for pid=17304 comm="syz.3.3060" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 585.082855][ T28] audit: type=1400 audit(2000000410.737:72543): avc: denied { kernel } for pid=17304 comm="syz.3.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 585.127083][T17334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.143064][ T28] audit: type=1400 audit(2000000410.737:72544): avc: denied { perfmon } for pid=17304 comm="syz.3.3060" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 585.194814][T17334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.201901][ T28] audit: type=1400 audit(2000000410.849:72545): avc: denied { write } for pid=17304 comm="syz.3.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 585.228751][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3067'. [ 585.251270][T17340] audit: audit_backlog=65 > audit_backlog_limit=64 [ 585.256485][T17334] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: 1 [ 585.276670][T17334] ref_ctr increment failed for inode: 0x8f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888121e7ec00 [ 585.311096][T17340] team0: No ports can be present during mode change [ 585.338541][T17343] loop9: detected capacity change from 0 to 256 [ 585.347866][T17329] lo speed is unknown, defaulting to 1000 [ 585.491647][T17349] loop3: detected capacity change from 0 to 256 [ 585.498932][T17346] loop7: detected capacity change from 0 to 128 [ 585.501383][T17329] lo speed is unknown, defaulting to 1000 [ 587.149667][T17356] loop1: detected capacity change from 0 to 512 [ 587.271267][T17329] xfrm0 speed is unknown, defaulting to 1000 [ 587.351713][T17367] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3075'. [ 587.361265][T17356] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 587.367775][T17356] EXT4-fs (loop1): mount failed [ 587.374826][T17371] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3075'. [ 587.868069][T17388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 587.938536][T17388] team0: No ports can be present during mode change [ 587.986994][T17390] loop9: detected capacity change from 0 to 512 [ 588.036157][T17328] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: -1 [ 588.048800][T17328] ref_ctr decrement failed for inode: 0x8f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888121e7ec00 [ 588.074627][T17328] uprobe: syz.0.3063:17328 failed to unregister, leaking uprobe [ 588.115739][T17392] FAULT_INJECTION: forcing a failure. [ 588.115739][T17392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.134939][T17392] CPU: 0 UID: 0 PID: 17392 Comm: syz.1.3077 Tainted: G W syzkaller #0 PREEMPT(full) [ 588.134976][T17392] Tainted: [W]=WARN [ 588.134984][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.134997][T17392] Call Trace: [ 588.135003][T17392] [ 588.135033][T17392] __dump_stack+0x1d/0x30 [ 588.135062][T17392] dump_stack_lvl+0x95/0xd0 [ 588.135089][T17392] dump_stack+0x15/0x1b [ 588.135111][T17392] should_fail_ex+0x263/0x280 [ 588.135167][T17392] should_fail+0xb/0x20 [ 588.135195][T17392] should_fail_usercopy+0x1a/0x20 [ 588.135230][T17392] _copy_to_user+0x20/0xa0 [ 588.135269][T17392] simple_read_from_buffer+0xb5/0x130 [ 588.135292][T17392] proc_fail_nth_read+0x10e/0x150 [ 588.135342][T17392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 588.135369][T17392] vfs_read+0x1ab/0x7f0 [ 588.135386][T17392] ? __rcu_read_unlock+0x4e/0x70 [ 588.135407][T17392] ? __fget_files+0x184/0x1c0 [ 588.135439][T17392] ? mutex_lock+0x57/0x90 [ 588.135462][T17392] ksys_read+0xdc/0x1a0 [ 588.135480][T17392] __x64_sys_read+0x40/0x50 [ 588.135500][T17392] x64_sys_call+0x2886/0x3020 [ 588.135570][T17392] do_syscall_64+0x12c/0x370 [ 588.135599][T17392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.135624][T17392] RIP: 0033:0x7fccef41d04e [ 588.135640][T17392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.135724][T17392] RSP: 002b:00007fccedeaefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 588.135815][T17392] RAX: ffffffffffffffda RBX: 00007fccedeaf6c0 RCX: 00007fccef41d04e [ 588.135832][T17392] RDX: 000000000000000f RSI: 00007fccedeaf0a0 RDI: 0000000000000005 [ 588.135846][T17392] RBP: 00007fccedeaf090 R08: 0000000000000000 R09: 0000000000000000 [ 588.135861][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.135875][T17392] R13: 00007fccef6d6038 R14: 00007fccef6d5fa0 R15: 00007fffa59c2938 [ 588.135897][T17392] [ 588.674737][T17411] loop3: detected capacity change from 0 to 512 [ 588.725330][T17411] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 588.738567][T17411] EXT4-fs (loop3): mount failed [ 588.945759][T17425] netlink: 'syz.7.3089': attribute type 1 has an invalid length. [ 589.022476][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3089'. [ 589.033974][T17430] netlink: 'syz.9.3091': attribute type 13 has an invalid length. [ 589.049177][T17425] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3089'. [ 589.057523][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 589.060405][T17430] netlink: 14585 bytes leftover after parsing attributes in process `syz.9.3091'. [ 589.085398][T17425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.101392][T17425] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3089'. [ 589.157684][T17438] loop1: detected capacity change from 0 to 512 [ 589.184300][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'. [ 589.196048][T17439] macvlan2: entered promiscuous mode [ 589.203430][T17439] macvlan2: entered allmulticast mode [ 589.209951][T17439] veth0_virt_wifi: entered allmulticast mode [ 589.218646][T17434] team0: No ports can be present during mode change [ 589.231528][T17438] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 589.351506][T17438] EXT4-fs (loop1): 1 truncate cleaned up [ 589.443909][T17444] loop9: detected capacity change from 0 to 512 [ 589.459322][T17451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3098'. [ 589.504099][T17444] EXT4-fs: Ignoring removed nobh option [ 589.504842][T17438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.532717][T17444] EXT4-fs: Ignoring removed bh option [ 589.539161][T17444] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 589.553318][T17444] EXT4-fs error (device loop9): __ext4_iget:5393: inode #15: block 1803188595: comm syz.9.3096: invalid block [ 589.565185][T17444] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.565373][T17444] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.3096: couldn't read orphan inode 15 (err -117) [ 589.574612][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 589.574644][ C1] EXT4-fs (loop9): initial error at time 2000000415: __ext4_iget:5393: inode 15: block 1803188595 [ 589.574690][ C1] EXT4-fs (loop9): last error at time 2000000415: __ext4_iget:5393: inode 15: block 1803188595 [ 589.616405][T17444] loop9: lost filesystem error report for type 5 error -117 [ 589.631302][T17444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.650671][ T28] kauditd_printk_skb: 755 callbacks suppressed [ 589.650690][ T28] audit: type=1400 audit(2000000416.053:73299): avc: denied { prog_load } for pid=17437 comm="syz.1.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.690251][T17452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17452 comm=syz.0.3098 [ 589.720293][ T28] audit: type=1400 audit(2000000416.053:73300): avc: denied { perfmon } for pid=17437 comm="syz.1.3094" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.757053][ T28] audit: type=1400 audit(2000000416.053:73301): avc: denied { bpf } for pid=17437 comm="syz.1.3094" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.840152][ T28] audit: type=1400 audit(2000000416.053:73302): avc: denied { prog_run } for pid=17437 comm="syz.1.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.859561][ T28] audit: type=1400 audit(2000000416.053:73303): avc: denied { open } for pid=17437 comm="syz.1.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 589.879294][ T28] audit: type=1400 audit(2000000416.053:73304): avc: denied { perfmon } for pid=17437 comm="syz.1.3094" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.902265][ T28] audit: type=1400 audit(2000000416.053:73305): avc: denied { kernel } for pid=17437 comm="syz.1.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 589.922763][ T28] audit: type=1400 audit(2000000416.100:73306): avc: denied { prog_load } for pid=17437 comm="syz.1.3094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.995278][ T28] audit: type=1400 audit(2000000416.100:73307): avc: denied { bpf } for pid=17437 comm="syz.1.3094" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 590.016342][ T28] audit: type=1400 audit(2000000416.100:73308): avc: denied { perfmon } for pid=17437 comm="syz.1.3094" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 590.057697][T17475] loop3: detected capacity change from 0 to 512 [ 590.093952][T11306] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.103601][T17475] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 590.110602][T17475] EXT4-fs (loop3): mount failed [ 590.726514][T17485] netlink: 'syz.7.3105': attribute type 4 has an invalid length. [ 590.796422][T17490] loop3: detected capacity change from 0 to 512 [ 590.826019][T17490] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.856438][T17485] syzkaller0: entered promiscuous mode [ 590.866481][T17485] syzkaller0: entered allmulticast mode [ 590.889615][T17486] loop9: detected capacity change from 0 to 512 [ 590.908839][T17486] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 591.277058][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.803811][T17525] netlink: 'syz.0.3109': attribute type 15 has an invalid length. [ 591.881879][T14751] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 591.889852][T17525] netlink: 'syz.0.3109': attribute type 18 has an invalid length. [ 591.925691][T17525] netlink: 'syz.0.3109': attribute type 15 has an invalid length. [ 591.976135][T17525] netlink: 'syz.0.3109': attribute type 18 has an invalid length. [ 591.985691][T17525] netlink: 'syz.0.3109': attribute type 15 has an invalid length. [ 592.003070][T17525] netlink: 'syz.0.3109': attribute type 18 has an invalid length. [ 592.015877][T17525] netlink: 'syz.0.3109': attribute type 15 has an invalid length. [ 592.400669][T17557] loop0: detected capacity change from 0 to 512 [ 592.448061][T17557] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 592.455579][T17557] EXT4-fs (loop0): mount failed [ 593.038404][T17620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 593.045014][T17620] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 593.054486][T17620] vhci_hcd vhci_hcd.0: Device attached [ 593.090340][T17620] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 593.096980][T17620] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 593.152104][T17620] vhci_hcd vhci_hcd.0: Device attached [ 593.258335][ T3478] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 593.270246][T17635] loop7: detected capacity change from 0 to 512 [ 593.772605][T17625] vhci_hcd: connection closed [ 593.788037][ T3478] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 593.800172][T17621] vhci_hcd: connection closed [ 593.804168][T12437] vhci_hcd vhci_hcd.3: stop threads [ 593.825521][T17622] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 593.830475][T17630] __nla_validate_parse: 71 callbacks suppressed [ 593.830537][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3107'. [ 593.831699][T12437] vhci_hcd vhci_hcd.3: release socket [ 593.866684][T12437] vhci_hcd vhci_hcd.3: disconnect device [ 593.885653][T12437] vhci_hcd vhci_hcd.3: stop threads [ 593.891006][T12437] vhci_hcd vhci_hcd.3: release socket [ 593.910175][T12437] vhci_hcd vhci_hcd.3: disconnect device [ 594.332203][T17654] loop7: detected capacity change from 0 to 2048 [ 594.437004][T17654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.451694][T17654] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.575078][T17680] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3127'. [ 594.596629][T17665] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3125'. [ 594.608164][T17663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3125'. [ 594.625115][ T5467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.650763][T17680] IPVS: set_ctl: invalid protocol: 59 172.30.1.4:20004 [ 594.772959][T17697] loop3: detected capacity change from 0 to 512 [ 594.831751][T17697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.870950][T17697] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 594.916606][T14751] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.926981][T17696] loop1: detected capacity change from 0 to 128 [ 594.975194][T17706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 595.002282][ T28] kauditd_printk_skb: 1358 callbacks suppressed [ 595.002299][ T28] audit: type=1400 audit(2000000421.079:74667): avc: denied { bpf } for pid=17701 comm="syz.7.3128" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 595.040793][ T28] audit: type=1400 audit(2000000421.107:74668): avc: denied { create } for pid=17705 comm="syz.3.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 595.102708][T17702] loop7: detected capacity change from 0 to 512 [ 595.109164][ T28] audit: type=1400 audit(2000000421.107:74669): avc: denied { create } for pid=17705 comm="syz.3.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 595.118843][T17706] team0: No ports can be present during mode change [ 595.151009][ T28] audit: type=1400 audit(2000000421.107:74670): avc: denied { write } for pid=17705 comm="syz.3.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 595.201313][ T28] audit: type=1400 audit(2000000421.107:74671): avc: denied { read } for pid=17705 comm="syz.3.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 595.243841][ T28] audit: type=1400 audit(2000000421.107:74672): avc: denied { ioctl } for pid=17705 comm="syz.3.3132" path="socket:[50937]" dev="sockfs" ino=50937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 595.276961][T17710] loop9: detected capacity change from 0 to 512 [ 595.283367][T17702] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 595.290094][T17702] EXT4-fs (loop7): mount failed [ 595.295043][ T28] audit: type=1400 audit(2000000421.107:74673): avc: denied { read write } for pid=17705 comm="syz.3.3132" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 595.369180][ T28] audit: type=1400 audit(2000000421.107:74674): avc: denied { open } for pid=17705 comm="syz.3.3132" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 595.425065][T17720] audit: audit_backlog=65 > audit_backlog_limit=64 [ 595.437998][ T28] audit: type=1400 audit(2000000421.107:74675): avc: denied { open } for pid=17705 comm="syz.3.3132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 595.578951][T17696] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 595.588474][T17696] FAT-fs (loop1): Filesystem has been set read-only [ 595.715026][T17728] pimreg: entered allmulticast mode [ 595.872717][T17740] validate_nla: 60 callbacks suppressed [ 595.872735][T17740] netlink: 'syz.7.3140': attribute type 10 has an invalid length. [ 595.903808][T17740] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3140'. [ 595.909174][T17741] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3140'. [ 596.123794][T17749] netlink: 200 bytes leftover after parsing attributes in process `syz.9.3142'. [ 596.234644][T17755] syzkaller0: entered promiscuous mode [ 596.240411][T17755] syzkaller0: entered allmulticast mode [ 596.903662][T17761] loop3: detected capacity change from 0 to 512 [ 596.927269][T17761] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 596.933975][T17761] EXT4-fs (loop3): mount failed [ 596.941285][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3145'. [ 596.982699][T17762] lo speed is unknown, defaulting to 1000 [ 597.080903][T17760] ================================================================== [ 597.089037][T17760] BUG: KCSAN: data-race in rwsem_down_write_slowpath / rwsem_down_write_slowpath [ 597.098162][T17760] [ 597.100491][T17760] write to 0xffffc90003847ae8 of 1 bytes by task 17762 on cpu 1: [ 597.108223][T17760] rwsem_down_write_slowpath+0x3c9/0xa90 [ 597.113868][T17760] down_write+0xab/0xc0 [ 597.118030][T17760] kernfs_add_one+0x5a/0x280 [ 597.122631][T17760] __kernfs_create_file+0x145/0x180 [ 597.127862][T17760] sysfs_add_file_mode_ns+0x132/0x1b0 [ 597.133246][T17760] internal_create_group+0x441/0x9e0 [ 597.138547][T17760] sysfs_create_groups+0x3f/0xf0 [ 597.143497][T17760] ib_setup_port_attrs+0xe89/0x1400 [ 597.148722][T17760] add_one_compat_dev+0x297/0x390 [ 597.153766][T17760] rdma_dev_init_net+0x1b9/0x240 [ 597.158883][T17760] ops_init+0x22a/0x2e0 [ 597.163050][T17760] setup_net+0x9f/0x230 [ 597.167206][T17760] copy_net_ns+0x310/0x450 [ 597.171631][T17760] create_new_namespaces+0x20e/0x440 [ 597.177026][T17760] unshare_nsproxy_namespaces+0xe6/0x120 [ 597.182678][T17760] ksys_unshare+0x3f2/0x6f0 [ 597.187195][T17760] __x64_sys_unshare+0x1f/0x30 [ 597.191978][T17760] x64_sys_call+0x1cef/0x3020 [ 597.196665][T17760] do_syscall_64+0x12c/0x370 [ 597.201263][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.207162][T17760] [ 597.209487][T17760] read to 0xffffc90003847ae8 of 1 bytes by task 17760 on cpu 0: [ 597.217115][T17760] rwsem_down_write_slowpath+0x43d/0xa90 [ 597.222751][T17760] down_write+0xab/0xc0 [ 597.226919][T17760] kernfs_remove_by_name_ns+0x5c/0xf0 [ 597.232305][T17760] sysfs_unmerge_group+0x80/0xb0 [ 597.237250][T17760] dpm_sysfs_remove+0x63/0x90 [ 597.241934][T17760] device_del+0x13d/0x790 [ 597.246356][T17760] netdev_unregister_kobject+0x24d/0x270 [ 597.251995][T17760] unregister_netdevice_many_notify+0x1346/0x1710 [ 597.258421][T17760] unregister_netdevice_queue+0x1cd/0x200 [ 597.264152][T17760] ppp_release+0x9c/0x150 [ 597.268490][T17760] __fput+0x29b/0x650 [ 597.272483][T17760] ____fput+0x1c/0x30 [ 597.276475][T17760] task_work_run+0x130/0x1a0 [ 597.281066][T17760] exit_to_user_mode_loop+0x1f4/0x6f0 [ 597.286450][T17760] do_syscall_64+0x249/0x370 [ 597.291047][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.296940][T17760] [ 597.299264][T17760] value changed: 0x00 -> 0x01 [ 597.303940][T17760] [ 597.306262][T17760] Reported by Kernel Concurrency Sanitizer on: [ 597.312410][T17760] CPU: 0 UID: 0 PID: 17760 Comm: syz.3.3146 Tainted: G W syzkaller #0 PREEMPT(full) [ 597.323346][T17760] Tainted: [W]=WARN [ 597.327144][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.337208][T17760] ================================================================== [ 597.382791][T17768] team0: No ports can be present during mode change [ 597.414827][T17762] lo speed is unknown, defaulting to 1000 [ 597.453677][T17762] xfrm0 speed is unknown, defaulting to 1000 [ 599.241849][ T3478] usb 7-1: enqueue for inactive port 0 [ 599.247358][ T3478] usb 7-1: enqueue for inactive port 0 [ 599.327305][ T3478] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 600.484168][ T28] kauditd_printk_skb: 336 callbacks suppressed [ 600.484248][ T28] audit: type=1400 audit(2000000426.217:75010): avc: denied { read write } for pid=16262 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.515704][ T28] audit: type=1400 audit(2000000426.217:75011): avc: denied { open } for pid=16262 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 600.540245][ T28] audit: type=1400 audit(2000000426.217:75012): avc: denied { ioctl } for pid=16262 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1