last executing test programs: 4.502445218s ago: executing program 1 (id=2): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x71, 0x7fff, 0x19, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r2, 0xc0000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1a1042, 0x11) socket(0x10, 0x3, 0x0) syz_clone(0x200000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000001840)="f5f19c65b66031ec09d96b47bfbf6a448aa89bd9c0927364c2fd0e3a685ea936485be55cc83bbacef24a03ac749d44079f16eba6cb553b694d50e056d1988596cb0ff710a58f46e1751d79c5c3eb3ec9c10eda0ac045580d6f3b8e7a90e84d71f53a22c10981f15ac190fb083a45aae2f56df3a0f889cfc6abb0e9676516317c77de8fe7499cbb9d41e192faa72efa3d6bf3a50c8f235953a6e532628f6cacc0587dc45785fef5ed85fdcf6f8f24fb32e0d39d0f03daf0d9c176bddbb7c54445d4729bf8b4917bffce80a69347765023d7e0b236f613c2db12366ae6ae5a05927158390fd4279c7f03ffa79873d098bf9e687708a907f9475588a07fb907e09c1a303de07a5adeb25d4701f201123c9a55d79a111cdf39e9f9eb55fea49a9eed0a09b2ba332892a989870c7dd7613dbec9530522448f8b7ff216619584282b8b20560e50a266ac1dda0999be65257d35af3c02b2042fbdbf584ec049211b2358d35b5743deea98cccb1144f4f0d1408fe233cb2ff6ae5f8ad978387a680de1426a44360df070ea3aad700d1e4be3ad6879a5c0713f96501fbf6b3a8bd55207ae20daf277980f7f902d072a64a035cdf83598e4bf076a36f6583f32826269afe49ba67df1ecfda8508d439dfe94496f3c712e875a6d33ab44669ecd6786cc6f8621c5c65b35291882193fc967093bc609ceb104ebd67b18f828826e8ad58abc64ea4b63316cb6d6ed2cccec1d7f875ec5abfc3f33bb35248f57b8257b919f851be472da542c5b3ab80883f4fae2177a9c54a23213023ca28946e2352758bbd36fb9e946b7b437de9df33f4a942f8385f97d863c3fb652167838eb65d873713973264ba1b812351bc798c49580098c60ae016f3518d6514f5ac9d94bac529a0788ebc78f946bb07c52d4dd24ad18ad15815955ea01632bd9388b8dc6dfb6d17a797870b665018678c63c3831fe76141bc9bcfbe4b3bcf11ceecbbc82ba4ceea6c3325859ee40f9c5f78754476cc80d4ca4528f47767abbc4530076ab0215c6c6e61a0116d1f729d0ec25f8987596810adb79c6d1567f8e7dbe684ca158d3b5fb1e8693088ae9cc699ef5f8f2feafd0bc9d37875a670c5c8f9763eaa7a4e3c4cc333746f5f3c53634f20ffd4b6cf2e1c35dfc96a8d168ef364def726aa355e8aaebf48eb2063b9ebba689ed7ba9f8f07b71d831f2efbeae7e342694be039b1020a02abb66b69a940474bf3ade67eaaf0c8e4ac15dbd974b1e15b3edc23a1aa7796ab7b32a684068fbd9e1d556220e9059d1dcf0ead423f72f6f683673a9d5443935d867a58d680f49b341244b2c0434062ab57b23ba94bf45d014fd81521a9a6def24143fc29d55bde7ff10b0728c8d7e89f7fd884f9ca0839f6fbfcfb079a950b7e8889c37e665f571c40e94f7e6c32f3f8cda73566747488f5760846ec79d2f2ab56c3e6a65fe1fabc692b0428da1ae31b66b5210f41fc2c2dd277b55685eb55843b4794765b5ad1ddb00e93cee53003e62bea16326717b9b91dd65d2386167e522c2f1defb8171508db8d973de1bf1789cf97989825497e429f7785033b45465bc3c635ea6959bab0012b23e8bfad5cb9d69ef22ecbe245c2ce4b56f076fcbf10025168919d2042799a8e8a5529443ce0deac72ca5e3f141bb16fdaedee10012ba23a79f0b029523aeb3cba22c5b3eb6bc14a75cdf7e87819fa7fcbf9e3da72c76563335efb086de95aa7d8ade7a486e5f5a2c1514edaf86c14bbc020c931569518692f3ff18f2587d946de75e8e2ba90cd38aff63bf9d81ff8bed4bc8603ca8b0424074dcdf0d85c7895efb83e366ec26991ffb5b82edea67484cfd313465e08a10599309ba16491725944362b40308e78a2af4022909ae948603fe03b4391b40798f988cf75da0942952fb53423ce1abf319716c783fd99d2e10ad29da3a780ba5836255ebf28cdd1cf62721ef518bed17a470ba362dff95a8b79602582d0c12925db45921b1335a7850a751cbccc787a9f67e784f20f499044b3d8dfc80385cbff003cb618a7a2e36bff59f5a53d844ad13664d8a36bbb86db766b24cfb687123cb41f1e4f246bc7d0ee76faacbf2edd313ca810ec539cc57e5983258e5002289c36d7d0fc6915c186eca936564f2593b5bb5eb2f875b8ff03d422c97c40410b260f20eac73dfa54bb7f280ce8af123d3fcd43421b0228249db7995f0d28b01665cbd501869ecfb17bbd88aafbd5cde125ff5348d5a8609e6d50dedb36bec9083c21059f89bcebc297ee9c132f4c5f6b4cff6e0d487b50118981998836df24ee95d7e708b23056b4d719e4fd70cf1e45eb5788217aecfb459715e86d6479540665e0926685308007ee5a6e903978fcbb4f68426d4bc4210bf4b8909b8b0ef8a7987f100eaa0adac737729597f741c31d64873576246b372a687f3aaf3c01015a80bb9fbe93536ce6bab4361881898d26045b7ff15401f2a71ec15563a9ccc17045d2c9d86355ee1b4fc372d7526f2eae9b669506f5182a759c74cac93781f1501da67b78052360f5a93699d6a4e8019b70e3f70962e1286a20b552f27fb01485609ec84ba0045cc00d3baf3dd5f31e62d7b70aaff9f2b38b71ac76ca0180ee370065f0e26e6d71a76ce339c195c78bf1a8226d0f77a9b59aa74464afedba4083629abd6ee5a4f3e60131bfcff70948b6ee4b8005d768a4eb74ba2d3b4b896013df1bf329861c5f4489dd4138ade2f206a5a61332f16e88f037de85a231ed8085b4d827b8375516c62ba9fcb469a5be3a3eaf46940c33ddcbd21a10493f780c1b4399e5f4aee24d069cea8e2fb7fad27b918c6ef28e8cbdf8601ad9b8f942b2b2f159ed8b1489b977b193de1230223750d83d67cbd7acf622cf28a33adae83b2dbed81cadbea7fb9674f66a7ff6cbdcc286828f1ed3b0ba3c6c145b598d2c0a3e4f8002363ddea8f95897a00fb19e9d45b218afa4af3cc9cb1990513d8dd81bba99af9807190fb43a682ad2dd192724a3e26f18e968275c857b8facb611d6d2b1f0d91d243d620e6119cf515d4effe78050b5dcd8610dc981ad9a80bcf8b72fae72b35d16a4a71a10990d551911097a96133254c8d1e6aacca568b877f766fb2e27bb45acffdd3110dec3f1b4ee8148cd8522d5703387769047c53233938e94541215b7f8c452e8b4d5c70791085dbde772dbbb60d1aa37d41c7557f2a91bf1486c23e2e4331e84ac42ceab0331e60df21b33c7395f4585ae30423f691138c9dfdff83c01d6b2643da564b09a7cadf5afb4e45e3118f5c26405af959670f8166d8e2631127240a764e0a22cece31a521e99cf8156482085c7cabe0b59cc831ed3288bf1030a8d58199e8c67b3acbc86b7112eb68d1f338550af22e40a6f1a87325a6dd72e1cc91d05bc1566419e237243a5e7d2801565dc2f166cc1c11d6385581f19017cdcbdcdd6bd5cd866a01719f7658d63470958229bbd1fd76699ff308b0c1424c336439e17afef3a5e4f7358a35084cabd46a577d8654363df6f3f14bb583281bb15277d77d1f785393cdc4572afa22b8f61794e6d6ef2f2532a78619d0375f5417d30feb1b16dadf5d59b1296fe8f66e442bc0ebc7ac860dce0b27bb2ca32fbfe9e660bb1582d06991edf62f88f168c3835a47e4647c5bdf01278c949399ad8fd2365fc6f5e83df5d915373a7e9ed18cfaf2039077fca5b163f95dd4378874aa5dff1a8376ba8c04b7c03d3e7008057c8bff0b0273231b7429bd7da358f2ddc65251aca0a4709a2eac64bed1db4d98cbaeec705891a177ef37d9861b1d3a82e105ece6f34c6c67c836fbaa93770becda0b99688e7671e8a564ebbc1a3a6fd947c56bd928ab68fecf09dcea322ea14fd8cea82d919a75c954c351235497c7db8f82f551681a7b690b2df56bf6561350ae2c8eea91b1262b48de06c8ac835fcb8d0268b99d77ac40c035c950e84df684ed73827fd942a69d5956cd0c94a52343c56c173ccdd806c7d5f6e398000e5afb32f86050653769a509a27a323751e371f509b2e69440d5f56b64dd0604c14e4fbba976b3a08d4b6768869829befdbdcc14bee33dc8bc62acd9d0c3d87e8873fc0a9eb65afd8799b11d17445d3b3ef3c823e8b142e559bf2dc33e091778f19dd6ee55af78edfb9eca013d2eca96b33f5fbff0b863bf62b46f4521dcfa6fb7164fe7630d48629f2d21039067e8dc1c361c1c82e11a01773ced22712c562d2d25d7aa3afec1e31bdaa9a5c0b14f0fd80c1431a560788952f0d9e236fa765db315efdde6e0b843cfe6987be1654aece7e72b1d7a096b56677eac954950a53e0459943b238591746e7523aa6029d200a98f42b752ac64fad7354c81518b57419cf1cf1830c395c2220f44bec8e82f4e833676ac857038ce84b0bc39d766d25d31749b670d9d99bc8370fa2813ebf7d63b21a2668eb961cfb7682bc5c238c298a6f32c103f7ece047543707be5f87f0522b833e5f1ff726f805702430b0e73e52ca7b74c7d2f96a761b49f2eebca9dab119f2ca924b5756dd53893a3167568493484cc5ab2f449dabb0866d23f7eb131f82cc1ade67e90be1d2b31d8c4cda659e522b3a71c8de38e2593b116e0eed0af200aec29fce79e6654b50856097e832b5d70d8c21e16b80a2acae011bbbc16949736f6f4c9ccd304af36aece768cf9c2f8d4c137b7e297e2c84f241181056bdfaddda05aa7fcad3ddd6d442c864b5c01a2f96811607f3dfe70a0890fd374e0ee087881520d822caf3e8b1a71b333de8661d4e5a23a7002e9f4b0f89b3f9f1255bdfd019ed0c63a1169c43130f263d444ccbf0e15e90e92a47654c28193cecc67bceab998287c4ca70b3d18675f7df88d601deb2b454164a9d92561a5bd3e45c5c99e9cc0ff64c3d67c5720030cf1cf5ff9615ad61fd85503b93da1193c3f34660601998b3defbc053d68e1379617fc39a4f4366064407b1857cf49491d2209e54dad459b595e733c4d5356ef20f866c14cf7f942d974d49a041fb74684d414366bbd30c87b81d51abe9a1001edb62cceabe71d5902112f7232d03a3f365e6816f815f04418d1e40e1eb572953dd83398058588db5969e0c917871304ded65b340db72b0e72d80890ef4a83c00949d29403f8556732c5c5fb96d606fcd6fd1fc66d8cf25faba6c76967a04642ece5de17af51382524613ba9868c6e9259c4647ed40f7760c24d096ad9c2d6140cea0f69598c02ea5cbd3f6eb64ffbe04f8fcb7cc3d6c9709c7d0fe95a965f380b909b773a6506aa5e99214747767f33ef03c80a809cc8e98f81a80c6be4036352fed8db5a3312d9090cf43248ade4c62f151d1ff1d8d9285fd6b0fc705a1255579108358c04fac3cbef06d4f0ec8242babda3786179a01ef74ee2aad397c3cdbbed1d49ba3817e3bcc45c9122256d4f7f9fe724fa6c9404d893d04d9e64a9fe0cddb84d38acbc0dd2fb5f0aa1d0cc53830d8854a3f1ae84c2f8cf357f1fdd1c826102b8a5e67a49242ae3335acf5b3e7d1fdd69cbfaed1e3406ca743244a57c88cfbf189a2fc4a94143888fb98cb1c84758c58bf54face021d29f1916cab9f5ddb5c507773d21d7dfff4c790b63d1a988edd918e1dade106c886c7dfad1c0ae142d152d50a87804e09e67049952329fd81ee558753c04d67098aa8a0c78a77197c34894ca8fb2b1f822251e612e6596311e6594c514cb3a5656b3ff6f6014444428a37d3cdd031e69c47f8a22d100d0939d56d1d429c5fa278fc6822c10f08e34891d9dd9bc50c0f74d519be774b1ff0df053") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) socket$unix(0x1, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 4.440104201s ago: executing program 2 (id=3): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66, 0x0, 0x8}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x72240, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000d0000000800000086"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000040), 0x0}, 0x20) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000001c0)={0x1d, r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x2, 0x2, 0x60d3, 0x3}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000300)) r8 = inotify_init() readv(r8, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {r9, r10+10000000}}, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) sendmsg$can_raw(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r4, &(0x7f0000002340)=""/232, 0xe8) 4.323362658s ago: executing program 0 (id=1): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x71, 0x7fff, 0x19, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r2, 0xc0000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1a1042, 0x11) socket(0x10, 0x3, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) socket$unix(0x1, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 4.198976505s ago: executing program 3 (id=7): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.10467214s ago: executing program 4 (id=8): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x8, 0x0, 0x0, 0xfe, 0x9}, [@RTA_NH_ID={0x8, 0x1e, 0x9}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x6}}}}]}, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64, @ANYRES64, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="ecff000001"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="0200000000000000000000000000000009b7212903a985e4b01c208ba20acbc0823a54de13c4e181d7717f73db061d8cf7"], 0x48}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ef5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1869d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f33ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a29459aff1374df5c49ca11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc006b340658342d2d9e06008c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e9dffd8918de33aed5bb09cb2a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf422b7473c24b93085c51e02af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00bb02000000000000c84799aa792cdaeb607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee127ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c435c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fceea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfe089e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cf594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f5bce1cdaa99705a8fa48f61071f548d411353965615c24c1860790dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8bb07ebf6e3f16584e95607e319b2ea9776f89c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd400557230b2caba26bb91d7b1b98f11fb7a77b03206c151b00015305af815f7da19872085b503a21cbe722842c26ad8dd6b83018300000000000000000000f4ffffffffffffff000000000000000000000000000000000000798d011c62dbfdbad9e58e07d371e3a2399f2369631138ad4fb3aeb3f51233922b4c700fb163efbc55c912276685a774f2dce9bb9c54fd1f505eccf06323fad86c37adafb5e80b96ba9f925a6fd57de5fedf691e8b41c9835a840d12a224ed233c93ed92603401e5a61298294e9cab078c231121d4e32fb8286478fb12f5804d13c7bcff5dcffccd1d520dc04910239efc397b7736682e1c0ef0d001c17ec1441026ed4b1395b8e88a58d667a65cec1ddee1b30bcc96652a238c990a2701e2ee0915335fa4b8c33372bd00021f17c012451519ad56594c9469f164bb915edb1fd4ce76fb37bb9512632e9c9e7dcc772128c280c6e6cc0e859bd65c666e8b7732a2c2d517af56f4cde502f364922f3c2bbf9f4ced5c6f3d33428775b7399e6c6cf52bc8d5b48079700db251c7cdad3836c1e137b11917cff00e0ecc5e93fd7e8bdd83313a27197651c92f2f9be4a6f83662fa948c46632a979e8c66d22777a06601c5f5d3ab28b9f9e39543d2bb9de6ce57a6c1c3a635a0515c87abd11988cae405b9495f54b8d89503a8c9e96bdf08eb563e4cffe00e27272ca6e392ffca16b172ce8b6ee542ec9135e969b7b029beaeba12836110fcb686d82c066d0fc67fee8a00acda99a302a7aac9e920e34174323e7c6aeefd0a092545274fb164f21ac2f46849a6d0b51ad5a230a5ffab7a66e7dde5a335aeaa9736678319f344a32c99ac748bf200368963de24c237873ff5a01f14335de9a6d06c8b49ff27ddf0f13d5fe0901355765c397ce52791339d666eec141f0d33ca51f7b8aa6e9937631269b064d9c7323df8b7154f76708b912e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000001c0)=r6) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe800000000000"], 0xffdd) symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x400, 0x24) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="ab00165197c0e7d17c41c9352f69d6f0"}}) mount$incfs(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f0000003140)={'sit0\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.708877174s ago: executing program 4 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000002000010000000000ffdbdf250a105f00fd0000031a00030014000200fc0200ff070000000000000000000001080018004e214e2214000100200100000000000000000067000000004a3c817b2f710d6f61"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfcff, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.59778263s ago: executing program 4 (id=10): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="05"], 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f08", 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="ee158f000000000000000000"], 0x24}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) pread64(r1, &(0x7f0000000580)=""/102400, 0x19000, 0x2000) 3.502701616s ago: executing program 2 (id=11): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x3eb, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x3f6}}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000063012f00000000009500000000dd0000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) 3.007396815s ago: executing program 1 (id=12): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1d}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000001, 0x4, 0x200000003, 0x9}, {0xa5f}, 0x1, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4cf, 0x6c}, 0x2, @in=@private=0x200, 0x3502, 0x1, 0x8, 0x0, 0x7, 0x1, 0xfffffffe}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000300)="c2b95bb1", 0x4) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f00000000c0)={0xce, 0x0, r6}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x10008000000, 0x4, 0x7649, 0x1, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000007c0)={r8, 0xffffffffffffffff, 0x3ff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmmsg$inet6(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xf209, @dev={0xfe, 0x80, '\x00', 0x36}, 0xe}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000500)="13ba75835df5b24223fb859f04ae244550d8d771332dc79050c762025ff1bc903e5500ea066322a9075dc90aa113b56f553e39a2529295c9e8af5285f8ca7ea9ad3d11eed29341ba54ae2ab2803e4fea6fbd9914b54e40796017890586d2572d67c32270e7de08312851555846ae1c6c8ff2d0f7dca5441f6171c251966f4d266beb05c4a39906f30c5c1f3d626102318b5c46363e726234be88fc4169bfba1e3d53f2b0ee1cc7cf199f6828bdc45b1ca289df926c1475e3cddeda4952d5026afc0d3f950e9f46805f734eecb9511cfb3cc54e39a4ea3489b6fc23540af9e48dc2683319053bf64345a4bdb1cd5d1378f0d237b9f2", 0xf5}, {&(0x7f0000000380)="32209d4f3abe2726d2d75d46f1fe4bcc0e724d4b38e7a14b9a27e03261d95ac061b7c03d5a66a7caca8ae6d4eb7de1688bcfee8f7f9c50ad82b3e602661c4c8f7b3f118b9b4d5212ebd289b8b53016ae24d4e546e3fc6782f9fd682083801ebbfdc1ae4d5c4bfb0cf1c235f2be58f629ab7555658fda4d01283ee3a203afc9e710b5ae9ed6a21345d95cfd0277098bb7f175a36115f1297b6fd61709913913e000cdb56f2cc1f9c4e50ee01aec7752118fd26b7fc993f57ed3", 0xb9}, {&(0x7f0000000240)="e2f387d7d28616cc4e19b52413d131321ad297b9322059d6bd980cb04586788ff6096f85fbcbfcd1a5172613180429bd993b241237c6ca8f0e195642eccf3aca47fb8c1a9ddc935aaea9f9c986c18559e3a6da2bb60ebd47", 0x58}], 0x3, &(0x7f0000000600)=[@hoplimit={{0x14, 0x29, 0x34, 0xc}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x3a, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6c}, @enc_lim={0x4, 0x1, 0x55}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x200}}], 0xfffffffffffffd49}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x215b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000700), 0x0, &(0x7f0000000900)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x1, 0x14, 0x2, 0x1, 0x0, [@loopback, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @ipv4={'\x00', '\xff\xff', @remote}, @private1, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x64c}}, @tclass={{0x14, 0x29, 0x43, 0x3c4}}, @dstopts={{0x20, 0x29, 0x37, {0x6, 0x0, '\x00', [@pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1d}}, @dontfrag={{0x14, 0x29, 0x3e, 0x400}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10}}], 0x150}}], 0x2, 0x4000814) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000082505a1a4400000000101090244000101008000090400001202060000052406000005240000000d240f01000000000500000000090581030002"], 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.993883765s ago: executing program 3 (id=13): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}]}}}}}, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x80, 0x46, 0x2, 0x8, 0x7}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x41, 0x5, 0x75}]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x3c}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={@local, 0x1, 0x0, 0x30, 0x0, [{@multicast1}, {@broadcast}, {@multicast1}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[], 0x24}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6c370c8900083c0120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) fstat(r3, &(0x7f0000003000)) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x102, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) 2.91341929s ago: executing program 2 (id=14): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup(r1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x120000, 0x3, 0xb, 0x406}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xbdb], 0xdddd0000, 0x1c4213}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a1400000a"], 0x28}}, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000010c0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x20004041}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x27, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc0000000}, [@alu={0x7, 0x0, 0xa, 0x2, 0x4, 0x100, 0xfffffffffffffffa}, @ldst={0x0, 0x2, 0x0, 0x1, 0xa, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x400}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xa9}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x9}]}, &(0x7f0000000100)='GPL\x00', 0x3ff, 0x1000, &(0x7f0000002a80)=""/4107, 0x41100, 0x8, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2ec3a, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740), 0x10, 0x9}, 0x94) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 2.74733625s ago: executing program 0 (id=15): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xa080000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) syz_open_pts(r2, 0xc0000) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1a1042, 0x11) socket(0x10, 0x3, 0x0) syz_clone(0x200000, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000001840)="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") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) socket$unix(0x1, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 2.679926614s ago: executing program 4 (id=16): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @local, 0x80000000}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r2 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x40106726, &(0x7f00000000c0)) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f00000002c0)={'veth0_virt_wifi\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x1, 0xce2f, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x35) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r5, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r6, r5, 0x0, 0x578410eb) r8 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x1}, 0x0, 0x0, r8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) syz_emit_ethernet(0x54, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaeaa0a0800452000460066234e2300"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400069078fffed4934eb0ad7daf2d9e32d0bc50ace9553acd6da8d74c1fff7536f33aa7b6"], 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r10 = signalfd(r4, &(0x7f0000000080)={[0x9b]}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000003c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4, 0x1, 0x3, 0x1, 0x0, 0x2}, 0x20) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 2.286096307s ago: executing program 3 (id=17): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000780)=ANY=[], 0x0, 0x254, &(0x7f0000001080)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x1017, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb0011ffff"], 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/224, 0xe0}], 0x2, &(0x7f0000000480)=[{&(0x7f00000017c0)=""/247, 0xf7}, {&(0x7f00000018c0)=""/218, 0xda}], 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r3, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) r4 = getpgrp(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000f5ffffff000000002deb9cbb9e4a37542224471be8460de79d2391797a5b0b40a7800f4f48ee2abeca5819048be46d05829c9a7d7ff8cf4f84349787eeac24b7920f0dfa52eb855c7576bd9389a78fec3ecf161c6a7bfd750600000001000000000000000000000000000092a9769e01c84b3c7c9c7c04d9d4435336b9e00cae9289"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001ac0)={'ip6_vti0\x00', &(0x7f0000001a40)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x4, 0x4, 0x52, @private2, @local, 0x8, 0x700, 0x4, 0x1000}}) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xac) close_range(r7, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001c00)='cgroup.controllers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d00)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000001e8535e90000000c00a23bc20af62289575bb65bdf0f0b0000b700000000000000"], &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000001b00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001b40)={0x2, 0x6, 0x2, 0xacd}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001c40)=[r8, r9], &(0x7f0000001c80)=[{0x2, 0x3, 0x2}, {0x3, 0x5, 0x1, 0xa}, {0x4, 0x2, 0xd, 0x3}, {0x2, 0x2, 0x5, 0x7}, {0x1, 0x4, 0xf, 0x9}], 0x10, 0xfff}, 0x94) syz_clone3(&(0x7f0000000500)={0x200000, &(0x7f0000000000), &(0x7f0000000040), 0x0, {0x2f}, &(0x7f00000001c0)=""/87, 0x57, 0x0, &(0x7f00000000c0)=[r4], 0x1}, 0x58) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 2.0679879s ago: executing program 3 (id=18): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902120001000000000904"], 0x0) syz_usb_connect(0x0, 0x33, &(0x7f0000000240)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402010102", @ANYRESOCT=0x0], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x30282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) timer_gettime(r1, &(0x7f00000004c0)) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{r3, r4+10000000}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000780)=ANY=[@ANYBLOB='nonumtail=0,iocharset=iso8859-5,uni_xlate=1,shortname=win95,rodir,utf8=0,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x289, &(0x7f00000001c0)="$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") syz_emit_ethernet(0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6875ab3a00008800fc020000000000000000000000000000fe8000000000000000000024440000aa"], 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) chdir(&(0x7f0000000140)='./file1\x00') 1.8781938s ago: executing program 2 (id=19): clock_nanosleep(0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x10001, 0x200) ioctl$BLKFLSBUF(r0, 0x1261, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="76389e147cf2457800dd389f86dd", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_io_uring_setup(0x47a8, &(0x7f00000002c0)={0x0, 0x46b4, 0x80, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f, 0x0, r4}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r4, 0x369a, 0x0, 0x1, 0x0, 0x0) io_uring_enter(r4, 0x1fee, 0x2fc25, 0xc, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0xe7}}}}}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) 1.685720942s ago: executing program 4 (id=20): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="05"], 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f08", 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="ee158f000000000000000000"], 0x24}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) pread64(r1, &(0x7f0000000580)=""/102400, 0x19000, 0x2000) 1.265575116s ago: executing program 1 (id=21): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r6, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) syz_read_part_table(0x604, &(0x7f0000000000)="$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") r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r5, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x9}) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040)='debugfs\x00', 0x189, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @dev}, &(0x7f0000000080)=0xc) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200007, 0x200, 0x6, 0x8}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_readahead}, {@afid={'afid', 0x3d, 0x4}}, {@cachetag={'cachetag', 0x3d, 'fdinfo/3\x00'}}, {@fscache}], [{@obj_role={'obj_role', 0x3d, 'fdinfo/3\x00'}}, {@appraise_type}]}}) syz_open_procfs(r0, &(0x7f0000000000)='fdinfo/3\x00') 1.091249636s ago: executing program 0 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x28}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1e73}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x4, 0x4c000) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000200)=""/227) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r3, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x7fff}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8084}, 0x880) r4 = syz_open_dev$evdev(&(0x7f0000000480), 0x400, 0x800c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x50002, 0x50) r6 = syz_mount_image$fuse(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x1000, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '&'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, ','}}, {@fsmagic={'fsmagic', 0x3d, 0x5f4b}}, {@flag='lazytime'}, {@obj_type={'obj_type', 0x3d, 'wlan1\x00'}}, {@measure}, {@pcr={'pcr', 0x3d, 0xa}}]}}, 0x1, 0x0, &(0x7f0000000700)="8c7a95f49f390978169278971794da34a006ea3dc14d48878172fb98c97edcdeec241a28b0f5ad7ce7910bcf6518a07ce73c5c161d29f2142d1c91ef57d43e69a222565289b68c2f5a89221d32716fb915adab3bc163ff40297c561cb358f0b7bb7d6877872f51db35e28d1cd34a6597d1430fa81e52d613b801cc724b29a0b57f6a9a97ab505826c6a8e34edb55671b34857bea3defbd3c268dbc05e6831bf8c939814900fde044706bfdd330db2a62c7822e40822e3eb40b5c7107862d29a78e74f4d7") renameat2(r5, &(0x7f0000000500)='./file0\x00', r6, &(0x7f0000000800)='./file0\x00', 0x4) ppoll(&(0x7f0000000840)=[{r6}, {r5, 0x100}, {r5, 0x4201}], 0x3, &(0x7f0000000880), &(0x7f00000008c0)={[0x4]}, 0x8) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000940)='pids.current\x00', 0x0, 0x0) r9 = syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r9) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x80010, r2, 0x49c41000) statx(r0, &(0x7f00000009c0)='./file0\x00', 0x4000, 0x800, &(0x7f0000000a00)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000b00)) getdents64(r6, &(0x7f0000000b40)=""/160, 0xa0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r8, 0xc038586b, &(0x7f0000000d00)={r8, &(0x7f0000000c00)='&', 0x4000, &(0x7f0000000c40)={@align=0x9, {0x9, 0x3ff, 0x3, 0x7}}, 0x40, &(0x7f0000000c80), &(0x7f0000000cc0)=0x7fff}) timer_settime(0x0, 0x1, &(0x7f0000000d40), &(0x7f0000000d80)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10000, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000e00)={0x1, 0x3, 0x4, 0x6, 0x9c, "ffe7a68e7cffe73e15aff350a19520d8318a74", 0x80000000, 0x81}) write$cgroup_int(r7, &(0x7f0000000e40)=0x5, 0x12) syncfs(r7) madvise(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x11) sendmsg$NL80211_CMD_TESTMODE(r8, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x1b4, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xd2, 0x45, "bf466a703641624e90b50d1345c7a585e65e8dda3823c0d967663f24b0ea50d1f6c299e31e1e26113ebd0975a835f08c9d1081f1cd0ca6e4004a78302a7f3c86a03ada29f671319d1084f51bc245a7ddd1549f04231e92cf9eba563eec0f1e2d3ce4f7a454ea902b42aa8f0c2e4e9906e9c2274cceec4e7fa2b0052b8e3cf3806dee8591f5879c04d8bd049b30046a2dca98007b077c332c8e9b5c2eaf5da6380e73b566f6fe030399b25f11c20318d3240111137f0a35c46fd781a765a96aedaebd0f3553fdb17cee7a214acc08"}, @NL80211_ATTR_TESTDATA={0x41, 0x45, "271d6a275e9c5abf8b9eb6272748f4af300f928788c03addf91a1b8aec83b06a687f7d01f91d9d6204fc6e2fb9074d02b2612f8d9602fb51ba05d5a56a"}, @NL80211_ATTR_TESTDATA={0x86, 0x45, "2d5ccfaec3f3e3fdd828202213603d497b9a9d47ad41345f10032fd5981bbf21ede2470f4ed1c8ec854e6c927d5d6fb46d481e51539f7ce8663eb88064d0c7996f24f377e18b659fea9760272bf3b97650f171942dd6bc396e7bf662604cfb8eb68867fa9e3612075bac842718bf2c71aebbe31d4740871f287413c8fef85a15d7f9"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x48000}, 0x80) tkill(0x0, 0xe) 746.684766ms ago: executing program 4 (id=23): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x80000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000200)={'filter\x00', 0x2, [{}, {}]}, 0x48) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4040004) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(0xffffffffffffffff) syz_usb_control_io$hid(r0, 0x0, 0x0) 647.946652ms ago: executing program 2 (id=24): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 203.177288ms ago: executing program 3 (id=25): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@barrier}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) getsockname$unix(r0, 0x0, &(0x7f00000004c0)) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x20000000000000d6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) 40.185967ms ago: executing program 3 (id=26): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x2, 0x0, 0x7ffc}, 0x50) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000c6, &(0x7f00000008c0), 0x1, 0x569, &(0x7f00000002c0)="$eJzs3U1rXFUfAPD/nWT6/jxNoRQVkYALK7WTJvGlgou61mJB93VIbkPJpFMyk9LEgu3CrqW4EQviXly7LH4BF36GghaKlKALN5E7uTOdJDPJtJ0mU+f3g1vOuS8598y5/9NzcmYyAQyt8eyfQsTLEfF1EnE0IpL82GjkB8fXz1t9dGMm25JYW/v0z6RxXpZv/qzmdYfzzEsR8ctXEacKW8utLa/MlyuVdDHPT9QXrk7UlldOX14oz6Vz6ZWp6emz70xPvf/eu32r65sX/v72k3sjee7YnSTOxZE8116PZ3CzPTMe4/lrUoxzm06c7ENhgyTpuPenXb8PnsxIHufFyPqAozGSRz3w3/dlRKwBQyp54vj/rfh87gTYXc1xQHNu36d58Avj4YfrE6Ct9R9d/91IHGjMjQ6tJhtmRtl8d6wP5Wdl/PzH3TvZFv37PQTAjm7eiogzo6Nb+78k7/+e3pkeztlchv4Pds+9bPzzVqfxT6E1/okO45/DHWL3aewc/4UHfSimq2z890HH8W9r0WpsJM/9rzHmKyaXLlfSrG/7f0ScjOL+LL/des7Z1ftr3Y61j/+yLSu/ORbM7+PB6P6N18yW6+VnqXO7h7ciXuk4/k1a7Z90aP/s9bjQYxkn0ruvdTu2c/2fr7UfIt7o2P6PV7SS7dcnJxrPw0Tzqdjqr9snfu1W/l7XP2v/Q9vXfyxpX6+ttV890lMZ3x/4J43WevJGG+ofvT//+5LPGul9+b7r5Xp9cTJiX/Jxa3+huX/q8bXNfPP8rP4nX9++/+v0/B+MiM97qn3E7eM/vtrt2CC0/2zH9m/Nbje1/5Mn7n/0xXfdyu+t/3u7kTqZ7+ml/+v1Bp/ltQMAAAAAAIBBU4iII5EUSq10oVAqrb+/43gcKlSqtfqpS9WlK7PR+KzsWBQLzZXuo23vh5jMVwyb+alN+emIOBYR34wcbORLM9XK7F5XHgAAAAAAAAAAAAAAAAAAAAbE4S6f/8/8vvXPux/Y/TsEnitf+Q3Da8f478c3PQEDyf//MLzEPwwv8Q/DS/zD8BL/MLzEPwwv8Q/DS/wDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz7b1lYf3ZjJ8rPXlpfmq9dOz6a1+dLC0kxpprp4tTRXrc5V0tJMdWGnn1epVq9OTsXS9Yl6WqtP1JZXLi5Ul67UL15eKM+lF9PirtQKAAAAAAAAAAAAAAAAAAAAXiy15ZX5cqWSLkpIPFVidDBuQ6LPib3umQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgsX8DAAD//welMww=") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) r0 = open(&(0x7f0000000400)='./bus\x00', 0xcc0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) ptrace(0x10, 0x0) openat(r0, &(0x7f0000000880)='./file1\x00', 0x200000, 0x121) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1e, 0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) sendmmsg(r5, 0x0, 0x0, 0x9200000000000000) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000001c0)="$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") 0s ago: executing program 0 (id=27): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008080) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 19.810823][ T28] audit: type=1400 audit(1770833528.066:64): avc: denied { mounton } for pid=262 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.814550][ T28] audit: type=1400 audit(1770833528.066:65): avc: denied { mount } for pid=262 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.815452][ T262] cgroup: Unknown subsys name 'net' [ 19.819723][ T28] audit: type=1400 audit(1770833528.076:66): avc: denied { unmount } for pid=262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.820387][ T262] cgroup: Unknown subsys name 'devices' [ 19.938355][ T262] cgroup: Unknown subsys name 'hugetlb' [ 19.944000][ T262] cgroup: Unknown subsys name 'rlimit' [ 20.060428][ T28] audit: type=1400 audit(1770833528.316:67): avc: denied { setattr } for pid=262 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.083682][ T28] audit: type=1400 audit(1770833528.316:68): avc: denied { mounton } for pid=262 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.108583][ T28] audit: type=1400 audit(1770833528.316:69): avc: denied { mount } for pid=262 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.138929][ T278] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.147851][ T28] audit: type=1400 audit(1770833528.406:70): avc: denied { relabelto } for pid=278 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.173362][ T28] audit: type=1400 audit(1770833528.406:71): avc: denied { write } for pid=278 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.199487][ T28] audit: type=1400 audit(1770833528.456:72): avc: denied { read } for pid=262 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.199601][ T262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.225220][ T28] audit: type=1400 audit(1770833528.456:73): avc: denied { open } for pid=262 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.541027][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.548216][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.555937][ T285] device bridge_slave_0 entered promiscuous mode [ 21.563034][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.570174][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.577671][ T284] device bridge_slave_0 entered promiscuous mode [ 21.595948][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.603120][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.610658][ T285] device bridge_slave_1 entered promiscuous mode [ 21.617333][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.624385][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.631973][ T287] device bridge_slave_0 entered promiscuous mode [ 21.638814][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.645914][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.653309][ T284] device bridge_slave_1 entered promiscuous mode [ 21.671265][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.678407][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.686016][ T287] device bridge_slave_1 entered promiscuous mode [ 21.783183][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.790372][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.797958][ T288] device bridge_slave_0 entered promiscuous mode [ 21.806756][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.813847][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.821434][ T288] device bridge_slave_1 entered promiscuous mode [ 21.834839][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.842082][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.849655][ T286] device bridge_slave_0 entered promiscuous mode [ 21.859837][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.866954][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.874478][ T286] device bridge_slave_1 entered promiscuous mode [ 22.006798][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.014052][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.021394][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.028542][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.063866][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.071084][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.078522][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.085573][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.101014][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.108129][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.115424][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.122586][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.162081][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.169599][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.177352][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.184638][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.191916][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.199180][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.208266][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.215666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.233447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.263518][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.271865][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.278964][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.286990][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.295256][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.302343][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.309874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.317501][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.324891][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.333175][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.340292][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.347749][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.356028][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.363077][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.384547][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.392685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.400806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.409191][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.416338][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.452522][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.460837][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.467926][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.475303][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.484879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.493003][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.501328][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.524591][ T284] device veth0_vlan entered promiscuous mode [ 22.538711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.546418][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.553834][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.562446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.572631][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.581175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.589556][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.596631][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.604270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.612843][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.621136][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.628205][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.635697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.643910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.652379][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.660826][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.669293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.677200][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.684634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.698133][ T287] device veth0_vlan entered promiscuous mode [ 22.717372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.725056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.732734][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.740918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.749461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.757599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.765537][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.773756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.781925][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.790297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.798762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.806929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.814940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.822659][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.830530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.838124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.846946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.855219][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.864129][ T285] device veth0_vlan entered promiscuous mode [ 22.873489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.882224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.890740][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.897825][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.906710][ T284] device veth1_macvtap entered promiscuous mode [ 22.915620][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.923506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.936931][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.945342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.953932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.962490][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.971008][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.979424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.987630][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.994651][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.011618][ T286] device veth0_vlan entered promiscuous mode [ 23.018897][ T287] device veth1_macvtap entered promiscuous mode [ 23.027135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.034914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.043477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.052652][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.060920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.069214][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.078565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.087247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.094817][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.111709][ T285] device veth1_macvtap entered promiscuous mode [ 23.118912][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.127432][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.135602][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.151151][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.159517][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.167759][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.175964][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.183977][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.192484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.204989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.213923][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.224227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.232679][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.251729][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 23.262860][ T286] device veth1_macvtap entered promiscuous mode [ 23.270075][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.278812][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.287392][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.298203][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.306676][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.330587][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.350696][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.369852][ T288] device veth0_vlan entered promiscuous mode [ 23.423819][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.435524][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.444569][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.454244][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.462873][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.471439][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.479957][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.493962][ T288] device veth1_macvtap entered promiscuous mode [ 23.507718][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.517081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.543349][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.572325][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.726411][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.739073][ T363] loop4: detected capacity change from 0 to 1024 [ 23.759781][ T363] ======================================================= [ 23.759781][ T363] WARNING: The mand mount option has been deprecated and [ 23.759781][ T363] and is ignored by this kernel. Remove the mand [ 23.759781][ T363] option from the mount to silence this warning. [ 23.759781][ T363] ======================================================= [ 23.806473][ T363] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.8: lblock 2 mapped to illegal pblock 2 (length 1) [ 23.820870][ T363] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.8: lblock 0 mapped to illegal pblock 48 (length 1) [ 23.836974][ T363] EXT4-fs error (device loop4): ext4_acquire_dquot:6798: comm syz.4.8: Failed to acquire dquot type 0 [ 23.848500][ T363] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 23.858254][ T363] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.8: mark_inode_dirty error [ 23.869448][ T344] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.877827][ T363] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 23.888644][ T363] EXT4-fs (loop4): 1 orphan inode deleted [ 23.894587][ T363] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 23.909831][ T335] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 23.935818][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 23.946066][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 23.966619][ T335] EXT4-fs error (device loop4): ext4_release_dquot:6834: comm kworker/u4:4: Failed to release dquot type 0 [ 23.978262][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 23.995453][ T363] device syzkaller0 entered promiscuous mode [ 24.003615][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.013268][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.032149][ T19] usb 2-1: Product: syz [ 24.036619][ T19] usb 2-1: Manufacturer: syz [ 24.041332][ T19] usb 2-1: SerialNumber: syz [ 24.076050][ T344] usb 1-1: Using ep0 maxpacket: 16 [ 24.086486][ T344] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.096881][ T344] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.115564][ T288] EXT4-fs (loop4): unmounting filesystem. [ 24.121752][ T288] EXT4-fs error (device loop4): __ext4_get_inode_loc:4515: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 24.124841][ T344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.136913][ T288] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5930: Corrupt filesystem [ 24.153477][ T288] EXT4-fs error (device loop4): ext4_quota_off:7104: inode #3: comm syz-executor: mark_inode_dirty error [ 24.164251][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.172935][ T344] usb 1-1: Product: syz [ 24.177334][ T344] usb 1-1: Manufacturer: syz [ 24.182114][ T344] usb 1-1: SerialNumber: syz [ 24.267365][ T19] usb 2-1: 0:2 : does not exist [ 24.287768][ T19] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 24.314805][ T19] usb 2-1: USB disconnect, device number 2 [ 24.396426][ T344] usb 1-1: 0:2 : does not exist [ 24.414245][ T344] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 24.518818][ T344] usb 1-1: USB disconnect, device number 2 [ 24.830517][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 24.830534][ T28] audit: type=1400 audit(1770833533.086:139): avc: denied { ioctl } for pid=379 comm="syz.1.12" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 24.862128][ T380] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.884628][ T28] audit: type=1400 audit(1770833533.116:140): avc: denied { ioctl } for pid=381 comm="syz.3.13" path="socket:[16035]" dev="sockfs" ino=16035 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 24.910103][ T28] audit: type=1400 audit(1770833533.116:141): avc: denied { read } for pid=381 comm="syz.3.13" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.937058][ T373] udevd[373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 24.953595][ T28] audit: type=1400 audit(1770833533.206:142): avc: denied { create } for pid=387 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 24.976297][ T28] audit: type=1400 audit(1770833533.216:143): avc: denied { name_bind } for pid=387 comm="syz.2.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 25.151677][ T28] audit: type=1400 audit(1770833533.406:144): avc: denied { read } for pid=392 comm="syz.4.16" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.177935][ T28] audit: type=1400 audit(1770833533.426:145): avc: denied { open } for pid=392 comm="syz.4.16" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.209941][ T28] audit: type=1400 audit(1770833533.436:146): avc: denied { ioctl } for pid=392 comm="syz.4.16" path="/4/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.255816][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 25.293176][ T396] netlink: 'syz.4.16': attribute type 13 has an invalid length. [ 25.334304][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 25.445823][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 25.457110][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.475839][ T19] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.495791][ T19] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 25.509075][ T229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.536536][ T19] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.564886][ T399] loop3: detected capacity change from 0 to 256 [ 25.573442][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.590496][ T19] usb 2-1: SerialNumber: syz [ 25.607569][ T399] FAT-fs (loop3): bogus number of FAT sectors [ 25.622666][ T19] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 25.646542][ T399] FAT-fs (loop3): Can't find a valid FAT filesystem [ 25.695817][ T229] usb 1-1: Using ep0 maxpacket: 16 [ 25.716385][ T229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.739113][ T229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.772870][ T229] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.790183][ T402] loop3: detected capacity change from 0 to 512 [ 25.793151][ T229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.810010][ T402] EXT4-fs: Ignoring removed orlov option [ 25.827162][ T402] EXT4-fs: Ignoring removed mblk_io_submit option [ 25.845886][ T229] usb 1-1: Product: syz [ 25.850170][ T229] usb 1-1: Manufacturer: syz [ 25.862712][ T229] usb 1-1: SerialNumber: syz [ 25.877502][ T19] usb 2-1: USB disconnect, device number 3 [ 25.892567][ T402] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 25.912316][ T402] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.18: attempt to clear invalid blocks 2 len 1 [ 25.945401][ T402] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 25.978536][ T402] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.18: invalid indirect mapped block 1819239214 (level 0) [ 26.003538][ T402] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.18: invalid indirect mapped block 1819239214 (level 1) [ 26.036558][ T402] EXT4-fs (loop3): 1 truncate cleaned up [ 26.046115][ T402] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 26.087330][ T229] usb 1-1: 0:2 : does not exist [ 26.098628][ T229] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 26.117931][ T28] audit: type=1400 audit(1770833534.366:147): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 26.138934][ T229] usb 1-1: USB disconnect, device number 3 [ 26.402981][ T60] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.619688][ T60] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 26.674546][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.698406][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 26.706942][ T60] usb 4-1: SerialNumber: syz [ 26.721631][ T60] usb 4-1: config 0 descriptor?? [ 26.804665][ T418] loop1: detected capacity change from 0 to 2048 [ 26.856623][ T418] loop1: p2 < > p4 [ 26.861860][ T418] loop1: p4 size 262144 extends beyond EOD, truncated [ 26.904031][ T103] loop1: p2 < > p4 [ 26.913161][ T103] loop1: p4 size 262144 extends beyond EOD, truncated [ 26.941818][ T402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.965999][ T402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.006924][ T402] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.18: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 27.058193][ T420] EXT4-fs (loop3): shut down requested (2) [ 27.079420][ T28] audit: type=1400 audit(1770833535.336:148): avc: denied { write } for pid=419 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.106604][ T60] usb 4-1: USB disconnect, device number 2 [ 27.225893][ T229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 27.395799][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.405927][ T229] usb 2-1: Using ep0 maxpacket: 32 [ 27.412390][ T229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 43, changing to 9 [ 27.423709][ T229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9465, setting to 1024 [ 27.434980][ T229] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 27.444619][ T229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.455871][ T229] usb 2-1: config 0 descriptor?? [ 27.462491][ T418] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 27.476359][ T229] hub 2-1:0.0: USB hub found [ 27.587017][ T39] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 27.596557][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.605688][ T39] usb 5-1: config 0 descriptor?? [ 27.618197][ T285] EXT4-fs (loop3): unmounting filesystem. [ 27.637207][ T429] loop3: detected capacity change from 0 to 512 [ 27.647471][ T429] EXT4-fs: Ignoring removed nobh option [ 27.658928][ T429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 27.668947][ T429] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 27.683043][ T229] hub 2-1:0.0: 1 port detected [ 27.784200][ T285] EXT4-fs (loop3): unmounting filesystem. [ 27.804943][ T434] loop3: detected capacity change from 0 to 1024 [ 27.825733][ T434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.845581][ T434] ================================================================== [ 27.853712][ T434] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 27.861508][ T434] Read of size 18446744073709551588 at addr ffff888118a03840 by task syz.3.26/434 [ 27.870907][ T434] [ 27.873269][ T434] CPU: 1 PID: 434 Comm: syz.3.26 Not tainted syzkaller #0 [ 27.880395][ T434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 27.890960][ T434] Call Trace: [ 27.894270][ T434] [ 27.897227][ T434] __dump_stack+0x21/0x24 [ 27.901377][ T439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 27.901595][ T434] dump_stack_lvl+0x110/0x170 [ 27.915072][ T434] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.920153][ T434] ? kasan_save_alloc_info+0x25/0x30 [ 27.925491][ T434] ? ext4_xattr_block_set+0x9d5/0x3260 [ 27.931007][ T434] ? ext4_xattr_set+0x242/0x320 [ 27.935893][ T434] ? ext4_xattr_security_set+0x3c/0x50 [ 27.941391][ T434] ? ext4_xattr_set_entry+0x979/0x21d0 [ 27.946879][ T434] print_address_description+0x71/0x200 [ 27.952452][ T434] print_report+0x4a/0x60 [ 27.956830][ T434] kasan_report+0x122/0x150 [ 27.961363][ T434] ? ext4_xattr_set_entry+0x979/0x21d0 [ 27.966940][ T434] ? ext4_xattr_set_entry+0x979/0x21d0 [ 27.972431][ T434] kasan_check_range+0x249/0x2a0 [ 27.977403][ T434] ? ext4_xattr_set_entry+0x979/0x21d0 [ 27.982890][ T434] memmove+0x2d/0x70 [ 27.986806][ T434] ext4_xattr_set_entry+0x979/0x21d0 [ 27.992122][ T434] ext4_xattr_block_set+0xad3/0x3260 [ 27.997433][ T434] ? __kasan_check_write+0x14/0x20 [ 28.002567][ T434] ? iput+0x620/0x670 [ 28.006653][ T434] ? ext4_xattr_block_find+0x310/0x310 [ 28.012250][ T434] ext4_xattr_set_handle+0xbc4/0x12c0 [ 28.017680][ T434] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 28.023545][ T434] ? __kasan_check_read+0x11/0x20 [ 28.028603][ T434] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 28.034254][ T434] ext4_xattr_set+0x242/0x320 [ 28.038976][ T434] ? ns_capable+0x8c/0xf0 [ 28.043431][ T434] ? __cfi_ext4_xattr_set+0x10/0x10 [ 28.048651][ T434] ? selinux_inode_setxattr+0x5cf/0xbf0 [ 28.054329][ T434] ext4_xattr_security_set+0x3c/0x50 [ 28.059633][ T434] ? __cfi_ext4_xattr_security_set+0x10/0x10 [ 28.065636][ T434] __vfs_setxattr+0x3f2/0x440 [ 28.070747][ T434] __vfs_setxattr_noperm+0x12a/0x5e0 [ 28.076071][ T434] __vfs_setxattr_locked+0x212/0x230 [ 28.081403][ T434] vfs_setxattr+0x167/0x2e0 [ 28.086031][ T434] ? __cfi_vfs_setxattr+0x10/0x10 [ 28.091087][ T434] ? copy_user_enhanced_fast_string+0xa/0x40 [ 28.097105][ T434] setxattr+0x346/0x360 [ 28.101308][ T434] ? path_setxattr+0x290/0x290 [ 28.106140][ T434] ? __mnt_want_write+0x1e6/0x260 [ 28.111200][ T434] ? mnt_want_write+0x220/0x300 [ 28.116075][ T434] path_setxattr+0x147/0x290 [ 28.120693][ T434] ? simple_xattr_list_add+0x120/0x120 [ 28.126195][ T434] ? __kasan_check_write+0x14/0x20 [ 28.131335][ T434] ? fpregs_restore_userregs+0x128/0x260 [ 28.137023][ T434] __x64_sys_setxattr+0xc5/0xe0 [ 28.141908][ T434] x64_sys_call+0x633/0x9a0 [ 28.146431][ T434] do_syscall_64+0x4c/0xa0 [ 28.150872][ T434] ? clear_bhb_loop+0x30/0x80 [ 28.155567][ T434] ? clear_bhb_loop+0x30/0x80 [ 28.160269][ T434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.166197][ T434] RIP: 0033:0x7f17d6d9bf79 [ 28.170655][ T434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.190464][ T434] RSP: 002b:00007f17d7cd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 28.198907][ T434] RAX: ffffffffffffffda RBX: 00007f17d7015fa0 RCX: 00007f17d6d9bf79 [ 28.206901][ T434] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 28.214895][ T434] RBP: 00007f17d6e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 28.222885][ T434] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 28.230874][ T434] R13: 00007f17d7016038 R14: 00007f17d7015fa0 R15: 00007ffe83cdcb78 [ 28.238867][ T434] [ 28.241905][ T434] [ 28.244247][ T434] Allocated by task 434: [ 28.248503][ T434] kasan_set_track+0x4b/0x70 [ 28.253122][ T434] kasan_save_alloc_info+0x25/0x30 [ 28.258255][ T434] __kasan_kmalloc+0x95/0xb0 [ 28.262860][ T434] __kmalloc_node_track_caller+0xb1/0x1e0 [ 28.268602][ T434] kmemdup+0x2b/0x60 [ 28.272526][ T434] ext4_xattr_block_set+0x9d5/0x3260 [ 28.277838][ T434] ext4_xattr_set_handle+0xbc4/0x12c0 [ 28.283242][ T434] ext4_xattr_set+0x242/0x320 [ 28.287948][ T434] ext4_xattr_security_set+0x3c/0x50 [ 28.293250][ T434] __vfs_setxattr+0x3f2/0x440 [ 28.297952][ T434] __vfs_setxattr_noperm+0x12a/0x5e0 [ 28.303257][ T434] __vfs_setxattr_locked+0x212/0x230 [ 28.308574][ T434] vfs_setxattr+0x167/0x2e0 [ 28.313105][ T434] setxattr+0x346/0x360 [ 28.317282][ T434] path_setxattr+0x147/0x290 [ 28.321920][ T434] __x64_sys_setxattr+0xc5/0xe0 [ 28.326817][ T434] x64_sys_call+0x633/0x9a0 [ 28.331346][ T434] do_syscall_64+0x4c/0xa0 [ 28.335783][ T434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.341718][ T434] [ 28.344070][ T434] The buggy address belongs to the object at ffff888118a03800 [ 28.344070][ T434] which belongs to the cache kmalloc-1k of size 1024 [ 28.358142][ T434] The buggy address is located 64 bytes inside of [ 28.358142][ T434] 1024-byte region [ffff888118a03800, ffff888118a03c00) [ 28.371435][ T434] [ 28.373775][ T434] The buggy address belongs to the physical page: [ 28.380205][ T434] page:ffffea0004628000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118a00 [ 28.390464][ T434] head:ffffea0004628000 order:3 compound_mapcount:0 compound_pincount:0 [ 28.398804][ T434] flags: 0x4000000000010200(slab|head|zone=1) [ 28.404911][ T434] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 28.413510][ T434] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 28.422109][ T434] page dumped because: kasan: bad access detected [ 28.428546][ T434] page_owner tracks the page as allocated [ 28.434266][ T434] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 113, tgid 113 (udevd), ts 6150537449, free_ts 0 [ 28.453905][ T434] post_alloc_hook+0x1f5/0x210 [ 28.458694][ T434] prep_new_page+0x1c/0x110 [ 28.463222][ T434] get_page_from_freelist+0x2d12/0x2d80 [ 28.468792][ T434] __alloc_pages+0x1d9/0x480 [ 28.473418][ T434] alloc_slab_page+0x6e/0xf0 [ 28.478813][ T434] new_slab+0x98/0x3d0 [ 28.482912][ T434] ___slab_alloc+0x6bd/0xb20 [ 28.487523][ T434] __slab_alloc+0x5e/0xa0 [ 28.491873][ T434] __kmem_cache_alloc_node+0x203/0x2c0 [ 28.497351][ T434] __kmalloc_node_track_caller+0xa0/0x1e0 [ 28.503098][ T434] __alloc_skb+0x236/0x4b0 [ 28.507534][ T434] netlink_sendmsg+0x635/0xbd0 [ 28.512312][ T434] ____sys_sendmsg+0x5cc/0x990 [ 28.517090][ T434] ___sys_sendmsg+0x2a2/0x360 [ 28.521899][ T434] __x64_sys_sendmsg+0x205/0x2d0 [ 28.526851][ T434] x64_sys_call+0x171/0x9a0 [ 28.531371][ T434] page_owner free stack trace missing [ 28.536749][ T434] [ 28.539174][ T434] Memory state around the buggy address: [ 28.544816][ T434] ffff888118a03700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.552884][ T434] ffff888118a03780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.560958][ T434] >ffff888118a03800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.569026][ T434] ^ [ 28.575185][ T434] ffff888118a03880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.583256][ T434] ffff888118a03900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.591359][ T434] ================================================================== [ 28.753832][ T434] Disabling lock debugging due to kernel taint [ 28.823156][ T229] usb 2-1: USB disconnect, device number 4 [ 29.032348][ T285] EXT4-fs (loop3): unmounting filesystem. [ 29.208810][ T39] usb 5-1: Cannot set autoneg [ 29.213651][ T39] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 29.222743][ T39] usb 5-1: USB disconnect, device number 2