last executing test programs: 5m5.454527897s ago: executing program 32 (id=1690): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x40408d1) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x20000000000000ff, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x4, 0x0, 0xfffffffc}, 0x10}, 0x94) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000)=0x400, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf251000000008000300", @ANYRES32=r5, @ANYBLOB="080006000a40"], 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x4040000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000001000370400"/20, @ANYRES32=r6, @ANYBLOB="8304050000000000380012800b000100697036746e6c00002800028005000900040000001400030000000000000000000000ff"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000480)=ANY=[], 0x0) 4m47.07237976s ago: executing program 33 (id=1871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f00000001c0)=[{0x23, 0x0, 0x0, 0x0, @tick, {}, {}, @queue={0x0, {0x3}}}], 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff1, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0x7}, {0x8}}]}, 0x38}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) sendmsg$inet(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a4", 0x1}], 0x1}, 0x8040) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504800000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r5, 0x0, 0xfffffffffffffffe}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x11}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid={'resgid', 0x3d, 0xee00}}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f0000000cc0)="$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") r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000200)={0x7d0, 0x1f7d3b7a, 0x5, 0x2003ffffff, 0x6, 0xfff3}) sendfile(r6, r7, &(0x7f0000000240)=0xffffffffffffffff, 0x101) 4m15.325117373s ago: executing program 34 (id=2190): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9}, 0x200, 0x10000, 0x8, 0x1, 0x8, 0x7, 0xb, 0x0, 0x0, 0x0, 0x12000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x14, 0x4) socket$qrtr(0x2a, 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013ffffefb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002a000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='dos1xfloppy,noJots,\x00'], 0x1, 0x21f, &(0x7f0000000100)="$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") socketpair(0x1f, 0x2, 0x5, &(0x7f0000000380)) fcntl$setlease(r4, 0x400, 0x0) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) fcntl$setlease(r5, 0x400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo/3\x00') pread64(r6, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 4m1.906511277s ago: executing program 35 (id=2319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x1f4, r1, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x200, 0x61}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x1b4, 0x80, [@random_vendor={0xdd, 0xb7, "57adbb7ebd42418b410454693c2b5e05c4b85e7e82263397bad1746389265674d9487955ed77592e83eb143d546629013c6b386e8cb060d467ee8e6f8a7cfc45bd7f921f8b3d22f77b8962b442a011fe96203c4fbf9f02d8583beb90e06b6749df68f7544ff89223053e261d1b0b050be4a168c9fce70302d8fd56b7747ebc24f8f8e8f4671baaf9f59892b5b20aa1ed3f3a3e4df7635ae1e69330c03ee266157dc8c184105d3f0087476f8d1a6b3c5ffa9c355abeecfd"}, @challenge={0x10, 0x1, 0xa7}, @perr={0x84, 0x83, {0x6, 0x9, [{{}, @broadcast, 0x5, @void, 0xc}, {{}, @device_a, 0x2, @void, 0xe}, {{}, @broadcast, 0x6, @void, 0x2}, {{}, @broadcast, 0x1}, {{}, @device_b, 0x1, @void, 0x2e}, {{}, @device_b, 0x2, @void, 0x7}, {{0x0, 0x1}, @broadcast, 0xfffffffe, @value=@broadcast, 0x6}, {{}, @broadcast, 0x7, @void, 0x3d}, {{0x0, 0x1}, @device_b, 0xffffffff, @value, 0x19}]}}, @tim={0x5, 0x6d, {0x7, 0x7c, 0x5c, "a5720c58d5635985e4dadb539ebcb79cb02aeef43e17aceca901887ce870258d3c04cf9d47e20db6b95fe287cbbc33e2a31eeee3a90a681a02331e43fc9e56d014e0c49024b0d9217490bc466e6a4da696e26d3bddacefd2f33b9ac2b549845f01d8eb93f66fde20f065"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x15, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x3, 0x9}}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4001}, 0xe672a882be9e0d93) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 3m52.719256023s ago: executing program 7 (id=2438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x1) 3m50.72134173s ago: executing program 7 (id=2450): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xd, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x5e3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd60", 0x13}, {&(0x7f00000001c0)="b700001811005abeef4ba0d5984462732834d1", 0x13}, {&(0x7f0000000100)="37a8a6c51ef711513a5554633f6ecf", 0xf}, {&(0x7f0000000200)="a3d605a93b0400", 0x7}], 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000380)=0xfffffff9, 0x4) setsockopt$inet_int(r6, 0x0, 0x0, &(0x7f0000000140)=0x3, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000000)) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0xfffc, 0x2, 0xd6e}}) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101, 0x0, 0x2}}) write$UHID_INPUT(r8, &(0x7f0000001940)={0x8, {"4059c5cc89faaffb45f3e872c0fc80ded36e89273fe91d379094d506e15e2a570cb6eee9c777174b3822f2918c57c48ce6cd1407c99d556b9407e3226eefadcf4e0bda93283acc153a082f8d62c0d4c8119bccd6772fa5b6854ad9b48ed90d981a39858790be52cc55871e748097ad42953c9a0fd35c9cada99323207a16aa315eeb7ad07a2ba2d1a1b1abe22b5d4fc6cbacd79dcdee17340edef1ece6075ff04d89fad45d64bde31de4547ead0c3b35ab173b03d4370c1df9fbff5a18d0b32de1842862777774e2d75c794a93cca470b915d24bf09048bc6923fcbda56b224565aac632bf55de410edde2385f84135745b1a13509ea6a7efb030109de74af199078a132996617cecda5266b56c2840f650f4c8a0a31a1b4a24bd0ea6fdb80a5bb84d6c19eebcfcbfbe6317b6df4a8e4ecf85eb8cce843d95d99ca2bb960ee9e9dfb9e2d2b2685eb09e04a0b86bf7d63465a2268c2e84d3f591b4562eedd5322033ae78dfc8e80027d0672a8c38566cd2ac41be2f428e9df082976627381d457fe1ea1ba6715f6a5e892ba2de389bed8777b064674a969191a2f9c644bb5a5db37dc31699b5c6f479e166de9f4bb63f2f516af629c9431c5ec62e965153bcb650bfc921cb3a5eba8fc2a31c80c5d67aac3ea6d826dc2724075db0aa7e1e8d8f6ac38df52112b57b5e2929e654ca6424e3f453338f5cdaf519d05b73d59e212413a935acc7764710ad884680f50d843deef35d3ba90ea7c7b64589d1318cdd00b5e7d018ca2488c839f54ba5d6d0104502c0fb25118075405bf65697b0d1492ff6c9c2514970290a6e8f7ba017431eb8758d84a007bea27a12190af99614a80bebc0b26ab6372e49232428d065e6ebc27908c62277719c51197520c5407eddc738318aee35a0b732101fbbb02ba380dbb2513266b57bc808aaccbb5291c91590ce3510e2e8140bea3224abdfe241f7db77703b2a9994113f49177cafbc202547e2b7a9e3f21ef61874c0bd769fcc37e61a2a60b65795053943c1f4aacdeb68fc6963ebbe8ae0f9414f120bd360431aea3a383d6ad41285f6694d37f856dac9690d8391a919db2b0cc35f183644a9517bd5975972f0384826a06d8df80df0305246318974a3204cc53d8dda231e0bc3e892031c9f21ceb04f6a79b1260c9904669faf34272a6f74862e2a29dc9ff216cd7b10dd22eff01808baae9019975244a7c00fa0be36793b8f44747fc065ce659e5cd099631dd042786de022cfce1de1477ab674e011247e5c0f8c9ce7948b0d1c96be2d07acc9de4d1bbcc267562a8d6abb6c3405191dda7896bf6d73be89af49f6706b9d117cf7f18bf67acabdb774181f25e90af371a4390fa04208d8028cf7e42475d92670acf69b1c26d4aead11a7c7f4461727a6ff53b27f64d2d359c8f07419c852f911729ae448d8408ebaa0de57fd5ed7209b06ffd7c01bc7441d09e8ba7879cb726cf789d2e1e57999f15fb23b9eb924ad4ee2c7e9437a1ebde47aec90fd19b040da444422ee3858319b8b3ebc20083da1d73a0e78946015f070bdf86af2e2b373f5549e6679adff7ab1163a76b0cd94993700c591012f85171b90339b2d3b49bcde30f1c4ce45b14d42cf1b763cf9538796a87c6db99609afee52f41865db86708664ca4266244db8edbb03d6590f6677c5c44cdc875ce9ba64e302f8301c3bc3cb87ec91a1b8f38856859b1ab8eb11c43fc61b15a4c6d0a1a989ed20d548507c9fc2cdbe30758287b5d9b5396f02ab79edb2cd0646cc52782f88c3f8fa6afb92ffafaa106dc206abe8fa9725950ca076f50bb4bf8018ca828696184e8327e86b31da4017547fd7f76954eca0645c7bda68756c5a80588535c1e779dcac4500b9a2883699edfe37fa26e0d4407cbb94914a1b93662ec1a8ab5c85b576e98adc4037dd934ba08cc6e0b9e9bb7bfcabfc9eaf0217ed8ebfe298dc2cfbc1c023bddcd15db1232ef93d85477de6652491ee79f9a36e8faee153bd113b512e82dc2b1237e602f61eef9292a454f2934c9d05e5e51c92f46c32b44fdfbb3624b37bff569fde7eeb6c90f44bff0cb31298ee42a4ff4adc5111722eb1ede4e27ba41bf8f216a8340b487494fe92f0f4a395b55984eaebd24a4b181a1d94c260735676af65583ace79d8be128d059a34303d0f74196d7846598dd180804b32e10781322e2d6ef687ab2a5ad682069ea53e379e1b5a1f7ad9f0596d57da84614911164d82fc775f0078815507224779af7e22b37cb7b9063aa5fec0d191c32764fe08dfa4b613d50fdc4e7f50634c2addb2c5c0ab674737a5636777c0d3faa29423f5b82e598628e509c2f849e3f88e688a8af4d10ccfa946f4ad3db721f0241ee38ed4e2b8be4dc65cc80722ff384fe77126c07df25c466ea75634d013409cbfe57600010b4a73731c926bbd65661a21e6e258152667657f701af1b81fec2297d04de2ab20d5f11faaa6c2cf6181096b1f64f7939f9a9315eda14214734187096a7f1c35dff9b52e386e98c0f7c898a8c982ccfe7529a50755d6b26877701882744c68d33fa14a09f8028169e715e64da9e2a3065de38a0c2c720b0c700bf3bf8a76981abb2cdd290a65ebe50db4499ab813c1b760af34655734d3dd36ab1b72a9d92e566c675326a878056cca8c6a4cfa0ab946a9b1c8848ff50901d6f9547960dabe3bed31975f09e33f7f3a38e7430880619286dee2736562482e0bcb726b04df9bbe8385063334f2e527ee12c4748b9f23662cd451a3f52e60a28f74fdb6d10bf300b5cfef821f241d1599fd0c18bc9172aeb00d6260f1cc8504899251dbf21a9024f68418889e7958870f8dc297bc723c5c94d44470ce9c0a8fd0acd227fdeb8009db75ad8924dd43d4c8c8342a55f785021aec8ca99a7b12d8a0b30ebd5c4572238e53a88073f6cb0e6774232b2b629f1dd28a7dab2b6a314357dbf851e1b5eba51d06179544a106f99f70f097554fc01d05970f177412700979d014ccf12eb3271fab7dbe4e055760d2c0ef5bafb95d37b3d4adbca48a0885b7fd7d71de2c28d6a5904973beeacb8b0875ae82a10ef6184b581b87a8673b19f39b71f86956135e09e5ef6af4ca797a75857ae08dc84c436789cfbc31f5d476fb0577c27d6b33d97a01d42df2647ec3eeba52a08c91b76a57ed7552f986f4f1103c91300e74bfdc24d8e27c33fa06790d07faec66e6fbacf4afdb1d35cc207a77339cb6269164f51ad29aa138c5cef9c81084534ebe69825611d444ef59bd5725558829a06608805c9e6fa94bf628883ebae4e59fa45aa88af3c328ab65aedaea9a1c03791e0dcff3c3aa2851fe29a2c4513717b6e9497b4fb01c053696b58a4b267a5b167175a006bab537860ce377d21278de4fbe1d3850b4a2d385007dced0fb536398088c9cd90deea5cf35e3ef9b9e4b1764813286ba2f9c75e5c9e74b970c3529093919a135287125fd945c48ce4d363a0c2b1d740d4e5b36afd897a02580f814b9ac1eb8bacab0682437529f03655271cd26a1dd9b428664130b7655bd4323c37b3acd94abef3c7f3629062f29f78f99b0600746ab175c57ee8c1812347f630fbbf2a57f21fad300101af40e9d4ba828454a0791c96c869fcfa9784e7eb5d7556f41bf2f4245a3f378fc7f4744316e34cb1304b88dbf0f6165c0fab21a9096d7003fd9413ca38c6191f3ecbe68bd31d885a57a9294484478b45c7dfa4fa679250346f324f0ed3940d27a7b7e528f40c0529b73909c93645fb2a8d5942ad0cfc513c1e1ab8c094516ca500ee54304168ec637266f1756a90a0ff0793bbb93f03ccd40264f9cd1b4e116fcb386bc87938a68d9462f38444ff5486d9dc618d30a2758cf422d2f7b0c994bf7396a7114dc97de06d3c29d687764f22ccd1a9c70d730adf60d577dd4c6455eee967edb5bc5c4c2714318fcc766e4d6713309caabefe8ffc3ce113c8a72511257f69da7bf5ff0c808461d08f1a71505e481ff04050e259389137193ad9a78f44e6d5708c16653f716ac171cc7a89d7a6dfd8f83d5617ca98aff2991703b335b7c3a07ba157cfdcdfbdccdf107b0b23dc27e63e205635869ea9a85753ee98d3e8356361ac3f9c7d37cc94936d53228aa8fc190d3dab8e1265b1bd02efc3ca045db21145f0fc66f797e7a6c9f5f31f08c793af97f5f178f9cd3f71a22c18efaf829933d9cf2bba71616bb75ffb8d6fb77cc870ebd36e2a9fbde795ce9fd8bc5f22be57fe891b149e57607a2e1c25e8199b9b60a55d47874a06a93bcc07c0e369ad61c58b8e7983bb1d08cc7871a4abc0f362a2d8b0084cefdec1288417ded548922c9f146f0d5fc140d47cb6f87c11229aa082c2e9fd4199ce6b0f0d7b959cb5c688385545686db4c3566bec42a11ad846aa42a9a2c94d19ec4bb57f65936eeb6809d1787137f11ecb0c19a30fdc819bf739e7e772d2528f0637b0ec8d417d0cd21c11baf9a3db892618c63f1fbceb926b6d1c4fbf2296909929c1b9edac8ab1529d705d2421f74043b13a98f3e6da271409d4ba4f5e6c69f42cfa7101bb0d3e47937a3a6a1279d3517769b52773a33577623d2d40627befe093bac6338f9b965f34ad98dfe0735357f6f15f04e4d3e6ed7c01040b856d51bc72183ac26e928e1a89ef91e7c534ebbc6c9bb1379860e270411d7fca914558be82029994bfb61b8c2cce6b51e9aed98440b5acc816325c226f8e2d441283ecb662a67466c110d09631489310b37a22070b95e595f1e5bf8197320063b8724d1598cd4939a7f608c1ae97f866fe15752d1eda81f6d4e1d5ff98a57b3770c6ee5aac1fe24a34eea61b601363dd71ded31367073f06fe91db55f10d520bdbfc131b5e320118c74c307841dda965256107fb5a9a8d34778431912b96adb33beb8fef354a529ba61b91ebb48476121e3b4c27c10b0aed0ddee9662dd19a919f99187cf9cebca4bf478c6adbc4e96ddce0b3bb75272719551a44927942eb446ef2d90514f9e022cfe93199fec1f100717d0438633b0e2de1775921c921e58260bf012b2e0ec7c92648e27ca31aecaa8502a7c475e2fd27037733e3fd17a1d97b886bc11a0e55848475551a796e174859b1db4c3091c3994fdbac6cf7d7a5db98fd80cc42d89ca5785a93214722c079e7748f55e1103eeee467ea6b63864700b3eef43756a2f15fcb1c73019fac1589973106c3d662185e5c5788479d22fd601e0bad3f227583d4a3b457638e4752ba788fc069864b74a2339f93dabbeb7f73b33e4e52b0daff21a262ec3b62a307e5a559b69c09d8592e1c4112cad39cf74864ae4183d7ad984b6a1ab10577e8ca3e6c29bf304339ee798f51b2f9872a830c036d7adc7d2e15d3a4076ce203d6660c3caf368a3fadecc6fcf6fd3a6db911506ddb713032d53dc93a20beec9b048bf7fc33107894e4353b6d5cbf45b9d15b4f2674e23b7e3b168dc399d6679195f7814dcfe062b279133a586a62d11b7d799db5aa6d4d656b53322bddf6355b88be6b0f83baec67f30f35055bcbd43ec7ec51bf3f3312587ba4fea4fff41639cfd831af8d7335ec036a0792283fe38fccf1270d83e869694bc9da6e2dedb98f3033b0db4012b8d4070a74ba6336ef958faa0b2cc6a45937d0841b983c614272b3517e88286c6c2d32d0d402776284e1dedb78ab93b463bceb238e1cc35c73de3679692738c1a98b16b397dd456fa312caf3a53b80441e624452b6c5c0caf3d6318fa86e0b69d5770b628c58d6989778b189a2f8cc9e6bd5914992e28ee2b2bfe3cb2f8bb902", 0x1000}}, 0x1006) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="ac1414aa7f000001000000001000000000000000000040"], 0x30}}], 0x1, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0)={0x28341d99, 0x400006, 0xb, 0x797a, 0xff, "0000004000008400010600ffffffffff000008"}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000900)=0xd) 3m50.530474871s ago: executing program 7 (id=2453): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}], 0x1}, 0x20040051) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) unshare(0x10000280) 3m50.508501663s ago: executing program 7 (id=2454): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040854}, 0x4000010) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @private=0xa010101}, 0x2, 0xfffffffc, 0x4}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x1fffc, 0x0, 0xfffffffd}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\n', @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf250900000020000380140002007663616e3000000000000000000000000800010002000000"], 0x5e}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) socket(0x3, 0xa, 0x5428) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='aemJ\x8f8\xbeF\x179\x04\xf3\xd3\x16s4q\xf2=') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x64, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) read$eventfd(r8, &(0x7f00000002c0), 0x8) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000000)={0x8, 0x78e}) pwrite64(r7, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) 3m50.37896357s ago: executing program 7 (id=2456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="581fff001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 3m50.243713618s ago: executing program 7 (id=2461): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x12, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r4}}, 0x30) unshare(0x22020600) r5 = inotify_init1(0x800) inotify_add_watch(r5, 0x0, 0xc4000ce7) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0xb0331, 0xffffffffffffffff, 0x8000000) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r10, 0xd44, 0x44c1, 0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)=ANY=[], 0xa) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) 3m50.196904411s ago: executing program 36 (id=2461): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x12, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r4}}, 0x30) unshare(0x22020600) r5 = inotify_init1(0x800) inotify_add_watch(r5, 0x0, 0xc4000ce7) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0xb0331, 0xffffffffffffffff, 0x8000000) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r10, 0xd44, 0x44c1, 0x7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)=ANY=[], 0xa) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) 3m45.775263189s ago: executing program 3 (id=2500): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x0, 0xff, 0x9}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000540)={&(0x7f0000000440)=""/230, 0x304000, 0x800, 0x401, 0x1}, 0x20) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601010000000000030000050000000900020073797a30000000000500010007000000050005000a0000000c00078008000b0000000000050004000300000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x8}, 0x94) 3m45.717313422s ago: executing program 3 (id=2502): unshare(0x20000400) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000ac0)={0x0, 0xfffffffd, 0x100, 0xfffffffe, 0xca}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) r3 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, 0x0, 0x0) eventfd(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) accept4$unix(r3, 0x0, 0x0, 0x40800) timer_settime(0x0, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) flock(r4, 0xc) (fail_nth: 1) 3m45.58915355s ago: executing program 3 (id=2506): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x0, "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"}, &(0x7f0000000180)=0xfebd) 3m44.73193748s ago: executing program 3 (id=2511): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x100}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x10000000}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x2}, {0xd20f}, {0x3}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {0x52}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pread64(r0, &(0x7f0000001400)=""/168, 0xa8, 0x100000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x44000006) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x73, @local, 0x4e24, 0x4, 'wlc\x00', 0x2c, 0x3, 0x12}, {@multicast2, 0x4e22, 0x0, 0xffffff02, 0x816, 0xff}}, 0x44) 3m44.55891074s ago: executing program 3 (id=2515): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4b00000672", @ANYRES64=r0, @ANYRES32=r2], 0x0) 3m44.517539362s ago: executing program 3 (id=2516): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x421, @mcast1, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r8 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) syz_usb_disconnect(r8) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000087d1e222e0000000000010902"], 0x0) ioctl$EVIOCRMFF(r8, 0x5501, &(0x7f00000000c0)=0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a200000e0ff0903000000000000000000070000000900010073797a300000000060000000090a01040000000000000000070000040900020273797a3100000800080005400000002908000a40000000000900010073797a3000000000240011800b00010065787468647200001400028008000140000000080800064000000000140000001000010000000000000000000084000a"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000008061121c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r10 = socket(0x200000100000011, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000100)="4d01000000000000002f00e566a5dea20414090b", 0x14, 0x0, &(0x7f0000000080)={0x11, 0x0, r12, 0x1, 0xfe, 0x6, @broadcast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x10, 0x700, 0x3, 0x2, {{0x2a, 0x4, 0x2, 0x3, 0xa8, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010100, @multicast1, {[@timestamp={0x44, 0x8, 0x44, 0x0, 0x0, [0x0]}, @timestamp_prespec={0x44, 0xc, 0x1c, 0x3, 0x0, [{@multicast1, 0xff}]}, @rr={0x7, 0x27, 0xe1, [@broadcast, @broadcast, @loopback, @private=0xa010101, @private=0xa010101, @rand_addr=0x64010102, @empty, @broadcast, @rand_addr=0x64010100]}, @end, @noop, @cipso={0x86, 0x4d, 0x3, [{0x5, 0x11, "37d668c26018fb032fb8b4ea8def62"}, {0x7, 0x8, "ef3c5401d29d"}, {0x2995dabd988f2831, 0x7, "1ad4b42a11"}, {0x7, 0x11, "9b447b9949fe130c6a849e016ff756"}, {0x7, 0xd, "2bda570fe94abc5be5dde0"}, {0x2, 0x5, "9c5741"}, {0x6, 0x4, '$G'}]}, @timestamp={0x44, 0x8, 0x6c, 0x0, 0x1, [0x9]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) 3m29.110062492s ago: executing program 37 (id=2516): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x421, @mcast1, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r8 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) syz_usb_disconnect(r8) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000087d1e222e0000000000010902"], 0x0) ioctl$EVIOCRMFF(r8, 0x5501, &(0x7f00000000c0)=0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a200000e0ff0903000000000000000000070000000900010073797a300000000060000000090a01040000000000000000070000040900020273797a3100000800080005400000002908000a40000000000900010073797a3000000000240011800b00010065787468647200001400028008000140000000080800064000000000140000001000010000000000000000000084000a"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000008061121c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r10 = socket(0x200000100000011, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000100)="4d01000000000000002f00e566a5dea20414090b", 0x14, 0x0, &(0x7f0000000080)={0x11, 0x0, r12, 0x1, 0xfe, 0x6, @broadcast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f00000008c0)={'tunl0\x00', 0x0, 0x10, 0x700, 0x3, 0x2, {{0x2a, 0x4, 0x2, 0x3, 0xa8, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010100, @multicast1, {[@timestamp={0x44, 0x8, 0x44, 0x0, 0x0, [0x0]}, @timestamp_prespec={0x44, 0xc, 0x1c, 0x3, 0x0, [{@multicast1, 0xff}]}, @rr={0x7, 0x27, 0xe1, [@broadcast, @broadcast, @loopback, @private=0xa010101, @private=0xa010101, @rand_addr=0x64010102, @empty, @broadcast, @rand_addr=0x64010100]}, @end, @noop, @cipso={0x86, 0x4d, 0x3, [{0x5, 0x11, "37d668c26018fb032fb8b4ea8def62"}, {0x7, 0x8, "ef3c5401d29d"}, {0x2995dabd988f2831, 0x7, "1ad4b42a11"}, {0x7, 0x11, "9b447b9949fe130c6a849e016ff756"}, {0x7, 0xd, "2bda570fe94abc5be5dde0"}, {0x2, 0x5, "9c5741"}, {0x6, 0x4, '$G'}]}, @timestamp={0x44, 0x8, 0x6c, 0x0, 0x1, [0x9]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) 3m7.990651955s ago: executing program 8 (id=2936): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x0, 0x8, 0x0, 0x1, 0x40, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mq_getsetattr(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='IPVS\x00', r1) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c00028008000100", @ANYRES32], 0x4c}}, 0x0) keyctl$search(0xa, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x1}, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="43082cf47000fbdbdf2504000040140001"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioprio_set$uid(0x3, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') read$watch_queue(r7, &(0x7f0000001080)=""/4088, 0xff8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000140)={0x40, 0x7, 0x6d, {0x6d, 0xd, "f4005e78584d0a2472bc9f2a67ac86e83c1fae640fcf3a009280729afdb9863749ac943e2e063a0323531eb06f1cde299a1b504811592c9d161842151d402bbec0a5939276ec17ff62b089facacc85f9285c15d2a2367b6ce0b83f3adbfe38104abe881aafbc31bac9f530"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000ff000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) 3m7.163594133s ago: executing program 8 (id=2947): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x18, 0x42401837745673e4, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3m7.118965826s ago: executing program 8 (id=2949): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x4, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc, 0x0, 0x1126}]}) write(r1, &(0x7f00000001c0)='\x00\x00', 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000000c0)={0x18, 0x12, 0x7ff, 0x7000, 0x89, 0x30, &(0x7f0000000300)="de38da75f49f71beb3021f9737b1062e4298cbdc15a39e082cf138de7ebaa5927c9bf7659ab2507d29fbf42e4ef516c9b5fe3cb1741de3fc0adf10ee966c621e2cc922bd144b3b6a912902f2be547c0c3dd0f517617b7145f6c916bcebae4388a55b3dfe66008dfe45e01681d7f8320a3d6b773a55e261f95ba5dde55cc2d320d46b79dd755145ee79"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000037000701fefffffffedbdf25037c00000c000980080001"], 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x4000000) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xc0, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000080)=0x2, 0x4) socket$unix(0x1, 0x1, 0x0) setresuid(0x0, 0x0, 0xee00) r5 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x2) connect$can_bcm(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001900)=@newtaction={0x216c, 0x30, 0x10, 0x70bd25, 0x25dfdbff, {}, [{0x2158, 0x1, [@m_vlan={0x188, 0x1d, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9d4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb81}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x20000000, 0x4, 0x65b9}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x4, 0xffffffffffffffff, 0x55, 0x7}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xf3, 0x6, "fdbe6e1efdeffc183d7a6f31b29bf0fdb787ae96e7a36d831e79fe738424e3bb560e6214f6c3f73d1599aff0ba0fd9dd5f0ca4d7e9a61d1bc73b90445a982128218f12a953507b0b87e39e17c53287b1c11e2540d0805df68f517349796d2ad86c47ca0926fa947215a86f3329f6b8d4b0232567e59b96fad8a3c70b1d1511f61aa373e643688f8c309129b6f610dd5a708f44171dbb62120a9ed7410401e71bbe49a36e0fd781c4a05a6c2da27cd5daf1afb6b8db56b4a94f40e69a4795090b7ecef40987d8f1e1e0f232d86c80abd91a5110bd187e77da56c55c841878fe291e72d93cffecc47447768191af4303"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x105c, 0x33, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffe, 0xff, 0x8, 0x1, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x1004, 0x6, "a7b8fa7ba8b1658edaeccc36b9a26d4cc3477e394a97183d97509a0852958cda19f70def4950caa8fdb803b21d7513504636ab128b2acdd03122addb78361b6fb7405bcbcc7f5cab5f7fb7105f4bee3805445a4e41ef2ed9817d03a6abe3b8fcba12d28ac9b83d933f2ef1464db884dbe3cff40895ea7869d17f563b7d49ff0396674645ddb3f559311431ec61774eb6843291bf183ac51d7dac295201e5cf22d2a6d1b6f2165bef404d2ebbf0f0cd29dc524b44ccdfae6146e4eb9c264db72fed74d9dd4867d14aafcb06826bfc17249a6169de1f0dbccf96eb6076726e900e805e18322223dbdac38a8226e37acd2f72ff58dd63adf57b754a296f0216993bdbc99cee56ef9b416e2e1ff403883d90b05f3fa9128f55d312f966caaa3ec650081a55e04e415a0f7aadea49f90ca566b87803b1c633f6e8c4c4f494f6770e347868c6bdbcdf7b49dbb8064bf23d68a220795f810b9d00b9a1efd12b5ad9b91911718b245767e9c34c972673d9d5da70d16b36f8f1ae53d48d18d1b8516ace95d2fe7268eed85208f5021180f27359dc5e07f78b5dfb6e586c3cb3082d657836d1437b352e281146e21d06967fa361a5fcc355876ece6c0f988f8e14553885d6355a213f4e54b7a04326d61e7493cd620907c5ea9a60e64824069062068375164eb9d3431b1ef98044de62e10722b293b7ac40303341754652f3a9b64e88c73bb0505868c31ad31211beba6a20db5793f064232eea23368fc42868f2c042e0421278daf4f2611b01a9bc014bc80b970e6def3ad874281d865a6ef9be63d21b5ca1d785cb85bd852b54ca0e584e6063da12f8a0b76901346cef618adcee92ef105b1bf50733712bdba56d268acdc7267c618fabd6bc70a48114e6a0780966b0f367de5a8048bc57508d91caef2e65ba15cb7d10fe93bca9832aa3dd89b60de2111cbad2c30bb9a7cdd8234d13541c9e7e7a2c92bd245c0193c4e6c4b27a37a01cb8ce4d1e40ac61ab3e89d5dbccda1368a62a63b629c7bd88209a625367739764ca504da39d90ba185d56f2f2d9553af949df79ec7de03c772c6e3163c7d7448439896233468f30b69480af99a61bb2a38efb952548727b19f7fd5ae1b7d70a4507ca416c96bb6ee65acbabd3efd8667aa47b56fa02ae31b2ec0a3274ba5819176c85215cfc5002e010dc95dd3930028e5cfab4e8797b39fa767d39116ee89c3ea3aee7f7a70542a29a0e558e652b22a06f9ac4079689443ed40b38d0c893182e96b770f91716801f2efe309a84afcc696c6a9021b33fa41c158125c1663c99337d913bccdd0e06853c30efcfc71fb0038a7c3cde610b7249bda94ea8ec0d35aff00651ea240e1f4d2beb5a9e8754a87287eec63fcd9381efc40f4227469b6fe6671992518f7bcfb38b311a54c7c04ff56bc1dbaa9f0ce82755115e2057528b0b3dc514a7148e271f953305b107297c40488f10d101b39ec846229505d12bf2e7feaf3be479ff13bf40cd1bce75853a144dcdb4dbcd7d0493eceb2db25764eeb43478bf7119fc2f76904eec3a966cebd1c4adb6559e719654d4b992e466006cb2dfb46378024c8e4ab831e759ecc67b8ca3c7ddd11bdd9407cb020116d0456e34184a8fb769b28aeefad55700db5fa2861dd18fe521359dda8e28bd936da00b6e40f13616df386bf8e623d97422ca17ab2c1e49a4ce127bf5e6c70cdd61b72f0b1e7f836f508de718b7e3341c6f128a963f9bdc0d5ac98f3334cc64630437470f50e16e0ffb25e40e808fff708d01b03b637718250e39fffa5668bbd162a9d26caf3e84e76346dac14aa325b33df5d10638cf8239031621ec0559e580e9a845340f95ae507e635fdc521cfe62dfe5949911616664ac36883359a22183410ce904649a71526c889562e9dfdd0707915e3794ad643c5255735ce5c2b2b311daf1255a26e1fce4ce282bd5845338ff18a4fbae75d9abeb7e66854813139f31f70c8357e434738d89c3efd277d6f1ee37c012b06f4491669b6577f82d491158f4770f0b3f2e8b352415adb62305f6c46f2e6768f5d9af911833e2761f35485cbf08ba5a1315f0a911b515043c55720983579ea6e3871af994cbbb24efb3fcaf8841204db094f424dbe9be326466e812d1a0b37ae103214fa042f990a65066ad26342dcd9e44f53414be3b2a453883f012ad5ce9ec1de6f3d590976a994b11c072a5c20c8ab9a64723644cd75ff86cd4911acc23d5d57ce4ff5223ec954444fd4fccfbb2a4b3f6e07ce9136574f7e844910255c54045105e54afeb744800355a939d9bfca95479ca7a75088fea73b9dc8e1b39b56af8e2b083976e4e6a892563f2ffa3abe95953abfe3da65363e188246c0b5a500cc002f1911db0db00292d55dcecf48a6fe15e8d9511f6c6e467df7e44c63bbdc195ccfdcc79ea6749076bf731210d1ccc6ddbfb2063eb135e79210fd84cac8237e530ce3e198118055226b777b870e9359af0cd8483c6917bef8f5c520e5ff1dd95b629c1b678e7eff8d4891e3fe0a5b0f7e25abb98281d6a1b7330c4d2604c16431208b00aa4033723993b201dccdc6c5b6d73daed477a9eb5bb244a09e45de8971470d75798193bc3fca41ca06bae91e5d1a1c80ed2b2eb05d145ad8a2f72cac9c12fe076407c2145599216feb2934a27a8573815fa8e99fb3d2b2c99d56b7ee2588fec667a62746b5c6121c32acf63bb77450f60ea8b4ccc690bf78b1104124e068a3432974974e623950e7070f5c15e2c8a86f4068fb80831bfb41380a2efac34b301f2f7b8799879ba6f6a20629ebe7a9b25f84e6ebb8107849c2dcf82f578585a61a6abff26fdab191b5ba390b6ab72ba912eecf8eff7415e778a69df2ec7008c32fb7bf3db8c4884d4621a9f1f68cbda3f6f6d9bece6bc43b785a8d67e5f89fa8d9d0f4852b27832397f2c746207ed23bdc60ee158a92c1d93bfc4af638755023f9611362d9b6543666b5795f2dcbcf0599689fc8024d6ce44cf1b4cb1b33571e3c29f780351b3f77adb57ceb7c0fed6ed1ca085b4a5366b3f73e79eb0301a7ee7cf8094d9aabcb0d0eea55f25252a7bf3393dda5ae13fed7ceee600a4e09f7797324d7fcf91c9b8d7f33db5b8082f827347980c415c2ab5986436b03ad2bd813971684f90ee62c45c4f102af66876ae290981e22b327407d5a9208b5b816efe329446b9f8e0e5fa8340d8b9dc4923579808f90ee1af22172475abaf51b99c04d74209ec211d4c1d4a6c15d9c18c54969e28c2605bbb0b8d4a0f1fdb35ec65985329d6b6a358deee64c5a274445a5baa5d79b06dc173c1507ee501645992d52c3d3edf14347f61a3d603a8f9495454d98505278d26bcf7b852c55d342ba8057da6d27d79f554adf40d2575cc44930ef00a0cdf0994768277cadb276e12c9c8aee1921fd8a84ee057890b4f54fa1ea4f56c2e491f4994cf07b9b54c8df73a9502d28c52799d57855b8ee79d78e5758168866ae53885a0d777420766087f7a380ff8b4c4b9529aef40b44af880d8e329f59733ff014bcd198f5e32bb8e0c4ff86214a36bf64d879496cbff788446d2c67e5e1d1f938561ecdd869445eb07e2d357892f526ef505453187956a6d0e7e4323f8ded2c2f453dc0031cb0e0485f540568895e03bf8d4757af86a72bd9aaf878b90a1989238abdc7b1b344798ec9db4bd500878d76b6c8dddab2176b80fcc4d675a2936ce0b75ddd92d40e3d6c04ae187d501f9021a6f40cc1a6c657d9df68244ed136e6a60b297657ab6fbf32ccd8e9c8d195431bc0ca8bbf7f650897500ed8575ef747882d56b73174ebab3dc4f20e38b7e6577baafd83573114a3e6ab32aef985c89d29d7325ca2baa344e2c1be7652a25e3e88a3898525299d61dc87d50262c993a785f89062eb49ce9a9b1f26110c518c7d9ac077dea7d0491e0b437caeb9c527ec6d88c751184b1ff1d64e6495eb0ab9cef244f19c3d0c449fdf33764479f213b93cb20badd96bd45a53fcb007c94612d62b05718385042f5056cfca3695f09770c6e6ddc4b2318f5cd3f09adba1fd75a90721da660bbf4ed24e110f44cc54a1759868d84b15257d1c771acd124a9641558eb589327454319a46215e07faf976154bd25fc8adb3a489a69028fd56ec4ca11c33ea0fc2a1c2b404d8777ec153e8616a57e5c27a0f85aa91c4b2c2bc45404a8f7e3784277bf4804083028a5e9b20b8c34b2682afbd04675e77031d0c116d57e264a6833efa07678e23b0bf172092f775f0db0632d7a08e9e7902c32b94c71e3c740e0903904f1e3c755e7cd3f0f37116d7b0e379fca91891a4a399d77eecb1c1d5de803f8212ae593e54ecfc996e42190fcc65ccb36ccc9772c465cfb63db8e2eba616f288e3e1d8868c198b09462782fcae6766b0bd00254655fb80dcb00c4930303a74a9c9c3ca005870cd73f6ae0f25ffb2cf500dff506b4677e7c18b80c5eccbf0b46bdc5e046b4cfc9027b260aacc859c4f254479f9aa36b681490d35a29339ff4f54ef8e34af08d2077065602bda0b9bb3172b417dd0144c7f48e15f283325b084916b16a7669b38754fb22101dd4bca6825b96084ee9b8fda6e2b525fb757e8297604de36c6ab41ee42f803530bdb0e2e9eb94a24670d7990bc73beb8308c8a7597d037ee9d516a1222dc4f4b832b4f7def4b8cd32e739724ca586f2c145b18149ea09fc3c443ad2fa01c06890422814ae2d7056007a4b79f5ac7e6f5a284e19f6a1549446c85273f635dc3b1734e8150b1137f010e97986b0786d0f80adb4647afcec85391f50fb0a8b91d851091488594aba0022e96438b7742e8f300c23ccf03ffdd32c6bfb06a0b8ab842c19a955c98c6205ac4731642b30ded762c401a906e85ab49b3e0ccb728b9c42c7057ec30ceb1b37ecf7abadf7d297c920640075af1e969528d14e0a120ce79c7f07e4ae601ade2317478e5deb69540e69b0fc02e99b00f91e2f6967950836724bf8005abde0fbb7e5fc4023e2ae414374d0badafe142be12abd5cecd792dde169e02f699fb42720ca1600daf626d5bcd731752bb726f9c0fe5b8d22255831bba52970ad528f60f06c6e15fbe8cf7fe6b3f87517b424a552910c6cbd822424dd7c0a8c7b93fe8a3b2573fa0bbf6718a37bf7c52219fcf4ff46f8b7b996e88adb8a8fe5542e0c8606cf73bdc8e9d5a7ae36390c0daa83304de671b92ece9b95be8bf668ee02bd0875ff73c7f66a7b46da3e8d88d1e308aaeb6d6ddfe2f98da80da1493b6cb5d7eaaf19faf6199673502f45cbadc960a927bc3d730482ed62b389281b90f6758f149c4a8f4fca22cb1946683f132b6b25fb25d8e71191d9117400d6c275ef57313b9a9c8a987df7696360a6ebecf5a9b5c345a8731cb82a38b0ffe32e8ceb4cb32c08e36f85517aec846114c5e87880511f9d8a7d9d54d61837f39194d7f7874d2f47aab6593404da7d2d3023ac070da072cd5a218cfa2b6905afa463db5f0348c7ecc369a57884be10a8e544b1e5f9977c74103c151c39835cd0d62fefa417d1c927e67f6b045e1cda4c203c112e3f3708c34b0946b7c9aa3e38f15e4dba3a1ada31c831eaafdb4c0af0e7d9105e9057514f3d52e6bd2c47b75d0e27a394e31bf8bad4e7f4905b679c29bb56adb569a25d23cf6af500a5284ca138595306131aa949a6a1abbbf61bf1e3964be78136736241074596ef82ce4f45601294dcb8ce2aa76c0a4c3cc1b7e9d6c5d86c7cd7b1e5d6d8a9550b0993ab2a6524aef9e0c4ecb03d5321148ac102d063e4a33c0ae349"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_pedit={0xf70, 0x18, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xa, 0x8, 0xffffffffffffffff, 0x1, 0x9}, 0x6, 0x9, [{0x5, 0x6, 0x6, 0x76, 0x7, 0x5}, {0xa, 0x660, 0x0, 0x8000, 0x6, 0x7}, {0x9, 0x30e1, 0x7fffffff, 0x6, 0x6, 0x2}, {0x6, 0x2, 0x5, 0x0, 0x0, 0x42b7}, {0x3, 0x9, 0x7, 0x4, 0x4, 0x1}]}, [{0x6, 0x6, 0x8, 0x7c5ea425, 0x2, 0x7}, {0x200, 0x6, 0x6, 0x6, 0x9, 0x7}, {0x7, 0xbd6, 0xffffffff, 0x3, 0x3, 0xce43}, {0x4, 0x4, 0x5, 0x6, 0x7, 0x6}, {0x8, 0x8, 0xfffff3c5, 0xc, 0x6, 0x81}, {0x9, 0x6d, 0x86, 0x4, 0xffffffff, 0xffffff7f}, {0x0, 0x4, 0xe, 0xe0, 0x7da, 0x8}, {0x7, 0x9, 0x6, 0x5, 0x5, 0xee}, {0x1e8938cb, 0x1, 0x6, 0x500, 0x80000000, 0x5}, {0x6, 0x7, 0xa, 0x7, 0x5}, {0xb, 0x6, 0x8, 0x6bf5, 0x3, 0x3}, {0xc000, 0xaf13, 0x2, 0x8001, 0x3, 0x9}, {0x5, 0x5, 0x8, 0x10000, 0x3, 0x400}, {0x5, 0x9, 0x3, 0xa, 0x80000000, 0x1000}, {0x1af, 0x7, 0xffff7c21, 0x2, 0xb, 0xd}, {0x7f98da18, 0x4, 0x7c8, 0x10, 0xff, 0xbcfa}, {0x200, 0x0, 0xd, 0x20000, 0x1, 0xfff}, {0x1, 0x6, 0x6, 0x3, 0x5, 0x96}, {0xe, 0x6, 0x9, 0x80000, 0x9, 0x4}, {0xffffffff, 0x3, 0x6, 0xc073, 0x6, 0x10001}, {0x101, 0x9, 0x101, 0x5, 0x7, 0xfb2}, {0x800, 0x8, 0x80000001, 0x400, 0x5, 0x3}, {0x4, 0x8, 0xb65, 0x2, 0x1ff, 0xfffffe00}, {0x39, 0xc, 0x2, 0x33, 0x15eb, 0x68000}, {0x4, 0x4, 0x2f, 0xd, 0xb340000, 0x7}, {0x9, 0x4, 0xd, 0x0, 0x9, 0x2}, {0x2, 0x2, 0x4, 0x2, 0x6, 0xf7}, {0x0, 0x2, 0x6, 0x7, 0x7, 0x8}, {0x4, 0x9, 0x1ff, 0x8, 0x6, 0x7}, {0x447, 0x4, 0x8, 0x0, 0xc, 0x9}, {0xd0, 0x4, 0x8, 0x9, 0x6, 0x8000}, {0x2, 0x9, 0x10000, 0xfc, 0x2, 0x204}, {0x8, 0x5, 0xfffeffff, 0x7, 0xfff, 0x401}, {0x9, 0x7fff, 0x2, 0x6, 0x40, 0x2}, {0xa, 0x44f5, 0x0, 0x2, 0x94, 0x8}, {0x3, 0xe872, 0x7, 0x0, 0xffffffff, 0x4}, {0x0, 0x385, 0xfffffff9, 0x3, 0x0, 0x7}, {0xf, 0xffffffff, 0x2ec, 0xff, 0x4, 0x7}, {0x9, 0x3, 0xfffffffb, 0x7, 0x1, 0x4}, {0x2, 0x80000000, 0xfff, 0x81, 0x8, 0x1}, {0x7ff, 0x7, 0x6, 0x8cc, 0x5, 0x3}, {0x39c7, 0x3, 0x2, 0xa, 0xdd, 0x8}, {0x5, 0x800, 0x80000000, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x94a3, 0x3, 0xfffffff0, 0x100}, {0x72e, 0x6, 0x3, 0x4, 0xc, 0x5}, {0xff, 0x46e9, 0x5b, 0xe, 0xffffffff, 0x7}, {0x2, 0xfab, 0x0, 0x2, 0x2, 0x8000}, {0x7, 0xfffffffe, 0x18000, 0x10001, 0xffffffff, 0x1}, {0x20f6, 0x0, 0x1, 0x40, 0x8001, 0x1}, {0x1, 0xc21, 0x401, 0x4, 0x1, 0xfffffff9}, {0x5, 0x4, 0xfffffff1, 0x0, 0x800, 0x1}, {0x9, 0x8, 0x81, 0x6, 0x9, 0x7fff}, {0x6, 0x10000, 0x400, 0x3, 0x9, 0x2}, {0xd, 0x6, 0x440a12cf, 0x0, 0x1, 0x3}, {0x4, 0x4, 0x319, 0xd4, 0x4, 0x81}, {0x8, 0xe, 0x1, 0x9, 0x8, 0x40}, {0x40800, 0x3, 0x1fe, 0x7, 0x6, 0x80800000}, {0x1, 0x326e8d6a, 0x2, 0x0, 0x1bc, 0x7}, {0x80000001, 0x3, 0x427, 0x5c2d, 0x8f38, 0x1a3}, {0x8, 0x0, 0x80, 0x2, 0x100, 0x10001}, {0xc, 0x5, 0x7, 0x7fff, 0x2, 0x1}, {0x1, 0x10, 0x4, 0x107d, 0x2, 0x2}, {0x8, 0xe, 0xffffffff, 0x5, 0x0, 0xb3b}, {0x2, 0x9, 0x80000001, 0x8, 0xd61, 0x3}, {0x7d, 0xf00b, 0x8, 0x7, 0x8, 0x401}, {0x0, 0xffff, 0x6, 0x2, 0x4}, {0x6246c391, 0x8, 0x8, 0x80000000, 0x8d, 0xf}, {0x0, 0x2, 0x6, 0xee4, 0x8, 0x1}, {0x0, 0x200, 0xc77, 0xfffff058, 0x234938cb, 0x6}, {0x3bdc, 0x4, 0x80, 0x9, 0x3, 0x4}, {0x0, 0x0, 0x8, 0x8, 0x401, 0x1}, {0x7, 0x10001, 0x7fff, 0x0, 0x5, 0x7ff}, {0x9, 0x4, 0x7, 0x0, 0x53ef, 0xa}, {0x0, 0x2, 0x8, 0xbc8, 0x401, 0xfffffffe}, {0x4, 0x8, 0xf388, 0x0, 0xffffffff, 0x204}, {0xfffffffa, 0x101, 0x5, 0x2, 0x7ff, 0x81}, {0x0, 0x7fff, 0x8, 0x9, 0x10001, 0x1}, {0x0, 0x4, 0x401, 0x6, 0x5, 0x38}, {0x6, 0x7fff, 0x401, 0xadeb, 0x4, 0x7}, {0x5, 0x2, 0x140000, 0x6, 0x2, 0x7}, {0x4d0, 0x0, 0x9, 0x180000, 0x5, 0x6}, {0xff, 0x200, 0x4, 0x0, 0x2, 0x8}, {0x5, 0x5, 0x4, 0x7, 0xd0, 0x1ff}, {0xd95, 0xfffffff7, 0x5, 0x2, 0xc5d, 0x7fffffff}, {0x4, 0xa, 0x400, 0x939, 0x9, 0x28825b14}, {0xfb4, 0x8, 0x9, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x2, 0x6, 0x4}, {0xff000000, 0x7, 0x0, 0x1, 0x101, 0x8}, {0xcab, 0x7fff, 0x0, 0xf, 0x0, 0x3}, {0x5, 0x0, 0x9, 0x17af, 0x3254a2ab, 0xe}, {0x64, 0x8, 0x6, 0x52, 0xc42, 0x4}, {0x6, 0xb, 0x9, 0x0, 0x7, 0x5}, {0x3, 0x8, 0x6, 0x7, 0x9, 0x57}, {0x7, 0x7e, 0x7, 0x4, 0x4d, 0x7}, {0x8, 0x2, 0x4, 0xd1, 0x6, 0x6}, {0xc969, 0x9, 0x10000, 0xe, 0xaa66, 0x5}, {0xd87, 0x1, 0x8, 0xbb6b, 0x25a, 0x71}, {0x3c, 0x1, 0x9, 0x401, 0x7, 0x8}, {0x3, 0x4, 0x2, 0x0, 0xfffffffd}, {0x7456, 0x5, 0xd, 0x3, 0x8, 0x3}, {0x0, 0x7, 0xffffffa5, 0x1, 0xfb0, 0x1d}, {0x6, 0x1, 0x1, 0x6, 0x6, 0x5}, {0x3, 0xd, 0x3, 0x10001, 0xc0004, 0x3}, {0x0, 0x316, 0x4, 0x4, 0x3663, 0x3}, {0xfff, 0x572, 0x7, 0x3, 0x0, 0x4}, {0x4, 0x0, 0x3, 0x5, 0x5, 0x8}, {0x3, 0x1, 0x8, 0x0, 0x3, 0x3}, {0x9, 0x40, 0xfffff69e, 0x4, 0x80000000, 0x98c3}, {0x80000000, 0x8, 0x5bd, 0x7, 0x8bd6, 0x9}, {0x8, 0x4, 0x73, 0x6000, 0x81, 0x9ea}, {0x3, 0x9, 0x7, 0x1, 0x101, 0x7}, {0x4, 0x9, 0x6, 0x3, 0x3, 0x3}, {0x5, 0xfffffffb, 0x1, 0x0, 0x10, 0x77b}, {0x0, 0x2, 0x2, 0x40000000, 0xf, 0x7}, {0x2, 0xffffffff, 0x5, 0x0, 0x80, 0x1}, {0x6, 0x7, 0x7, 0x1, 0x6, 0x1}, {0x8, 0x2, 0x400, 0x4, 0x7}, {0x2, 0x3, 0xfa8, 0x1, 0x0, 0x4}, {0xcdf4, 0x9, 0x5, 0x3, 0xb, 0x3}, {0x8, 0x6a, 0x9, 0x0, 0x6, 0x6}, {0x1, 0x40, 0x4, 0x4, 0x4, 0x80000000}, {0x4, 0x17, 0xf10, 0x4, 0x1, 0x7}, {0xfff, 0x3, 0x5, 0x80, 0x5, 0x9}, {0x9, 0x8, 0x0, 0x401, 0x9, 0xfa}, {0x4, 0xf, 0x0, 0x9, 0x37c04ced, 0x9}, {0x1, 0x0, 0x4, 0x40, 0x8000, 0x3}, {0x1, 0xffffffff, 0x9, 0xb4, 0xf39}, {0x3, 0x53787b40, 0x1, 0x8aa1, 0x3, 0x4}], [{0x3, 0x1}, {0x1}, {0x4}, {0x13dc76b6272cefa6, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0xbd57ad6682d3a87d}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5}, {0x5}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x4}, {}, {0x4}, {0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x3}, {0x4}, {0x5}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {}, {0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x781a44667cfc69d7, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0xd, 0x1}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}], 0x1}}]}, {0xac, 0x6, "52091c0fbc1f6335ef4e013c5694d4f8998644ce5375eab919e502d4e4c1d139e8ff5183cfa6692c32085d5ead84204b6b23c1358cdd41ae17dbbf1379e48355a4c3fbdd94ecd7c70d0fb18c8a042651ddd615744969d4b2f0a64b2afeff85b0d85cffb59f3c195eac145e779115396a024ae6dfd10ae524485b4c542d0c55edf080ed39d74234a2ad4c99e3e7f9d1e1b569b9f4aef75ad2d7d5734dd1062a164d0e29f442ca634e"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x216c}, 0x1, 0x0, 0x0, 0x804}, 0x40048) syz_clone3(&(0x7f0000001880)={0x50284400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000280)) 3m6.923951067s ago: executing program 8 (id=2953): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000d20b060005"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x82}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xfd, 0x1b1, &(0x7f0000000d00)="$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") r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(r7, 0x406, r2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000380)={0x4, 0x2, 0x9, 0x7, 0x876}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0x10000014}) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000240)={0x80000011}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0xa) epoll_pwait(r5, &(0x7f0000000440), 0x0, 0x3b, &(0x7f0000000140)={[0xfff]}, 0x8) r13 = getpid() r14 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000400)={0x1, 0x0, 0x4, r3, 0x7ff}, 0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r9, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x5}}, './file7/file0\x00'}) kcmp$KCMP_EPOLL_TFD(r13, r14, 0x7, r9, &(0x7f0000000100)={r15, r9}) 3m6.484566643s ago: executing program 8 (id=2959): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x100}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x10000000}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x2}, {0xd20f}, {0x3}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {0x52}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pread64(r0, &(0x7f0000001400)=""/168, 0xa8, 0x100000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x44000006) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x73, @local, 0x4e24, 0x4, 'wlc\x00', 0x2c, 0x3, 0x12}, {@multicast2, 0x4e22, 0x0, 0xffffff02, 0x816, 0xff}}, 0x44) 3m6.150573502s ago: executing program 8 (id=2967): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0xa000200) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0xd, &(0x7f0000000000), 0x10}, 0x94) keyctl$chown(0x1e, r0, 0x0, 0xee00) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000e37480345cc1ac3fc282090000000000000041001400010603000000000000002b030000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', r5, 0x4, 0x66, 0x2, 0x2, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0xa, 0x6d0}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f000000040b5db4e14af16367820000000000000b050000000030002e"], 0x0, 0x3d, 0x0, 0x0, 0x1002}, 0x28) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1090002}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4008005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850800000000000000100000", @ANYRES32, @ANYBLOB="000000000000000095000000000000004500000000000000"], 0x0}, 0x90) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000fc0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 3m6.127766944s ago: executing program 38 (id=2967): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0xa000200) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0xd, &(0x7f0000000000), 0x10}, 0x94) keyctl$chown(0x1e, r0, 0x0, 0xee00) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@usrjquota}, {@orlov}, {@norecovery}, {@barrier}, {@data_journal}]}, 0x66, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000e37480345cc1ac3fc282090000000000000041001400010603000000000000002b030000"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000800)={'ip6gre0\x00', r5, 0x4, 0x66, 0x2, 0x2, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0xa, 0x6d0}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f000000040b5db4e14af16367820000000000000b050000000030002e"], 0x0, 0x3d, 0x0, 0x0, 0x1002}, 0x28) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1090002}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4008005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850800000000000000100000", @ANYRES32, @ANYBLOB="000000000000000095000000000000004500000000000000"], 0x0}, 0x90) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000fc0), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 3m4.104811362s ago: executing program 1 (id=2984): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) tkill(r0, 0x19) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, 0x0, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f0008000340000000000800044000000000080005400000000009000200000000000700000008000100"], 0x40}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x318, 0x0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x280, 0x230, 0x230, 0x280, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x160, 0x1a8, 0x0, {0x1000000}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x44}, [0xffffffff, 0x54691080da52b893, 0xff, 0xffffff00], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xff, 0xff, 0xffffff], @ipv6=@private0, [0xffffff00, 0xffffff00, 0xff], @ipv6=@mcast2, [0xffffff00, 0xffffff00, 0xffffff00, 0xffff00], 0xfffffffe, 0x6, 0x1d, 0x4e23, 0x4e21, 0x4e22, 0x4e22, 0xa00, 0x2200}, 0x100, 0x1004, 0x4e22, 0x4e23, 0x4e22, 0x4e23}}, @common=@unspec=@state={{0x28}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x378) getpid() syz_read_part_table(0x1055, &(0x7f0000002100)="$eJzsz7GtwjAABNDzzweSVMzCBqGioKViHGYBCUZiATagDUpSRCwAFO811p1Othy+qkzHfZM0SZ9LO5cpqZr3eZVhlDzn6tT9JXVS/ndDbLMdY45D2pdcu2XKerGqp/nj3I/3j28cbp/4IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ulcAAAD//7B/C4Q=") r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0x8}}, './file0\x00'}) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x2, 0x0, 0x4}}, 0x26) 3m3.240930162s ago: executing program 1 (id=2986): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0x7, 0xcd, 0x7fff}, {0x1d3, 0xaf, 0x7, 0xe}, {0x8, 0x3, 0xe6, 0x4}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) quotactl_fd$Q_GETINFO(r2, 0xffffffff80000501, r3, &(0x7f00000000c0)) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) syz_io_uring_setup(0x36c1, &(0x7f00000001c0)={0x0, 0x96e3, 0x20, 0x1, 0x159}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_setup(0x5567, &(0x7f0000000400)={0x0, 0x8b80, 0x1, 0x2, 0x16}, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x38, 0x0, 0x10001, 0x1, &(0x7f0000000500)="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", 0x1}) socket$inet_udp(0x2, 0x2, 0x0) 3m3.09891245s ago: executing program 1 (id=2988): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x18, 0x42401837745673e4, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 3m3.098152791s ago: executing program 1 (id=2989): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x8, 0x5, 0x5, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x2, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="000c000000fb72799401000000000000c16aef1a0a0000000020000000000000000000003b16525657a1fbbe9d3415aee6104fd5be578f92153670f3b43c74f798f32edbf0ae66a364f487b2efae11a15bff4f7ee5db31781be9dce7689fea5eae121ccf20e84e745848aa3171a6412a000f603e72b78cc15ed6f0aa8d864ba4e3bedc07e5d8bbe517a89e8e0a6be5c71d1a9d5309b555260508ae1d6a22b8cbe58cd6f0ab28a0b1ce8c9f08a5fe6664447a7720bfb03dbbd2f171660149d8a5d9b11a4e5cb0b63791189aabd29b5cb4255263f06405b35071f74cf39ea442f00b"], 0x0, 0x26, 0x0, 0x1, 0x2}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x19) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0x7f, 0x2502, 0x80, 0x1, 0x4, '\x00', 0x0, r0, 0x4, 0x2, 0x1, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000006000000020000000500000040000000", @ANYRES32=r1, @ANYBLOB="f50e000000000000000000000000000000000000ca75959ce93c89fab790c077e50e630dcb60549229bb6e20f581f6c78983a6a378a956ed907be34025851087bfed09e51ef713423c2be1ebc5130ff83cf04f414379ac72cd473232cf05926b42a07114f21436e8", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0300000000000000000100"/28], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9805, 0x0, 0x7fc, 0x6}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000002200)=[&(0x7f0000ffb000/0x4000)=nil], 0x0, 0xfffffffffffffffe, 0x2) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000040)="85820528c32ef8bdfcaf925ed8b87c82d543b54a8dfd870b12d8e35da72ca1b0054905cabfe96f752e0bccc2078abbd6d9c9309834cceba35fac931bf01ef0991e0e0ea292937dbfa714c9e599064d1c25e4", 0xffffffe4}], 0x31, 0x1400, 0x0, 0x1) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r3, 0x3, &(0x7f0000000b00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x8, r2, 0x0, 0x0, 0x800007, 0x0, 0x2}, 0x0, 0x0]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe80000000000000000000000000002014100400ff0100000000000000000000000000010c00028005000100980000003c0003800c00028005000100890000002c0001801400030000000000000000000000ffffac1e000114000400ff0100000000000000000000000000013c0002802c00018014000300ff020000000000000000000000000001140004000000000000000000ebfffeffac1414aa0c0002800500010086000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4048805}, 0x4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x184905c, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) 3m2.996112987s ago: executing program 1 (id=2990): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x6000) setpriority(0x1, 0x0, 0x80000000) shmat(r3, &(0x7f0000d6f000/0x3000)=nil, 0x6000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x90, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c099, 0x6400}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x60, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x6}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) shmdt(r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001000000", @ANYRES32=r2, @ANYRESOCT=r0], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) 3m2.802363648s ago: executing program 1 (id=2991): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0xf9, 0xe1, 0x7, 0x0, 0x5, 0x80122, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3ffff, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x2, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1012, 0x0, 0x12011, r0, 0x0) unshare(0x20060400) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000005c0)="09b80963e32b2c165d695de3784d4c78be955a4e9d", 0x15}, {0x0, 0x15}, {&(0x7f00000008c0)="f9a7736247c72ee9e069d65c1d6bdee483abe03be2ce7025391f8bd57a5dcb191ef8d503922327b4f91854b374d8", 0x2e}], 0x3, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x18}}], 0x1, 0xe882) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, 0x32) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x669b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xf7dffffffffffffd, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r5, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 3m2.75958175s ago: executing program 39 (id=2991): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0xf9, 0xe1, 0x7, 0x0, 0x5, 0x80122, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3ffff, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x2, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1012, 0x0, 0x12011, r0, 0x0) unshare(0x20060400) bpf$BPF_GET_MAP_INFO(0x4, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000005c0)="09b80963e32b2c165d695de3784d4c78be955a4e9d", 0x15}, {0x0, 0x15}, {&(0x7f00000008c0)="f9a7736247c72ee9e069d65c1d6bdee483abe03be2ce7025391f8bd57a5dcb191ef8d503922327b4f91854b374d8", 0x2e}], 0x3, &(0x7f0000000c00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}], 0x18}}], 0x1, 0xe882) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}, 0x32) unshare(0x68040200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x669b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xf7dffffffffffffd, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r5, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 2m1.258657251s ago: executing program 5 (id=3548): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001930000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x80000401) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r3, 0x0, &(0x7f0000000880)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8", 0xe}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001180)=@security={'security\x00', 0xe, 0x4, 0x2e8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x250, 0x250, 0x250, 0xffffffff, 0x4, &(0x7f0000000340), {[{{@ip={@private=0xa010101, @loopback, 0xffffff00, 0xffd1381d13527ba2, 'syzkaller1\x00', 'virt_wifi0\x00', {0xff}, {}, 0x6c, 0x3, 0x4}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e21, 0x4e23], [0x4e23, 0x4e22], 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x6, 0xb}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xff, 0xffffffff, 0x0, 0xffffff00], 0x4e21, 0x4e24, 0x4e20, 0x4e21, 0x1, 0x28, 0x3, 0x7, 0x6}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff, 0xffffff00, 'veth0_vlan\x00', 'veth0_virt_wifi\x00', {}, {}, 0x88, 0x2, 0x2}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=@deltfilter={0x89c, 0x2d, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xb}, {0x2, 0xfff3}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @filter_kind_options=@f_flow={{0x9}, {0x864, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x81}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3}, @TCA_FLOW_POLICE={0x840, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfef9}, @TCA_POLICE_RATE={0x404, 0x2, [0x28, 0x7, 0xb7, 0x3, 0x4, 0x10000, 0x0, 0x3ff, 0x16a6, 0xc3d5, 0x1, 0x4, 0x3, 0x8, 0x1, 0x2, 0x6, 0x1, 0x2c32, 0x4, 0x2, 0x9, 0x7f, 0x0, 0xe, 0xf3, 0x1ff, 0x6, 0x1, 0x3, 0x1, 0xeb, 0x3, 0x7, 0x84, 0xffffffa9, 0x4, 0xeb, 0x58ac, 0x76e, 0x4, 0x1, 0x5, 0x1, 0x0, 0x2, 0x2, 0xd, 0x3ff, 0x6, 0x4, 0x5, 0x0, 0xfffffffc, 0x3ff, 0x65, 0x1, 0x8, 0x1, 0x9, 0xd, 0xffffffff, 0x4b6, 0x401, 0xd0, 0xc, 0x7, 0xc579, 0x8, 0x4, 0x0, 0x3, 0x5, 0x74c5c4a3, 0x5f, 0x13bc, 0x1d8d0000, 0x4, 0x0, 0x401, 0xb4cc, 0x4a65, 0x4, 0xffffff00, 0xa, 0x2, 0xc6f3, 0x9, 0x80000000, 0xffffb8fb, 0x9, 0x7, 0xa6, 0x4, 0x9d, 0x80000000, 0x8, 0x401, 0x7, 0x9, 0x6, 0x2e, 0x3, 0x8000, 0x0, 0xf64, 0xf5, 0xc, 0x4, 0x2, 0x2, 0x6, 0x0, 0x3, 0xffff1696, 0x3d9f, 0x4, 0x7662aa8d, 0xfffffffa, 0x101, 0xa, 0x5b, 0x7, 0xa6, 0x3, 0x5, 0x5, 0xc, 0x5, 0xb9, 0x1ff, 0x7, 0x5, 0x1, 0x80000000, 0x1000, 0x9, 0x3ff, 0x8000, 0xd0, 0x2, 0x1, 0xfb3, 0x2, 0x2, 0x6, 0x0, 0xfffffffa, 0x9, 0x2, 0x6, 0x5, 0x9, 0x3, 0x1905, 0x0, 0x80000000, 0x2, 0x81, 0x4, 0x1, 0x5, 0x1cb6cce1, 0x9, 0x5, 0x41de, 0x6, 0x7, 0x9, 0x8, 0x5c, 0x0, 0x2, 0x6af0, 0x2, 0xaa, 0xfffffffa, 0x6a, 0x7, 0x6, 0x4, 0x2, 0x6b, 0x2, 0x8, 0x8, 0xa, 0x6, 0x0, 0x6, 0x5, 0xfffffffd, 0x6, 0xfffffe93, 0x0, 0x80000001, 0xffff, 0x8, 0x5, 0x1, 0x1, 0x2, 0x0, 0x2, 0x3, 0x0, 0x3a, 0x7a31, 0xfff, 0xb, 0x9, 0x8, 0x9, 0x5, 0x9, 0x6, 0xa, 0x200, 0x3, 0x90, 0x7, 0x3, 0xfffffff8, 0xfffffffd, 0x3, 0x1000, 0x46a9, 0x8, 0xd, 0x14, 0x7, 0x7, 0x3, 0x401, 0x7, 0x4, 0x7, 0x4, 0x5, 0x6, 0x4, 0x31d, 0xd, 0xe0000, 0x6c8, 0xe2, 0xa, 0x1, 0x5, 0x5, 0x9, 0x51, 0x7fff, 0x8, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x6cd7, 0x3, 0x3, 0x3, 0x9, 0x4, 0xc3b, 0x9, 0x4, 0x7, 0x40, 0x7fffffff, 0x3, 0x81, 0x10000, 0x0, 0x2, 0x6, 0x6, 0x1, 0x8, 0x4, 0xa0000000, 0x223, 0x0, 0x7, 0x4, 0x1, 0x8, 0x3, 0x8, 0x3, 0xb1f0, 0x3, 0x8, 0x4, 0x100, 0x3, 0x5, 0x5, 0xfffffff4, 0x300, 0x9, 0x7, 0xffff0000, 0xb17, 0x9, 0x0, 0x4, 0x0, 0x0, 0x4608, 0xb, 0x1, 0x8, 0x6, 0x4, 0x0, 0x6, 0x3, 0x2, 0x7, 0x9, 0x8, 0x2000, 0x0, 0x5, 0x9, 0xfffffff8, 0x6, 0x6, 0x7, 0x1ff, 0x8, 0x8, 0x80000001, 0x7fffffff, 0xd, 0x5, 0xe4, 0x8000, 0x9, 0x16e, 0xffffffff, 0x6, 0x8, 0x9, 0x400, 0x50000, 0x7, 0x7f, 0x10000, 0x4, 0x1, 0x6, 0x2, 0x3, 0x2, 0x93, 0x4, 0xde, 0x7, 0xfff, 0x9aa0, 0x6, 0x0, 0xfffffff9, 0x3, 0x6, 0x200, 0x9, 0x1d10, 0x9, 0xfffffffd, 0x9, 0x5, 0xd, 0x3, 0x79a, 0x7fffffff, 0xc, 0x1, 0xf2, 0x1f, 0x7, 0x6, 0x4, 0xaeb, 0x7, 0x4, 0x5d1, 0x10001, 0x6, 0x0, 0x46, 0x400, 0x0, 0x8, 0x0, 0x5, 0x0, 0xc, 0x2, 0xe00, 0x5, 0xab, 0x7, 0x7fffffff, 0x4, 0x8, 0x9, 0x8000, 0x7, 0x6, 0x591, 0x5, 0x1, 0x0, 0x10001, 0xff, 0x200, 0x7fffffff, 0x8, 0x200, 0xeee7, 0x10001, 0x4, 0x40, 0x9, 0x7, 0xfffffff9, 0x3, 0x8, 0x9, 0x0, 0x3, 0x0, 0x4, 0x8, 0x4, 0x3, 0x2, 0x0, 0x1ff, 0x6cb3, 0x7, 0x80000000, 0x8, 0x81, 0x5, 0xfffff91b, 0xc9e0, 0x8, 0x80, 0x0, 0x6, 0x84, 0x492c, 0x0, 0x5, 0x73f, 0xa495, 0x8, 0x5, 0x9, 0xc, 0x9, 0xffffd19a, 0x66a, 0x3ff, 0x7fffffff, 0x6, 0x9, 0x0, 0xe, 0x2ceb, 0x4, 0x1, 0x9, 0x55, 0x4ec2, 0x7, 0x1291, 0x9, 0x100, 0x8, 0xfffffff9, 0x6, 0x8, 0x9ac0, 0x9, 0x80, 0x80, 0x8931, 0xa72c, 0x5, 0x0, 0xffffffff, 0x0, 0x704, 0xdd, 0x9, 0x7f, 0x6, 0x4, 0x9, 0x1, 0x5, 0x8, 0x5, 0x2, 0x0, 0x1, 0x3, 0xb4a5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}]}}]}, 0x89c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r8, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002640)=""/4096, 0x1000}], 0x1}, 0x5}], 0x2, 0x10102, 0x0) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x0, 0x0) dup2(r6, r7) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 2m0.378590922s ago: executing program 5 (id=3554): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000002c0)="ff", 0x1, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x338, 0x2a0, 0x700001b, 0x148, 0x0, 0x148, 0x2a0, 0x206, 0x240, 0x2a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'sit0\x00'}, 0x1ea, 0x1a0, 0x90, 0x0, {0x390, 0x8f00}, [@common=@inet=@recent1={{0x108}, {0xf, 0x8001, 0x20, 0x0, 'syz1\x00', 0x3, [0xa7ea79785227b1dc, 0xffffffff, 0xff, 0xffffffff]}}, @common=@inet=@socket3={{0x28}, 0x6}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x8000, 0x0, 0x2, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x208}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r4) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r4, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01030000000000000000030000070900010073797a310000000030000000030a010200000000000000003eb14c99ef44d17884285e9e16c273a80300000008000b400000000208000a40000000070900010073797a3100000000140000001100010000000000000000000300000a"], 0x78}, 0x1, 0x0, 0x0, 0x400c0}, 0x4084) r5 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) quotactl_fd$Q_SYNC(r5, 0xffffffff80000101, 0x0, 0x0) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r6, 0x2000000000000007, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x8, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2, r5}]) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r9 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r9) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000001600)={0x264, r10, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfb0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x405d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa40b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x69c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x977d}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) readv(r9, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) preadv(r9, &(0x7f0000000300)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1, 0x64, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf2500000000000000000008000000000001fc0000000000000000000000000000000004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32=r8], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe000000006910bd000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x700}, 0x50) r11 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r12 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB="000000006e6fc9", @ANYRESHEX=r12, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',\x00']) r13 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x121201, 0x0) r14 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f00000006c0)={0x10000000}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300"/20, @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000400"/28], 0x50) 1m59.353452202s ago: executing program 5 (id=3557): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x29, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) 1m59.245068919s ago: executing program 5 (id=3560): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="6d78ce97810be391e5f6", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @flow_dissector}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac1414210000000000000000000000002001000000000000000000000000000000000000000000000000020000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280080002"], 0x44}, 0x1, 0x2}, 0x40000) 1m59.234077629s ago: executing program 5 (id=3561): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x200, 0x8, 0x0, 0x5, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ptrace$cont(0x21, r0, 0x5, 0x4) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x5000) fallocate(r2, 0x0, 0x0, 0x8800000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40084) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x2}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000340)={0x94d0, 0x1, [{0x1, 0x1}]}) 1m59.010815162s ago: executing program 5 (id=3567): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x100}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x10000000}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x2}, {0xd20f}, {0x3}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {0x52}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pread64(r0, &(0x7f0000001400)=""/168, 0xa8, 0x100000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x44000006) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x73, @local, 0x4e24, 0x4, 'wlc\x00', 0x2c, 0x3, 0x12}, {@multicast2, 0x4e22, 0x0, 0xffffff02, 0x816, 0xff}}, 0x44) 1m43.857059277s ago: executing program 40 (id=3567): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xffffffff, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd, 0x0, 0x0, 0x100}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x10000000}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4, 0x2}, {0xd20f}, {0x3}, {}, {0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {0x52}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x6014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pread64(r0, &(0x7f0000001400)=""/168, 0xa8, 0x100000000) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xf}, 0x15, 0x3, 'lblcr\x00', 0x1, 0x6, 0x48}, 0x2c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x44000006) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000001c0)={{0x73, @local, 0x4e24, 0x4, 'wlc\x00', 0x2c, 0x3, 0x12}, {@multicast2, 0x4e22, 0x0, 0xffffff02, 0x816, 0xff}}, 0x44) 6.621175584s ago: executing program 0 (id=4390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioperm(0x0, 0x7, 0x80006) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.29364401s ago: executing program 4 (id=4415): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c000900090000060015"], 0x38}, 0x1, 0x0, 0x0, 0x20048010}, 0x2000a080) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000280)={0x40000000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgid(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xf9, 0x1213, &(0x7f0000000600)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000005e000d03"], 0x1c}], 0x1}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000001c0)={0x0, 0x8d6, 0xf8000000, 0x9, 0xf, 0x8000}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080000000700000002000000faffffff0800010004000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x810) sendmsg$nl_route_sched(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xfff2, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3, 0x8, 0x8, 0x0, 0x1e, 0x5, 0x7}}]}}]}, 0x44}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, 0xffffffffffffffff, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000040)=0x1) r7 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) ftruncate(r7, 0x6) 3.510640186s ago: executing program 4 (id=4424): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0xffff0000, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r2 = fsmount(r0, 0x0, 0x6) fchdir(r2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1182, 0x9b) write(r4, &(0x7f0000000440)="e933adf1e68a", 0x6) sendfile(r4, r3, 0x0, 0x3ffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000340)=""/198, 0xc6, 0x0) 3.367974544s ago: executing program 0 (id=4427): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x64}}, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fadbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d80050001000800000005000400000000000800020003"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x240040ff}, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V4(r3, 0x8070587c, &(0x7f0000000000)) 3.246079451s ago: executing program 0 (id=4430): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) acct(&(0x7f0000001000)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) chmod(&(0x7f0000000540)='./file0\x00', 0x120) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c000000100001040200"/20, @ANYRES32=0x0, @ANYBLOB="00200000421004001800128008000100767469"], 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x8000000000000001, 0x7e68) 3.133472847s ago: executing program 9 (id=4433): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda", 0x3}], 0x1) 3.116471528s ago: executing program 9 (id=4435): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) getpgrp(r1) (async) r2 = getpgrp(r1) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r2, 0x0, 0x4004) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fallocate(r3, 0x40, 0x7, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x10, 0x10001, 0x8001, {{0x8, 0x4, 0x0, 0x30, 0x20, 0x67, 0x0, 0x7, 0x29, 0x0, @multicast2, @private=0xa010100, {[@timestamp={0x44, 0xc, 0xc1, 0x0, 0x0, [0x5, 0x0]}]}}}}}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r4, @local, @dev={0xac, 0x14, 0x14, 0x3a}}, 0xc) (async) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r4, @local, @dev={0xac, 0x14, 0x14, 0x3a}}, 0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r5, 0x5}, &(0x7f0000000240)=0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, &(0x7f0000000280), 0x4003) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x148) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x148) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000f, 0x1010, 0xffffffffffffffff, 0xd1767000) ptrace$cont(0x9, r2, 0x8000000000000001, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r7, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffd}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x29}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\x88\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040080) syz_pidfd_open(r1, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000580)={@multicast2, @multicast2, 0x0, 0x7, [@multicast1, @broadcast, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @private=0xa010102]}, 0x2c) write$P9_RGETLOCK(r3, &(0x7f00000005c0)={0x20, 0x37, 0x2, {0x1, 0x29, 0xd, r2, 0x2, '\x88\x00'}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r6) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000000}, 0x4800) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r8, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000000}, 0x4800) io_uring_enter(r3, 0x57fe, 0x2ccb, 0x1, &(0x7f0000000740)={[0x1]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000780)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) ptrace$ARCH_SET_GS(0x1e, r10, &(0x7f0000000800), 0x1001) 3.034186643s ago: executing program 9 (id=4436): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_procfs(r0, &(0x7f0000000000)='environ\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x10000, @loopback, 0x7}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0x1}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4000, 0x800) stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61fb070100542f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d270100810000013f0c78f364e8000086dd810088a808"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f0000522000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3fffffd, 0x0, 0x0, 0x0, 0x83d}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0xffffffffffffff00, 0x7, 0x400}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900a900070000000100001301000000ffffffff07000000002e5f0c5f2e6100"], 0x0, 0x39, 0x0, 0x1, 0x4}, 0x28) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='- \x88\x11\x85\x05\x12l\xde[\xe8\xde\x03\xf8\xdbM\f!Fxi\xb9\x99E\xd7<%W\xebU\xe1\x18o\xacL\"\xc6[Kc\x03\xe6\x99A\x10\xcb9\x13\x10Jn\x8d\xe2In\xd0\x1d\x97d\x15', 0xa0000, &(0x7f00000000c0)={@align=0x8, {0xfffe, 0x1, 0xfffffffb}}, 0xd, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000180)=0x9}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e22, 0xe, @remote, 0x13}}}, 0x84) 3.033696833s ago: executing program 9 (id=4437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c000140", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 2.984017906s ago: executing program 9 (id=4438): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) getpid() syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") mount(0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r3, r3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r4, 0x1804) syz_io_uring_setup(0x11cd, &(0x7f00000003c0)={0x0, 0xde73, 0x80, 0x1103, 0x2c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) 2.770654339s ago: executing program 0 (id=4441): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0xfffffffd, @mcast1}}}, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) ptrace$peeksig(0x4209, r6, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}]) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.545317621s ago: executing program 6 (id=4442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.516313702s ago: executing program 4 (id=4443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYRESOCT=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.470959914s ago: executing program 6 (id=4444): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, 0x0, 0x0, 0x40) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000200)={0x0, 0x3}, 0x8) 1.348827151s ago: executing program 0 (id=4446): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0xc98, 0xfec, 0xff7ffe41, 0xfffffdfc, 0x4, "00000000002102c1136a000000ab2dd56700", 0x1, 0x7fffd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0x5) semop(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x9c, 0x0, 0x0, 0xffffffffffffffff) r2 = creat(0x0, 0x12e) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) creat(0x0, 0xecf86c37d53049cc) mknod(0x0, 0xa000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000280)={0x3, 0x1, 'client1\x00', 0x0, "79be43e26787e4ad", "56165e12fd3e04609a76b376853cf0e5ec379cde16e7f57f9a43cda43f0444d2", 0x9, 0x160f}) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_mr_vif\x00') pread64(r7, 0x0, 0x0, 0x3) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000100)={@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @broadcast}, 0x0, 0x4, 0x2, 0x1}}, {0x0}, 0x0, 0x8}, 0xa0) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000000)=0xff) readv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000580)=""/220, 0xdc}], 0x2) r8 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x2, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r8, 0x6efc, 0x3900, 0xb, 0x0, 0x0) 1.163031792s ago: executing program 6 (id=4447): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) unshare(0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x94) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) setresuid(0x0, 0xee00, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000c80)={'ip6_vti0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'veth0_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210327bd7000fcdbdf25040000000c00018008000100", @ANYRES32=r5, @ANYBLOB="4fd9acb738cc0fe05f"], 0x20}}, 0x40400c4) 1.043004409s ago: executing program 6 (id=4448): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_procfs(r0, &(0x7f0000000000)='environ\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x10000, @loopback, 0x7}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0x1}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4000, 0x800) stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61fb070100542f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d270100810000013f0c78f364e8000086dd810088a808"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f0000522000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3fffffd, 0x0, 0x0, 0x0, 0x83d}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0xffffffffffffff00, 0x7, 0x400}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900a900070000000100001301000000ffffffff07000000002e5f0c5f2e6100"], 0x0, 0x39, 0x0, 0x1, 0x4}, 0x28) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='- \x88\x11\x85\x05\x12l\xde[\xe8\xde\x03\xf8\xdbM\f!Fxi\xb9\x99E\xd7<%W\xebU\xe1\x18o\xacL\"\xc6[Kc\x03\xe6\x99A\x10\xcb9\x13\x10Jn\x8d\xe2In\xd0\x1d\x97d\x15', 0xa0000, &(0x7f00000000c0)={@align=0x8, {0xfffe, 0x1, 0xfffffffb}}, 0xd, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000180)=0x9}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e22, 0xe, @remote, 0x13}}}, 0x84) 941.915995ms ago: executing program 0 (id=4449): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x7f, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r2, 0x409, 0xb) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x20008, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x40000107}], 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0}, 0x200, 0x0, 0x7fc, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000a0}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000a00)="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", 0x7da}], 0x1}}], 0x1, 0xc4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000340)={0xb3, 0x2, 0x204, 0x9, 0x7f, 0x5, 0x7, 0x8, r7}, 0x20) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 893.060508ms ago: executing program 6 (id=4450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r1, 0x1d, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000100)=0x5, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r2, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/208, 0xd0}], 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x6}}}}}}, 0x0) recvmsg(r2, 0x0, 0x1) setresuid(0x0, 0xee01, 0xffffffffffffffff) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x3000000, 0x32, 0xffffffffffffffff, 0x1a326000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x6205, 0x400000000004005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r3], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) 718.828168ms ago: executing program 6 (id=4451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000048000), 0x0) dup2(r4, r5) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000850000006100000018010000646c000400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x10, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x8, 0x3, 0x3) 472.595593ms ago: executing program 4 (id=4454): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 430.226205ms ago: executing program 4 (id=4455): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_read_part_table(0x5a3, &(0x7f00000005c0)="$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") socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, &(0x7f0000000040), &(0x7f0000000200)) (async, rerun: 32) r1 = epoll_create1(0x0) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0xffff, 0x18f7170d1810ce06}], 0x1f4, 0x0) (async) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x401, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 412.037556ms ago: executing program 9 (id=4456): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x3, 0x0, 0x0, 0x20080, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x2a3}, 0x0, 0x10008, 0x8, 0x0, 0x800000009, 0x60009, 0x1b, 0x0, 0x0, 0x0, 0x8000000cd}, 0x0, 0xffffffffffffffff, r0, 0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 218.994248ms ago: executing program 2 (id=4457): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x6a}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000200)={0x6, 0x2, 0xf, 0x5, 0x1b, "804d1e8b91a9d57898126e487415c2078baa22"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0xc, "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", 0x1, 0x3, 0x68, 0x4, 0x9, 0xf1, 0x3, 0x1}, r3}}, 0x128) 218.496308ms ago: executing program 4 (id=4458): unshare(0x6a000200) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x100000000, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x408d4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) r6 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0xa) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="100000003d10"], 0x10}], 0x1, 0x0, 0x0, 0x5800}, 0x500) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r4, 0x541c, &(0x7f0000001300)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000012c0)={&(0x7f0000001200), 0xc, &(0x7f0000001280)={&(0x7f0000001340)=ANY=[@ANYBLOB="1c00000022ebff0027bd7000fbdbdf250a801401000000cb549eff80c8df8609000000005c8012566b0f2e201f6d456b78658f7919d5af85ac7a9540ecee3040877f0fd18d2b595a7629ffcf2e81dc66c2f4d9285d6208ff1646e4037ca36d02698318e191e1e34060a3914dabd66c63d24730531f483b40c35c6a2931d2c4c916dc9afb79f08d65a91fa12419024932be6fa9920a31a258cda920f183ab8d2046bab5469a849108e4"], 0x1c}, 0x1, 0x0, 0x0, 0xc4aecde660d218b6}, 0x4000) getsockopt$IPT_SO_GET_INFO(r8, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x3, 0xe9, 0x1, 0x2, 0x9]}, &(0x7f0000000140)=0x54) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180)={0x41424344}, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="38000000010000f421bd70385e60d2e028b088ec17da7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d000300000008002900de6d0000"], 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x242, &(0x7f00000001c0)={@empty, @local, @val={@val={0x88a8, 0x4}, {0x8100, 0x2}}, {@mpls_mc={0x8848, {[{0x7fff, 0x0, 0x1}, {0x9}, {0x5}], @ipv6=@tcp={0xc, 0x6, "53ef28", 0x1f8, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', {[@routing={0x2c, 0xa, 0x1, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local]}, @dstopts={0x1d, 0x4, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffb}]}, @fragment={0x2, 0x0, 0x2, 0x0, 0x0, 0x1e, 0x65}, @hopopts={0x0, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x44a00000}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x28, {0x1, 0x8, 0x8, 0x800, [0x6, 0x80, 0x3a, 0x6be]}}, @ra={0x5, 0x2, 0x313}, @jumbo={0xc2, 0x4, 0x10}, @ra={0x5, 0x2, 0xe}]}, @srh={0x87, 0x6, 0x4, 0x3, 0x9, 0x8, 0x9, [@private0, @mcast2, @mcast2]}, @srh={0x2c, 0xa, 0x4, 0x5, 0x81, 0x20, 0x3, [@private0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @empty]}], {{0x4e20, 0x4e24, r10, r11, 0x0, 0x0, 0x8, 0x20, 0x8, 0x0, 0x800, {[@exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x9a}, @window={0x3, 0x3, 0x51}]}}, {"8e41b61b979914615bc63168f6c9de765aeeca406282130c9afe535586aee99da79e7af948fdf38c1b9de0a1b9ac50c12a3a6e15123417351db82685f126ccd0525229ad8cc8fa8caecc30f9b1436cf9cb92ff58a5f4081994410bfd052bb95f"}}}}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xbb1, 0x89a, 0xf3b, 0xe36]}) 217.717058ms ago: executing program 2 (id=4459): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000180)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd6444b163a5566dcf32b273ca44a49a9c5", 0x47, 0x200080c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0xea, 0x0, 0x0) 163.634051ms ago: executing program 2 (id=4460): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_procfs(r0, &(0x7f0000000000)='environ\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e23, 0x10000, @loopback, 0x7}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0x1}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4000, 0x800) stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)='/', 0x1}], 0x1, 0x0, 0x0, 0x800}, 0x2000c011) syz_emit_ethernet(0x8a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd61fb070100542f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d270100810000013f0c78f364e8000086dd810088a808"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f0000522000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3fffffd, 0x0, 0x0, 0x0, 0x83d}, 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0xffffffffffffff00, 0x7, 0x400}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900a900070000000100001301000000ffffffff07000000002e5f0c5f2e6100"], 0x0, 0x39, 0x0, 0x1, 0x4}, 0x28) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0xe7b, 0x0, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='- \x88\x11\x85\x05\x12l\xde[\xe8\xde\x03\xf8\xdbM\f!Fxi\xb9\x99E\xd7<%W\xebU\xe1\x18o\xacL\"\xc6[Kc\x03\xe6\x99A\x10\xcb9\x13\x10Jn\x8d\xe2In\xd0\x1d\x97d\x15', 0xa0000, &(0x7f00000000c0)={@align=0x8, {0xfffe, 0x1, 0xfffffffb}}, 0xd, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000180)=0x9}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e22, 0xe, @remote, 0x13}}}, 0x84) 85.788785ms ago: executing program 2 (id=4461): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {0xffff, 0xffff}, {0x10, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x3}]}, @var={0x2, 0x0, 0x0, 0xe, 0x3}, @union]}, {0x0, [0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x4e}, 0x20) r0 = socket(0x2, 0x80805, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}], 0x2, 0x48080) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20000044) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) getpid() r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0xa6}, 0xc) socket(0x10, 0x80002, 0x0) socket(0x10, 0x80002, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, 0x0, &(0x7f0000000300)) 599.66µs ago: executing program 2 (id=4462): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x1, 0x0, 0x1000f7) 0s ago: executing program 2 (id=4463): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000004, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x1, 0x0, 0x1000f7) kernel console output (not intermixed with test programs): tory bread(block 69) failed [ 418.319837][T17696] FAT-fs (loop6): Directory bread(block 70) failed [ 418.326906][T17696] FAT-fs (loop6): Directory bread(block 71) failed [ 418.334366][T17696] FAT-fs (loop6): Directory bread(block 72) failed [ 418.342182][T17696] FAT-fs (loop6): Directory bread(block 73) failed [ 418.651838][T17699] No such timeout policy "syz1" [ 418.758276][T17701] loop9: detected capacity change from 0 to 512 [ 419.138416][T10537] EXT4-fs (loop0): This should not happen!! Data will be lost [ 419.138416][T10537] [ 419.155031][T10537] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2088 with max blocks 1972 with error 28 [ 419.168172][T10537] EXT4-fs (loop0): This should not happen!! Data will be lost [ 419.168172][T10537] [ 419.178243][T10537] EXT4-fs (loop0): Total free blocks count 0 [ 419.185036][T10537] EXT4-fs (loop0): Free/Dirty block details [ 419.191289][T10537] EXT4-fs (loop0): free_blocks=0 [ 419.615674][T17708] loop4: detected capacity change from 0 to 256 [ 419.886481][T10537] EXT4-fs (loop0): dirty_blocks=1984 [ 419.892235][T10537] EXT4-fs (loop0): Block reservation details [ 420.196885][T17689] INFO: The task syz.9.3997:17689 has been waiting for writeback completion for more than 1 seconds. [ 421.302439][T17708] FAT-fs (loop4): Directory bread(block 64) failed [ 421.320042][T17708] FAT-fs (loop4): Directory bread(block 65) failed [ 421.326880][T17708] FAT-fs (loop4): Directory bread(block 66) failed [ 421.333615][T17708] FAT-fs (loop4): Directory bread(block 67) failed [ 421.341287][T17708] FAT-fs (loop4): Directory bread(block 68) failed [ 421.348525][T17708] FAT-fs (loop4): Directory bread(block 69) failed [ 421.355563][T17708] FAT-fs (loop4): Directory bread(block 70) failed [ 421.362968][T17708] FAT-fs (loop4): Directory bread(block 71) failed [ 421.370037][T17708] FAT-fs (loop4): Directory bread(block 72) failed [ 421.376685][T17708] FAT-fs (loop4): Directory bread(block 73) failed [ 421.774583][T17712] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.4003'. [ 421.794602][T17712] netlink: zone id is out of range [ 421.800060][T17712] netlink: zone id is out of range [ 421.805963][T17712] netlink: zone id is out of range [ 421.811598][T17712] netlink: del zone limit has 8 unknown bytes [ 421.874817][ T28] audit: type=1400 audit(1771316266.384:2784): avc: denied { shutdown } for pid=17722 comm="syz.9.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 421.907359][ T28] audit: type=1400 audit(1771316266.404:2785): avc: denied { bind } for pid=17722 comm="syz.9.4007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 421.914014][T17724] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4005'. [ 421.960465][T17728] xt_connbytes: Forcing CT accounting to be enabled [ 422.289504][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4011'. [ 422.290124][T17737] xt_CT: You must specify a L4 protocol and not use inversions on it [ 422.352422][T17737] loop9: detected capacity change from 0 to 8192 [ 422.413418][ T3745] loop9: p1 p2 p3 [ 422.413676][ T3745] loop9: p1 size 4719617 extends beyond EOD, truncated [ 422.416786][ T3745] loop9: p3 start 117772289 is beyond EOD, truncated [ 422.622812][T17737] loop9: p1 p2 p3 [ 422.622859][T17737] loop9: p1 size 4719617 extends beyond EOD, truncated [ 422.638420][T17737] loop9: p3 start 117772289 is beyond EOD, truncated [ 422.862647][T17749] loop4: detected capacity change from 0 to 512 [ 422.870876][T17749] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 422.909105][T17752] loop0: detected capacity change from 0 to 256 [ 422.945661][T17752] FAT-fs (loop0): Directory bread(block 64) failed [ 422.952482][T17752] FAT-fs (loop0): Directory bread(block 65) failed [ 422.959464][T17752] FAT-fs (loop0): Directory bread(block 66) failed [ 422.966411][T17752] FAT-fs (loop0): Directory bread(block 67) failed [ 422.973584][T17752] FAT-fs (loop0): Directory bread(block 68) failed [ 422.982042][T17752] FAT-fs (loop0): Directory bread(block 69) failed [ 422.989454][T17752] FAT-fs (loop0): Directory bread(block 70) failed [ 422.996446][T17752] FAT-fs (loop0): Directory bread(block 71) failed [ 423.003139][T17752] FAT-fs (loop0): Directory bread(block 72) failed [ 423.009815][T17752] FAT-fs (loop0): Directory bread(block 73) failed [ 423.322222][T17755] loop9: detected capacity change from 0 to 128 [ 423.803201][T17749] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 423.831766][T17749] EXT4-fs (loop4): orphan cleanup on readonly fs [ 423.841186][T17757] loop6: detected capacity change from 0 to 128 [ 423.858450][T17749] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 423.869834][T17755] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.883023][T17757] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 423.909388][T17749] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 423.956451][T17757] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.986798][T17749] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 424.002958][T17755] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.023280][T17749] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 424.043382][T17763] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 424.064871][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4020'. [ 424.088519][T17749] EXT4-fs (loop4): Remounting filesystem read-only [ 424.095172][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 424.095190][ C0] EXT4-fs (loop4): initial error at time 1771316268: mb_free_blocks:2047: inode 12: block 14 [ 424.095246][ C0] EXT4-fs (loop4): last error at time 1771316268: mb_free_blocks:2047: inode 12: block 14 [ 424.148179][ T28] audit: type=1400 audit(1771316268.644:2786): avc: denied { ioctl } for pid=17764 comm="syz.6.4021" path="socket:[57178]" dev="sockfs" ino=57178 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 424.263199][T17749] EXT4-fs (loop4): 1 truncate cleaned up [ 424.273552][T17749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.304208][T17755] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 424.329738][T13706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.386051][T17774] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4026'. [ 424.426491][T17778] No such timeout policy "syz1" [ 424.479531][T17784] loop4: detected capacity change from 0 to 1024 [ 424.490534][T17785] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4030'. [ 424.574932][T17784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 424.593517][T17795] loop0: detected capacity change from 0 to 164 [ 424.634670][T17784] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.659774][T17770] loop2: detected capacity change from 0 to 2048 [ 424.704196][T17784] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.4029: lblock 0 mapped to illegal pblock 0 (length 2) [ 424.720655][T17784] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 117 [ 424.731047][ T28] audit: type=1400 audit(1771316269.214:2787): avc: denied { bind } for pid=17782 comm="syz.4.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 424.742113][T17784] EXT4-fs (loop4): This should not happen!! Data will be lost [ 424.742113][T17784] [ 424.762501][ T28] audit: type=1400 audit(1771316269.244:2788): avc: denied { write } for pid=17796 comm="syz.6.4034" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 424.773547][T17800] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.4029: lblock 0 mapped to illegal pblock 0 (length 1) [ 424.813231][T17800] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 424.819900][ T3745] Alternate GPT is invalid, using primary GPT. [ 424.827949][T17800] EXT4-fs (loop4): This should not happen!! Data will be lost [ 424.827949][T17800] [ 424.846840][ T3745] loop2: p2 p3 p7 [ 425.054940][T17804] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 425.065470][ T28] audit: type=1400 audit(1771316269.564:2789): avc: denied { read } for pid=17803 comm="syz.6.4035" dev="sockfs" ino=57267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 425.114909][T17770] Alternate GPT is invalid, using primary GPT. [ 425.147931][T17770] loop2: p2 p3 p7 [ 425.158987][T13706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 425.200286][T17804] loop6: detected capacity change from 0 to 2048 [ 425.283488][T17804] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 425.310835][ T3000] Alternate GPT is invalid, using primary GPT. [ 425.328163][ T3000] loop2: p2 p3 p7 [ 425.364779][T17812] syzkaller1: entered promiscuous mode [ 425.372186][T17812] syzkaller1: entered allmulticast mode [ 425.491098][ T28] audit: type=1400 audit(1771316269.994:2790): avc: denied { sqpoll } for pid=17814 comm="syz.9.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 425.571353][T17815] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4039'. [ 425.582396][T17815] ieee802154 phy0 wpan0: encryption failed: -22 [ 425.720971][ T28] audit: type=1400 audit(1771316270.224:2791): avc: denied { watch watch_reads } for pid=17824 comm="syz.9.4044" path="/353" dev="tmpfs" ino=1900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 425.746499][ T28] audit: type=1400 audit(1771316270.224:2792): avc: denied { write } for pid=17824 comm="syz.9.4044" name="event2" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 425.848405][T17827] loop6: detected capacity change from 0 to 512 [ 425.934905][T17827] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4043: iget: bad i_size value: 38620345925642 [ 425.967085][T17827] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 425.968979][T17827] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4043: couldn't read orphan inode 15 (err -117) [ 425.979170][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 425.979208][ C0] EXT4-fs (loop6): initial error at time 1771316270: ext4_orphan_get:1391: inode 15 [ 425.979278][ C0] EXT4-fs (loop6): last error at time 1771316270: ext4_orphan_get:1391: inode 15 [ 426.022547][T17827] loop6: lost filesystem error report for type 5 error -117 [ 426.025057][T17827] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.059360][T17837] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.4041'. [ 426.069084][T17837] netlink: zone id is out of range [ 426.074221][T17837] netlink: zone id is out of range [ 426.079653][T17837] netlink: zone id is out of range [ 426.085143][T17837] netlink: zone id is out of range [ 426.088681][T17836] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.4046: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 5(4), depth 0(0) [ 426.090270][T17837] netlink: zone id is out of range [ 426.120765][T17836] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 426.122723][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 426.141204][ C0] EXT4-fs (loop9): initial error at time 1771316270: ext4_ext_check_inode:521: inode 2 [ 426.151130][ C0] EXT4-fs (loop9): last error at time 1771316270: ext4_ext_check_inode:521: inode 2 [ 426.162980][T17836] EXT4-fs (loop9): get root inode failed [ 426.172764][T17836] EXT4-fs (loop9): mount failed [ 426.238123][T17821] Alternate GPT is invalid, using primary GPT. [ 426.259631][T17821] loop0: p2 p3 p7 [ 426.347664][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4048'. [ 426.396692][T11467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 426.460998][T17841] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.592389][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4049'. [ 426.602568][T17849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.703955][ T3745] loop6: p1 p2 p3 [ 426.708956][ T3745] loop6: p1 size 4719617 extends beyond EOD, truncated [ 426.735367][ T3745] loop6: p3 start 117772289 is beyond EOD, truncated [ 426.866554][T17849] loop6: p1 p2 p3 [ 426.870598][T17849] loop6: p1 size 4719617 extends beyond EOD, truncated [ 426.879655][T17849] loop6: p3 start 117772289 is beyond EOD, truncated [ 427.048392][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 427.048407][ T28] audit: type=1400 audit(1771316271.554:2794): avc: denied { connect } for pid=17853 comm="syz.2.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 427.075198][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4051'. [ 427.146459][ T28] audit: type=1400 audit(1771316271.654:2795): avc: denied { associate } for pid=17851 comm="syz.0.4050" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 427.255689][T17841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.271465][T17841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.319773][ T28] audit: type=1400 audit(1771316271.824:2796): avc: denied { getopt } for pid=17868 comm="syz.6.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 427.626618][T13203] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.662508][T13203] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.674660][T17888] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 427.681920][ T28] audit: type=1326 audit(1771316272.174:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 427.684837][T17888] audit: out of memory in audit_log_start [ 427.715135][ T28] audit: type=1326 audit(1771316272.174:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a24f6c84e code=0x7ffc0000 [ 427.742099][ T28] audit: type=1326 audit(1771316272.184:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a24f6c84e code=0x7ffc0000 [ 427.775026][T17881] set_capacity_and_notify: 3 callbacks suppressed [ 427.775043][T17881] loop6: detected capacity change from 0 to 512 [ 427.777313][ T28] audit: type=1326 audit(1771316272.184:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 427.782369][T17881] EXT4-fs: Ignoring removed bh option [ 427.790026][ T28] audit: type=1326 audit(1771316272.224:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a24f6c84e code=0x7ffc0000 [ 427.843300][T17895] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 427.863737][T17881] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.879199][T13203] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.886969][T17881] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 427.897811][T13203] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.908747][T17881] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 427.941660][T17881] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 427.942976][T17905] loop0: detected capacity change from 0 to 128 [ 427.973583][T17881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.995129][T17881] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.116263][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4064'. [ 428.127006][T17915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.164599][T17915] loop2: detected capacity change from 0 to 8192 [ 428.223237][ T3297] loop2: p1 p2 p3 [ 428.227550][ T3297] loop2: p1 size 4719617 extends beyond EOD, truncated [ 428.238024][ T3297] loop2: p3 start 117772289 is beyond EOD, truncated [ 428.278660][T17905] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.292238][T17905] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.343893][T13876] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 428.454804][T17915] loop2: p1 p2 p3 [ 428.458989][T17915] loop2: p1 size 4719617 extends beyond EOD, truncated [ 428.469545][T17915] loop2: p3 start 117772289 is beyond EOD, truncated [ 428.628094][T17935] loop4: detected capacity change from 0 to 128 [ 428.641133][T17936] No such timeout policy "syz1" [ 428.738679][T17942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 428.744688][T17935] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 428.812831][T17935] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.978497][T17948] loop9: detected capacity change from 0 to 256 [ 429.026614][T17948] FAT-fs (loop9): Directory bread(block 64) failed [ 429.033338][T17948] FAT-fs (loop9): Directory bread(block 65) failed [ 429.040434][T17948] FAT-fs (loop9): Directory bread(block 66) failed [ 429.047518][T17948] FAT-fs (loop9): Directory bread(block 67) failed [ 429.054900][T17948] FAT-fs (loop9): Directory bread(block 68) failed [ 429.061972][T17948] FAT-fs (loop9): Directory bread(block 69) failed [ 429.068593][T17948] FAT-fs (loop9): Directory bread(block 70) failed [ 429.075335][T17948] FAT-fs (loop9): Directory bread(block 71) failed [ 429.082566][T17948] FAT-fs (loop9): Directory bread(block 72) failed [ 429.090638][T17948] FAT-fs (loop9): Directory bread(block 73) failed [ 429.704853][T17951] loop6: detected capacity change from 0 to 256 [ 430.721858][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 430.734885][ T4971] udevd[4971]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 431.747454][T13706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.896827][T17956] sctp: [Deprecated]: syz.0.4079 (pid 17956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.896827][T17956] Use struct sctp_sack_info instead [ 431.925901][T17958] loop4: detected capacity change from 0 to 128 [ 431.941904][T17951] FAT-fs (loop6): Directory bread(block 64) failed [ 431.950486][T17951] FAT-fs (loop6): Directory bread(block 65) failed [ 431.958984][T17951] FAT-fs (loop6): Directory bread(block 66) failed [ 431.970831][T17951] FAT-fs (loop6): Directory bread(block 67) failed [ 431.979369][T17951] FAT-fs (loop6): Directory bread(block 68) failed [ 431.986582][T17951] FAT-fs (loop6): Directory bread(block 69) failed [ 431.994641][T17951] FAT-fs (loop6): Directory bread(block 70) failed [ 432.002125][T17951] FAT-fs (loop6): Directory bread(block 71) failed [ 432.008977][T17951] FAT-fs (loop6): Directory bread(block 72) failed [ 432.016039][T17951] FAT-fs (loop6): Directory bread(block 73) failed [ 432.033186][T17958] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.065281][T17964] FAULT_INJECTION: forcing a failure. [ 432.065281][T17964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.079139][T17964] CPU: 1 UID: 0 PID: 17964 Comm: syz.0.4081 Tainted: G W syzkaller #0 PREEMPT(full) [ 432.079167][T17964] Tainted: [W]=WARN [ 432.079256][T17964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.079266][T17964] Call Trace: [ 432.079348][T17964] [ 432.079356][T17964] __dump_stack+0x1d/0x30 [ 432.079378][T17964] dump_stack_lvl+0x95/0xd0 [ 432.079396][T17964] dump_stack+0x15/0x1b [ 432.079413][T17964] should_fail_ex+0x263/0x280 [ 432.079440][T17964] should_fail+0xb/0x20 [ 432.079455][T17964] should_fail_usercopy+0x1a/0x20 [ 432.079519][T17964] _copy_from_iter+0xcf/0xea0 [ 432.079540][T17964] ? __alloc_skb+0x4f6/0x690 [ 432.079637][T17964] ? __alloc_skb+0x200/0x690 [ 432.079654][T17964] netlink_sendmsg+0x4ae/0x6f0 [ 432.079681][T17964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.079701][T17964] ____sys_sendmsg+0x5af/0x600 [ 432.079771][T17964] ___sys_sendmsg+0x195/0x1e0 [ 432.079802][T17964] __x64_sys_sendmsg+0xd4/0x160 [ 432.079827][T17964] x64_sys_call+0x194c/0x3020 [ 432.079963][T17964] do_syscall_64+0x12c/0x370 [ 432.079993][T17964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.080013][T17964] RIP: 0033:0x7f96ea38bf79 [ 432.080026][T17964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.080086][T17964] RSP: 002b:00007f96e8de7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.080106][T17964] RAX: ffffffffffffffda RBX: 00007f96ea605fa0 RCX: 00007f96ea38bf79 [ 432.080130][T17964] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 432.080148][T17964] RBP: 00007f96e8de7090 R08: 0000000000000000 R09: 0000000000000000 [ 432.080192][T17964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.080204][T17964] R13: 00007f96ea606038 R14: 00007f96ea605fa0 R15: 00007ffc3c0f1818 [ 432.080223][T17964] [ 432.084891][T17958] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.135346][T17968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4083'. [ 432.154163][T17970] No such timeout policy "syz1" [ 432.229477][T17966] xt_hashlimit: size too large, truncated to 1048576 [ 432.323718][T13706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 432.474956][T17976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.553579][T17976] loop9: detected capacity change from 0 to 8192 [ 432.613838][ T3297] loop9: p1 p2 p3 [ 432.619467][ T3297] loop9: p1 size 4719617 extends beyond EOD, truncated [ 432.813207][ T3297] loop9: p3 start 117772289 is beyond EOD, truncated [ 432.843246][T17976] loop9: p1 p2 p3 [ 432.847240][T17976] loop9: p1 size 4719617 extends beyond EOD, truncated [ 432.855984][T17976] loop9: p3 start 117772289 is beyond EOD, truncated [ 432.898135][T17988] loop0: detected capacity change from 0 to 128 [ 432.933240][T17988] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.946688][T17988] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.989453][T13876] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.046479][T17992] loop4: detected capacity change from 0 to 512 [ 433.056032][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 433.056047][ T28] audit: type=1326 audit(1771316277.564:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.070403][T18001] loop6: detected capacity change from 0 to 256 [ 433.098988][ T28] audit: type=1326 audit(1771316277.564:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.118314][T17995] sctp: [Deprecated]: syz.2.4092 (pid 17995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.118314][T17995] Use struct sctp_sack_info instead [ 433.125043][ T28] audit: type=1326 audit(1771316277.564:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.193208][ T28] audit: type=1326 audit(1771316277.564:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.219192][ T28] audit: type=1326 audit(1771316277.564:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.249054][ T28] audit: type=1326 audit(1771316277.564:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.333027][ T28] audit: type=1326 audit(1771316277.564:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.361361][ T28] audit: type=1326 audit(1771316277.564:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.368875][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 433.397801][ T3745] udevd[3745]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 433.412076][T18007] No such timeout policy "syz1" [ 433.420531][T18003] netlink: 'syz.9.4095': attribute type 4 has an invalid length. [ 433.481731][ T28] audit: type=1326 audit(1771316277.564:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.547031][T18011] loop6: detected capacity change from 0 to 128 [ 433.552270][ T28] audit: type=1326 audit(1771316277.564:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17997 comm="syz.6.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77d76bf79 code=0x7ffc0000 [ 433.605954][T18011] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.620181][T18011] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.651261][T11467] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.693647][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4099'. [ 433.820236][T18028] loop2: detected capacity change from 0 to 512 [ 433.854027][T18028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.866984][T18028] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.883353][T18028] syzkaller1: entered allmulticast mode [ 433.955768][T16488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.007844][T18055] loop6: detected capacity change from 0 to 128 [ 434.018548][T18055] FAT-fs (loop6): Directory bread(block 32) failed [ 434.026203][T18055] FAT-fs (loop6): Directory bread(block 33) failed [ 434.026501][T18057] sctp: [Deprecated]: syz.2.4106 (pid 18057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.026501][T18057] Use struct sctp_sack_info instead [ 434.032882][T18055] FAT-fs (loop6): Directory bread(block 34) failed [ 434.057341][T18055] FAT-fs (loop6): Directory bread(block 35) failed [ 434.063898][T18055] FAT-fs (loop6): Directory bread(block 36) failed [ 434.070624][T18055] FAT-fs (loop6): Directory bread(block 37) failed [ 434.077368][T18055] FAT-fs (loop6): Directory bread(block 38) failed [ 434.084729][T18055] FAT-fs (loop6): Directory bread(block 39) failed [ 434.091813][T18055] FAT-fs (loop6): Directory bread(block 40) failed [ 434.098365][T18055] FAT-fs (loop6): Directory bread(block 41) failed [ 434.150250][T18060] net_ratelimit: 21 callbacks suppressed [ 434.150267][T18060] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 434.172354][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'. [ 434.336273][T18070] loop9: detected capacity change from 0 to 256 [ 434.402016][T18070] FAT-fs (loop9): Directory bread(block 64) failed [ 434.408847][T18070] FAT-fs (loop9): Directory bread(block 65) failed [ 434.415694][T18070] FAT-fs (loop9): Directory bread(block 66) failed [ 434.423113][T18070] FAT-fs (loop9): Directory bread(block 67) failed [ 434.430070][T18070] FAT-fs (loop9): Directory bread(block 68) failed [ 434.437200][T18070] FAT-fs (loop9): Directory bread(block 69) failed [ 434.445241][T18070] FAT-fs (loop9): Directory bread(block 70) failed [ 434.453202][T18070] FAT-fs (loop9): Directory bread(block 71) failed [ 434.460775][T18070] FAT-fs (loop9): Directory bread(block 72) failed [ 434.468164][T18070] FAT-fs (loop9): Directory bread(block 73) failed [ 434.964350][T18078] FAULT_INJECTION: forcing a failure. [ 434.964350][T18078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.212164][T18078] CPU: 0 UID: 0 PID: 18078 Comm: syz.4.4114 Tainted: G W syzkaller #0 PREEMPT(full) [ 435.212192][T18078] Tainted: [W]=WARN [ 435.212199][T18078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.212211][T18078] Call Trace: [ 435.212217][T18078] [ 435.212249][T18078] __dump_stack+0x1d/0x30 [ 435.212274][T18078] dump_stack_lvl+0x95/0xd0 [ 435.212294][T18078] dump_stack+0x15/0x1b [ 435.212312][T18078] should_fail_ex+0x263/0x280 [ 435.212332][T18078] should_fail+0xb/0x20 [ 435.212380][T18078] should_fail_usercopy+0x1a/0x20 [ 435.212401][T18078] _copy_to_iter+0x251/0xea0 [ 435.212422][T18078] ? rcu_read_unlock_special+0x9f/0x200 [ 435.212440][T18078] seq_read_iter+0x776/0x940 [ 435.212469][T18078] seq_read+0x279/0x2c0 [ 435.212569][T18078] ? __pfx_seq_read+0x10/0x10 [ 435.212592][T18078] proc_reg_read+0x128/0x1c0 [ 435.212617][T18078] ? __pfx_proc_reg_read+0x10/0x10 [ 435.212642][T18078] vfs_readv+0x432/0x6e0 [ 435.212687][T18078] __x64_sys_preadv+0xfd/0x1c0 [ 435.212711][T18078] x64_sys_call+0x2915/0x3020 [ 435.212733][T18078] do_syscall_64+0x12c/0x370 [ 435.212762][T18078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.212809][T18078] RIP: 0033:0x7fae51e4bf79 [ 435.212822][T18078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.212838][T18078] RSP: 002b:00007fae5089f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 435.212912][T18078] RAX: ffffffffffffffda RBX: 00007fae520c5fa0 RCX: 00007fae51e4bf79 [ 435.212924][T18078] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 435.212998][T18078] RBP: 00007fae5089f090 R08: 00000000fffffffb R09: 0000000000000000 [ 435.213008][T18078] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000001 [ 435.213019][T18078] R13: 00007fae520c6038 R14: 00007fae520c5fa0 R15: 00007ffda86b22f8 [ 435.213036][T18078] [ 436.079222][T18084] loop2: detected capacity change from 0 to 256 [ 436.536873][T18084] FAT-fs (loop2): Directory bread(block 64) failed [ 436.543524][T18084] FAT-fs (loop2): Directory bread(block 65) failed [ 436.550336][T18084] FAT-fs (loop2): Directory bread(block 66) failed [ 436.557056][T18084] FAT-fs (loop2): Directory bread(block 67) failed [ 436.563999][T18084] FAT-fs (loop2): Directory bread(block 68) failed [ 436.570893][T18084] FAT-fs (loop2): Directory bread(block 69) failed [ 436.578000][T18084] FAT-fs (loop2): Directory bread(block 70) failed [ 436.584892][T18084] FAT-fs (loop2): Directory bread(block 71) failed [ 436.591960][T18084] FAT-fs (loop2): Directory bread(block 72) failed [ 436.598547][T18084] FAT-fs (loop2): Directory bread(block 73) failed [ 436.906890][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4117'. [ 437.252348][T18093] netlink: 'syz.0.4118': attribute type 4 has an invalid length. [ 437.300926][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4121'. [ 437.370007][T18104] sctp: [Deprecated]: syz.4.4123 (pid 18104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 437.370007][T18104] Use struct sctp_sack_info instead [ 437.615053][T18111] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 438.025968][T18125] loop2: detected capacity change from 0 to 512 [ 438.063805][T18129] loop0: detected capacity change from 0 to 1024 [ 438.085049][T18129] EXT4-fs: Ignoring removed nobh option [ 438.121929][T18129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 438.135740][T18129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.137554][T18125] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4129: iget: bad i_size value: 38620345925642 [ 438.173892][T18125] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 438.174428][T18125] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4129: couldn't read orphan inode 15 (err -117) [ 438.184211][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 438.184240][ C1] EXT4-fs (loop2): initial error at time 1771316282: ext4_orphan_get:1391: inode 15 [ 438.184381][ C1] EXT4-fs (loop2): last error at time 1771316282: ext4_orphan_get:1391: inode 15 [ 438.244626][T18125] loop2: lost filesystem error report for type 5 error -117 [ 438.260528][T18125] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.449757][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.568982][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'. [ 438.626106][T18149] sctp: [Deprecated]: syz.4.4135 (pid 18149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.626106][T18149] Use struct sctp_sack_info instead [ 438.645353][T18151] loop0: detected capacity change from 0 to 128 [ 438.663718][T16488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 438.664061][T18151] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 438.732903][T18151] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.757327][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 438.757341][ T28] audit: type=1400 audit(1771316283.264:2838): avc: denied { create } for pid=18153 comm="syz.2.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 438.787767][T18156] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4138'. [ 438.869263][ T28] audit: type=1400 audit(1771316283.314:2839): avc: denied { write } for pid=18153 comm="syz.2.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 438.896445][T18161] loop2: detected capacity change from 0 to 128 [ 438.903362][T13876] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.928878][T18161] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4142'. [ 438.974993][T18158] netlink: 'syz.4.4140': attribute type 4 has an invalid length. [ 439.025001][ T28] audit: type=1400 audit(1771316283.534:2840): avc: denied { name_connect } for pid=18170 comm="syz.2.4144" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 439.065011][T18172] mmap: syz.0.4143 (18172): VmData 29192192 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 439.136054][T18178] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 439.157084][T18155] loop9: detected capacity change from 0 to 2048 [ 439.170517][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4145'. [ 439.212509][T18180] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.4139'. [ 439.223514][T18180] netlink: zone id is out of range [ 439.228719][T18180] netlink: zone id is out of range [ 439.234130][T18180] netlink: zone id is out of range [ 439.239242][T18180] netlink: zone id is out of range [ 439.244561][T18180] netlink: zone id is out of range [ 439.249661][T18180] netlink: zone id is out of range [ 439.255502][T18180] netlink: zone id is out of range [ 439.260675][T18180] netlink: zone id is out of range [ 439.265962][T18180] netlink: zone id is out of range [ 439.271137][T18180] netlink: zone id is out of range [ 439.355618][ T28] audit: type=1326 audit(1771316283.864:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18186 comm="syz.2.4149" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a24fabf79 code=0x0 [ 439.389577][T18155] Alternate GPT is invalid, using primary GPT. [ 439.404288][T18155] loop9: p2 p3 p7 [ 439.655789][T18190] sctp: [Deprecated]: syz.4.4150 (pid 18190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.655789][T18190] Use struct sctp_sack_info instead [ 440.030806][ T3745] udevd[3745]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 440.031807][ T4971] udevd[4971]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 440.032532][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 440.114253][ T28] audit: type=1400 audit(1771316284.624:2842): avc: denied { mount } for pid=18197 comm="syz.9.4153" name="/" dev="autofs" ino=59083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 440.348294][T18210] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4158'. [ 440.358785][T10537] tipc: Subscription rejected, illegal request [ 440.444179][T18213] loop2: detected capacity change from 0 to 256 [ 440.475938][T18213] FAT-fs (loop2): Directory bread(block 64) failed [ 440.482726][T18213] FAT-fs (loop2): Directory bread(block 65) failed [ 440.489512][T18213] FAT-fs (loop2): Directory bread(block 66) failed [ 440.496824][T18213] FAT-fs (loop2): Directory bread(block 67) failed [ 440.503687][T18213] FAT-fs (loop2): Directory bread(block 68) failed [ 440.510323][T18213] FAT-fs (loop2): Directory bread(block 69) failed [ 440.517275][T18213] FAT-fs (loop2): Directory bread(block 70) failed [ 440.524682][T18213] FAT-fs (loop2): Directory bread(block 71) failed [ 440.531431][T18213] FAT-fs (loop2): Directory bread(block 72) failed [ 440.538052][T18213] FAT-fs (loop2): Directory bread(block 73) failed [ 440.654106][T18214] loop9: detected capacity change from 0 to 512 [ 440.827064][T18214] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.925509][T18214] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.363830][T11741] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.391332][T18226] sctp: [Deprecated]: syz.4.4162 (pid 18226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.391332][T18226] Use struct sctp_sack_info instead [ 441.488358][T18232] lo speed is unknown, defaulting to 1000 [ 441.502757][ T28] audit: type=1326 audit(1771316286.004:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.0.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7ffc0000 [ 441.548094][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4165'. [ 441.583336][ T28] audit: type=1326 audit(1771316286.004:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.0.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f96ea38bf79 code=0x7ffc0000 [ 441.616867][T18234] macsec1: entered allmulticast mode [ 441.652815][T18234] macsec0: entered allmulticast mode [ 441.658583][ T28] audit: type=1326 audit(1771316286.004:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.0.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7ffc0000 [ 441.739308][ T28] audit: type=1326 audit(1771316286.004:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.0.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96ea38bf79 code=0x7ffc0000 [ 441.797578][ T28] audit: type=1326 audit(1771316286.294:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18227 comm="syz.0.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7ffc0000 [ 442.247158][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4170'. [ 442.286877][T18255] sctp: [Deprecated]: syz.0.4169 (pid 18255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.286877][T18255] Use struct sctp_sack_info instead [ 442.307573][T18260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4171'. [ 442.351496][T18264] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4174'. [ 442.361172][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.390726][T18264] lo speed is unknown, defaulting to 1000 [ 442.434769][T18265] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 442.637582][T18273] sctp: [Deprecated]: syz.0.4175 (pid 18273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.637582][T18273] Use struct sctp_sack_info instead [ 442.734338][T18275] loop0: detected capacity change from 0 to 512 [ 442.768929][T18275] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4176: iget: bad i_size value: 38620345925642 [ 442.785428][T18275] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.786683][T18275] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4176: couldn't read orphan inode 15 (err -117) [ 442.796464][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 442.796603][ C0] EXT4-fs (loop0): initial error at time 1771316287: ext4_orphan_get:1391: inode 15 [ 442.796690][ C0] EXT4-fs (loop0): last error at time 1771316287: ext4_orphan_get:1391: inode 15 [ 442.837132][T18275] loop0: lost filesystem error report for type 5 error -117 [ 442.845784][T18275] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.128059][T18280] syzkaller0: entered promiscuous mode [ 443.140978][T18280] syzkaller0: entered allmulticast mode [ 443.162367][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 443.477716][T18286] netlink: 'syz.9.4178': attribute type 4 has an invalid length. [ 443.477750][T18285] netlink: 'syz.4.4180': attribute type 4 has an invalid length. [ 444.012429][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4188'. [ 444.064275][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 444.064321][ T28] audit: type=1400 audit(1771316288.574:2859): avc: denied { getopt } for pid=18327 comm="syz.0.4190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 444.107825][ T28] audit: type=1400 audit(1771316288.574:2860): avc: denied { ioctl } for pid=18327 comm="syz.0.4190" path="socket:[59333]" dev="sockfs" ino=59333 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 444.202256][T18344] loop4: detected capacity change from 0 to 512 [ 444.257014][T18344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.285349][T18344] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.403704][T18352] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 444.416400][T18352] SELinux: failed to load policy [ 444.458735][T18361] loop9: detected capacity change from 0 to 512 [ 444.487597][T18361] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.506857][T18364] net_ratelimit: 17 callbacks suppressed [ 444.506873][T18364] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 444.524872][T18361] ext4 filesystem being mounted at /387/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.530959][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4201'. [ 444.538084][T18361] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 37731 (only 1 groups) [ 444.557696][T18355] netlink: 'syz.2.4198': attribute type 4 has an invalid length. [ 444.581323][T11741] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.647804][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4203'. [ 444.649874][T18370] SELinux: failed to load policy [ 444.730053][T18374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=18374 comm=syz.0.4203 [ 444.920440][T18392] loop6: detected capacity change from 0 to 512 [ 444.948662][T18392] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4212: iget: bad i_size value: 38620345925642 [ 444.963881][T18392] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 444.964551][T18392] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4212: couldn't read orphan inode 15 (err -117) [ 444.975622][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 444.975649][ C0] EXT4-fs (loop6): initial error at time 1771316289: ext4_orphan_get:1391: inode 15 [ 444.975740][ C0] EXT4-fs (loop6): last error at time 1771316289: ext4_orphan_get:1391: inode 15 [ 445.019307][T18392] loop6: lost filesystem error report for type 5 error -117 [ 445.021580][T18392] EXT4-fs (loop6): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.058923][T13706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.100693][ T28] audit: type=1400 audit(1771316289.604:2861): avc: denied { read } for pid=18394 comm="syz.4.4213" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 445.140851][T18395] xt_bpf: check failed: parse error [ 445.203170][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'. [ 445.316967][T18384] loop9: detected capacity change from 0 to 2048 [ 445.393481][T18223] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 445.435528][ T3745] Alternate GPT is invalid, using primary GPT. [ 445.443367][ T3745] loop9: p2 p3 p7 [ 445.452773][ T28] audit: type=1326 audit(1771316289.954:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7fc00000 [ 445.514908][ T28] audit: type=1326 audit(1771316289.954:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f96ea38bf79 code=0x7fc00000 [ 445.547738][ T28] audit: type=1326 audit(1771316289.954:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7fc00000 [ 445.594003][T11467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 445.614635][ T28] audit: type=1326 audit(1771316289.954:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7fc00000 [ 445.640530][ T28] audit: type=1326 audit(1771316289.954:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7fc00000 [ 445.687336][T18405] loop2: detected capacity change from 0 to 256 [ 445.703343][ T28] audit: type=1326 audit(1771316289.954:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7fc00000 [ 445.733786][T18410] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.4208'. [ 445.747819][T18410] netlink: zone id is out of range [ 445.769642][ T28] audit: type=1326 audit(1771316289.954:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18367 comm="syz.0.4203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96ea38bf79 code=0x7fc00000 [ 445.838437][T18417] loop4: detected capacity change from 0 to 256 [ 445.885886][T18410] netlink: zone id is out of range [ 446.058553][T18410] netlink: zone id is out of range [ 446.069523][T18417] FAT-fs (loop4): Directory bread(block 64) failed [ 446.076970][T18417] FAT-fs (loop4): Directory bread(block 65) failed [ 446.084185][T18417] FAT-fs (loop4): Directory bread(block 66) failed [ 446.091075][T18417] FAT-fs (loop4): Directory bread(block 67) failed [ 446.098036][T18417] FAT-fs (loop4): Directory bread(block 68) failed [ 446.105285][T18417] FAT-fs (loop4): Directory bread(block 69) failed [ 446.112596][T18417] FAT-fs (loop4): Directory bread(block 70) failed [ 446.119478][T18417] FAT-fs (loop4): Directory bread(block 71) failed [ 446.126252][T18417] FAT-fs (loop4): Directory bread(block 72) failed [ 446.133611][T18417] FAT-fs (loop4): Directory bread(block 73) failed [ 446.533887][T18405] FAT-fs (loop2): Directory bread(block 64) failed [ 446.746892][T18426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=18426 comm=syz.0.4221 [ 446.782437][T18405] FAT-fs (loop2): Directory bread(block 65) failed [ 446.790290][T18410] netlink: del zone limit has 8 unknown bytes [ 446.808602][T18405] FAT-fs (loop2): Directory bread(block 66) failed [ 446.843612][T18431] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 446.855562][T18384] Alternate GPT is invalid, using primary GPT. [ 446.867713][T18405] FAT-fs (loop2): Directory bread(block 67) failed [ 446.884701][T18384] loop9: p2 p3 p7 [ 446.910500][T18435] loop0: detected capacity change from 0 to 256 [ 446.933929][T18405] FAT-fs (loop2): Directory bread(block 68) failed [ 447.041068][T18405] FAT-fs (loop2): Directory bread(block 69) failed [ 447.128295][T18405] FAT-fs (loop2): Directory bread(block 70) failed [ 447.165205][T18405] FAT-fs (loop2): Directory bread(block 71) failed [ 447.197726][T18405] FAT-fs (loop2): Directory bread(block 72) failed [ 447.229784][T18405] FAT-fs (loop2): Directory bread(block 73) failed [ 447.299739][T18437] netlink: 'syz.0.4225': attribute type 4 has an invalid length. [ 447.690192][T18446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4227'. [ 447.798801][T18452] loop4: detected capacity change from 0 to 128 [ 447.825029][T18452] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 447.840114][T18454] No such timeout policy "syz1" [ 447.869690][T18452] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.973604][T18459] loop9: detected capacity change from 0 to 128 [ 448.053785][T13706] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.136327][T18468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=18468 comm=syz.0.4235 [ 448.221455][T18470] netlink: 131740 bytes leftover after parsing attributes in process `syz.6.4228'. [ 448.231408][T18470] netlink: zone id is out of range [ 448.236711][T18470] netlink: zone id is out of range [ 448.242001][T18470] netlink: zone id is out of range [ 448.247749][T18470] netlink: zone id is out of range [ 448.253005][T18470] netlink: zone id is out of range [ 448.311070][T18448] loop6: detected capacity change from 0 to 2048 [ 448.388613][T18472] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 448.487995][T18448] Alternate GPT is invalid, using primary GPT. [ 448.502573][T18472] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.517197][T18448] loop6: p2 p3 p7 [ 448.711543][T11741] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.749878][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4239'. [ 448.774762][T18480] FAULT_INJECTION: forcing a failure. [ 448.774762][T18480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.798985][T18480] CPU: 1 UID: 0 PID: 18480 Comm: syz.9.4240 Tainted: G W syzkaller #0 PREEMPT(full) [ 448.799015][T18480] Tainted: [W]=WARN [ 448.799021][T18480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.799033][T18480] Call Trace: [ 448.799041][T18480] [ 448.799081][T18480] __dump_stack+0x1d/0x30 [ 448.799118][T18480] dump_stack_lvl+0x95/0xd0 [ 448.799137][T18480] dump_stack+0x15/0x1b [ 448.799198][T18480] should_fail_ex+0x263/0x280 [ 448.799219][T18480] should_fail+0xb/0x20 [ 448.799237][T18480] should_fail_usercopy+0x1a/0x20 [ 448.799314][T18480] _copy_from_iter+0xcf/0xea0 [ 448.799408][T18480] ? __alloc_skb+0x4f6/0x690 [ 448.799429][T18480] ? __alloc_skb+0x200/0x690 [ 448.799504][T18480] netlink_sendmsg+0x4ae/0x6f0 [ 448.799530][T18480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.799552][T18480] ____sys_sendmsg+0x5af/0x600 [ 448.799647][T18480] ___sys_sendmsg+0x195/0x1e0 [ 448.799699][T18480] __x64_sys_sendmsg+0xd4/0x160 [ 448.799821][T18480] x64_sys_call+0x194c/0x3020 [ 448.799840][T18480] do_syscall_64+0x12c/0x370 [ 448.799864][T18480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.799959][T18480] RIP: 0033:0x7f127748bf79 [ 448.799973][T18480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.799987][T18480] RSP: 002b:00007f1275ee7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.800003][T18480] RAX: ffffffffffffffda RBX: 00007f1277705fa0 RCX: 00007f127748bf79 [ 448.800016][T18480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 448.800039][T18480] RBP: 00007f1275ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 448.800126][T18480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.800138][T18480] R13: 00007f1277706038 R14: 00007f1277705fa0 R15: 00007ffcb85ade28 [ 448.800158][T18480] [ 449.015509][T18485] No such timeout policy "syz1" [ 449.219891][T18482] set_capacity_and_notify: 1 callbacks suppressed [ 449.219936][T18482] loop0: detected capacity change from 0 to 2048 [ 449.253272][T18489] netlink: 'syz.9.4244': attribute type 4 has an invalid length. [ 449.506816][T18496] loop6: detected capacity change from 0 to 256 [ 449.521997][ T3297] Alternate GPT is invalid, using primary GPT. [ 449.528523][ T3297] loop0: p2 p3 p7 [ 449.539983][T18497] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.4241'. [ 449.561212][T18496] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 449.618471][T18496] FAT-fs (loop6): Filesystem has been set read-only [ 449.657092][T18497] net_ratelimit: 18 callbacks suppressed [ 449.657108][T18497] netlink: zone id is out of range [ 449.678413][T18496] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 449.703013][T18496] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 449.728610][T18497] netlink: zone id is out of range [ 449.753010][T18497] netlink: zone id is out of range [ 449.777016][T18497] netlink: del zone limit has 8 unknown bytes [ 450.121003][T18482] Alternate GPT is invalid, using primary GPT. [ 450.129093][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 450.129112][ T28] audit: type=1326 audit(1771316294.634:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.168488][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4249'. [ 450.184219][T18482] loop0: p2 p3 p7 [ 450.207210][ T28] audit: type=1326 audit(1771316294.634:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.209278][T18506] netlink: 'syz.9.4249': attribute type 15 has an invalid length. [ 450.241560][T18508] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.4243'. [ 450.252432][T18508] netlink: zone id is out of range [ 450.281648][T18508] netlink: zone id is out of range [ 450.291133][T18508] netlink: zone id is out of range [ 450.296466][ T28] audit: type=1326 audit(1771316294.664:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.297678][T18506] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4249'. [ 450.327106][T18508] netlink: del zone limit has 8 unknown bytes [ 450.336072][ T28] audit: type=1326 audit(1771316294.664:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.364650][ T28] audit: type=1326 audit(1771316294.664:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.403828][T18506] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.423901][ T28] audit: type=1326 audit(1771316294.674:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.473413][ T28] audit: type=1326 audit(1771316294.674:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.510376][T18506] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.525327][ T28] audit: type=1326 audit(1771316294.674:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.574577][ T28] audit: type=1326 audit(1771316294.674:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.615956][T18506] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.628894][ T28] audit: type=1326 audit(1771316294.674:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18505 comm="syz.9.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127748bf79 code=0x7ffc0000 [ 450.684591][T18506] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.874853][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.883698][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.949357][T18512] loop6: detected capacity change from 0 to 256 [ 451.036215][T18512] FAT-fs (loop6): Directory bread(block 64) failed [ 451.042919][T18512] FAT-fs (loop6): Directory bread(block 65) failed [ 451.049465][T18512] FAT-fs (loop6): Directory bread(block 66) failed [ 451.056174][T18512] FAT-fs (loop6): Directory bread(block 67) failed [ 451.063742][T18512] FAT-fs (loop6): Directory bread(block 68) failed [ 451.070684][T18512] FAT-fs (loop6): Directory bread(block 69) failed [ 451.077603][T18512] FAT-fs (loop6): Directory bread(block 70) failed [ 451.084678][T18512] FAT-fs (loop6): Directory bread(block 71) failed [ 451.091764][T18512] FAT-fs (loop6): Directory bread(block 72) failed [ 451.099148][T18512] FAT-fs (loop6): Directory bread(block 73) failed [ 451.394178][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.402777][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.174094][T18518] loop2: detected capacity change from 0 to 256 [ 452.699590][T18520] loop9: detected capacity change from 0 to 256 [ 452.707292][T18520] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 453.303668][ T3420] hid_parser_main: 34 callbacks suppressed [ 453.303734][ T3420] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 453.803596][T18518] FAT-fs (loop2): Directory bread(block 64) failed [ 453.810232][T18518] FAT-fs (loop2): Directory bread(block 65) failed [ 453.817495][T18518] FAT-fs (loop2): Directory bread(block 66) failed [ 453.824744][T18518] FAT-fs (loop2): Directory bread(block 67) failed [ 453.831652][T18518] FAT-fs (loop2): Directory bread(block 68) failed [ 453.838251][T18518] FAT-fs (loop2): Directory bread(block 69) failed [ 453.845827][T18518] FAT-fs (loop2): Directory bread(block 70) failed [ 453.852862][T18518] FAT-fs (loop2): Directory bread(block 71) failed [ 453.859703][T18518] FAT-fs (loop2): Directory bread(block 72) failed [ 453.866735][T18518] FAT-fs (loop2): Directory bread(block 73) failed [ 453.947224][ T3420] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 453.983491][T18526] loop6: detected capacity change from 0 to 256 [ 453.998960][T18526] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 454.050802][T18529] lo speed is unknown, defaulting to 1000 [ 454.078103][T18526] FAULT_INJECTION: forcing a failure. [ 454.078103][T18526] name failslab, interval 1, probability 0, space 0, times 0 [ 454.121356][T18530] FAULT_INJECTION: forcing a failure. [ 454.121356][T18530] name failslab, interval 1, probability 0, space 0, times 0 [ 454.130487][T18526] CPU: 1 UID: 0 PID: 18526 Comm: syz.6.4254 Tainted: G W syzkaller #0 PREEMPT(full) [ 454.130576][T18526] Tainted: [W]=WARN [ 454.130581][T18526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.130591][T18526] Call Trace: [ 454.130597][T18526] [ 454.130603][T18526] __dump_stack+0x1d/0x30 [ 454.130693][T18526] dump_stack_lvl+0x95/0xd0 [ 454.130713][T18526] dump_stack+0x15/0x1b [ 454.130731][T18526] should_fail_ex+0x263/0x280 [ 454.130752][T18526] should_failslab+0x8c/0xb0 [ 454.130809][T18526] __kmalloc_cache_node_noprof+0x6b/0x480 [ 454.130828][T18526] ? __get_vm_area_node+0x106/0x1d0 [ 454.130848][T18526] __get_vm_area_node+0x106/0x1d0 [ 454.130866][T18526] __vmalloc_node_range_noprof+0x291/0x12b0 [ 454.130914][T18526] ? xt_counters_alloc+0x40/0x50 [ 454.130937][T18526] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 454.130961][T18526] ? translate_table+0xca0/0x11c0 [ 454.130996][T18526] ? perf_trace_kfree+0xc2/0x100 [ 454.131020][T18526] ? translate_table+0xca0/0x11c0 [ 454.131044][T18526] ? kfree+0x303/0x380 [ 454.131148][T18526] ? translate_table+0xf2c/0x11c0 [ 454.131171][T18526] ? xt_counters_alloc+0x40/0x50 [ 454.131197][T18526] vzalloc_noprof+0x82/0xb0 [ 454.131215][T18526] ? xt_counters_alloc+0x40/0x50 [ 454.131238][T18526] xt_counters_alloc+0x40/0x50 [ 454.131260][T18526] __do_replace+0x51/0x640 [ 454.131499][T18526] ? should_fail_ex+0xd9/0x280 [ 454.131571][T18526] ? _copy_from_user+0x89/0xb0 [ 454.131627][T18526] do_arpt_set_ctl+0x7ab/0xad0 [ 454.131654][T18526] ? _raw_spin_unlock_bh+0x18/0x20 [ 454.131675][T18526] nf_setsockopt+0x199/0x1b0 [ 454.131716][T18526] ip_setsockopt+0x102/0x110 [ 454.131796][T18526] udp_setsockopt+0x99/0xb0 [ 454.131818][T18526] sock_common_setsockopt+0x69/0x80 [ 454.131846][T18526] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 454.131873][T18526] __sys_setsockopt+0x184/0x200 [ 454.131938][T18526] __x64_sys_setsockopt+0x64/0x80 [ 454.132046][T18526] x64_sys_call+0x2327/0x3020 [ 454.132106][T18526] do_syscall_64+0x12c/0x370 [ 454.132132][T18526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.132151][T18526] RIP: 0033:0x7fe77d76bf79 [ 454.132170][T18526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.132188][T18526] RSP: 002b:00007fe77c1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.132207][T18526] RAX: ffffffffffffffda RBX: 00007fe77d9e5fa0 RCX: 00007fe77d76bf79 [ 454.132220][T18526] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 454.132233][T18526] RBP: 00007fe77c1c7090 R08: 0000000000000438 R09: 0000000000000000 [ 454.132326][T18526] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.132339][T18526] R13: 00007fe77d9e6038 R14: 00007fe77d9e5fa0 R15: 00007ffd51aa4278 [ 454.132358][T18526] [ 454.138961][T18526] syz.6.4254: vmalloc error: size 50747072, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 454.193235][T18530] CPU: 0 UID: 0 PID: 18530 Comm: syz.4.4255 Tainted: G W syzkaller #0 PREEMPT(full) [ 454.193261][T18530] Tainted: [W]=WARN [ 454.193266][T18530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.193285][T18530] Call Trace: [ 454.193343][T18530] [ 454.193351][T18530] __dump_stack+0x1d/0x30 [ 454.193456][T18530] dump_stack_lvl+0x95/0xd0 [ 454.193477][T18530] dump_stack+0x15/0x1b [ 454.193496][T18530] should_fail_ex+0x263/0x280 [ 454.193518][T18530] should_failslab+0x8c/0xb0 [ 454.193597][T18530] __kmalloc_noprof+0xb8/0x4e0 [ 454.193614][T18530] ? fib_nl2rule+0x215/0xc50 [ 454.193684][T18530] fib_nl2rule+0x215/0xc50 [ 454.193710][T18530] fib_newrule+0x2c1/0x930 [ 454.193734][T18530] ? avc_has_perm_noaudit+0xab/0x130 [ 454.193822][T18530] fib_nl_newrule+0x46/0x60 [ 454.193846][T18530] ? __pfx_fib_nl_newrule+0x10/0x10 [ 454.193870][T18530] rtnetlink_rcv_msg+0x64b/0x720 [ 454.193936][T18530] ? avc_has_perm_noaudit+0xab/0x130 [ 454.193954][T18530] netlink_rcv_skb+0x123/0x220 [ 454.193976][T18530] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 454.194071][T18530] rtnetlink_rcv+0x1c/0x30 [ 454.194093][T18530] netlink_unicast+0x5c0/0x690 [ 454.194116][T18530] netlink_sendmsg+0x5c8/0x6f0 [ 454.194211][T18530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.194233][T18530] ____sys_sendmsg+0x5af/0x600 [ 454.194274][T18530] ___sys_sendmsg+0x195/0x1e0 [ 454.194307][T18530] __x64_sys_sendmsg+0xd4/0x160 [ 454.194347][T18530] x64_sys_call+0x194c/0x3020 [ 454.194429][T18530] do_syscall_64+0x12c/0x370 [ 454.194457][T18530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.194486][T18530] RIP: 0033:0x7fae51e4bf79 [ 454.194501][T18530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.194517][T18530] RSP: 002b:00007fae5087e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.194535][T18530] RAX: ffffffffffffffda RBX: 00007fae520c6090 RCX: 00007fae51e4bf79 [ 454.194548][T18530] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 454.194560][T18530] RBP: 00007fae5087e090 R08: 0000000000000000 R09: 0000000000000000 [ 454.194596][T18530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.194607][T18530] R13: 00007fae520c6128 R14: 00007fae520c6090 R15: 00007ffda86b22f8 [ 454.194696][T18530] [ 454.250159][T18535] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 454.252720][T18526] ,cpuset=/,mems_allowed=0 [ 454.252749][T18526] CPU: 1 UID: 0 PID: 18526 Comm: syz.6.4254 Tainted: G W syzkaller #0 PREEMPT(full) [ 454.252834][T18526] Tainted: [W]=WARN [ 454.252841][T18526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.252852][T18526] Call Trace: [ 454.252859][T18526] [ 454.252867][T18526] __dump_stack+0x1d/0x30 [ 454.252894][T18526] dump_stack_lvl+0x95/0xd0 [ 454.252915][T18526] dump_stack+0x15/0x1b [ 454.252934][T18526] warn_alloc+0x145/0x1c0 [ 454.252976][T18526] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 454.252997][T18526] ? perf_trace_run_bpf_submit+0xe5/0x110 [ 454.253038][T18526] ? translate_table+0xca0/0x11c0 [ 454.253078][T18526] ? perf_trace_kfree+0xc2/0x100 [ 454.253206][T18526] ? translate_table+0xca0/0x11c0 [ 454.253230][T18526] ? kfree+0x303/0x380 [ 454.253255][T18526] ? translate_table+0xf2c/0x11c0 [ 454.253461][T18526] ? xt_counters_alloc+0x40/0x50 [ 454.253485][T18526] vzalloc_noprof+0x82/0xb0 [ 454.253503][T18526] ? xt_counters_alloc+0x40/0x50 [ 454.253525][T18526] xt_counters_alloc+0x40/0x50 [ 454.253584][T18526] __do_replace+0x51/0x640 [ 454.253673][T18526] ? should_fail_ex+0xd9/0x280 [ 454.253759][T18526] ? _copy_from_user+0x89/0xb0 [ 454.253798][T18526] do_arpt_set_ctl+0x7ab/0xad0 [ 454.253824][T18526] ? _raw_spin_unlock_bh+0x18/0x20 [ 454.253875][T18526] nf_setsockopt+0x199/0x1b0 [ 454.253902][T18526] ip_setsockopt+0x102/0x110 [ 454.253922][T18526] udp_setsockopt+0x99/0xb0 [ 454.253966][T18526] sock_common_setsockopt+0x69/0x80 [ 454.254000][T18526] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 454.254106][T18526] __sys_setsockopt+0x184/0x200 [ 454.254129][T18526] __x64_sys_setsockopt+0x64/0x80 [ 454.254189][T18526] x64_sys_call+0x2327/0x3020 [ 454.254230][T18526] do_syscall_64+0x12c/0x370 [ 454.254258][T18526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.254283][T18526] RIP: 0033:0x7fe77d76bf79 [ 454.254347][T18526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.254364][T18526] RSP: 002b:00007fe77c1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.254383][T18526] RAX: ffffffffffffffda RBX: 00007fe77d9e5fa0 RCX: 00007fe77d76bf79 [ 454.254396][T18526] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 454.254455][T18526] RBP: 00007fe77c1c7090 R08: 0000000000000438 R09: 0000000000000000 [ 454.254469][T18526] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.254481][T18526] R13: 00007fe77d9e6038 R14: 00007fe77d9e5fa0 R15: 00007ffd51aa4278 [ 454.254500][T18526] [ 454.254507][T18526] Mem-Info: [ 454.783578][T18540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.789695][T18526] active_anon:19382 inactive_anon:5 isolated_anon:0 [ 454.789695][T18526] active_file:25498 inactive_file:5481 isolated_file:0 [ 454.789695][T18526] unevictable:0 dirty:111 writeback:29 [ 454.789695][T18526] slab_reclaimable:4235 slab_unreclaimable:60962 [ 454.789695][T18526] mapped:41996 shmem:7054 pagetables:3924 [ 454.789695][T18526] sec_pagetables:0 bounce:0 [ 454.789695][T18526] kernel_misc_reclaimable:0 [ 454.789695][T18526] free:1800121 free_pcp:5914 free_cma:0 [ 454.997958][T18543] netlink: 'syz.4.4258': attribute type 4 has an invalid length. [ 455.012790][T18526] Node 0 active_anon:66092kB inactive_anon:20kB active_file:101992kB inactive_file:21924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159000kB dirty:436kB writeback:112kB shmem:16880kB kernel_stack:4832kB pagetables:15680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 455.155373][T18526] Node 0 [ 455.188820][T18534] loop0: detected capacity change from 0 to 8192 [ 455.205076][T18526] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.250240][T18534] loop0: p1 p2 p3 [ 455.250599][T18526] lowmem_reserve[]: [ 455.255339][T18534] loop0: p1 size 4719617 extends beyond EOD, [ 455.256284][T18526] 0 [ 455.259810][T18534] truncated [ 455.263637][T18534] loop0: p3 start 117772289 is beyond EOD, truncated [ 455.294126][T18526] 2879 7857 7857 [ 455.299214][T18526] Node 0 DMA32 free:2944792kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948316kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 455.348515][T18526] lowmem_reserve[]: 0 0 4978 4978 [ 455.375800][T18547] loop2: detected capacity change from 0 to 256 [ 455.398917][T18549] loop9: detected capacity change from 0 to 512 [ 455.433876][T18526] Node 0 Normal free:4267004kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54260kB inactive_anon:20kB active_file:101992kB inactive_file:21344kB unevictable:0kB writepending:548kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:20776kB local_pcp:16964kB free_cma:0kB [ 455.502315][T18547] vfat: Unknown parameter '0xffffffffffffffff000000000000000000000000x0000000000000000R)~ꟼm^1e [ 455.502315][T18547] ATs}_5' [ 455.513140][T18526] lowmem_reserve[]: 0 0 0 0 [ 455.535991][T18549] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 455.541951][T18526] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 455.569863][T18526] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 2*64kB (M) 4*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944792kB [ 455.660554][T18553] loop4: detected capacity change from 0 to 256 [ 455.685850][T18526] Node 0 Normal: 873*4kB (UME) 2390*8kB (UME) 754*16kB (UME) 1134*32kB (UME) 700*64kB (UME) 273*128kB (UME) 167*256kB (UME) 93*512kB (UME) 51*1024kB (UM) 39*2048kB (UME) 949*4096kB (UM) = 4260276kB [ 455.714199][T18526] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 455.726948][T18526] 36376 total pagecache pages [ 455.732954][T18526] 8 pages in swap cache [ 455.738168][T18526] Free swap = 124964kB [ 455.743274][T18526] Total swap = 124996kB [ 455.748008][T18526] 2097051 pages RAM [ 455.753003][T18526] 0 pages HighMem/MovableOnly [ 455.758770][T18526] 81572 pages reserved [ 455.792932][T18553] FAT-fs (loop4): Directory bread(block 64) failed [ 455.802353][T18553] FAT-fs (loop4): Directory bread(block 65) failed [ 455.812812][T18553] FAT-fs (loop4): Directory bread(block 66) failed [ 455.820913][T18553] FAT-fs (loop4): Directory bread(block 67) failed [ 455.827875][T18553] FAT-fs (loop4): Directory bread(block 68) failed [ 455.836727][T18553] FAT-fs (loop4): Directory bread(block 69) failed [ 455.845759][T18553] FAT-fs (loop4): Directory bread(block 70) failed [ 455.853697][T18553] FAT-fs (loop4): Directory bread(block 71) failed [ 455.860762][T18553] FAT-fs (loop4): Directory bread(block 72) failed [ 455.868041][T18553] FAT-fs (loop4): Directory bread(block 73) failed [ 456.144334][T18549] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 456.330828][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 456.376046][ T3745] udevd[3745]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 456.395535][T18549] EXT4-fs (loop9): 1 truncate cleaned up [ 456.493669][T18549] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.811099][T18566] loop6: detected capacity change from 0 to 256 [ 456.836783][T18552] loop0: detected capacity change from 0 to 512 [ 456.867745][T18552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 456.951179][T18552] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4262: invalid indirect mapped block 4294967295 (level 0) [ 456.986859][T18552] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 456.986990][T18552] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.4262: invalid indirect mapped block 4294967295 (level 1) [ 456.996441][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 456.996462][ C0] EXT4-fs (loop0): initial error at time 1771316301: ext4_free_branches:1023: inode 16 [ 456.996491][ C0] EXT4-fs (loop0): last error at time 1771316301: ext4_free_branches:1023: inode 16 [ 457.080043][T18571] loop6: detected capacity change from 0 to 128 [ 457.170170][T11741] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.250903][T18552] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 457.251843][T18552] EXT4-fs (loop0): 1 orphan inode deleted [ 457.333099][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4269'. [ 457.346327][T18552] EXT4-fs (loop0): 1 truncate cleaned up [ 457.361946][T18552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.481540][T18580] syzkaller0: entered promiscuous mode [ 457.488573][T18580] syzkaller0: entered allmulticast mode [ 457.497131][T18582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4267'. [ 457.508402][T18580] 0: reclassify loop, rule prio 0, protocol 800 [ 457.518357][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.628555][T18588] netlink: 'syz.0.4271': attribute type 4 has an invalid length. [ 457.703373][T18592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.714313][T18592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.944913][T18590] loop4: detected capacity change from 0 to 2048 [ 458.006214][T18590] Alternate GPT is invalid, using primary GPT. [ 458.014333][T18590] loop4: p2 p3 p7 [ 458.040895][T18590] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.4273'. [ 458.050963][T18590] netlink: zone id is out of range [ 458.057406][T18590] netlink: zone id is out of range [ 458.063594][T18590] netlink: zone id is out of range [ 458.069536][T18590] netlink: zone id is out of range [ 458.075173][T18590] netlink: zone id is out of range [ 458.080782][T18590] netlink: zone id is out of range [ 458.086726][T18590] netlink: zone id is out of range [ 458.093535][T18590] netlink: zone id is out of range [ 458.099446][T18590] netlink: zone id is out of range [ 458.111005][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 458.111019][ T28] audit: type=1400 audit(1771316302.614:2958): avc: denied { getopt } for pid=18594 comm="syz.6.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 458.114397][T18595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4275'. [ 458.152527][ T28] audit: type=1400 audit(1771316302.654:2959): avc: denied { kexec_image_load } for pid=18594 comm="syz.6.4275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 458.382069][T18601] loop2: detected capacity change from 0 to 256 [ 458.409847][T18601] FAT-fs (loop2): Directory bread(block 64) failed [ 458.418150][T18601] FAT-fs (loop2): Directory bread(block 65) failed [ 458.426641][T18601] FAT-fs (loop2): Directory bread(block 66) failed [ 458.434113][T18601] FAT-fs (loop2): Directory bread(block 67) failed [ 458.443198][T18601] FAT-fs (loop2): Directory bread(block 68) failed [ 458.453904][T18601] FAT-fs (loop2): Directory bread(block 69) failed [ 458.463721][T18601] FAT-fs (loop2): Directory bread(block 70) failed [ 458.472500][T18601] FAT-fs (loop2): Directory bread(block 71) failed [ 458.481791][T18601] FAT-fs (loop2): Directory bread(block 72) failed [ 458.492237][T18601] FAT-fs (loop2): Directory bread(block 73) failed [ 459.217124][T18603] loop6: detected capacity change from 0 to 256 [ 461.846202][T18603] FAT-fs (loop6): Directory bread(block 64) failed [ 461.853555][T18603] FAT-fs (loop6): Directory bread(block 65) failed [ 461.860122][T18603] FAT-fs (loop6): Directory bread(block 66) failed [ 461.867178][T18603] FAT-fs (loop6): Directory bread(block 67) failed [ 461.874686][T18603] FAT-fs (loop6): Directory bread(block 68) failed [ 461.881881][T18603] FAT-fs (loop6): Directory bread(block 69) failed [ 461.890357][T18603] FAT-fs (loop6): Directory bread(block 70) failed [ 461.897484][T18603] FAT-fs (loop6): Directory bread(block 71) failed [ 461.904704][T18603] FAT-fs (loop6): Directory bread(block 72) failed [ 461.912318][T18603] FAT-fs (loop6): Directory bread(block 73) failed [ 461.980374][T18614] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4282'. [ 462.075036][ T28] audit: type=1400 audit(1771316306.584:2960): avc: denied { getopt } for pid=18620 comm="syz.2.4285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 462.103867][T18626] loop0: detected capacity change from 0 to 512 [ 462.114460][T18626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 462.151741][ T28] audit: type=1400 audit(1771316306.644:2961): avc: denied { setopt } for pid=18631 comm="syz.9.4288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 462.256314][T18626] EXT4-fs (loop0): 1 truncate cleaned up [ 462.276267][T18626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.315342][ T28] audit: type=1400 audit(1771316306.824:2962): avc: denied { mounton } for pid=18617 comm="syz.0.4284" path="/269/file1" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.372058][ T28] audit: type=1400 audit(1771316306.824:2963): avc: denied { mount } for pid=18617 comm="syz.0.4284" name="/" dev="hugetlbfs" ino=60007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 462.750873][T18645] loop6: detected capacity change from 0 to 2048 [ 462.781982][T18659] netlink: 131740 bytes leftover after parsing attributes in process `syz.6.4290'. [ 462.792853][T18659] net_ratelimit: 14 callbacks suppressed [ 462.792868][T18659] netlink: zone id is out of range [ 462.804286][T18659] netlink: zone id is out of range [ 462.809669][T18659] netlink: zone id is out of range [ 462.814913][T18659] netlink: zone id is out of range [ 462.820487][T18659] netlink: zone id is out of range [ 462.825712][T18659] netlink: zone id is out of range [ 462.831056][T18659] netlink: zone id is out of range [ 462.836560][T18659] netlink: zone id is out of range [ 462.842304][T18659] netlink: zone id is out of range [ 462.847743][T18659] netlink: zone id is out of range [ 462.882769][ T3745] Alternate GPT is invalid, using primary GPT. [ 462.889587][ T3745] loop6: p2 p3 p7 [ 462.962111][T18660] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.4291'. [ 463.131047][T18657] loop9: detected capacity change from 0 to 2048 [ 463.145102][T18645] Alternate GPT is invalid, using primary GPT. [ 463.214657][T18645] loop6: p2 p3 p7 [ 463.214960][ T3297] Alternate GPT is invalid, using primary GPT. [ 463.244317][ T3297] loop9: p2 p3 p7 [ 463.323504][T18618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.359375][T18618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.410117][T18662] loop4: detected capacity change from 0 to 32768 [ 463.530635][T18657] Alternate GPT is invalid, using primary GPT. [ 463.552919][T18657] loop9: p2 p3 p7 [ 463.805439][T18664] bridge0: port 1(ipvlan2) entered blocking state [ 463.812206][T18664] bridge0: port 1(ipvlan2) entered disabled state [ 463.832344][T18664] ipvlan2: entered allmulticast mode [ 463.841339][T18664] bridge0: entered allmulticast mode [ 463.842136][ T28] audit: type=1400 audit(1771316308.344:2964): avc: denied { unmount } for pid=13876 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 463.847957][T18664] ipvlan2: left allmulticast mode [ 463.877078][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.886449][T18664] bridge0: left allmulticast mode [ 463.901831][T18666] xt_socket: unknown flags 0x4c [ 463.919496][ T61] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.941250][ T61] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.959909][T18668] loop2: detected capacity change from 0 to 2048 [ 463.967409][T18668] ext2: Unknown parameter 'uid' [ 463.973523][ T61] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.985318][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.029047][T18670] loop2: detected capacity change from 0 to 256 [ 464.052312][ T28] audit: type=1400 audit(1771316308.554:2965): avc: denied { getopt } for pid=18672 comm="syz.6.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 464.085744][ T4971] udevd[4971]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 464.098343][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 464.114163][ T3745] udevd[3745]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 464.127647][T18673] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4295'. [ 464.149210][T18677] loop4: detected capacity change from 0 to 256 [ 464.160255][T18677] vfat: Bad value for 'check' [ 464.187193][T18670] FAT-fs (loop2): Directory bread(block 64) failed [ 464.206001][ T28] audit: type=1400 audit(1771316308.714:2966): avc: denied { accept } for pid=18672 comm="syz.6.4295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 464.266830][ T28] audit: type=1400 audit(1771316308.714:2967): avc: denied { ioctl } for pid=18672 comm="syz.6.4295" path="socket:[60817]" dev="sockfs" ino=60817 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 464.282773][T18670] FAT-fs (loop2): Directory bread(block 65) failed [ 464.298208][T18680] netlink: 'syz.9.4299': attribute type 4 has an invalid length. [ 464.336078][T18670] FAT-fs (loop2): Directory bread(block 66) failed [ 464.344225][T18689] loop6: detected capacity change from 0 to 128 [ 464.359180][T18670] FAT-fs (loop2): Directory bread(block 67) failed [ 464.372846][T18670] FAT-fs (loop2): Directory bread(block 68) failed [ 464.383545][T18689] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 464.398578][T18670] FAT-fs (loop2): Directory bread(block 69) failed [ 464.404416][T18689] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.406986][T18670] FAT-fs (loop2): Directory bread(block 70) failed [ 464.437085][T18670] FAT-fs (loop2): Directory bread(block 71) failed [ 464.447383][T18670] FAT-fs (loop2): Directory bread(block 72) failed [ 464.457574][T18670] FAT-fs (loop2): Directory bread(block 73) failed [ 464.537271][T11467] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.557162][T18702] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4305'. [ 464.608090][ T28] audit: type=1400 audit(1771316309.114:2968): avc: denied { setopt } for pid=18704 comm="syz.2.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 464.614069][T18702] lo speed is unknown, defaulting to 1000 [ 464.640752][T18706] loop6: detected capacity change from 0 to 512 [ 464.668337][T18706] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 464.740264][T18706] EXT4-fs (loop6): failed to open journal device unknown-block(11,127) -6 [ 464.798597][T18714] syzkaller1: entered promiscuous mode [ 464.809433][T18714] syzkaller1: entered allmulticast mode [ 464.819088][T18715] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.4303'. [ 464.830012][T18706] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.4305'. [ 464.907167][T18716] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.4304'. [ 464.967958][T18697] loop9: detected capacity change from 0 to 2048 [ 465.106798][T18697] Alternate GPT is invalid, using primary GPT. [ 465.115344][T18728] netlink: 'syz.2.4312': attribute type 12 has an invalid length. [ 465.153804][T18697] loop9: p2 p3 p7 [ 465.160129][T18691] Alternate GPT is invalid, using primary GPT. [ 465.203030][ T28] audit: type=1400 audit(1771316309.694:2969): avc: denied { bind } for pid=18722 comm="syz.2.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 465.237187][T18732] netlink: 248 bytes leftover after parsing attributes in process `syz.6.4315'. [ 465.267090][T18691] loop4: p2 p3 p7 [ 465.282797][ T28] audit: type=1400 audit(1771316309.694:2970): avc: denied { setopt } for pid=18722 comm="syz.2.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 465.458891][ T4971] loop6: p3 p4 < > [ 465.493944][T18735] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 465.513071][T18737] FAT-fs (loop0): Directory bread(block 64) failed [ 465.520387][T18737] FAT-fs (loop0): Directory bread(block 65) failed [ 465.528546][T18737] FAT-fs (loop0): Directory bread(block 66) failed [ 465.537099][T18737] FAT-fs (loop0): Directory bread(block 67) failed [ 465.545472][T18737] FAT-fs (loop0): Directory bread(block 68) failed [ 465.553534][T18737] FAT-fs (loop0): Directory bread(block 69) failed [ 465.560507][T18737] FAT-fs (loop0): Directory bread(block 70) failed [ 465.568558][T18737] FAT-fs (loop0): Directory bread(block 71) failed [ 465.577477][T18737] FAT-fs (loop0): Directory bread(block 72) failed [ 465.584720][T18737] FAT-fs (loop0): Directory bread(block 73) failed [ 465.661791][ T4971] loop6: p3 start 11362048 is beyond EOD, truncated [ 465.920025][T18735] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.177427][T16488] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.338183][T18732] loop6: p3 p4 < > [ 466.367159][T18732] loop6: p3 start 11362048 is beyond EOD, truncated [ 466.499675][ T28] audit: type=1400 audit(1771316310.994:2971): avc: denied { listen } for pid=18731 comm="syz.6.4315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 466.541173][ T4971] udevd[4971]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 466.599759][ T3000] Alternate GPT is invalid, using primary GPT. [ 466.619823][T18747] EXT4-fs: Ignoring removed nobh option [ 466.626120][ T3000] loop4: p2 p3 p7 [ 466.635700][T18747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 466.677621][ T3745] udevd[3745]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 466.691013][T18747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.967689][ T3745] udevd[3745]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 466.987688][T18752] syzkaller1: entered promiscuous mode [ 467.012977][T18752] syzkaller1: entered allmulticast mode [ 467.027528][T11467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.043518][T18753] FAULT_INJECTION: forcing a failure. [ 467.043518][T18753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.064942][ T4971] udevd[4971]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 467.093571][T18753] CPU: 1 UID: 0 PID: 18753 Comm: syz.9.4320 Tainted: G W syzkaller #0 PREEMPT(full) [ 467.093698][T18753] Tainted: [W]=WARN [ 467.093704][T18753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 467.093714][T18753] Call Trace: [ 467.093720][T18753] [ 467.093727][T18753] __dump_stack+0x1d/0x30 [ 467.093750][T18753] dump_stack_lvl+0x95/0xd0 [ 467.093814][T18753] dump_stack+0x15/0x1b [ 467.093866][T18753] should_fail_ex+0x263/0x280 [ 467.093885][T18753] should_fail+0xb/0x20 [ 467.093940][T18753] should_fail_usercopy+0x1a/0x20 [ 467.093962][T18753] _copy_from_iter+0xcf/0xea0 [ 467.093985][T18753] ? rep_movs_alternative+0x4a/0x90 [ 467.094007][T18753] ? _copy_from_iter+0x13e/0xea0 [ 467.094062][T18753] copy_page_from_iter+0x178/0x2a0 [ 467.094116][T18753] skb_copy_datagram_from_iter+0x22d/0x480 [ 467.094140][T18753] tun_get_user+0x90b/0x27c0 [ 467.094223][T18753] ? ref_tracker_alloc+0x1f2/0x2f0 [ 467.094258][T18753] tun_chr_write_iter+0x15e/0x210 [ 467.094342][T18753] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 467.094473][T18753] vfs_write+0x5a6/0x9f0 [ 467.094503][T18753] ksys_write+0xdc/0x1a0 [ 467.094527][T18753] __x64_sys_write+0x40/0x50 [ 467.094552][T18753] x64_sys_call+0x27e1/0x3020 [ 467.094570][T18753] do_syscall_64+0x12c/0x370 [ 467.094634][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.094655][T18753] RIP: 0033:0x7f127748bf79 [ 467.094670][T18753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.094747][T18753] RSP: 002b:00007f1275ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 467.094765][T18753] RAX: ffffffffffffffda RBX: 00007f1277706090 RCX: 00007f127748bf79 [ 467.094779][T18753] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 467.094792][T18753] RBP: 00007f1275ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 467.094870][T18753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 467.094880][T18753] R13: 00007f1277706128 R14: 00007f1277706090 R15: 00007ffcb85ade28 [ 467.094923][T18753] [ 467.486743][T18765] set_capacity_and_notify: 5 callbacks suppressed [ 467.486760][T18765] loop9: detected capacity change from 0 to 1024 [ 467.495193][T18744] loop2: detected capacity change from 0 to 8192 [ 467.518805][T18765] EXT4-fs: Ignoring removed nobh option [ 467.525140][T18765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 467.579894][T18765] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.811911][T18777] loop0: detected capacity change from 0 to 8192 [ 467.873726][ T3297] loop0: p1 p2 p3 [ 467.900940][ T3297] loop0: p1 size 4719617 extends beyond EOD, truncated [ 467.990576][ T3297] loop0: p3 start 117772289 is beyond EOD, truncated [ 468.069875][T18784] loop6: detected capacity change from 0 to 1024 [ 468.117197][T18784] EXT4-fs: Ignoring removed nobh option [ 468.129724][T18777] loop0: p1 p2 p3 [ 468.134576][T18777] loop0: p1 size 4719617 extends beyond EOD, truncated [ 468.142939][T18777] loop0: p3 start 117772289 is beyond EOD, truncated [ 468.177868][T18784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.227376][T18784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.293329][T18789] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4332'. [ 468.305739][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4332'. [ 468.328093][T18789] loop2: detected capacity change from 0 to 512 [ 468.403201][T18789] EXT4-fs: Ignoring removed bh option [ 468.409108][T18789] EXT4-fs: inline encryption not supported [ 468.429229][T18789] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 468.446841][T18792] loop0: detected capacity change from 0 to 1024 [ 468.455339][T18792] EXT4-fs: Ignoring removed orlov option [ 468.475527][T11741] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.487228][T18792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.513349][ T28] audit: type=1400 audit(1771316313.024:2972): avc: denied { rename } for pid=18791 comm="syz.0.4333" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 468.517571][T18789] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 468.536947][T18792] EXT4-fs error (device loop0): __ext4_new_inode:1279: comm syz.0.4333: failed to insert inode 12: doubly allocated? [ 468.574331][T18789] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4332: bg 0: block 248: padding at end of block bitmap is not set [ 468.589393][T18789] loop2: lost filesystem error report for type 5 error -117 [ 468.589567][T18789] Quota error (device loop2): write_blk: dquota write failed [ 468.597077][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 468.597101][ C0] EXT4-fs (loop2): last error at time 1771316313: ext4_validate_block_bitmap:441 [ 468.623337][T18789] EXT4-fs error (device loop2): ext4_acquire_dquot:7003: comm syz.2.4332: Failed to acquire dquot type 1 [ 468.637512][T18789] loop2: lost filesystem error report for type 5 error -117 [ 468.649502][T11467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.667058][T18789] EXT4-fs (loop2): 1 truncate cleaned up [ 468.673321][T18789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 468.728304][T18789] Invalid ELF header magic: != ELF [ 468.758213][T16488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 468.768288][ T850] EXT4-fs error (device loop2): ext4_release_dquot:7039: comm kworker/u8:6: Failed to release dquot type 1 [ 468.780778][ T850] loop2: lost filesystem error report for type 5 error -117 [ 468.820913][T18802] syzkaller0: entered promiscuous mode [ 468.851913][T18802] syzkaller0: entered allmulticast mode [ 468.859600][T18802] tipc: Started in network mode [ 468.864765][T18802] tipc: Node identity 3252a6c49bba, cluster identity 4711 [ 468.886490][T18802] tipc: Enabled bearer , priority 0 [ 468.895062][T18802] tipc: Resetting bearer [ 468.903174][T18802] tipc: Disabling bearer [ 469.037965][T18839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 469.051626][T18830] netlink: 'syz.9.4347': attribute type 4 has an invalid length. [ 469.088114][T13876] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.220150][T18843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.238867][T18861] FAULT_INJECTION: forcing a failure. [ 469.238867][T18861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.253040][T18861] CPU: 0 UID: 0 PID: 18861 Comm: syz.6.4357 Tainted: G W syzkaller #0 PREEMPT(full) [ 469.253089][T18861] Tainted: [W]=WARN [ 469.253096][T18861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.253108][T18861] Call Trace: [ 469.253114][T18861] [ 469.253122][T18861] __dump_stack+0x1d/0x30 [ 469.253215][T18861] dump_stack_lvl+0x95/0xd0 [ 469.253305][T18861] dump_stack+0x15/0x1b [ 469.253323][T18861] should_fail_ex+0x263/0x280 [ 469.253349][T18861] should_fail+0xb/0x20 [ 469.253364][T18861] should_fail_usercopy+0x1a/0x20 [ 469.253444][T18861] _copy_from_user+0x1c/0xb0 [ 469.253469][T18861] ___sys_sendmsg+0xc1/0x1e0 [ 469.253500][T18861] __x64_sys_sendmsg+0xd4/0x160 [ 469.253523][T18861] x64_sys_call+0x194c/0x3020 [ 469.253599][T18861] do_syscall_64+0x12c/0x370 [ 469.253671][T18861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.253688][T18861] RIP: 0033:0x7fe77d76bf79 [ 469.253703][T18861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.253739][T18861] RSP: 002b:00007fe77c1c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.253755][T18861] RAX: ffffffffffffffda RBX: 00007fe77d9e5fa0 RCX: 00007fe77d76bf79 [ 469.253775][T18861] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 469.253785][T18861] RBP: 00007fe77c1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 469.253795][T18861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.253804][T18861] R13: 00007fe77d9e6038 R14: 00007fe77d9e5fa0 R15: 00007ffd51aa4278 [ 469.253868][T18861] [ 469.452108][T18867] loop2: detected capacity change from 0 to 1024 [ 469.459488][T18867] SELinux: security_context_str_to_sid (sysadm) failed with errno=-22 [ 469.558819][T18873] loop2: detected capacity change from 0 to 512 [ 469.574830][T18873] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.598445][T18873] EXT4-fs (loop2): 1 truncate cleaned up [ 469.608991][T18873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.713566][T16488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.804954][T18883] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 470.377321][T18899] loop0: detected capacity change from 0 to 256 [ 470.474474][T18899] FAT-fs (loop0): Directory bread(block 64) failed [ 470.482411][T18899] FAT-fs (loop0): Directory bread(block 65) failed [ 470.489959][T18899] FAT-fs (loop0): Directory bread(block 66) failed [ 470.496978][T18899] FAT-fs (loop0): Directory bread(block 67) failed [ 470.504629][T18899] FAT-fs (loop0): Directory bread(block 68) failed [ 470.511728][T18899] FAT-fs (loop0): Directory bread(block 69) failed [ 470.519444][T18899] FAT-fs (loop0): Directory bread(block 70) failed [ 470.526259][T18899] FAT-fs (loop0): Directory bread(block 71) failed [ 470.532807][T18899] FAT-fs (loop0): Directory bread(block 72) failed [ 470.539565][T18899] FAT-fs (loop0): Directory bread(block 73) failed [ 471.448385][T18898] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.4366'. [ 471.459147][T18898] net_ratelimit: 78 callbacks suppressed [ 471.459160][T18898] netlink: zone id is out of range [ 471.471594][T18898] netlink: zone id is out of range [ 471.477990][T18898] netlink: zone id is out of range [ 471.484135][T18898] netlink: del zone limit has 8 unknown bytes [ 471.814430][T18891] loop4: detected capacity change from 0 to 2048 [ 472.083471][T18906] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.4369'. [ 472.190505][T18906] netlink: zone id is out of range [ 472.265056][T18906] netlink: zone id is out of range [ 472.312823][T18906] netlink: zone id is out of range [ 472.352015][T18906] netlink: del zone limit has 8 unknown bytes [ 472.419953][T18908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.468421][T18908] FAULT_INJECTION: forcing a failure. [ 472.468421][T18908] name failslab, interval 1, probability 0, space 0, times 0 [ 472.483132][T18908] CPU: 1 UID: 0 PID: 18908 Comm: syz.6.4373 Tainted: G W syzkaller #0 PREEMPT(full) [ 472.483194][T18908] Tainted: [W]=WARN [ 472.483200][T18908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.483211][T18908] Call Trace: [ 472.483217][T18908] [ 472.483223][T18908] __dump_stack+0x1d/0x30 [ 472.483248][T18908] dump_stack_lvl+0x95/0xd0 [ 472.483266][T18908] dump_stack+0x15/0x1b [ 472.483291][T18908] should_fail_ex+0x263/0x280 [ 472.483310][T18908] should_failslab+0x8c/0xb0 [ 472.483397][T18908] kmem_cache_alloc_noprof+0x66/0x400 [ 472.483421][T18908] ? security_inode_alloc+0x37/0x100 [ 472.483479][T18908] security_inode_alloc+0x37/0x100 [ 472.483500][T18908] inode_init_always_gfp+0x4b7/0x500 [ 472.483519][T18908] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 472.483536][T18908] alloc_inode+0x58/0x170 [ 472.483549][T18908] new_inode+0x1d/0xe0 [ 472.483582][T18908] __ext4_new_inode+0x15e/0x2340 [ 472.483614][T18908] ext4_mkdir+0x28b/0x740 [ 472.483638][T18908] vfs_mkdir+0x294/0x3e0 [ 472.483664][T18908] filename_mkdirat+0x138/0x300 [ 472.483770][T18908] __se_sys_mkdirat+0x32/0xf0 [ 472.483796][T18908] __x64_sys_mkdirat+0x43/0x50 [ 472.483886][T18908] x64_sys_call+0x2c4e/0x3020 [ 472.483912][T18908] do_syscall_64+0x12c/0x370 [ 472.483939][T18908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.483991][T18908] RIP: 0033:0x7fe77d76ae57 [ 472.484007][T18908] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.484097][T18908] RSP: 002b:00007fe77c1c6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 472.484118][T18908] RAX: ffffffffffffffda RBX: 00007fe77c1c6ee0 RCX: 00007fe77d76ae57 [ 472.484132][T18908] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 472.484145][T18908] RBP: 0000200000000140 R08: 0000200000000080 R09: 0000000000000000 [ 472.484158][T18908] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000080 [ 472.484172][T18908] R13: 00007fe77c1c6ea0 R14: 0000000000000000 R15: 0000000000000000 [ 472.484254][T18908] [ 472.863296][T18891] Alternate GPT is invalid, using primary GPT. [ 472.873154][T18891] loop4: p2 p3 p7 [ 472.883095][T11467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.984370][T18921] netlink: 'syz.0.4377': attribute type 4 has an invalid length. [ 473.004670][ T3000] Alternate GPT is invalid, using primary GPT. [ 473.011171][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4378'. [ 473.016192][ T3000] loop4: p2 p3 p7 [ 473.049131][T18934] xt_hashlimit: size too large, truncated to 1048576 [ 473.061480][T18937] set_capacity_and_notify: 1 callbacks suppressed [ 473.061496][T18937] loop6: detected capacity change from 0 to 512 [ 473.098907][T18937] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 473.125852][T18937] EXT4-fs (loop6): orphan cleanup on readonly fs [ 473.160438][T18937] EXT4-fs error (device loop6): __ext4_iget:5378: inode #11: block 8: comm syz.6.4383: invalid block [ 473.173566][T18937] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 473.173792][T18937] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4383: couldn't read orphan inode 11 (err -117) [ 473.184237][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 473.184255][ C0] EXT4-fs (loop6): initial error at time 1771316317: __ext4_iget:5378: inode 11: block 8 [ 473.184306][ C0] EXT4-fs (loop6): last error at time 1771316317: __ext4_iget:5378: inode 11: block 8 [ 473.246943][T18937] loop6: lost filesystem error report for type 5 error -117 [ 473.247573][T18937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 473.270852][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 473.270865][ T28] audit: type=1400 audit(1771316317.774:2981): avc: denied { remount } for pid=18936 comm="syz.6.4383" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 473.297457][T18937] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 473.354438][ T28] audit: type=1400 audit(1771316317.864:2982): avc: denied { listen } for pid=18944 comm="syz.2.4384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 473.385557][T18945] loop2: detected capacity change from 0 to 8192 [ 473.419334][ T28] audit: type=1400 audit(1771316317.924:2983): avc: denied { ioctl } for pid=18944 comm="syz.2.4384" path="socket:[60360]" dev="sockfs" ino=60360 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 473.547994][ T3420] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 473.558074][ T3420] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 473.581447][T18954] fido_id[18954]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 473.618298][ T28] audit: type=1326 audit(1771316318.124:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 473.644378][ T28] audit: type=1326 audit(1771316318.124:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 473.680590][ T28] audit: type=1326 audit(1771316318.124:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 473.707622][ T28] audit: type=1326 audit(1771316318.124:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 473.736084][T18962] geneve2: entered promiscuous mode [ 473.743120][T18963] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 473.753645][ T850] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.754565][ T28] audit: type=1326 audit(1771316318.124:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 473.763118][ T850] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.788447][ T28] audit: type=1326 audit(1771316318.124:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 473.799108][ T850] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.837814][ T850] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 473.853371][ T28] audit: type=1326 audit(1771316318.124:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 473.887909][T18970] loop9: detected capacity change from 0 to 256 [ 473.912368][T11467] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.922196][T18970] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 473.946487][T18970] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.187089][T18989] xt_socket: unknown flags 0x48 [ 474.251358][T18994] netlink: 'syz.9.4403': attribute type 13 has an invalid length. [ 474.290062][T18964] loop0: detected capacity change from 0 to 2048 [ 474.304390][T18995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22614 sclass=netlink_route_socket pid=18995 comm=syz.9.4403 [ 474.408849][T18999] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.4390'. [ 474.434641][T18964] Alternate GPT is invalid, using primary GPT. [ 474.458945][T18999] netlink: zone id is out of range [ 474.468987][T18999] netlink: zone id is out of range [ 474.475070][T19001] tipc: Can't bind to reserved service type 2 [ 474.506389][T18964] loop0: p2 p3 p7 [ 475.221901][T18974] loop2: detected capacity change from 0 to 8192 [ 475.433649][T19010] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4407'. [ 475.490313][T19011] loop6: detected capacity change from 0 to 512 [ 475.533674][T19011] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 475.538138][T19013] loop2: detected capacity change from 0 to 512 [ 475.551597][T19011] FAT-fs (loop6): FAT read failed (blocknr 1568) [ 475.578459][T19013] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.4408: iget: bad i_size value: 38620345925642 [ 475.593900][T19013] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.594150][T19013] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4408: couldn't read orphan inode 15 (err -117) [ 475.604291][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 475.604311][ C0] EXT4-fs (loop2): initial error at time 1771316320: ext4_orphan_get:1391: inode 15 [ 475.604355][ C0] EXT4-fs (loop2): last error at time 1771316320: ext4_orphan_get:1391: inode 15 [ 475.642416][T19013] loop2: lost filesystem error report for type 5 error -117 [ 475.643134][T19013] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.644766][T19016] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4407'. [ 475.673523][T19016] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4407'. [ 475.738313][T19017] EXT4-fs (loop2): shut down requested (0) [ 475.885923][ T40] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.903512][ T40] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.920935][T19021] loop9: detected capacity change from 0 to 1024 [ 475.932228][ T40] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.942354][ T40] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.967695][T19021] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.043773][T11741] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.051488][T19031] lo speed is unknown, defaulting to 1000 [ 476.121544][T19036] lo speed is unknown, defaulting to 1000 [ 476.130492][T19039] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41932 sclass=netlink_xfrm_socket pid=19039 comm=syz.9.4416 [ 476.148586][T19042] netlink: 'syz.6.4417': attribute type 21 has an invalid length. [ 476.176356][T19039] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4416'. [ 476.209744][T19040] lo speed is unknown, defaulting to 1000 [ 476.231211][T19031] loop4: detected capacity change from 0 to 512 [ 476.259759][T19031] EXT4-fs: inline encryption not supported [ 476.273543][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4419'. [ 476.296342][T19031] EXT4-fs (loop4): 1 orphan inode deleted [ 476.312762][ T40] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 1 [ 476.340820][T19047] netlink: 15 bytes leftover after parsing attributes in process `syz.9.4419'. [ 476.354283][T19031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.383118][ T40] loop4: lost filesystem error report for type 5 error -117 [ 476.394464][T16488] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 476.428086][T19031] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.513017][T19055] syzkaller0: entered promiscuous mode [ 476.518943][T19055] syzkaller0: entered allmulticast mode [ 476.528647][T19057] FAULT_INJECTION: forcing a failure. [ 476.528647][T19057] name failslab, interval 1, probability 0, space 0, times 0 [ 476.545668][T19057] CPU: 0 UID: 0 PID: 19057 Comm: syz.9.4422 Tainted: G W syzkaller #0 PREEMPT(full) [ 476.545730][T19057] Tainted: [W]=WARN [ 476.545738][T19057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.545749][T19057] Call Trace: [ 476.545756][T19057] [ 476.545763][T19057] __dump_stack+0x1d/0x30 [ 476.545787][T19057] dump_stack_lvl+0x95/0xd0 [ 476.545807][T19057] dump_stack+0x15/0x1b [ 476.545831][T19057] should_fail_ex+0x263/0x280 [ 476.545854][T19057] should_failslab+0x8c/0xb0 [ 476.545881][T19057] kmem_cache_alloc_noprof+0x66/0x400 [ 476.545920][T19057] ? alloc_empty_file+0x76/0x200 [ 476.545940][T19057] alloc_empty_file+0x76/0x200 [ 476.545959][T19057] alloc_file_pseudo+0xf6/0x190 [ 476.545982][T19057] anon_inode_getfd+0xbf/0x190 [ 476.546057][T19057] btf_new_fd+0x68e/0x7d0 [ 476.546081][T19057] ? ns_capable+0x7c/0xb0 [ 476.546147][T19057] bpf_btf_load+0x112/0x130 [ 476.546178][T19057] __sys_bpf+0x3d8/0x7e0 [ 476.546210][T19057] __x64_sys_bpf+0x41/0x50 [ 476.546299][T19057] x64_sys_call+0x10cb/0x3020 [ 476.546321][T19057] do_syscall_64+0x12c/0x370 [ 476.546384][T19057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.546401][T19057] RIP: 0033:0x7f127748bf79 [ 476.546442][T19057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.546459][T19057] RSP: 002b:00007f1275ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 476.546478][T19057] RAX: ffffffffffffffda RBX: 00007f1277705fa0 RCX: 00007f127748bf79 [ 476.546491][T19057] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 476.546503][T19057] RBP: 00007f1275ee7090 R08: 0000000000000000 R09: 0000000000000000 [ 476.546531][T19057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.546543][T19057] R13: 00007f1277706038 R14: 00007f1277705fa0 R15: 00007ffcb85ade28 [ 476.546631][T19057] [ 476.817477][T13706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.830912][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4423'. [ 476.870087][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4425'. [ 476.929083][T19062] bond2: option mode: invalid value (255) [ 476.960145][T19062] bond2 (unregistering): Released all slaves [ 477.008838][T19070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4427'. [ 477.052848][T19072] loop9: detected capacity change from 0 to 128 [ 477.079790][T19072] vfat: Unknown parameter '' [ 477.165810][T19082] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.4430: inode has both inline data and extents flags [ 477.206172][T19082] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 477.212692][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 477.229145][ C0] EXT4-fs (loop0): initial error at time 1771316321: ext4_orphan_get:1391: inode 15 [ 477.239288][ C0] EXT4-fs (loop0): last error at time 1771316321: ext4_orphan_get:1391: inode 15 [ 477.295317][T19090] sctp: [Deprecated]: syz.2.4434 (pid 19090) Use of int in maxseg socket option. [ 477.295317][T19090] Use struct sctp_assoc_value instead [ 477.302966][T19082] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4430: couldn't read orphan inode 15 (err -117) [ 477.332999][T19082] loop0: lost filesystem error report for type 5 error -117 [ 477.333581][T19082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.363291][T19082] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.636500][T19108] hub 8-0:1.0: USB hub found [ 477.642719][T19108] hub 8-0:1.0: 8 ports detected [ 477.952908][T19107] FAT-fs (loop9): Directory bread(block 64) failed [ 477.960045][T19107] FAT-fs (loop9): Directory bread(block 65) failed [ 477.967285][T19107] FAT-fs (loop9): Directory bread(block 66) failed [ 477.975512][T19107] FAT-fs (loop9): Directory bread(block 67) failed [ 477.983554][T19107] FAT-fs (loop9): Directory bread(block 68) failed [ 477.990463][T19107] FAT-fs (loop9): Directory bread(block 69) failed [ 477.997900][T19107] FAT-fs (loop9): Directory bread(block 70) failed [ 478.004788][T19107] FAT-fs (loop9): Directory bread(block 71) failed [ 478.011440][T19107] FAT-fs (loop9): Directory bread(block 72) failed [ 478.018355][T19107] FAT-fs (loop9): Directory bread(block 73) failed [ 479.072725][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 479.072738][ T28] audit: type=1326 audit(1771316323.554:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.2.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 479.335098][ T28] audit: type=1326 audit(1771316323.554:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.2.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 479.640426][ T28] audit: type=1326 audit(1771316324.144:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.2.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 479.722464][ T28] audit: type=1326 audit(1771316324.184:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19115 comm="syz.2.4445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 479.805074][ T28] audit: type=1400 audit(1771316324.194:3095): avc: denied { create } for pid=19136 comm="syz.6.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 479.888308][ T28] audit: type=1326 audit(1771316324.384:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 479.937280][T19152] set_capacity_and_notify: 3 callbacks suppressed [ 479.937294][T19152] loop4: detected capacity change from 0 to 2048 [ 479.944245][ T28] audit: type=1326 audit(1771316324.384:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 479.977240][ T28] audit: type=1326 audit(1771316324.384:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 480.001778][ T28] audit: type=1326 audit(1771316324.384:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 480.026514][ T28] audit: type=1326 audit(1771316324.384:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.2.4453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a24fabf79 code=0x7ffc0000 [ 480.054727][T19152] Alternate GPT is invalid, using primary GPT. [ 480.061275][T19152] loop4: p2 p3 p7 [ 480.141621][T19161] lo speed is unknown, defaulting to 1000 [ 480.184273][T19165] net_ratelimit: 2 callbacks suppressed [ 480.184288][T19165] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 480.184784][T19165] __nla_validate_parse: 8 callbacks suppressed [ 480.184793][T19165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'. [ 480.228773][T19163] loop4: detected capacity change from 0 to 2048 [ 480.252070][T19163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.266675][T19163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60194 sclass=netlink_route_socket pid=19163 comm=syz.4.4458 [ 480.280213][T19163] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=19163 comm=syz.4.4458 [ 480.332423][ T3000] ================================================================== [ 480.340962][ T3000] BUG: KCSAN: data-race in __d_drop / fast_dput [ 480.348447][ T3000] [ 480.348457][ T3000] write to 0xffff888107f46910 of 8 bytes by task 3745 on cpu 0: [ 480.348473][ T3000] __d_drop+0x14d/0x240 [ 480.348491][ T3000] __dentry_kill+0x122/0x460 [ 480.348512][ T3000] finish_dput+0x2b/0x200 [ 480.372912][ T3000] dput+0x52/0x60 [ 480.376678][ T3000] lookup_one_qstr_excl+0x15a/0x250 [ 480.376700][ T3000] filename_unlinkat+0x149/0x410 [ 480.387110][ T3000] __se_sys_unlink+0x2b/0xe0 [ 480.387142][ T3000] __x64_sys_unlink+0x1f/0x30 [ 480.387163][ T3000] x64_sys_call+0x2eb6/0x3020 [ 480.387183][ T3000] do_syscall_64+0x12c/0x370 [ 480.387206][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.412095][ T3000] [ 480.412106][ T3000] read to 0xffff888107f46910 of 8 bytes by task 3000 on cpu 1: [ 480.412121][ T3000] fast_dput+0x5f/0x2c0 [ 480.412142][ T3000] dput+0x24/0x60 [ 480.412155][ T3000] filename_unlinkat+0x217/0x410 [ 480.412177][ T3000] __se_sys_unlink+0x2b/0xe0 [ 480.439773][ T3000] __x64_sys_unlink+0x1f/0x30 [ 480.439807][ T3000] x64_sys_call+0x2eb6/0x3020 [ 480.439831][ T3000] do_syscall_64+0x12c/0x370 [ 480.439856][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.439875][ T3000] [ 480.439880][ T3000] value changed: 0xffff8882378b0ed0 -> 0x0000000000000000 [ 480.439890][ T3000] [ 480.439894][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 480.439905][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 480.439929][ T3000] Tainted: [W]=WARN [ 480.439934][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.439945][ T3000] ================================================================== [ 480.490308][T13706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.781785][T19175] loop2: detected capacity change from 0 to 8192