last executing test programs: 16m35.578661833s ago: executing program 32 (id=1018): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pread64(r0, &(0x7f0000000080)=""/195, 0xc3, 0x5) 16m32.394036843s ago: executing program 33 (id=1037): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4e6}, 0x114244, 0x0, 0x4, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6}, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="05000000980000004300000001"], 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 15m3.667565924s ago: executing program 34 (id=2081): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4040001) (async, rerun: 64) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x400) (rerun: 64) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x8, 0x8000, 0x1, 0xfffffffa, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x3, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0xe0, [@multicast1, @multicast1, @remote, @multicast1, @multicast1, @private=0xa010100, @broadcast]}]}}}}}) (async, rerun: 32) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000480)=""/169, 0xa9, 0x0, &(0x7f0000000540)=""/85, 0x55}}, 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f00000006c0)='.pending_reads\x00', 0x440, 0x100) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x10}, 0x18) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x1, 0x3, 0xc8bc, 0x8000, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x0, 0xb, 0x2, 0x7, 0x200}, @ldst={0x1, 0x2, 0x1, 0x6, 0xb, 0xfffffffffffffff8, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffff8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xad}}]}, &(0x7f00000002c0)='syzkaller\x00', 0xc9, 0x0, 0x0, 0x41100, 0x48, '\x00', r3, @fallback=0x10, r4, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x7, 0xbf5b}, 0x10, r5, r6, 0x7, &(0x7f0000000880)=[r7, r8, r9, 0xffffffffffffffff, r10], &(0x7f00000008c0)=[{0x4, 0x4, 0x7, 0x3}, {0x3, 0x3, 0x0, 0xa}, {0x1, 0x4, 0xe, 0x8}, {0x2, 0x4, 0x7, 0x4}, {0x2, 0x5, 0x3, 0x4}, {0x1, 0x1, 0x0, 0x9}, {0x5, 0x2, 0x6, 0x4}], 0x10, 0x6}, 0x94) (async, rerun: 64) semget(0x1, 0x1, 0x34a) (async, rerun: 64) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000a00), 0x280000, 0x0) (async, rerun: 32) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r6) (rerun: 32) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r13, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) (async) recvfrom(r7, &(0x7f0000000b80)=""/166, 0xa6, 0x10000, &(0x7f0000000c40)=@ethernet={0x306}, 0x80) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000cc0)={0x0}) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000000ec0)={{r14, 0x0, 0xb9, 0x743, 0x0, 0x1, 0x0, 0x3ff, 0x1ff, 0x70000000, 0x5, 0xffffffff80000001, 0x9, 0x3, 0x2}, 0x8, [0x0]}) (async) capset(&(0x7f0000000f40)={0x20071026}, &(0x7f0000000f80)={0x0, 0x1, 0xe0, 0x40, 0xb91f, 0xffff}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000fc0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r6, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)=r11}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x1e, &(0x7f0000001000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @ldst={0x2, 0x2, 0x6, 0x9, 0x2, 0xffffffffffffffe0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x28}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x33}, @ldst={0x1, 0x0, 0x4, 0xb, 0x6, 0xfffffffffffffff4, 0x10}], &(0x7f0000001100)='GPL\x00', 0x5, 0x2a, &(0x7f0000001140)=""/42, 0x40f00, 0x1, '\x00', r3, 0x0, r6, 0x8, &(0x7f0000001180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000011c0)={0x2, 0x8, 0x9, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[r2, r10, r16, 0x1], 0x0, 0x10, 0x9}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000001440)={'syztnl0\x00', &(0x7f00000013c0)={'syztnl2\x00', r3, 0x2f, 0x4, 0x8, 0x6, 0xbe7ab20711bf915e, @empty, @loopback, 0x40, 0x8, 0x4, 0xc}}) (async) socket$nl_route(0x10, 0x3, 0x0) r18 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001480)={0x1b, 0x0, 0x0, 0x0, 0x0, r8, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0xd}, 0x50) (async, rerun: 32) r19 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000001700)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @exit], &(0x7f0000001780)='GPL\x00', 0x80000001, 0x1000, &(0x7f00000017c0)=""/4096, 0x40f00, 0x60, '\x00', 0x0, 0x17, r7, 0x8, &(0x7f00000027c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002800)={0x5, 0x0, 0x8, 0x2}, 0x10, 0xdb3e, r15, 0x1, &(0x7f0000002840)=[r10, r7, r8, r8, r16, 0xffffffffffffffff, r6, r9], &(0x7f0000002880)=[{0x5, 0x1, 0x7, 0x8}], 0x10, 0x563}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x19, 0x17, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffc1, 0x0, 0x0, 0x0, 0x8001}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000015c0)='syzkaller\x00', 0x8, 0x98, &(0x7f0000001600)=""/152, 0x40f00, 0x4, '\x00', r17, @fallback=0xb, r6, 0x8, &(0x7f00000016c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r19, 0x0, &(0x7f0000002980)=[r6], 0x0, 0x10, 0x800}, 0x94) 14m42.217768418s ago: executing program 3 (id=2265): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000400)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, @in6={0xa, 0x4e24, 0x4, @private1, 0x1}, @in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}]}, &(0x7f0000000040)=0x10) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e23, @rand_addr=0xdffffc13}}) 14m42.126883861s ago: executing program 3 (id=2266): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x0, 0x96}, 0x28) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, 0x0, &(0x7f0000000080)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4, r3}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006000806"], 0x24}}, 0x8090) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200008c4) r8 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) poll(&(0x7f00000002c0)=[{r9, 0x3660}, {r2, 0x8020}], 0x2, 0x1) r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9, 0xc, 0x0, 0xfffffffe}, {0xb, 0x57, 0x5, 0x3}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14m41.385924454s ago: executing program 3 (id=2276): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20402) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 14m41.130103312s ago: executing program 3 (id=2281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c080000dd58e466658ed8a506a8806a8607cca9d152230cae3eed6f9e9b9fc8a9511eb10270ebcb3bc41e15c1d0", @ANYRES16=r1, @ANYBLOB="000325bd7000fcdbdf251d00000008001d000200000008001d000600000008001d0001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44004) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$eJzs201rE10YxvGrbZ6+Pm3yPNVqK+KNbnQztPEThNKCGFBqI76AMLUTDZkmJRMqEbHdufVzFJfuBPELdOMncOGuG3d2IY50EtukHfEFzKD5/zZzh5Mrcw73GTiLzO6t52vlYuAU3br6+0wpaVB7Ukb9GlBTX+vaH9WDarelS5P5d2dv3L5zNZfPLyyZLeaWL2fNbOLc60dPXpx/Ux+7+XLi1ZB2Mvd2P2Tf70ztTO9+Xn5YCqwUWKVaN9dWqtW6u+J7tloKyo7Zdd9zA89KlcCrdYwX/er6esPcyur46HrNCwJzKw0rew2rV61ea5j7wC1VzHEcGx8VvqewvbTk5pKeBX6vWi3nzkuaOTZS2E5kQgAAIFEx5/8tzv+9gvN/L9g//99tPb+dOP8DAAAAAAAAAAAAAAAAAAAAAPAn2AvDdBiG6a/Xf6ToDZ+w9XlE0qikMUn/ShqXNCEpLSkj6T9J/0ualHRC0klJU5JOSTotabrtt2Juv5XAktFmLwyVko71f6A7/UfCEn7+kTD639vaXtwdltaebRQ2Cs1rczxXVEm+PM0qrU9RL1ua9eKV/MKsRTI6s7bZym9uFAY683NK72+YuPxcM2+d+aFo3x3ks0rvb7C4fDY2P6yLF9ryjtJ6e19V+VqN9uRh/umc2fy1/JH8TPS9v51jB2L75zjfGm/mf2B/hLOx/UlpJpXs2iEFjcdl1/e9WheLkSRuSvGLhbpwr49hGCa/UoqOvqMHHDY96ZkAAAAAAAAAAAAAAAAAAH5GN/5OmPQaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA46ksAAAD//6GAXmU=") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, 0x0) r5 = syz_clone(0x8a8000, &(0x7f00000003c0)="a617c917a6a16bde047b4f0ac38761ed22bd0fe5f61c2846fa5e330a0b3d56efa4dfcc430d73bbe0a3931e00b87cb9509cfb5464909ca376bb5310e9d7254704668dae97c5e73eb619dd6f62146f818eab", 0x51, &(0x7f0000000440), &(0x7f0000000680), &(0x7f00000004c0)="e4b907ec9ff15130c05914703739c16667815b76bce515c84ed0c8529d9c00b45a3a9a81beff5cabe18c1b269ff4e5862062601e33ce297b56f5e3dd1395ff626c4eeeecc5e8d8646aa870934cf655086753afb56208b45f9a0d4b5915733550b7a38929d75888b8856ec5441aa9294760adfe0a64484e2758d74b0c0085f181066ce2b714bacf8679c11ad2953073982bab564dbc2ab0e7fc877f034a2ef2765107334542434dbc976d504af47624b4e9a8f3f0b63f3f65956180d4706c44f6fdfeb053eb0ab5c6b14f900f159b33b275") fcntl$lock(r3, 0x24, &(0x7f00000005c0)={0x0, 0x3, 0x6, 0x6, r5}) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdc00, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd26, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x401, 0x7, 0x1, 0xd}, 0x9, 0x0, 0xea, 0x0, 0xfffffff9, 0x1d, 0xa, 0x13, 0x2, 0x9, {0x4, 0x80000001, 0xb03, 0x8, 0x4, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x3000001c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)}, 0x10) getrlimit(0x5, &(0x7f00000000c0)) shutdown(r6, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r2, 0x411, 0x72bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 14m41.043619965s ago: executing program 3 (id=2283): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000800)='.\x02\x00', 0x2204806, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents64(r0, &(0x7f0000003cc0)=""/4128, 0x1020) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000206010300000000000000000000000905000500020000000900020073797a31000000000973cb65a61c08dae196f413a23110c0930e45186026106c55f91c364b8f29af326ac052fc6f570a213eed2bedc5b9b76b6a0ad22fd17fb4eee813c858757d3d8c12daeec7f3ab378f194f7c9d4eaaae0a43ff238b956baed1cc993386d6433c6af8d8ab78bf44c843441a9cba53dcccd8302cf33b119a80d724f716ab7c255fad286bb49bdc0892b8ee1f5b22a3e0"], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x4040030) 14m37.334732312s ago: executing program 3 (id=2334): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffd, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x12, 0x6, 0x1, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x0) (fail_nth: 4) 14m37.322712322s ago: executing program 35 (id=2334): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffd, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x12, 0x6, 0x1, 0x2, 0x0, 0x70bd2a, 0x25dfdbfb}, 0x10}}, 0x0) (fail_nth: 4) 11m48.172042582s ago: executing program 8 (id=3583): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@fwd={0x10}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x2}, @volatile={0x2, 0x0, 0x0, 0x9, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}, @const={0xe}]}, {0x0, [0x61]}}, &(0x7f0000000180)=""/51, 0x77, 0x33, 0x0, 0x5}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xfffffffffffffff2}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002100)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r6, 0x0, r8, 0x0, 0x38f9, 0x0) ptrace$cont(0x1f, 0x0, 0x245, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 11m44.923081754s ago: executing program 8 (id=3604): r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x20, r7, 0x1488f346e7c00843, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x14, r7, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048044}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r7, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008800}, 0x8841) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x11d}]}, 0x1c}}, 0x4004) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r5, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x267e, 0x72}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5c, 0xbe, "b03932b2478376b9b7ad1e5216888925bf90df194f3454f747fcd95409e289190c72f190abc83167484c6e6d8045a7b262d1d8ef881b75d5cf5aae4850a84596e54b834a1704fcbdc5f728da25e0fef740a789a90998f14e"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0xfffffffffffffe78, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040805) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@lazytime}]}, 0x82, 0x63d, &(0x7f0000000600)="$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") socket$netlink(0x10, 0x3, 0x0) 11m44.317272473s ago: executing program 8 (id=3606): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x4004010) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async) io_setup(0x3, &(0x7f0000000600)) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) (async) io_setup(0x7, &(0x7f00000000c0)) (async) io_setup(0x2, &(0x7f00000002c0)=0x0) io_destroy(r0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f00000006c0)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x18, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x228, 0x228, 0x228, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x84, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSSdJu17yYMH7/WtAg80UDoxNbYKLuJKBAsFXduGyTTUTDIlMylNyKJFBDeCigtBN137oy4Et/5YuNH/woW0VE2LFRcSufOjmSYz6SRNZir5fODOnHPPvXPOd879cWbmcieAA2s0fchEHIuId5KI4fr8JCIGqqn+iKnacvfWVvPplMT6+iu/JNVl7q6t5qNpndSReua/EfHNmxHHM1vrLS+vzE0Xi4XFen68Mn9pvLy8cuLi/PRsYbawcGpicvLk6WdOn9q7WH/7YeXorXdffPKzqT/e+M+Nt79N0sCu1sqa49grozFaf08G0po2DO91Tb2X9LoB7Eq6a/bV9vI4FsPRV021MdjNlgEA+2UdADiAEmMAADhgGt8D3F1bzTem3n4j0V23X4iIw7X4G79v1kr6YyqyaWFfmhu6mzzwy0gSESN7UP9oRHz05WufpFPU+8FvaUA3XL0WEedHRrce/5MHr1nYhae2K1zPVp9GN80+aOcf6KWv0vHPs63Gf5n6/n+4+rh5/JNtse/uxsP3/8zNzet89+oeVFyXjv+eb7q27V5T/HUjffXcP6pjvoHkwsViIT22/TMixmIgm+Ynqou2HrmN3fnzTrv6m8d/v773+sdp/enzxhKZm/3ZB9eZma5MP2rcDbevRfyvv1X8yf3+T9qMf892WMdLz731YbuyNP403sa0Nf7Wvuiw7odZvx7xRMv+3+jLZNvrE8erm8N4Y6No4fMfPxhqV39z/6dTWn/js0A3pP0/tH38I0nz9Zrlndfx/fXhr9uVPTz+1tv/oaR2EDhUn3dlulJZnIg4lLy8df7JjXUb+cbyafxj/2+9/9eqbb39D6TDpg7j77/186e7j39/pfHP7Kj/d564cW+ur139beJv6vG0/yerqbH6nE6Of5028FHeOwAAAAAAAAAAAAAAAAAAAAAAAADoVCYijkaSyd1PZzK5XO0/vP8dQ5liqVw5fqG0tDCTllXvf5pp3OpyuOl+qBP1++E38ic35Z+OiH9FxPvZwWo+ly8VZ3odPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWnz//+pn7K9bh0AsG8O97oBAEDXOf8DwMGzs/P/YFN6as/bAgB0h8//AHDwdHz+P7+/7QAAusfnfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbZ2TNn0mn997XVfJqfuby8NFe6fGKmUJ7LzS/lc/nS4qXcbKk0Wyzk8qX5ti90tfZULJUuTcbC0pXxSqFcGS8vr5ybLy0tVM5dnJ+eLZwrDHQtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoXHl5ZW66WCwsSmybGNzTF8z+7d/5/ngsmiGxb4nmo8Rg7w5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+5vwIAAP//BeYuJQ==") (async) socketpair(0x1e, 0x3, 0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x1}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xffff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x1) 11m44.222659746s ago: executing program 8 (id=3611): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) pread64(r1, 0x0, 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) r3 = syz_clone(0x1c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r3) 11m44.034728502s ago: executing program 8 (id=3614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x10, 0x0, 0x0, 0xce024d, 0xff7fffff}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x0, 0xffff7ffe, 0x693fffe, 0x80, 0x2}, &(0x7f0000000380)=0x9c) setsockopt(0xffffffffffffffff, 0x83ef, 0x1, &(0x7f0000000240)="e3a88c51df832bc7e909c2aeb734c6089469c6c2ff047ed169babbf1e1c383476404d9fc84dc7b1735da644683cf97f605e85f2680319463878ba5858cdb44cccf371cab1cca8ebecf82a05dd4fe2d0236be16befb94d27c865da83dde7cde154ad8b3ad9f582efcd4beb3ea58652ccb2a8f6c2dd4b7e29bbbe168af5a72fbf5472b18eab82b5c2e95cb2dcfbfc74d790b9b41f00e658f296b0bca964bcd07d0b1473344de11314f5b2bf20bebc6e064ed4f927198d7507aa0fe41f4ad01e27ab9b40b3534534900e3c779a3c130e4617a9268112941752470df27f0fb2a0d4220ed58c52322f5d790d2ae7b0df48d5516", 0xf1) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)={0x6, 'pim6reg\x00', {0x3}, 0x4}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x24, 0x2, 0x6) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r0, 0x0, 0x8003) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000682000/0x3000)=nil, 0x3000, 0x10) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x5f6a, 0x80000003, 0x1b, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 11m43.212523188s ago: executing program 8 (id=3617): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), 0x4) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x40, 0x6, 0xd}, 0x8, 0x5, 0x107f, 0x0, 0x1, 0x101, 0x0}) 11m43.212208498s ago: executing program 36 (id=3617): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), 0x4) socket$inet6(0xa, 0x3, 0x38) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x40, 0x6, 0xd}, 0x8, 0x5, 0x107f, 0x0, 0x1, 0x101, 0x0}) 11m36.552309757s ago: executing program 5 (id=3700): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600e9ff850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 11m36.367066483s ago: executing program 5 (id=3703): r0 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, &(0x7f0000000300)="da0a9ce43d", 0x5, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r1}) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0x200000}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newae={0x40, 0x1e, 0x301, 0x709d2a, 0x24dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d6, 0xa, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3, 0x3500}}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x17e) lseek(r7, 0xfffffffffffffffe, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x92) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x9}}, 0x42d9) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000680)=""/232) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}]}, 0x24}}, 0x24004094) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) 11m35.369860755s ago: executing program 5 (id=3707): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x0, @private1, 0x40}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000cc0)="18", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x104) open$dir(0x0, 0xc402, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xdb1f}, 0x8000, 0x9, 0x6, 0x3, 0xfff, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x600000000400000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet(0x2, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x107, @mcast2, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000001400)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, 0x0}}], 0x1, 0x20084081) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x751d, 0x3b, 0x0, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r6, &(0x7f00000004c0)=[{&(0x7f00000002c0)='-1', 0x2}, {&(0x7f0000000480)}], 0x2, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) 11m32.968030201s ago: executing program 5 (id=3714): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) pread64(r1, 0x0, 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r2 = syz_clone(0x1c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r2) 11m32.383033239s ago: executing program 5 (id=3718): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000240)=ANY=[@ANYBLOB="f6ffff71b864"]) (fail_nth: 1) 11m31.951522293s ago: executing program 5 (id=3724): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x0, @private1, 0x40}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000cc0)="18", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x104) open$dir(0x0, 0xc402, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xdb1f}, 0x8000, 0x9, 0x6, 0x3, 0xfff, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x600000000400000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet(0x2, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x107, @mcast2, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000001400)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, 0x0}}], 0x1, 0x20084081) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x751d, 0x3b, 0x0, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r6, &(0x7f00000004c0)=[{&(0x7f00000002c0)='-1', 0x2}, {&(0x7f0000000480)}], 0x2, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) 11m31.944901993s ago: executing program 37 (id=3724): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0xa, 0x4e25, 0x0, @private1, 0x40}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000cc0)="18", 0x1}], 0x1}}, {{&(0x7f0000000280)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x61}, 0x1c, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$dir(0xffffffffffffff9c, 0x0, 0x1c3040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x104) open$dir(0x0, 0xc402, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xdb1f}, 0x8000, 0x9, 0x6, 0x3, 0xfff, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x600000000400000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$inet(0x2, 0x1, 0x0) socket(0x8000000010, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x107, @mcast2, 0x106}, 0x1c) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000001400)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, 0x0}}], 0x1, 0x20084081) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x751d, 0x3b, 0x0, 0x0) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r6, &(0x7f00000004c0)=[{&(0x7f00000002c0)='-1', 0x2}, {&(0x7f0000000480)}], 0x2, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) 11m16.992263243s ago: executing program 9 (id=3793): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0xb2) sched_setscheduler(0x0, 0x2, 0x0) getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 11m15.930821646s ago: executing program 9 (id=3794): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xffffff7f}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x3, 0x3, 0x4, 0x3, 0xfffffffc}}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/28) mmap$IORING_OFF_SQ_RING(&(0x7f00006bf000/0x1000)=nil, 0x1000, 0x3000002, 0x40033, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xb6feefeea90bff12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, '-\xb4', 0x3a, 'A\xb7\xd7\r\xe1\xa4ER\x91N\xa9\x17\xf3\xbc\x01\xa1\xb1\xe3rzd\xcd\xde\x96\xe1|\xe8\xdep\xd5\xb8\n\xcb\x18\x8e\x10D\x9ep\x99\xc2k\\\xe6\xf3\x92\fM*\xc5@\x18\\o\xb4\xc1\xb4\x99\x17#\x88\xffZn\x8e\xec\xc40\x85.\r\x16\xa8r\x8ag\xe0\xf0\x875\xde\x19G\x94T\x0f6R#*\xe7b\x13\x7f\xb1\x8b\x0e\x84\b\xb3-\x9f\x92x\"\xd1i\xcb\x92R\x17\x98\x01\xbb\x9b\xb3\x91\xfd\xe0~\xf1\xd9\xed8\xc0\xc1\xabPr\xc7T\x8d\v\xda2\xd4C\x0f\xee\x8e\x19/\xb1\x01@\xf9a3\x94\xe8\xf3\n\x18\xb4\x1d\xa3\xee\b\v!\xa8\xe6\xd9\xf2\xe3\xb1\xb5*\xb8\x95\x0f\xeaP\x96\xdfs\xa7\xed9\x00'/193, 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x50, 0x46, 0x50]}, 0x1de) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r1], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6d}, 0x94) 11m12.770194125s ago: executing program 9 (id=3802): socket$nl_route(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x3, r0, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt(0xffffffffffffffff, 0x28, 0x7fff, 0x0, 0x0) setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(0x0, 0x111) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) close(r3) 11m12.576673052s ago: executing program 9 (id=3804): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) pread64(r1, 0x0, 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) socket$kcm(0x2, 0x3, 0x2) r3 = syz_clone(0x1c8000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r3) 11m10.658306722s ago: executing program 9 (id=3807): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x6f, 0x0, 0x0) recvmsg(r0, 0x0, 0x104) 11m9.637683584s ago: executing program 9 (id=3812): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xffffff7f}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x3, 0x3, 0x4, 0x3, 0xfffffffc}}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/28) mmap$IORING_OFF_SQ_RING(&(0x7f00006bf000/0x1000)=nil, 0x1000, 0x3000002, 0x40033, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xb6feefeea90bff12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, '-\xb4', 0x3a, 'A\xb7\xd7\r\xe1\xa4ER\x91N\xa9\x17\xf3\xbc\x01\xa1\xb1\xe3rzd\xcd\xde\x96\xe1|\xe8\xdep\xd5\xb8\n\xcb\x18\x8e\x10D\x9ep\x99\xc2k\\\xe6\xf3\x92\fM*\xc5@\x18\\o\xb4\xc1\xb4\x99\x17#\x88\xffZn\x8e\xec\xc40\x85.\r\x16\xa8r\x8ag\xe0\xf0\x875\xde\x19G\x94T\x0f6R#*\xe7b\x13\x7f\xb1\x8b\x0e\x84\b\xb3-\x9f\x92x\"\xd1i\xcb\x92R\x17\x98\x01\xbb\x9b\xb3\x91\xfd\xe0~\xf1\xd9\xed8\xc0\xc1\xabPr\xc7T\x8d\v\xda2\xd4C\x0f\xee\x8e\x19/\xb1\x01@\xf9a3\x94\xe8\xf3\n\x18\xb4\x1d\xa3\xee\b\v!\xa8\xe6\xd9\xf2\xe3\xb1\xb5*\xb8\x95\x0f\xeaP\x96\xdfs\xa7\xed9\x00'/193, 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x50, 0x46, 0x50]}, 0x1de) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r1], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6d}, 0x94) 11m9.578147326s ago: executing program 38 (id=3812): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xffffff7f}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x3, 0x3, 0x4, 0x3, 0xfffffffc}}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/28) mmap$IORING_OFF_SQ_RING(&(0x7f00006bf000/0x1000)=nil, 0x1000, 0x3000002, 0x40033, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xb6feefeea90bff12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, '-\xb4', 0x3a, 'A\xb7\xd7\r\xe1\xa4ER\x91N\xa9\x17\xf3\xbc\x01\xa1\xb1\xe3rzd\xcd\xde\x96\xe1|\xe8\xdep\xd5\xb8\n\xcb\x18\x8e\x10D\x9ep\x99\xc2k\\\xe6\xf3\x92\fM*\xc5@\x18\\o\xb4\xc1\xb4\x99\x17#\x88\xffZn\x8e\xec\xc40\x85.\r\x16\xa8r\x8ag\xe0\xf0\x875\xde\x19G\x94T\x0f6R#*\xe7b\x13\x7f\xb1\x8b\x0e\x84\b\xb3-\x9f\x92x\"\xd1i\xcb\x92R\x17\x98\x01\xbb\x9b\xb3\x91\xfd\xe0~\xf1\xd9\xed8\xc0\xc1\xabPr\xc7T\x8d\v\xda2\xd4C\x0f\xee\x8e\x19/\xb1\x01@\xf9a3\x94\xe8\xf3\n\x18\xb4\x1d\xa3\xee\b\v!\xa8\xe6\xd9\xf2\xe3\xb1\xb5*\xb8\x95\x0f\xeaP\x96\xdfs\xa7\xed9\x00'/193, 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x50, 0x46, 0x50]}, 0x1de) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r1], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6d}, 0x94) 2m35.815272637s ago: executing program 4 (id=6529): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x810, 0x400000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x52f3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = mq_open(&(0x7f0000000140)=',%\x00', 0x40, 0x12d, 0x0) mq_notify(r4, &(0x7f00000003c0)={0x0, 0x1d, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)="dec6ecf45e4697068c199ca6c90812039a44673f7c0574d14bcd9829ce61c3c0a62a7eda2599a11797699753da6d13bf9ab189199b277cf96a10ff2e56beeb285f3b301fa598da479db917a5c883fab58349d4b00ed67402b057837b77aecb332ca6ea6b609911e0"}}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x8, @loopback, 0x4}, 0x1c) syz_io_uring_setup(0x500, &(0x7f0000000080)={0x0, 0x8000, 0x16, 0x0, 0xfffffffc, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @local, 0x80000001, 0x6, 0x0, 0x100, 0x29, 0x110022}) syz_open_dev$tty1(0xc, 0x4, 0x1) 2m33.063456735s ago: executing program 4 (id=6532): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @empty}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8a366ae6c6db7fe1}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf256700000008000100360000ecf4f0b7ae020000001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) io_setup(0x7, &(0x7f00000002c0)=0x0) io_pgetevents(r5, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r2, 0xb) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 2m30.140315959s ago: executing program 4 (id=6540): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0xffffff7f}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x4, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x15}}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r1, 0x40284504, &(0x7f0000000000)=""/56) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000140)) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000001c0)={{0x3, 0x3, 0x4, 0x3, 0xfffffffc}}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/28) mmap$IORING_OFF_SQ_RING(&(0x7f00006bf000/0x1000)=nil, 0x1000, 0x3000002, 0x40033, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xb6feefeea90bff12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1, 0x0, 0x33}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, '-\xb4', 0x3a, 'A\xb7\xd7\r\xe1\xa4ER\x91N\xa9\x17\xf3\xbc\x01\xa1\xb1\xe3rzd\xcd\xde\x96\xe1|\xe8\xdep\xd5\xb8\n\xcb\x18\x8e\x10D\x9ep\x99\xc2k\\\xe6\xf3\x92\fM*\xc5@\x18\\o\xb4\xc1\xb4\x99\x17#\x88\xffZn\x8e\xec\xc40\x85.\r\x16\xa8r\x8ag\xe0\xf0\x875\xde\x19G\x94T\x0f6R#*\xe7b\x13\x7f\xb1\x8b\x0e\x84\b\xb3-\x9f\x92x\"\xd1i\xcb\x92R\x17\x98\x01\xbb\x9b\xb3\x91\xfd\xe0~\xf1\xd9\xed8\xc0\xc1\xabPr\xc7T\x8d\v\xda2\xd4C\x0f\xee\x8e\x19/\xb1\x01@\xf9a3\x94\xe8\xf3\n\x18\xb4\x1d\xa3\xee\b\v!\xa8\xe6\xd9\xf2\xe3\xb1\xb5*\xb8\x95\x0f\xeaP\x96\xdfs\xa7\xed9\x00'/193, 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x50, 0x46, 0x50]}, 0x1de) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r1], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6d}, 0x94) 2m29.179225629s ago: executing program 4 (id=6544): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) (async) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) r0 = syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fspick(r0, &(0x7f0000000000)='./file1\x00', 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000038c0)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000036c0)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x2}, &(0x7f0000002ec0)=0xd3a6, 0x0, 0x1, 0x1, 0x8, 0x8000, 0x95, 0x80}}, @fadd={0x58, 0x114, 0x6, {{0x719, 0x5}, 0x0, 0x0, 0xd, 0x8000000000000001, 0x9, 0x8, 0x0, 0x6}}], 0xb0, 0x4}, 0x40) (async) sendmsg$rds(r2, &(0x7f00000038c0)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f00000036c0)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x2}, &(0x7f0000002ec0)=0xd3a6, 0x0, 0x1, 0x1, 0x8, 0x8000, 0x95, 0x80}}, @fadd={0x58, 0x114, 0x6, {{0x719, 0x5}, 0x0, 0x0, 0xd, 0x8000000000000001, 0x9, 0x8, 0x0, 0x6}}], 0xb0, 0x4}, 0x40) fchown(r1, 0xee00, 0xee01) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m28.858841839s ago: executing program 4 (id=6548): r0 = socket$nl_route(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r4}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000001000010400000000000000000b0000", @ANYRES32=0x0, @ANYBLOB="03800000000000002c00128009000100626f6e64000000001c000280050001000600000008000500060000000800040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 2m28.446843803s ago: executing program 4 (id=6551): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7c07312f7eb8286ea199ecd22221ad7dade9e2b670d", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB]) 2m28.446519773s ago: executing program 39 (id=6551): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7c07312f7eb8286ea199ecd22221ad7dade9e2b670d", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB]) 6.301627188s ago: executing program 7 (id=7239): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xfffffffd}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x100}) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.242037009s ago: executing program 7 (id=7241): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @empty}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8a366ae6c6db7fe1}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq7I1leddredelNjk4Z65IROIER44cOOfEnQuCG5dwQOKPFRQjcRg0s7Nhbe8mq8T2ut7fTxrNm3mT+b4XZ97zvs3uC2BkXY2IvYiYiIiPI2KuOJ8UW3zQ3rLrHu/fXT7Yv7ucRJp+9M8kr8/ORdefyVwu7jkVET/4TsSPk+Nxmzu760u1WnWrOJ5v1Tfnmzu7N9bqS6vV1epGpXJr8dbCezffrZxYW9+oTxSlLz/8w943fpqlNVuc6W7HSWo3ffxJnMyliPjeaQQbgrGiPRPDToTnUoqIVyPizfz5n4ux/KcJAFxkaToX6Vz3MQBw0ZXyObCkVC7mAmajVCqX23N4r8VMqdZotq7faWxvrLTnyq7EeOnOWq26UMwVXoqI7Hgxr8vrk+y4cuT4ZkS8EhE/n5zOj8vLjdrKMH/xAYARdvnI+P/vyfb4DwBccFPDTgAAOHPGfwAYPcZ/ABg9xn8AGD3t8X962GkAAGfI638AGD3GfwAYKd//8MNsSw+K779e+WRne73xyY2VanO9XN9eLi83tjbLq43Gav6dPfVn3a/WaGwuvhPbn1755mazNd/c2b1db2xvtG7n3+t9uzqeX7V3Bi0DAPp55Y0Hf06yEfn96XyLrrUcxoeaGXDaSsNOABiasWEnAAyN1b5gdL3Aa3zTA3BB9Fii95CpXh8QStM0Pb2UgFN27QuDzP8nA/QQwGdN1/y//wUMI8b8P4wu8/8wutI0GXTN/xj0QgDgfPP7P9Dn3b1Xi/1vijcHfrRy9Ir7p5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG+d9X/LxVrgs1EqlcsRL0XElRhP7qzVqgsR8XJE/GlyfDI7XhxyzgDAiyr9LSnW/7o29/bsoarXLz8pTkTET3750S8+XWq1tv4YMZH8a7JzvnW/OF/pHeC0WwAAPF1nnM73XS/kH+/fXe5sZ5nP378dEVPt+Af7E3FQxN951FmbeCrGI2LmURLdaxUnXXMXL2LvXkR8vlf7k5jN50DaK58ejZ/FfulM45cOxS/lde199nfxuRPIBUbNg6z/+aDX81eKq/m+9/OfnT2JtdOL/i+71fJB3gf+P36n/xvr0/9dHTTGO7//brs0fbzuXsQXL0V0Yh909T+d+Emf+G8PGP8vX3r9zX516a8irkXv+N2x5lv1zfnmzu6NtfrSanW1ulGpjMWthfduvluZz+eo5/uPBv94//rL/eqy9s/0iT/1jPZ/dcD2//q/H//wK0+J//W3esUvxWtPiZ+NiV8bMP7SzO+m+tVl8Vf6tP9ZP//r/W6aHF5Q/OFfd48tGw4ADE9zZ3d9qVarbiko5IXfxrlIo3ch+yd7DtLoWfjWqdw5nTtWNRG9L/7ZW+1n+khVmj5X9H49xknMugHnwZOHPiL+M+xkAAAAAAAAAAAAAACAns7i01HDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1/8CAAD//3ZK0g4=") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r3, 0xb) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 5.117726185s ago: executing program 6 (id=7251): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600e9ff850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020603000000000180000000000000000d000300686173683a6e65740000000005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1e}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x54}}, 0x8000) 5.054574208s ago: executing program 6 (id=7252): r0 = socket$igmp(0x2, 0x3, 0x2) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="6465636f646573206d656d002f6f02a123a19a3efc77dde4c2ebbb90f58426f50ef5217e0904d31a8fb0a54c938d2a822eb87a95b8fd4f0ab6c72fecf67dbe95c49616e9bd35f3d5465a00c2ac74b291c0123329bb8e858f00ace2dd4c1d9a598aa78cda80b3f2b52fcd061401a28a8c076dcb9889a05e07ac6c71b0f806d9fbe2a8c166f627493d1b3f58f951487927b04378ebd085e027747f916ffc3b7de4117e6a16a7"], 0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f00000003c0)=0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0001000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000db8a94a0000000000000000000000000ffffffff00000000002000000000000000000000000000000000000000000000000000000000000000000000fec44512cdef05c2a5c64fcdbf924ff9add9f68494"], 0x27c}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x202002, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 5.031557098s ago: executing program 7 (id=7255): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) close(r7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_getres(0x7c80fe59fa833483, 0x0) prlimit64(r0, 0x5, 0x0, 0x0) getuid() getuid() io_uring_setup(0x9f9, &(0x7f0000000700)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) 4.755863737s ago: executing program 2 (id=7260): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x98}, 0x1, 0x7}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 3.697788231s ago: executing program 2 (id=7263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'hsr0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$int_in(r6, 0x5452, &(0x7f00000003c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x400000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000000090000000000b5db0c00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) fsync(r8) writev(r5, &(0x7f00000000c0), 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x108) sendfile(r4, r4, 0x0, 0x20000023896) pread64(0xffffffffffffffff, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3.696626971s ago: executing program 0 (id=7264): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x41a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x11e210, 0x10004, 0x9, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000800", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32], 0x38}}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.659916223s ago: executing program 1 (id=7265): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @empty}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8a366ae6c6db7fe1}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r3, 0xb) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 3.492286718s ago: executing program 0 (id=7266): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xfffffffd}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x100}) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3.148716829s ago: executing program 7 (id=7267): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7c07312f7eb8286ea199ecd22221ad7dade9e2b670d", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB]) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x2, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.994403084s ago: executing program 0 (id=7268): listen(0xffffffffffffffff, 0x7d4165c9) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) 2.81884309s ago: executing program 0 (id=7269): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x98}, 0x1, 0x7}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="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", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 2.79869155s ago: executing program 2 (id=7270): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7c07312f7eb8286ea199ecd22221ad7dade9e2b670d", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB]) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x2, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.768466851s ago: executing program 7 (id=7271): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) 2.744936282s ago: executing program 2 (id=7272): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) ustat(0x8ca9, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10000, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x200, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = epoll_create(0x928) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x2}) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) writev(r3, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0x5411, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008090) timer_create(0x0, &(0x7f0000000240)={0x0, 0x800001d, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) recvfrom$inet6(r7, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.316114295s ago: executing program 1 (id=7273): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x98}, 0x1, 0x7}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x5084) sendto$inet(r0, &(0x7f0000000300)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f66ee49d20487065dad7cffef082a59ee2b21eb73656d3dc03547888735a17218c20071551f0d51963eca94a593476b25dedb707e7b8ce8b652bc423029d796b484ee048820f540c45770a40a143a1596e1fbc57e45bd84e16556ffb7990bfd000073126510261a98fad73feacc4eb3c3fad519b362e5307e1e79c6b13c4527aa95f952e19f71b11aefb68882d9fa2fec0fbacebffab318cfdcf33eceab48459926966bd946f4fdaaac", 0xffffffffffffff67, 0x4044880, 0x0, 0x0) 2.136859901s ago: executing program 6 (id=7274): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xfff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200090d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000200000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016"], 0x68}, 0x1, 0x7}, 0x0) r3 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={{}, {r5, r6/1000+10000}}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x7c814) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100000000000000000002000000", @ANYRES32=r11, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r3, &(0x7f0000000100), 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r12, 0x112, 0xb, 0x0, &(0x7f0000000040)) 1.956862747s ago: executing program 0 (id=7275): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @empty}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8a366ae6c6db7fe1}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq7I1leddredelNjk4Z65IROIER44cOOfEnQuCG5dwQOKPFRQjcRg0s7Nhbe8mq8T2ut7fTxrNm3mT+b4XZ97zvs3uC2BkXY2IvYiYiIiPI2KuOJ8UW3zQ3rLrHu/fXT7Yv7ucRJp+9M8kr8/ORdefyVwu7jkVET/4TsSPk+Nxmzu760u1WnWrOJ5v1Tfnmzu7N9bqS6vV1epGpXJr8dbCezffrZxYW9+oTxSlLz/8w943fpqlNVuc6W7HSWo3ffxJnMyliPjeaQQbgrGiPRPDToTnUoqIVyPizfz5n4ux/KcJAFxkaToX6Vz3MQBw0ZXyObCkVC7mAmajVCqX23N4r8VMqdZotq7faWxvrLTnyq7EeOnOWq26UMwVXoqI7Hgxr8vrk+y4cuT4ZkS8EhE/n5zOj8vLjdrKMH/xAYARdvnI+P/vyfb4DwBccFPDTgAAOHPGfwAYPcZ/ABg9xn8AGD3t8X962GkAAGfI638AGD3GfwAYKd//8MNsSw+K779e+WRne73xyY2VanO9XN9eLi83tjbLq43Gav6dPfVn3a/WaGwuvhPbn1755mazNd/c2b1db2xvtG7n3+t9uzqeX7V3Bi0DAPp55Y0Hf06yEfn96XyLrrUcxoeaGXDaSsNOABiasWEnAAyN1b5gdL3Aa3zTA3BB9Fii95CpXh8QStM0Pb2UgFN27QuDzP8nA/QQwGdN1/y//wUMI8b8P4wu8/8wutI0GXTN/xj0QgDgfPP7P9Dn3b1Xi/1vijcHfrRy9Ir7p5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG+d9X/LxVrgs1EqlcsRL0XElRhP7qzVqgsR8XJE/GlyfDI7XhxyzgDAiyr9LSnW/7o29/bsoarXLz8pTkTET3750S8+XWq1tv4YMZH8a7JzvnW/OF/pHeC0WwAAPF1nnM73XS/kH+/fXe5sZ5nP378dEVPt+Af7E3FQxN951FmbeCrGI2LmURLdaxUnXXMXL2LvXkR8vlf7k5jN50DaK58ejZ/FfulM45cOxS/lde199nfxuRPIBUbNg6z/+aDX81eKq/m+9/OfnT2JtdOL/i+71fJB3gf+P36n/xvr0/9dHTTGO7//brs0fbzuXsQXL0V0Yh909T+d+Emf+G8PGP8vX3r9zX516a8irkXv+N2x5lv1zfnmzu6NtfrSanW1ulGpjMWthfduvluZz+eo5/uPBv94//rL/eqy9s/0iT/1jPZ/dcD2//q/H//wK0+J//W3esUvxWtPiZ+NiV8bMP7SzO+m+tVl8Vf6tP9ZP//r/W6aHF5Q/OFfd48tGw4ADE9zZ3d9qVarbiko5IXfxrlIo3ch+yd7DtLoWfjWqdw5nTtWNRG9L/7ZW+1n+khVmj5X9H49xknMugHnwZOHPiL+M+xkAAAAAAAAAAAAAACAns7i01HDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1/8CAAD//3ZK0g4=") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r2, 0xb) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.909181059s ago: executing program 6 (id=7276): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x100}) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.86490665s ago: executing program 6 (id=7277): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0xc, 0x3, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, 0x0, &(0x7f0000000500)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r7}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_getres(0x7c80fe59fa833483, 0x0) prlimit64(r0, 0x5, 0x0, 0x0) getuid() getuid() io_uring_setup(0x9f9, &(0x7f0000000700)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) 1.809633852s ago: executing program 7 (id=7278): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @empty}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8a366ae6c6db7fe1}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$eJzs3U9sHFcZAPBv1vHfuHVaegAEbWgLAUVZ25s2qnqAckIIVUL0CFJq7I1leddredelNjk4Z65IROIER44cOOfEnQuCG5dwQOKPFRQjcRg0s7Nhbe8mq8T2ut7fTxrNm3mT+b4XZ97zvs3uC2BkXY2IvYiYiIiPI2KuOJ8UW3zQ3rLrHu/fXT7Yv7ucRJp+9M8kr8/ORdefyVwu7jkVET/4TsSPk+Nxmzu760u1WnWrOJ5v1Tfnmzu7N9bqS6vV1epGpXJr8dbCezffrZxYW9+oTxSlLz/8w943fpqlNVuc6W7HSWo3ffxJnMyliPjeaQQbgrGiPRPDToTnUoqIVyPizfz5n4ux/KcJAFxkaToX6Vz3MQBw0ZXyObCkVC7mAmajVCqX23N4r8VMqdZotq7faWxvrLTnyq7EeOnOWq26UMwVXoqI7Hgxr8vrk+y4cuT4ZkS8EhE/n5zOj8vLjdrKMH/xAYARdvnI+P/vyfb4DwBccFPDTgAAOHPGfwAYPcZ/ABg9xn8AGD3t8X962GkAAGfI638AGD3GfwAYKd//8MNsSw+K779e+WRne73xyY2VanO9XN9eLi83tjbLq43Gav6dPfVn3a/WaGwuvhPbn1755mazNd/c2b1db2xvtG7n3+t9uzqeX7V3Bi0DAPp55Y0Hf06yEfn96XyLrrUcxoeaGXDaSsNOABiasWEnAAyN1b5gdL3Aa3zTA3BB9Fii95CpXh8QStM0Pb2UgFN27QuDzP8nA/QQwGdN1/y//wUMI8b8P4wu8/8wutI0GXTN/xj0QgDgfPP7P9Dn3b1Xi/1vijcHfrRy9Ir7p5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnG+d9X/LxVrgs1EqlcsRL0XElRhP7qzVqgsR8XJE/GlyfDI7XhxyzgDAiyr9LSnW/7o29/bsoarXLz8pTkTET3750S8+XWq1tv4YMZH8a7JzvnW/OF/pHeC0WwAAPF1nnM73XS/kH+/fXe5sZ5nP378dEVPt+Af7E3FQxN951FmbeCrGI2LmURLdaxUnXXMXL2LvXkR8vlf7k5jN50DaK58ejZ/FfulM45cOxS/lde199nfxuRPIBUbNg6z/+aDX81eKq/m+9/OfnT2JtdOL/i+71fJB3gf+P36n/xvr0/9dHTTGO7//brs0fbzuXsQXL0V0Yh909T+d+Emf+G8PGP8vX3r9zX516a8irkXv+N2x5lv1zfnmzu6NtfrSanW1ulGpjMWthfduvluZz+eo5/uPBv94//rL/eqy9s/0iT/1jPZ/dcD2//q/H//wK0+J//W3esUvxWtPiZ+NiV8bMP7SzO+m+tVl8Vf6tP9ZP//r/W6aHF5Q/OFfd48tGw4ADE9zZ3d9qVarbiko5IXfxrlIo3ch+yd7DtLoWfjWqdw5nTtWNRG9L/7ZW+1n+khVmj5X9H49xknMugHnwZOHPiL+M+xkAAAAAAAAAAAAAACAns7i01HDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX1/8CAAD//3ZK0g4=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) io_setup(0x7, &(0x7f00000002c0)=0x0) io_pgetevents(r5, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r2, 0xb) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.808093931s ago: executing program 2 (id=7279): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @empty}, &(0x7f0000000280)=0xc) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd7000ffdbdf256700000008000100360000ecf4f0b7ae020000001f000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) io_setup(0x7, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r3, 0xb) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.190956681s ago: executing program 1 (id=7280): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x41a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x11e210, 0x10004, 0x9, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000000000000800", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32], 0x38}}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 973.231159ms ago: executing program 1 (id=7281): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'pim6reg1\x00', 0x100}) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 847.497002ms ago: executing program 1 (id=7282): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5a, 0x0, &(0x7f0000000180)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0544b00aab05400f16b2882a631a8af3a439e1432fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7c07312f7eb8286ea199ecd22221ad7dade9e2b670d", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc2060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001d40)=ANY=[@ANYBLOB]) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000100)={0x2, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 717.301307ms ago: executing program 1 (id=7283): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @remote, @empty}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8a366ae6c6db7fe1}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x21081e, &(0x7f00000009c0)={[{@nomblk_io_submit}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@discard}]}, 0x1, 0x515, &(0x7f00000010c0)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x3, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffbfffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x1040e8, 0x5, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) io_pgetevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, &(0x7f0000000480)={&(0x7f0000000440)={[0x4]}, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, r3, 0xb) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r6, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 48.391148ms ago: executing program 2 (id=7284): r0 = socket$igmp(0x2, 0x3, 0x2) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="6465636f646573206d656d002f6f02a123a19a3efc77dde4c2ebbb90f58426f50ef5217e0904d31a8fb0a54c938d2a822eb87a95b8fd4f0ab6c72fecf67dbe95c49616e9bd35f3d5465a00c2ac74b291c0123329bb8e858f00ace2dd4c1d9a598aa78cda80b3f2b52fcd061401a28a8c076dcb9889a05e07ac6c71b0f806d9fbe2a8c166f627493d1b3f58f951487927b04378ebd085e027747f916ffc3b7de4117e6a16a7"], 0xc) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0), &(0x7f00000003c0)=0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="0001000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000db8a94a0000000000000000000000000ffffffff00000000002000000000000000000000000000000000000000000000000000000000000000000000fec44512cdef05c2a5c64fcdbf924ff9add9f68494dd50"], 0x27c}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100), 0x202002, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x3, 0x41, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 1.12511ms ago: executing program 0 (id=7285): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10010, 0x0, 0x1000000, 0x6, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20000c7, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0xfe, 0x576, &(0x7f0000001780)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xa5e438, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r2, @ANYRES32=0x0, @ANYRES16=r2, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYRES8=r0, @ANYRES32, @ANYRESDEC=r1, @ANYRES16=r0, @ANYBLOB="c10db893848991a851d0e78c4211f451263af5d2b9c9672cfe39d23bec78e3eff52d3419c91c44431d861f1eb1ffe87e5a52af631d1dc3cf13014fdb8713f7fe20366d9704132d2346f095f0f4481d88a9bc68f47a977cf5a8244519effab7e9eeb78196ecec97e9e12dcebb4ee8b952c48b6322f0d886040182963f44487970826f3fb7ce9ba6774b3b3f281c59d0c81ee9de28324aa50cb792ea83bb1b3af8f9b9f1ead22cc392572e7222778b87d88e58362cdec99bf750a5c38f9a6c9cc0584d2953f938040826e083f267a775c3139fd346cececb", @ANYRES16, @ANYRES64=r2], 0xb, 0x0, &(0x7f0000000000)) 0s ago: executing program 6 (id=7286): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000600e9ff850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000020603000000000180000000000000000d000300686173683a6e65740000000005000400000000000900020073797a310000000005000500020000000500010006000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000008005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f9505e1a1887f70706d038e7fd7fc6e5539b203c0a8b089b3f32356c030890e0879b0af8c6e70a9b334a959b6196048ed30af3988f7ef31952013fffe8d178708c523c921b1b5b31070d0773180acd3b78130daa61d8e8048001005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadeafb2ff7949d1f416e56c71b1931870262f5e801119242ca026bfcc21e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771a0000119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc18892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000ef8271a179c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae1b9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafff845237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982c04000000000000005c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504777b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b5dd7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80c1ce375dd649c8c704e509bd88c8e63d8c7dd66adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d5062c59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861a43ddbd8db411d8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227fff72de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe33c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255235ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e240100c0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f7524e2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e842729251ae033a9e02210e62df0546a74b333a1c48f95fd54acba0ea42e45c1d58efeee305415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458ffff5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af39e088a2a3d152ef95ff569e76db2391f4509d7f339d92fdb4a898a33a6d88e7cfe0e0000000000d80a4fe654578376e599aff3565b1d531f30912b9945fc83d38a155d5284edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79d6c248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b7c971d90295bf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e542ccea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f077e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000", 0x1000}}, 0x1006) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x4008000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1e}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_PHYS_PORT_ID={0x4}]}, 0x54}}, 0x8000) kernel console output (not intermixed with test programs): 6 ORIG_RAX: 0000000000000141 [ 1026.167809][T26251] RAX: ffffffffffffffda RBX: 00007f5c90265fa0 RCX: 00007f5c8ffece59 [ 1026.167821][T26251] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000008 [ 1026.167836][T26251] RBP: 00007f5c8ea47090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.167850][T26251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.167861][T26251] R13: 00007f5c90266038 R14: 00007f5c90265fa0 R15: 00007ffe8fbd03a8 [ 1026.167879][T26251] [ 1027.361899][T26258] netlink: 556 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1027.390111][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 1028.364840][T26273] program syz.0.6773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1028.372361][T26270] netlink: 'syz.1.6772': attribute type 2 has an invalid length. [ 1028.375245][T26273] program syz.0.6773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1028.449006][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6775'. [ 1028.494929][T26290] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6778'. [ 1028.539793][T26294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6780'. [ 1029.297231][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 1029.455200][T26302] program syz.0.6784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.471385][T26304] erspan1: entered promiscuous mode [ 1029.476882][T26304] erspan1: entered allmulticast mode [ 1029.482871][T26302] program syz.0.6784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.509706][T26304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6785'. [ 1029.629064][T19073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1029.660290][T26308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6787'. [ 1030.775256][T26316] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6789'. [ 1030.800919][T26320] FAULT_INJECTION: forcing a failure. [ 1030.800919][T26320] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.918111][T26314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6788'. [ 1030.929106][ T28] kauditd_printk_skb: 581 callbacks suppressed [ 1030.929130][ T28] audit: type=1400 audit(1780410621.214:50987): avc: denied { mounton } for pid=26310 comm="syz.1.6788" path="/" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1030.962300][T26322] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6789'. [ 1031.084577][T26320] CPU: 0 UID: 0 PID: 26320 Comm: syz.6.6791 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1031.084659][T26320] Tainted: [W]=WARN [ 1031.084665][T26320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1031.084677][T26320] Call Trace: [ 1031.084685][T26320] [ 1031.084695][T26320] __dump_stack+0x1d/0x30 [ 1031.084720][T26320] dump_stack_lvl+0x95/0xd0 [ 1031.084805][T26320] dump_stack+0x15/0x1b [ 1031.084871][T26320] should_fail_ex+0x263/0x280 [ 1031.084931][T26320] should_failslab+0x8c/0xb0 [ 1031.084970][T26320] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1031.085122][T26320] ? skb_clone+0x151/0x1f0 [ 1031.085150][T26320] skb_clone+0x151/0x1f0 [ 1031.085173][T26320] nfnetlink_rcv+0x316/0x1720 [ 1031.085196][T26320] ? __account_obj_stock+0x3ba/0x5f0 [ 1031.085218][T26320] ? xas_load+0x413/0x430 [ 1031.085349][T26320] ? __rcu_read_unlock+0x4e/0x70 [ 1031.085367][T26320] ? xa_load+0xb1/0xe0 [ 1031.085495][T26320] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 1031.085593][T26320] ? set_normalized_timespec64+0xe0/0x110 [ 1031.085617][T26320] ? __account_obj_stock+0x3ba/0x5f0 [ 1031.085639][T26320] ? __rcu_read_unlock+0x4e/0x70 [ 1031.085654][T26320] ? should_fail_ex+0x30/0x280 [ 1031.085684][T26320] ? __rcu_read_unlock+0x4e/0x70 [ 1031.085706][T26320] ? avc_has_perm_noaudit+0xab/0x130 [ 1031.085764][T26320] netlink_unicast+0x5a8/0x680 [ 1031.085788][T26320] netlink_sendmsg+0x5c8/0x6f0 [ 1031.085820][T26320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.085853][T26320] ____sys_sendmsg+0x563/0x5b0 [ 1031.085876][T26320] ___sys_sendmsg+0x195/0x1e0 [ 1031.085947][T26320] __x64_sys_sendmsg+0xd4/0x160 [ 1031.085973][T26320] x64_sys_call+0x194c/0x3020 [ 1031.086059][T26320] do_syscall_64+0x12c/0x3b0 [ 1031.086084][T26320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.086102][T26320] RIP: 0033:0x7fef21cbce59 [ 1031.086119][T26320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.086137][T26320] RSP: 002b:00007fef20717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.086206][T26320] RAX: ffffffffffffffda RBX: 00007fef21f35fa0 RCX: 00007fef21cbce59 [ 1031.086221][T26320] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 1031.086232][T26320] RBP: 00007fef20717090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.086250][T26320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.086276][T26320] R13: 00007fef21f36038 R14: 00007fef21f35fa0 R15: 00007fffda06fd48 [ 1031.086297][T26320] [ 1031.461279][T26327] loop6: detected capacity change from 0 to 2048 [ 1031.489883][T26327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1031.508476][ T28] audit: type=1400 audit(1780410621.775:50988): avc: denied { write } for pid=26326 comm="syz.6.6793" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1031.565234][ T28] audit: type=1400 audit(1780410621.775:50989): avc: denied { create } for pid=26326 comm="syz.6.6793" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1031.637018][T26333] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6793'. [ 1031.665340][ T28] audit: type=1400 audit(1780410621.897:50990): avc: denied { bind } for pid=26326 comm="syz.6.6793" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1031.685781][ T28] audit: type=1400 audit(1780410621.897:50991): avc: denied { getopt } for pid=26326 comm="syz.6.6793" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1031.706444][ T28] audit: type=1400 audit(1780410621.906:50992): avc: denied { ioctl } for pid=26335 comm="syz.7.6795" path="socket:[97919]" dev="sockfs" ino=97919 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1031.731423][ T28] audit: type=1400 audit(1780410621.906:50993): avc: denied { create } for pid=26335 comm="syz.7.6795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1031.750981][ T28] audit: type=1400 audit(1780410621.915:50994): avc: denied { write } for pid=26335 comm="syz.7.6795" path="socket:[97922]" dev="sockfs" ino=97922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1031.801737][T26338] program syz.7.6796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1031.837362][T26338] program syz.7.6796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1031.860341][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.896021][T26341] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6798'. [ 1031.961037][T26344] @ÿ: renamed from bond_slave_0 [ 1031.978975][T26344] loop7: detected capacity change from 0 to 512 [ 1032.006697][ T28] audit: type=1400 audit(1780410622.224:50995): avc: denied { write } for pid=26324 comm="syz.2.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1032.027383][T26344] EXT4-fs: Ignoring removed i_version option [ 1032.035355][T26344] EXT4-fs: Ignoring removed nobh option [ 1032.042025][T26344] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1032.052262][ T28] audit: type=1400 audit(1780410622.224:50996): avc: denied { getopt } for pid=26324 comm="syz.2.6792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1032.085160][T26344] EXT4-fs (loop7): 1 truncate cleaned up [ 1032.091585][T26344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1032.123276][T26344] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6799'. [ 1032.159720][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.260363][T26352] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6800'. [ 1033.423379][T26371] vlan2: entered promiscuous mode [ 1033.428572][T26371] bridge0: entered promiscuous mode [ 1033.687295][T26374] program syz.1.6808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1033.724602][T26374] program syz.1.6808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.778815][T19073] Bluetooth: hci0: command 0x1003 tx timeout [ 1034.784874][T26050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1036.491701][T26384] loop2: detected capacity change from 0 to 512 [ 1036.498604][T26384] ext4: Unknown parameter 'smackfsdef' [ 1036.511346][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1036.511362][ T28] audit: type=1400 audit(1780410626.433:51020): avc: denied { create } for pid=26379 comm="syz.2.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1036.925485][ T28] audit: type=1400 audit(1780410626.443:51021): avc: denied { mounton } for pid=26379 comm="syz.2.6810" path="/43/file1" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1037.447814][ T28] audit: type=1400 audit(1780410626.443:51022): avc: denied { create } for pid=26379 comm="syz.2.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1038.016065][ T28] audit: type=1400 audit(1780410626.443:51023): avc: denied { relabelfrom } for pid=26379 comm="syz.2.6810" name="NETLINK" dev="sockfs" ino=98036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1038.053296][ T28] audit: type=1400 audit(1780410626.443:51024): avc: denied { relabelto } for pid=26379 comm="syz.2.6810" name="NETLINK" dev="sockfs" ino=98036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 1038.582550][ T28] audit: type=1400 audit(1780410626.443:51025): avc: denied { allowed } for pid=26379 comm="syz.2.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1038.602439][ T28] audit: type=1400 audit(1780410626.452:51026): avc: denied { create } for pid=26379 comm="syz.2.6810" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1039.137502][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6817'. [ 1039.639980][ T28] audit: type=1400 audit(1780410626.452:51027): avc: denied { create } for pid=26379 comm="syz.2.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1039.671972][ T28] audit: type=1400 audit(1780410626.452:51028): avc: denied { getopt } for pid=26379 comm="syz.2.6810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1040.190150][T26410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6818'. [ 1040.215164][T26410] loop6: detected capacity change from 0 to 512 [ 1040.709291][T26410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1040.742153][ T28] audit: type=1400 audit(1780410627.883:51029): avc: denied { create } for pid=26383 comm="syz.0.6811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1041.168329][T26410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.227873][T26410] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1041.375198][T26417] loop7: detected capacity change from 0 to 512 [ 1041.381851][T26417] ext4: Unknown parameter 'smackfsdef' [ 1041.880667][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1041.880681][ T28] audit: type=1400 audit(1780410631.475:51051): avc: denied { map_create } for pid=26409 comm="syz.6.6818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1041.920324][T26421] program syz.2.6819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1041.929980][ T28] audit: type=1400 audit(1780410631.475:51052): avc: denied { map_read map_write } for pid=26409 comm="syz.6.6818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1041.951239][ T28] audit: type=1400 audit(1780410631.503:51053): avc: denied { create } for pid=26420 comm="syz.2.6819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1041.971484][ T28] audit: type=1400 audit(1780410631.513:51054): avc: denied { cmd } for pid=26420 comm="syz.2.6819" path="socket:[98064]" dev="sockfs" ino=98064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1041.981752][T26421] program syz.2.6819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1042.014228][ T28] audit: type=1400 audit(1780410631.513:51055): avc: denied { read append } for pid=26420 comm="syz.2.6819" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1042.051651][ T28] audit: type=1400 audit(1780410631.513:51056): avc: denied { open } for pid=26420 comm="syz.2.6819" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1042.138163][ T28] audit: type=1400 audit(1780410631.709:51057): avc: denied { create } for pid=26424 comm="syz.1.6821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1042.255156][ T28] audit: type=1400 audit(1780410631.737:51058): avc: denied { write } for pid=26424 comm="syz.1.6821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1042.311893][ T28] audit: type=1400 audit(1780410631.877:51059): avc: denied { open } for pid=26424 comm="syz.1.6821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1042.331689][ T28] audit: type=1400 audit(1780410631.877:51060): avc: denied { perfmon } for pid=26424 comm="syz.1.6821" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1044.007633][T26444] loop2: detected capacity change from 0 to 512 [ 1044.015234][T26444] ext4: Unknown parameter 'smackfsdef' [ 1044.305849][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.521622][T26455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6828'. [ 1044.531003][T26453] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6827'. [ 1044.617230][T26455] loop2: detected capacity change from 0 to 512 [ 1044.705793][T26455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1044.788273][T26455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.804788][T26455] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.945824][T26462] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6829'. [ 1045.041624][T26462] loop6: detected capacity change from 0 to 512 [ 1045.109916][T26462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1045.323910][T26462] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.355274][T26467] loop1: detected capacity change from 0 to 512 [ 1045.364696][T26462] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.396473][T26467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1045.564478][T26467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1045.606765][T26467] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.628775][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.724020][T26474] program syz.2.6832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1045.758286][T26474] program syz.2.6832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.005974][T26480] loop2: detected capacity change from 0 to 512 [ 1046.014776][T26480] ext4: Unknown parameter 'smackfsdef' [ 1046.375377][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.380742][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6838'. [ 1050.430694][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 1050.430717][ T28] audit: type=1400 audit(1780410639.473:51164): avc: denied { create } for pid=26501 comm="syz.2.6838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1050.501308][T26504] loop6: detected capacity change from 0 to 512 [ 1050.546455][ T28] audit: type=1400 audit(1780410639.492:51165): avc: denied { connect } for pid=26501 comm="syz.2.6838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1050.604243][T26504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.695586][T26504] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.739110][T26506] batadv_slave_1: entered promiscuous mode [ 1050.748560][ T28] audit: type=1400 audit(1780410639.501:51166): avc: denied { write } for pid=26501 comm="syz.2.6838" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1050.797964][T26509] netlink: 'syz.2.6840': attribute type 21 has an invalid length. [ 1050.855515][ T28] audit: type=1400 audit(1780410639.501:51167): avc: denied { open } for pid=26501 comm="syz.2.6838" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1050.940732][T26505] batadv_slave_1: left promiscuous mode [ 1050.956068][ T28] audit: type=1400 audit(1780410639.501:51168): avc: denied { ioctl } for pid=26501 comm="syz.2.6838" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1051.018957][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.038518][T26511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6842'. [ 1051.081155][ T28] audit: type=1400 audit(1780410639.520:51169): avc: denied { create } for pid=26500 comm="syz.6.6839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1051.101574][T26513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6841'. [ 1051.152374][ T28] audit: type=1400 audit(1780410639.707:51170): avc: denied { ioctl } for pid=26505 comm="syz.2.6840" path="socket:[98185]" dev="sockfs" ino=98185 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1051.225853][T26517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6844'. [ 1051.247106][T26515] program syz.2.6843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1051.272884][ T28] audit: type=1400 audit(1780410639.725:51171): avc: denied { mount } for pid=26500 comm="syz.6.6839" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1051.295506][ T28] audit: type=1400 audit(1780410639.744:51172): avc: denied { write } for pid=26505 comm="syz.2.6840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1051.298132][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.328500][T26515] program syz.2.6843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1051.337902][ T28] audit: type=1400 audit(1780410639.753:51173): avc: denied { read write } for pid=26505 comm="syz.2.6840" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1051.338399][T26517] loop1: detected capacity change from 0 to 512 [ 1051.389974][T26517] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1051.536748][T26517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.580936][T26517] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.600994][T26526] loop2: detected capacity change from 0 to 4096 [ 1051.646945][T26526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.720894][T26534] netlink: 556 bytes leftover after parsing attributes in process `syz.6.6850'. [ 1051.788639][T25621] Bluetooth: hci0: Frame reassembly failed (-84) [ 1051.806999][T26538] syzkaller0: entered promiscuous mode [ 1051.821460][T26538] syzkaller0: entered allmulticast mode [ 1052.291570][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.304355][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.410132][T26546] batadv_slave_1: entered promiscuous mode [ 1052.431092][T26546] netlink: 'syz.1.6853': attribute type 21 has an invalid length. [ 1052.499831][T26548] loop2: detected capacity change from 0 to 4096 [ 1052.501543][T26545] batadv_slave_1: left promiscuous mode [ 1052.527507][T26548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.590338][T26551] loop1: detected capacity change from 0 to 512 [ 1052.793410][T26548] syzkaller0: entered promiscuous mode [ 1052.814636][T26548] syzkaller0: entered allmulticast mode [ 1053.061059][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.153677][T26563] program syz.2.6860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.175597][T26559] loop7: detected capacity change from 0 to 512 [ 1053.189718][T26563] program syz.2.6860 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.201715][T26559] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1053.252012][T26559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.274487][T26559] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.286287][T26570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6862'. [ 1053.486821][T26573] netlink: 556 bytes leftover after parsing attributes in process `syz.2.6863'. [ 1053.532401][T25621] Bluetooth: hci1: Frame reassembly failed (-84) [ 1053.634575][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6864'. [ 1053.665583][T26576] loop1: detected capacity change from 0 to 512 [ 1053.687158][T26576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1053.733760][T26576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.759149][T26576] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.999931][T26027] Bluetooth: hci0: command 0x1003 tx timeout [ 1054.052992][T26050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1054.070456][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.108525][T26581] batadv_slave_1: entered promiscuous mode [ 1054.115635][T26581] netlink: 'syz.7.6865': attribute type 21 has an invalid length. [ 1054.129382][T26580] batadv_slave_1: left promiscuous mode [ 1054.244845][T26585] loop7: detected capacity change from 0 to 512 [ 1054.349683][T26587] netlink: 556 bytes leftover after parsing attributes in process `syz.0.6868'. [ 1054.372255][T25618] Bluetooth: hci0: Frame reassembly failed (-84) [ 1054.408648][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.413031][T26589] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6869'. [ 1054.444328][T25618] Bluetooth: hci2: Frame reassembly failed (-84) [ 1054.494802][T26595] program syz.1.6872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.505250][T26595] program syz.1.6872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.705431][T26600] loop1: detected capacity change from 0 to 512 [ 1054.724303][T26600] EXT4-fs (loop1): 1 orphan inode deleted [ 1054.730482][T26600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.871249][T26600] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1054.880882][T26600] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1055.600783][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.708932][ T3567] Bluetooth: hci1: command 0x1003 tx timeout [ 1055.725986][T19073] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1055.856143][ T28] kauditd_printk_skb: 170 callbacks suppressed [ 1055.856200][ T28] audit: type=1400 audit(1780410644.543:51344): avc: denied { create } for pid=26612 comm="syz.1.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1055.899943][T26613] loop1: detected capacity change from 0 to 4096 [ 1055.926150][T26613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.955830][ T28] audit: type=1400 audit(1780410644.646:51345): avc: denied { write } for pid=26612 comm="syz.1.6878" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1055.996030][ T28] audit: type=1400 audit(1780410644.646:51346): avc: denied { add_name } for pid=26612 comm="syz.1.6878" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1056.040495][ T28] audit: type=1400 audit(1780410644.646:51347): avc: denied { create } for pid=26612 comm="syz.1.6878" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1056.079702][ T28] audit: type=1400 audit(1780410644.646:51348): avc: denied { read write } for pid=26612 comm="syz.1.6878" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1056.103343][T26616] syzkaller0: entered promiscuous mode [ 1056.108879][T26616] syzkaller0: entered allmulticast mode [ 1056.124141][ T28] audit: type=1400 audit(1780410644.646:51349): avc: denied { open } for pid=26612 comm="syz.1.6878" path="/51/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1056.168359][ T28] audit: type=1400 audit(1780410644.795:51350): avc: denied { create } for pid=26612 comm="syz.1.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1056.211413][ T28] audit: type=1400 audit(1780410644.795:51351): avc: denied { setopt } for pid=26612 comm="syz.1.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1056.252178][ T28] audit: type=1400 audit(1780410644.795:51352): avc: denied { write } for pid=26612 comm="syz.1.6878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1056.295514][ T28] audit: type=1400 audit(1780410644.795:51353): avc: denied { write } for pid=26612 comm="syz.1.6878" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1056.390473][T26618] loop2: detected capacity change from 0 to 512 [ 1056.437921][T26620] __nla_validate_parse: 2 callbacks suppressed [ 1056.437938][T26620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6880'. [ 1056.455803][T26620] loop6: detected capacity change from 0 to 512 [ 1056.468322][T26620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1056.486312][T26620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.499655][T26620] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1056.510256][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.596311][T19073] Bluetooth: hci0: command 0x1003 tx timeout [ 1056.611508][T26050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1056.628470][T26626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.635832][T26626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.649921][T26050] Bluetooth: hci2: command 0x1003 tx timeout [ 1056.651131][T26027] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1056.691316][T26630] program syz.2.6883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.705349][T26630] program syz.2.6883 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.775912][T26626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.785682][T26626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.832385][T25613] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.841332][T25613] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.867355][T25613] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.876324][T25613] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.881676][T26636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1056.885201][T25613] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.885232][T25613] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.903608][T26635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1056.958195][T25613] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.967351][T25613] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.002835][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.159615][T26641] loop6: detected capacity change from 0 to 512 [ 1057.366843][T26641] EXT4-fs (loop6): 1 orphan inode deleted [ 1057.373134][T26641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1057.395540][T26640] bond28: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1057.405450][T26640] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1057.504126][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6887'. [ 1057.634393][T26649] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6889'. [ 1057.702787][T26653] netlink: 556 bytes leftover after parsing attributes in process `syz.2.6892'. [ 1057.718172][T25620] Bluetooth: hci0: Frame reassembly failed (-84) [ 1057.724993][T25613] Bluetooth: hci1: Frame reassembly failed (-84) [ 1057.795092][T26656] dvmrp1: entered allmulticast mode [ 1057.806018][T26656] dvmrp1: left allmulticast mode [ 1058.928057][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.985527][T26664] loop6: detected capacity change from 0 to 512 [ 1059.899632][T26050] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1059.910360][T26050] Bluetooth: hci0: command 0x1003 tx timeout [ 1059.910399][T26027] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1059.965059][T26677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1059.985579][T26677] loop0: detected capacity change from 0 to 512 [ 1059.994665][T26677] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1060.014463][T26677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.027431][T26677] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1060.402714][T26685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6898'. [ 1060.453505][T26687] loop1: detected capacity change from 0 to 4096 [ 1060.478958][T26687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.495215][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.613515][T26697] syzkaller0: entered promiscuous mode [ 1060.621508][T26696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1060.625563][T26697] syzkaller0: entered allmulticast mode [ 1060.662536][T26698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1060.799579][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.870269][T26701] loop1: detected capacity change from 0 to 512 [ 1060.883801][T26701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1060.897749][T26701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.910943][T26701] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1061.205254][ T28] kauditd_printk_skb: 583 callbacks suppressed [ 1061.205321][ T28] audit: type=1400 audit(1780410649.556:51937): avc: denied { map_read map_write } for pid=26700 comm="syz.1.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1061.232295][ T28] audit: type=1400 audit(1780410649.556:51938): avc: denied { tracepoint } for pid=26700 comm="syz.1.6903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1061.376075][ T28] audit: type=1400 audit(1780410649.706:51939): avc: denied { unmount } for pid=25599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1061.396877][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.412493][ T28] audit: type=1400 audit(1780410649.744:51940): avc: denied { read write } for pid=25599 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1061.482459][ T28] audit: type=1400 audit(1780410649.744:51941): avc: denied { open } for pid=25599 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1061.503738][T26706] loop1: detected capacity change from 0 to 512 [ 1061.520507][ T28] audit: type=1400 audit(1780410649.744:51942): avc: denied { ioctl } for pid=25599 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1061.549672][ T28] audit: type=1400 audit(1780410649.781:51943): avc: denied { prog_load } for pid=26705 comm="syz.1.6904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1061.569261][ T28] audit: type=1400 audit(1780410649.781:51944): avc: denied { bpf } for pid=26705 comm="syz.1.6904" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1061.590271][ T28] audit: type=1400 audit(1780410649.790:51945): avc: denied { perfmon } for pid=26705 comm="syz.1.6904" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1061.602957][T26708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6905'. [ 1061.611859][ T28] audit: type=1400 audit(1780410649.790:51946): avc: denied { prog_run } for pid=26705 comm="syz.1.6904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1061.735952][T26719] loop1: detected capacity change from 0 to 512 [ 1061.744733][T26719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1061.763669][T26719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1061.776673][T26719] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.567414][T26729] program syz.0.6909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1062.581996][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6910'. [ 1062.624725][T26728] loop6: detected capacity change from 0 to 512 [ 1062.757355][T26728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1062.869040][T26728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1062.911316][T26728] ext4 filesystem being mounted at /522/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.340999][T26742] loop2: detected capacity change from 0 to 512 [ 1063.341235][T26743] netlink: 'syz.7.6913': attribute type 2 has an invalid length. [ 1063.367724][T26742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1063.396086][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.424899][T26742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.485349][T26742] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1063.621856][T26752] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1063.719915][T26755] netlink: 'syz.1.6917': attribute type 2 has an invalid length. [ 1063.794709][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.915113][T26759] loop1: detected capacity change from 0 to 512 [ 1064.444137][T26768] loop1: detected capacity change from 0 to 512 [ 1064.451622][T26768] ext4: Unknown parameter 'smackfsdef' [ 1064.609953][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.868232][T26771] program syz.2.6922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1064.879885][T26772] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6921'. [ 1064.934204][T26776] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6924'. [ 1065.266519][T26781] loop6: detected capacity change from 0 to 512 [ 1065.379407][T26787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6929'. [ 1065.392938][T26787] loop1: detected capacity change from 0 to 512 [ 1065.399812][T26787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1065.433528][T26785] netlink: 'syz.7.6928': attribute type 2 has an invalid length. [ 1065.598750][T26787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1065.620807][T26787] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.138474][T26801] loop6: detected capacity change from 0 to 4096 [ 1066.185350][T26804] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1066.247206][T26801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.566110][ T28] kauditd_printk_skb: 160 callbacks suppressed [ 1066.566124][ T28] audit: type=1400 audit(1780410654.561:52107): avc: denied { write } for pid=26800 comm="syz.6.6931" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1066.711989][ T28] audit: type=1400 audit(1780410654.561:52108): avc: denied { create } for pid=26800 comm="syz.6.6931" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1066.735368][T26807] syzkaller0: entered promiscuous mode [ 1066.740866][T26807] syzkaller0: entered allmulticast mode [ 1066.820799][ T28] audit: type=1400 audit(1780410654.561:52109): avc: denied { read write } for pid=26800 comm="syz.6.6931" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1066.941960][ T28] audit: type=1400 audit(1780410654.561:52110): avc: denied { open } for pid=26800 comm="syz.6.6931" path="/525/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1067.070554][ T28] audit: type=1400 audit(1780410654.739:52111): avc: denied { setopt } for pid=26800 comm="syz.6.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1067.102355][T26809] loop0: detected capacity change from 0 to 512 [ 1067.131163][T26809] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1067.243289][ T28] audit: type=1400 audit(1780410654.739:52112): avc: denied { write } for pid=26800 comm="syz.6.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1067.298818][T26809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1067.314188][T26813] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6934'. [ 1067.314277][ T28] audit: type=1400 audit(1780410654.757:52113): avc: denied { write } for pid=26800 comm="syz.6.6931" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1067.356113][T26809] ext4 filesystem being mounted at /234/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.384856][ T28] audit: type=1400 audit(1780410655.337:52114): avc: denied { write } for pid=26808 comm="syz.0.6933" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1067.441888][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.444029][ T28] audit: type=1400 audit(1780410655.384:52115): avc: denied { map_read map_write } for pid=26786 comm="syz.1.6929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1067.642231][ T28] audit: type=1400 audit(1780410655.571:52116): avc: denied { read write } for pid=20556 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1067.717241][T26824] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6937'. [ 1067.806502][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.988286][T26828] netlink: 556 bytes leftover after parsing attributes in process `syz.1.6939'. [ 1068.007983][T25621] Bluetooth: hci0: Frame reassembly failed (-84) [ 1068.057005][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.133573][T26830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1068.134461][T26832] batadv_slave_1: entered promiscuous mode [ 1068.151945][T26832] netlink: 'syz.7.6941': attribute type 21 has an invalid length. [ 1068.163284][T26831] batadv_slave_1: left promiscuous mode [ 1068.188834][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6942'. [ 1069.420730][T26845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6945'. [ 1069.546581][T26847] syzkaller0: entered promiscuous mode [ 1069.552218][T26847] syzkaller0: entered allmulticast mode [ 1070.104346][T26852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6948'. [ 1070.162678][T26027] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1070.260170][T26852] loop6: detected capacity change from 0 to 512 [ 1070.298450][T26852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1070.318507][T26856] loop2: detected capacity change from 0 to 512 [ 1070.326062][T26856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1070.333704][T26050] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1070.339360][ T3567] Bluetooth: hci1: command 0x1003 tx timeout [ 1070.341619][T26852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.360221][T26852] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.369101][T26856] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.383614][T26856] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.450279][T26863] netlink: 'syz.0.6951': attribute type 2 has an invalid length. [ 1070.514342][T26867] batadv_slave_1: entered promiscuous mode [ 1070.529520][T26867] netlink: 'syz.0.6952': attribute type 21 has an invalid length. [ 1070.539811][T26866] batadv_slave_1: left promiscuous mode [ 1070.586035][T26870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6953'. [ 1070.614556][T26870] loop0: detected capacity change from 0 to 512 [ 1070.647715][T26870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1070.731197][T26870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1070.743681][T26870] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.816270][T26875] program syz.1.6954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.826514][T26875] program syz.1.6954 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1070.837269][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.980661][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.018641][T26883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6957'. [ 1071.099526][T26887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6959'. [ 1071.226771][T25621] Bluetooth: hci0: Frame reassembly failed (-84) [ 1071.324991][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.371730][T26897] batadv_slave_1: entered promiscuous mode [ 1071.378919][T26896] batadv_slave_1: left promiscuous mode [ 1071.403228][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6964'. [ 1071.439192][T26902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1071.452060][T26902] loop0: detected capacity change from 0 to 512 [ 1071.458817][T26902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1071.484057][T26902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.496954][T26902] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.748205][T25618] Bluetooth: hci1: Frame reassembly failed (-84) [ 1071.821187][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.857150][T25617] Bluetooth: hci2: Frame reassembly failed (-84) [ 1072.204542][ T28] kauditd_printk_skb: 351 callbacks suppressed [ 1072.204558][ T28] audit: type=1400 audit(1780410659.837:52468): avc: denied { allowed } for pid=26912 comm="syz.6.6969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1072.235422][ T28] audit: type=1400 audit(1780410659.846:52469): avc: denied { create } for pid=26912 comm="syz.6.6969" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1072.300277][ T28] audit: type=1400 audit(1780410659.921:52470): avc: denied { create } for pid=26916 comm="syz.6.6971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1072.322129][ T28] audit: type=1400 audit(1780410659.949:52471): avc: denied { create } for pid=26916 comm="syz.6.6971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1072.342302][ T28] audit: type=1400 audit(1780410659.949:52472): avc: denied { connect } for pid=26916 comm="syz.6.6971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1072.362620][ T28] audit: type=1400 audit(1780410659.949:52473): avc: denied { write } for pid=26916 comm="syz.6.6971" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1072.388046][ T28] audit: type=1400 audit(1780410659.949:52474): avc: denied { open } for pid=26916 comm="syz.6.6971" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1072.411830][ T28] audit: type=1400 audit(1780410659.949:52475): avc: denied { ioctl } for pid=26916 comm="syz.6.6971" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1072.493216][ T28] audit: type=1400 audit(1780410660.098:52476): avc: denied { prog_run } for pid=26922 comm="syz.6.6974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1072.518146][T26923] batadv_slave_1: entered promiscuous mode [ 1072.526659][T26922] batadv_slave_1: left promiscuous mode [ 1072.531077][ T28] audit: type=1400 audit(1780410660.098:52477): avc: denied { execmem } for pid=26922 comm="syz.6.6974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1073.378936][T26934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1073.435907][T19073] Bluetooth: hci0: command 0x1003 tx timeout [ 1073.487371][T26050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1073.837155][T26936] __nla_validate_parse: 6 callbacks suppressed [ 1073.837297][T26936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6978'. [ 1073.925693][ T3567] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1073.926541][T26050] Bluetooth: hci1: command 0x1003 tx timeout [ 1073.953268][T26936] loop2: detected capacity change from 0 to 512 [ 1073.987752][T26936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1074.011262][ T3567] Bluetooth: hci2: command 0x1003 tx timeout [ 1074.013639][T26027] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1074.071275][T26936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.109763][T26936] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.780302][T26946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6981'. [ 1074.894625][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.921874][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1074.945441][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1074.985792][T26957] batadv_slave_1: entered promiscuous mode [ 1074.992244][T26955] batadv_slave_1: left promiscuous mode [ 1075.333636][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6988'. [ 1076.210537][T26967] loop7: detected capacity change from 0 to 512 [ 1077.272975][T26967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1077.684519][ T28] kauditd_printk_skb: 376 callbacks suppressed [ 1077.684535][ T28] audit: type=1400 audit(1780410664.944:52854): avc: denied { sqpoll } for pid=26968 comm="syz.1.6990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1077.711157][ T28] audit: type=1400 audit(1780410664.944:52855): avc: denied { map } for pid=26968 comm="syz.1.6990" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1077.735703][ T28] audit: type=1400 audit(1780410664.944:52856): avc: denied { read write } for pid=26968 comm="syz.1.6990" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99167 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1078.011550][ T28] audit: type=1400 audit(1780410665.271:52857): avc: denied { create } for pid=26974 comm="syz.0.6991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1078.013644][T26975] netlink: 556 bytes leftover after parsing attributes in process `syz.0.6991'. [ 1078.038915][T26967] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.040529][ T28] audit: type=1400 audit(1780410665.271:52858): avc: denied { create } for pid=26974 comm="syz.0.6991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1078.073352][ T28] audit: type=1400 audit(1780410665.271:52859): avc: denied { write } for pid=26974 comm="syz.0.6991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1078.082286][T26967] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.093654][ T28] audit: type=1400 audit(1780410665.271:52860): avc: denied { nlmsg_write } for pid=26974 comm="syz.0.6991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1078.093686][ T28] audit: type=1400 audit(1780410665.318:52861): avc: denied { setopt } for pid=26974 comm="syz.0.6991" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1078.093708][ T28] audit: type=1400 audit(1780410665.337:52862): avc: denied { mount } for pid=26966 comm="syz.7.6989" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1078.234006][ T28] audit: type=1400 audit(1780410665.477:52863): avc: denied { create } for pid=26978 comm="syz.6.6992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1078.269052][T26979] loop6: detected capacity change from 0 to 4096 [ 1078.349455][T26979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.403775][T26983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6993'. [ 1078.463946][T26983] loop1: detected capacity change from 0 to 512 [ 1078.481674][T26983] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1078.488685][T26985] syzkaller0: entered promiscuous mode [ 1078.497979][T26985] syzkaller0: entered allmulticast mode [ 1078.538760][T26983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1078.558315][T26983] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1078.982780][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.007086][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.056558][T26991] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6994'. [ 1079.081965][T26993] program syz.6.6995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1079.121163][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.176410][T26998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1079.313077][T27004] loop7: detected capacity change from 0 to 512 [ 1079.319962][T27004] ext4: Unknown parameter 'smackfsdef' [ 1079.435266][T27007] netlink: 556 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1079.604056][T27009] dvmrp1: entered allmulticast mode [ 1079.659207][T27009] dvmrp1: left allmulticast mode [ 1079.780873][T27012] netlink: 556 bytes leftover after parsing attributes in process `syz.6.7001'. [ 1080.001552][T27014] loop2: detected capacity change from 0 to 512 [ 1080.008858][T27014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1080.024627][T27014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.037598][T27014] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.254561][T26050] Bluetooth: hci0: command 0x1003 tx timeout [ 1080.260676][T26027] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1080.715045][T27027] program syz.6.7006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.844737][T27029] loop6: detected capacity change from 0 to 512 [ 1080.876459][T27029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1080.932239][T27029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.948353][T27029] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.042523][T27033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7008'. [ 1081.268623][T27036] netlink: 556 bytes leftover after parsing attributes in process `syz.0.7009'. [ 1081.356019][T27037] dvmrp1: entered allmulticast mode [ 1081.362938][T27037] dvmrp1: left allmulticast mode [ 1081.519560][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.634854][ T3567] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1081.668590][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.707398][T27044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1082.175997][T27051] loop0: detected capacity change from 0 to 4096 [ 1082.209202][T27051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.241355][T27057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1082.559886][T27064] syzkaller0: entered promiscuous mode [ 1082.650260][T27064] syzkaller0: entered allmulticast mode [ 1083.034424][ T28] kauditd_printk_skb: 915 callbacks suppressed [ 1083.034445][ T28] audit: type=1326 audit(1780410669.967:53779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.1.7016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfcc05d68e code=0x7ffc0000 [ 1083.216324][ T28] audit: type=1326 audit(1780410670.004:53780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.1.7016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfcc05d68e code=0x7ffc0000 [ 1083.296897][ T28] audit: type=1326 audit(1780410670.004:53781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.1.7016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfcc05d68e code=0x7ffc0000 [ 1083.375220][ T28] audit: type=1326 audit(1780410670.004:53782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.1.7016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfcc05d68e code=0x7ffc0000 [ 1083.440531][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.464129][T27067] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.472850][T27069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7018'. [ 1083.502621][T27067] audit: audit_lost=62 audit_rate_limit=0 audit_backlog_limit=64 [ 1083.520594][ T28] audit: type=1326 audit(1780410670.004:53783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.1.7016" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fdfcc05d68e code=0x7ffc0000 [ 1083.561123][T27072] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.569603][T27067] audit: backlog limit exceeded [ 1083.570407][T27073] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1083.581528][T27072] netlink: 556 bytes leftover after parsing attributes in process `syz.0.7019'. [ 1083.594808][T25615] Bluetooth: hci0: Frame reassembly failed (-84) [ 1083.606680][T25615] Bluetooth: hci1: Frame reassembly failed (-84) [ 1083.758927][T27075] loop6: detected capacity change from 0 to 512 [ 1083.772613][T27075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1083.796152][T27075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.817764][T27075] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.080236][T27079] loop1: detected capacity change from 0 to 512 [ 1084.274848][T27082] loop1: detected capacity change from 0 to 512 [ 1084.293439][T27082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1084.421715][T27082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1084.450040][T27082] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.488658][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.531462][T27086] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7023'. [ 1084.957740][T27090] netlink: 556 bytes leftover after parsing attributes in process `syz.6.7024'. [ 1085.030388][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.058424][T27091] dvmrp1: entered allmulticast mode [ 1085.064617][T27091] dvmrp1: left allmulticast mode [ 1085.324904][T27100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7027'. [ 1085.345542][T25616] Bluetooth: hci3: Frame reassembly failed (-84) [ 1085.824342][T26087] Bluetooth: hci1: command 0x1003 tx timeout [ 1085.831124][T26087] Bluetooth: hci0: command 0x1003 tx timeout [ 1085.845820][T26027] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1085.852323][ T3567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1087.042045][T27107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7029'. [ 1087.321443][T26050] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1087.376606][T27111] loop7: detected capacity change from 0 to 512 [ 1087.522110][T27111] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.535551][T18237] Bluetooth: hci3: command 0x1003 tx timeout [ 1087.541588][T19073] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1087.570581][T27111] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1087.757021][T27117] program syz.0.7032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1087.853578][T27119] loop0: detected capacity change from 0 to 4096 [ 1087.910026][T27119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.079098][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.366948][T27127] loop1: detected capacity change from 0 to 512 [ 1088.373832][T27127] ext4: Unknown parameter 'smackfsdef' [ 1088.454309][ T28] kauditd_printk_skb: 592 callbacks suppressed [ 1088.454324][ T28] audit: type=1400 audit(1780410674.943:54357): avc: denied { create } for pid=27120 comm="syz.1.7034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1088.521545][T27125] syzkaller0: entered promiscuous mode [ 1088.658438][T27125] syzkaller0: entered allmulticast mode [ 1088.772002][ T28] audit: type=1400 audit(1780410675.336:54358): avc: denied { setopt } for pid=27118 comm="syz.0.7033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1088.847627][T27136] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7035'. [ 1088.856841][T27133] loop6: detected capacity change from 0 to 512 [ 1088.865108][ T28] audit: type=1400 audit(1780410675.364:54359): avc: denied { write } for pid=27118 comm="syz.0.7033" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1088.944973][ T28] audit: type=1400 audit(1780410675.467:54360): avc: denied { mount } for pid=27132 comm="syz.6.7038" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1088.984582][T27139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1089.007686][ T28] audit: type=1400 audit(1780410675.551:54361): avc: denied { bind } for pid=27137 comm="syz.1.7039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1089.046656][ T28] audit: type=1400 audit(1780410675.551:54362): avc: denied { read write } for pid=27137 comm="syz.1.7039" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1089.073853][ T28] audit: type=1400 audit(1780410675.551:54363): avc: denied { open } for pid=27137 comm="syz.1.7039" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1089.185716][ T28] audit: type=1400 audit(1780410675.720:54364): avc: denied { unmount } for pid=17324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1089.234198][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.254166][T27142] netlink: 556 bytes leftover after parsing attributes in process `syz.6.7040'. [ 1089.281118][T25613] Bluetooth: hci0: Frame reassembly failed (-84) [ 1089.379490][T27148] loop0: detected capacity change from 0 to 4096 [ 1089.488149][T27152] loop2: detected capacity change from 0 to 512 [ 1089.495079][T27152] ext4: Unknown parameter 'smackfsdef' [ 1089.590976][ T28] audit: type=1400 audit(1780410676.000:54365): avc: denied { create } for pid=27143 comm="syz.2.7042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1089.791283][ T28] audit: type=1400 audit(1780410676.000:54366): avc: denied { getopt } for pid=27143 comm="syz.2.7042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1089.872140][T27148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.152140][T27161] syzkaller0: entered promiscuous mode [ 1091.161545][T27161] syzkaller0: entered allmulticast mode [ 1091.193783][T27163] netlink: 556 bytes leftover after parsing attributes in process `syz.2.7046'. [ 1091.220030][T25620] Bluetooth: hci1: Frame reassembly failed (-84) [ 1091.282922][T27165] loop1: detected capacity change from 0 to 4096 [ 1091.292706][T27166] dvmrp1: entered allmulticast mode [ 1091.306847][T27166] dvmrp1: left allmulticast mode [ 1091.325075][T27165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.469044][T19073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1091.482766][T27171] syzkaller0: entered promiscuous mode [ 1091.511298][T27171] syzkaller0: entered allmulticast mode [ 1091.720335][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.813595][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.943397][T27180] loop0: detected capacity change from 0 to 512 [ 1091.954149][T27180] ext4: Unknown parameter 'smackfsdef' [ 1093.425372][T18237] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1093.898602][T27196] loop0: detected capacity change from 0 to 512 [ 1093.909369][T27196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1093.932648][T27196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.945899][T27196] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.959949][ T28] kauditd_printk_skb: 308 callbacks suppressed [ 1093.959965][ T28] audit: type=1400 audit(1780410680.191:54675): avc: denied { write } for pid=27194 comm="syz.0.7053" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1093.989304][ T28] audit: type=1400 audit(1780410680.191:54676): avc: denied { create } for pid=27194 comm="syz.0.7053" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1094.014327][T27201] loop6: detected capacity change from 0 to 512 [ 1094.026178][ T28] audit: type=1400 audit(1780410680.210:54677): avc: denied { module_request } for pid=27191 comm="syz.7.7052" kmod="netdev-ipvlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1094.049314][ T28] audit: type=1400 audit(1780410680.256:54678): avc: denied { sys_module } for pid=27191 comm="syz.7.7052" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1094.050608][T27201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.085920][T27201] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.104449][ T28] audit: type=1400 audit(1780410680.322:54679): avc: denied { write } for pid=27193 comm="syz.6.7054" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1094.258604][T27207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1094.435391][ T28] audit: type=1400 audit(1780410680.630:54680): avc: denied { read write } for pid=25160 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.481659][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.492100][ T28] audit: type=1400 audit(1780410680.630:54681): avc: denied { open } for pid=25160 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.516756][ T28] audit: type=1400 audit(1780410680.630:54682): avc: denied { ioctl } for pid=25160 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.543060][ T28] audit: type=1400 audit(1780410680.677:54683): avc: denied { unmount } for pid=22662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1094.563423][ T28] audit: type=1400 audit(1780410680.677:54684): avc: denied { prog_load } for pid=27209 comm="syz.2.7056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1094.615765][T27212] program syz.0.7057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1094.769167][T27216] loop0: detected capacity change from 0 to 512 [ 1095.061040][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.063385][T27216] EXT4-fs (loop0): 1 orphan inode deleted [ 1095.076210][T27216] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.105125][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7060'. [ 1095.130352][T27215] bond5: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 1095.140082][T27215] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1095.175138][T27225] loop7: detected capacity change from 0 to 512 [ 1095.206076][T27227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.447763][T27229] loop7: detected capacity change from 0 to 4096 [ 1095.459096][T27229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.489297][T27233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.582738][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.592618][T27235] syzkaller0: entered promiscuous mode [ 1095.622813][T27235] syzkaller0: entered allmulticast mode [ 1095.684993][T27238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1095.853385][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.888572][T27240] netlink: 556 bytes leftover after parsing attributes in process `syz.7.7066'. [ 1095.903037][T25616] Bluetooth: hci0: Frame reassembly failed (-84) [ 1096.115838][T27242] netlink: 556 bytes leftover after parsing attributes in process `syz.1.7067'. [ 1096.140846][T25616] Bluetooth: hci1: Frame reassembly failed (-84) [ 1096.163740][T27244] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7068'. [ 1096.190397][T25618] Bluetooth: hci2: Frame reassembly failed (-84) [ 1096.203980][T27245] dvmrp1: entered allmulticast mode [ 1096.210635][T27245] dvmrp1: left allmulticast mode [ 1096.455262][T27250] netlink: 'syz.2.7070': attribute type 2 has an invalid length. [ 1096.541218][T27256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1096.555011][T27257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7072'. [ 1096.601682][T27259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7073'. [ 1097.292765][T27279] loop2: detected capacity change from 0 to 512 [ 1097.299508][T27279] ext4: Unknown parameter 'smackfsdef' [ 1098.043721][ T3567] Bluetooth: hci0: command 0x1003 tx timeout [ 1098.043721][T26050] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1098.300294][T18237] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1098.304805][T26050] Bluetooth: hci1: command 0x1003 tx timeout [ 1098.385828][T18237] Bluetooth: hci2: command 0x1003 tx timeout [ 1098.389182][T19073] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1098.479256][T27287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7082'. [ 1098.494148][T27287] loop6: detected capacity change from 0 to 512 [ 1098.501183][T27287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1098.517500][T27287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.530558][T27287] ext4 filesystem being mounted at /564/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.699694][T27293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1099.022816][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.428601][ T28] kauditd_printk_skb: 340 callbacks suppressed [ 1099.428614][ T28] audit: type=1400 audit(1780410685.270:55025): avc: denied { write } for pid=27303 comm="syz.1.7088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1099.508820][ T28] audit: type=1326 audit(1780410685.279:55026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.625624][ T28] audit: type=1326 audit(1780410685.279:55027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.671156][T27312] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7090'. [ 1099.701933][ T28] audit: type=1326 audit(1780410685.279:55028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.731008][ T28] audit: type=1326 audit(1780410685.279:55029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.757220][ T28] audit: type=1326 audit(1780410685.279:55030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.783639][ T28] audit: type=1326 audit(1780410685.279:55031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.810153][ T28] audit: type=1326 audit(1780410685.289:55032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.836624][ T28] audit: type=1326 audit(1780410685.289:55033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1099.865163][ T28] audit: type=1326 audit(1780410685.289:55034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27303 comm="syz.1.7088" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1100.445285][T27315] loop7: detected capacity change from 0 to 512 [ 1100.449180][T27318] netlink: 556 bytes leftover after parsing attributes in process `syz.0.7094'. [ 1100.469142][T27321] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7093'. [ 1100.491491][T25618] Bluetooth: hci1: Frame reassembly failed (-84) [ 1100.548791][T27322] dvmrp1: entered allmulticast mode [ 1100.555480][T27322] dvmrp1: left allmulticast mode [ 1100.596209][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7095'. [ 1100.666837][T27327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7096'. [ 1100.693954][T27327] loop2: detected capacity change from 0 to 512 [ 1100.723275][T27327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1100.762391][T27327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.787626][T27327] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1100.811139][T27335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7100'. [ 1100.833101][T27337] loop7: detected capacity change from 0 to 4096 [ 1100.876772][T27337] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1101.127930][T27337] syzkaller0: entered promiscuous mode [ 1101.133452][T27337] syzkaller0: entered allmulticast mode [ 1101.337529][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.370034][T27345] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7102'. [ 1102.629246][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.662076][ T3567] Bluetooth: hci1: command 0x1003 tx timeout [ 1102.668163][T26050] Bluetooth: hci0: command 0x1003 tx timeout [ 1102.674383][T18237] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1102.680747][T19073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1102.969394][T27358] loop6: detected capacity change from 0 to 512 [ 1102.976189][T27358] ext4: Unknown parameter 'smackfsdef' [ 1103.444506][T27362] loop1: detected capacity change from 0 to 1024 [ 1103.574007][T27362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.646087][T27370] syzkaller0: entered promiscuous mode [ 1103.646113][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.651598][T27370] syzkaller0: entered allmulticast mode [ 1103.692316][T27379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7111'. [ 1103.707016][T27377] program syz.0.7112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1103.723462][T27377] program syz.0.7112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1103.788588][T27383] loop0: detected capacity change from 0 to 512 [ 1103.802699][T27383] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1103.908675][T27383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.921787][T27383] ext4 filesystem being mounted at /269/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.151381][T27393] loop2: detected capacity change from 0 to 512 [ 1104.160331][T27393] ext4: Unknown parameter 'smackfsdef' [ 1104.384236][T27396] loop1: detected capacity change from 0 to 512 [ 1104.438933][T27396] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1104.736245][T27398] FAULT_INJECTION: forcing a failure. [ 1104.736245][T27398] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.749178][T27398] CPU: 0 UID: 0 PID: 27398 Comm: syz.1.7117 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1104.749213][T27398] Tainted: [W]=WARN [ 1104.749220][T27398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1104.749265][T27398] Call Trace: [ 1104.749272][T27398] [ 1104.749282][T27398] __dump_stack+0x1d/0x30 [ 1104.749310][T27398] dump_stack_lvl+0x95/0xd0 [ 1104.749333][T27398] dump_stack+0x15/0x1b [ 1104.749353][T27398] should_fail_ex+0x263/0x280 [ 1104.749377][T27398] should_failslab+0x8c/0xb0 [ 1104.749477][T27398] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1104.749507][T27398] ? skb_clone+0x151/0x1f0 [ 1104.749536][T27398] skb_clone+0x151/0x1f0 [ 1104.749601][T27398] nfnetlink_rcv+0x316/0x1720 [ 1104.749629][T27398] ? __account_obj_stock+0x111/0x5f0 [ 1104.749650][T27398] ? xas_load+0x413/0x430 [ 1104.749678][T27398] ? __rcu_read_unlock+0x4e/0x70 [ 1104.749800][T27398] ? xa_load+0xb1/0xe0 [ 1104.749828][T27398] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 1104.749851][T27398] ? __account_obj_stock+0x3ba/0x5f0 [ 1104.749874][T27398] ? __rcu_read_unlock+0x4e/0x70 [ 1104.749934][T27398] ? should_fail_ex+0x30/0x280 [ 1104.749953][T27398] ? __rcu_read_unlock+0x4e/0x70 [ 1104.749973][T27398] ? avc_has_perm_noaudit+0xab/0x130 [ 1104.750016][T27398] netlink_unicast+0x5a8/0x680 [ 1104.750064][T27398] netlink_sendmsg+0x5c8/0x6f0 [ 1104.750103][T27398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.750157][T27398] ____sys_sendmsg+0x563/0x5b0 [ 1104.750185][T27398] ___sys_sendmsg+0x195/0x1e0 [ 1104.750277][T27398] __x64_sys_sendmsg+0xd4/0x160 [ 1104.750374][T27398] x64_sys_call+0x194c/0x3020 [ 1104.750398][T27398] do_syscall_64+0x12c/0x3b0 [ 1104.750471][T27398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.750495][T27398] RIP: 0033:0x7fdfcc09ce59 [ 1104.750510][T27398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.750526][T27398] RSP: 002b:00007fdfcaaf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.750593][T27398] RAX: ffffffffffffffda RBX: 00007fdfcc315fa0 RCX: 00007fdfcc09ce59 [ 1104.750608][T27398] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1104.750622][T27398] RBP: 00007fdfcaaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.750636][T27398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.750648][T27398] R13: 00007fdfcc316038 R14: 00007fdfcc315fa0 R15: 00007fff4e0a0d38 [ 1104.750666][T27398] [ 1105.118443][ T28] kauditd_printk_skb: 883 callbacks suppressed [ 1105.118534][ T28] audit: type=1326 audit(1780410690.592:55916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27401 comm="syz.1.7118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1105.169212][ T28] audit: type=1326 audit(1780410690.592:55917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27401 comm="syz.1.7118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1105.194791][ T28] audit: type=1326 audit(1780410690.592:55918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27401 comm="syz.1.7118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1105.227656][ T28] audit: type=1326 audit(1780410690.592:55919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27401 comm="syz.1.7118" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1105.270540][T27383] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1105.277094][T27383] audit: audit_lost=71 audit_rate_limit=0 audit_backlog_limit=64 [ 1105.284971][T27383] audit: backlog limit exceeded [ 1105.290401][T27383] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1105.296911][T27383] audit: audit_lost=72 audit_rate_limit=0 audit_backlog_limit=64 [ 1105.304633][T27383] audit: backlog limit exceeded [ 1105.324155][T27405] netlink: 556 bytes leftover after parsing attributes in process `syz.2.7120'. [ 1105.370926][T27407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7121'. [ 1105.396287][T25620] Bluetooth: hci0: Frame reassembly failed (-84) [ 1105.454577][T27410] dvmrp1: entered allmulticast mode [ 1105.460552][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1105.470896][T27410] dvmrp1: left allmulticast mode [ 1105.536935][T27414] program syz.1.7124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1105.559399][T27414] program syz.1.7124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1105.578251][T27417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7125'. [ 1105.607034][T27419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7126'. [ 1106.105699][T27435] loop0: detected capacity change from 0 to 512 [ 1106.113130][T27435] ext4: Unknown parameter 'smackfsdef' [ 1106.493964][T27438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7132'. [ 1106.625661][T27442] loop1: detected capacity change from 0 to 512 [ 1106.633096][T27442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1106.658345][T27442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.676022][T27442] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.989756][T27451] loop6: detected capacity change from 0 to 512 [ 1107.021329][T27453] program syz.0.7136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.034995][T27451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.052078][T27453] program syz.0.7136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.061637][T27451] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.064340][T27456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7137'. [ 1107.118201][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.219755][T27461] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7140'. [ 1107.233118][T27463] loop1: detected capacity change from 0 to 4096 [ 1107.252619][T27463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.448405][T27463] syzkaller0: entered promiscuous mode [ 1107.454003][T27463] syzkaller0: entered allmulticast mode [ 1107.537001][T18237] Bluetooth: hci0: command 0x1003 tx timeout [ 1107.537113][T19073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1107.602738][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.612928][T27472] loop7: detected capacity change from 0 to 128 [ 1107.657642][T27474] loop1: detected capacity change from 0 to 512 [ 1107.664228][T27474] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1107.720658][T27474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.733125][T27474] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.769520][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.275873][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.089171][T27492] loop7: detected capacity change from 0 to 512 [ 1110.096649][T27492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1110.128539][T27492] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.193122][T27492] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1110.457084][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 1110.457098][ T28] audit: type=1400 audit(1780410695.625:56197): avc: denied { create } for pid=27496 comm="syz.1.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1110.505385][T27501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7150'. [ 1110.524457][T27497] program syz.1.7148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1110.535975][T27497] program syz.1.7148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1110.591754][T27502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1110.996562][ T28] audit: type=1400 audit(1780410695.653:56198): avc: denied { allowed } for pid=27496 comm="syz.1.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1111.001843][T27506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7152'. [ 1111.016100][ T28] audit: type=1400 audit(1780410695.681:56199): avc: denied { create } for pid=27496 comm="syz.1.7148" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1111.016148][ T28] audit: type=1400 audit(1780410695.681:56200): avc: denied { create } for pid=27496 comm="syz.1.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1111.066165][ T28] audit: type=1400 audit(1780410695.681:56201): avc: denied { getopt } for pid=27496 comm="syz.1.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1111.085854][ T28] audit: type=1400 audit(1780410695.681:56202): avc: denied { read append } for pid=27496 comm="syz.1.7148" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1111.118132][ T28] audit: type=1400 audit(1780410695.681:56203): avc: denied { open } for pid=27496 comm="syz.1.7148" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1111.144447][T27512] FAULT_INJECTION: forcing a failure. [ 1111.144447][T27512] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.157508][ T28] audit: type=1400 audit(1780410695.718:56204): avc: denied { map_create } for pid=27498 comm="syz.2.7151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1111.176796][ T28] audit: type=1400 audit(1780410695.821:56205): avc: denied { read } for pid=27498 comm="syz.2.7151" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1111.198153][ T28] audit: type=1400 audit(1780410695.821:56206): avc: denied { open } for pid=27498 comm="syz.2.7151" path="net:[4026532402]" dev="nsfs" ino=4026532402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1111.221749][T27512] CPU: 1 UID: 0 PID: 27512 Comm: syz.1.7154 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1111.221781][T27512] Tainted: [W]=WARN [ 1111.221787][T27512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1111.221877][T27512] Call Trace: [ 1111.221885][T27512] [ 1111.221893][T27512] __dump_stack+0x1d/0x30 [ 1111.221915][T27512] dump_stack_lvl+0x95/0xd0 [ 1111.221935][T27512] dump_stack+0x15/0x1b [ 1111.222105][T27512] should_fail_ex+0x263/0x280 [ 1111.222127][T27512] should_failslab+0x8c/0xb0 [ 1111.222200][T27512] __kmalloc_noprof+0xb8/0x4d0 [ 1111.222265][T27512] ? fib6_info_alloc+0x2e/0x90 [ 1111.222392][T27512] fib6_info_alloc+0x2e/0x90 [ 1111.222416][T27512] ip6_route_info_create+0xe9/0x4f0 [ 1111.222483][T27512] ip6_route_add+0x49/0x170 [ 1111.222504][T27512] inet6_rtm_newroute+0x142/0x1150 [ 1111.222595][T27512] ? xa_load+0xb1/0xe0 [ 1111.222624][T27512] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 1111.222655][T27512] ? selinux_capable+0x31/0x40 [ 1111.222685][T27512] ? security_capable+0x7b/0x90 [ 1111.222787][T27512] ? ns_capable+0x7c/0xb0 [ 1111.222816][T27512] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1111.222878][T27512] rtnetlink_rcv_msg+0x64b/0x720 [ 1111.222945][T27512] ? avc_has_perm_noaudit+0xab/0x130 [ 1111.223015][T27512] netlink_rcv_skb+0x123/0x220 [ 1111.223039][T27512] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1111.223092][T27512] rtnetlink_rcv+0x1c/0x30 [ 1111.223113][T27512] netlink_unicast+0x5a8/0x680 [ 1111.223139][T27512] netlink_sendmsg+0x5c8/0x6f0 [ 1111.223170][T27512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.223206][T27512] ____sys_sendmsg+0x563/0x5b0 [ 1111.223235][T27512] ___sys_sendmsg+0x195/0x1e0 [ 1111.223269][T27512] __x64_sys_sendmsg+0xd4/0x160 [ 1111.223364][T27512] x64_sys_call+0x194c/0x3020 [ 1111.223387][T27512] do_syscall_64+0x12c/0x3b0 [ 1111.223415][T27512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.223434][T27512] RIP: 0033:0x7fdfcc09ce59 [ 1111.223450][T27512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.223502][T27512] RSP: 002b:00007fdfcaaf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.223523][T27512] RAX: ffffffffffffffda RBX: 00007fdfcc315fa0 RCX: 00007fdfcc09ce59 [ 1111.223603][T27512] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000004 [ 1111.223618][T27512] RBP: 00007fdfcaaf7090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.223632][T27512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.223646][T27512] R13: 00007fdfcc316038 R14: 00007fdfcc315fa0 R15: 00007fff4e0a0d38 [ 1111.223664][T27512] [ 1111.556605][T15843] kernel read not supported for file /newroot/115 (pid: 15843 comm: kworker/1:7) [ 1111.611866][T27518] netlink: 556 bytes leftover after parsing attributes in process `syz.2.7156'. [ 1111.687210][T27527] dvmrp1: entered allmulticast mode [ 1111.697013][T27527] dvmrp1: left allmulticast mode [ 1111.719434][T27529] loop0: detected capacity change from 0 to 512 [ 1111.726752][T27529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1111.752720][T27529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.780026][T27529] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.793423][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.823277][T27534] loop1: detected capacity change from 0 to 512 [ 1111.831216][T27534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1111.867760][T27536] loop7: detected capacity change from 0 to 1024 [ 1111.882745][T27536] EXT4-fs: Ignoring removed mblk_io_submit option [ 1111.927022][T27534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1111.939576][T27534] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.953240][T27536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1111.984412][T27536] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 1111.984412][T27536] [ 1112.047955][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.196346][T27542] loop7: detected capacity change from 0 to 512 [ 1112.305983][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.510035][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.582323][T27554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1112.587413][T27558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7169'. [ 1113.481522][T27576] netlink: 556 bytes leftover after parsing attributes in process `syz.0.7173'. [ 1113.497252][T25616] Bluetooth: hci0: Frame reassembly failed (-84) [ 1115.841348][T18237] Bluetooth: hci0: command 0x1003 tx timeout [ 1115.854573][T19073] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1117.041977][T27595] netlink: 556 bytes leftover after parsing attributes in process `syz.7.7178'. [ 1117.097281][T25616] Bluetooth: hci1: Frame reassembly failed (-84) [ 1117.237691][T27596] dvmrp1: entered allmulticast mode [ 1117.252601][T27596] dvmrp1: left allmulticast mode [ 1117.288352][ T28] kauditd_printk_skb: 302 callbacks suppressed [ 1117.288439][ T28] audit: type=1400 audit(1780410701.976:56509): avc: denied { ioctl } for pid=27594 comm="syz.7.7178" path="socket:[102350]" dev="sockfs" ino=102350 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1117.404189][T27603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7182'. [ 1117.469553][T27607] loop0: detected capacity change from 0 to 512 [ 1117.480067][ T28] audit: type=1400 audit(1780410702.173:56510): avc: denied { mounton } for pid=27604 comm="syz.0.7181" path="/284/file0" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1117.539351][T27608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1117.577083][ T28] audit: type=1400 audit(1780410702.285:56511): avc: denied { mount } for pid=27604 comm="syz.0.7181" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1117.930397][ T28] audit: type=1400 audit(1780410702.612:56512): avc: denied { unmount } for pid=22662 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1118.015178][ T28] audit: type=1400 audit(1780410702.697:56513): avc: denied { bind } for pid=27614 comm="syz.2.7185" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1118.035773][T27615] geneve2: entered allmulticast mode [ 1118.042462][T25620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 1118.053448][T25620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 1118.065254][ T28] audit: type=1400 audit(1780410702.697:56514): avc: denied { name_bind } for pid=27614 comm="syz.2.7185" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1118.069943][T25620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 1118.101098][T27616] loop0: detected capacity change from 0 to 512 [ 1118.128614][T27616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1118.145729][ T28] audit: type=1400 audit(1780410702.697:56515): avc: denied { node_bind } for pid=27614 comm="syz.2.7185" saddr=fe80::17 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1118.148775][T25620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 1118.168211][ T28] audit: type=1400 audit(1780410702.771:56516): avc: denied { create } for pid=27612 comm="syz.0.7184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1118.172637][T27616] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1118.250918][ T28] audit: type=1400 audit(1780410702.837:56517): avc: denied { mount } for pid=27612 comm="syz.0.7184" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1118.302268][ T28] audit: type=1400 audit(1780410702.874:56518): avc: denied { write } for pid=27612 comm="syz.0.7184" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1118.382880][T27624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7187'. [ 1118.456404][T27627] netlink: 556 bytes leftover after parsing attributes in process `syz.1.7188'. [ 1118.765707][T27631] FAULT_INJECTION: forcing a failure. [ 1118.765707][T27631] name failslab, interval 1, probability 0, space 0, times 0 [ 1118.779011][T27631] CPU: 1 UID: 0 PID: 27631 Comm: syz.6.7190 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1118.779088][T27631] Tainted: [W]=WARN [ 1118.779141][T27631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1118.779155][T27631] Call Trace: [ 1118.779238][T27631] [ 1118.779245][T27631] __dump_stack+0x1d/0x30 [ 1118.779266][T27631] dump_stack_lvl+0x95/0xd0 [ 1118.779286][T27631] dump_stack+0x15/0x1b [ 1118.779306][T27631] should_fail_ex+0x263/0x280 [ 1118.779328][T27631] should_failslab+0x8c/0xb0 [ 1118.779432][T27631] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1118.779464][T27631] ? ep_insert+0x2ba/0xd10 [ 1118.779496][T27631] ep_insert+0x2ba/0xd10 [ 1118.779523][T27631] do_epoll_ctl+0x686/0x8a0 [ 1118.779552][T27631] __x64_sys_epoll_ctl+0xcb/0x100 [ 1118.779655][T27631] x64_sys_call+0x2a8b/0x3020 [ 1118.779728][T27631] do_syscall_64+0x12c/0x3b0 [ 1118.779753][T27631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.779846][T27631] RIP: 0033:0x7fef21cbce59 [ 1118.779864][T27631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1118.779891][T27631] RSP: 002b:00007fef20717028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1118.779928][T27631] RAX: ffffffffffffffda RBX: 00007fef21f35fa0 RCX: 00007fef21cbce59 [ 1118.779942][T27631] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000008 [ 1118.779955][T27631] RBP: 00007fef20717090 R08: 0000000000000000 R09: 0000000000000000 [ 1118.779969][T27631] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1118.779984][T27631] R13: 00007fef21f36038 R14: 00007fef21f35fa0 R15: 00007fffda06fd48 [ 1118.780003][T27631] [ 1118.965441][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.017929][T27637] loop0: detected capacity change from 0 to 512 [ 1119.028330][T27637] ext4: Unknown parameter 'subj_user' [ 1119.257254][T27644] loop0: detected capacity change from 0 to 512 [ 1119.263929][T27644] ext4: Unknown parameter 'smackfsdef' [ 1119.342728][T26050] Bluetooth: hci1: command 0x1003 tx timeout [ 1119.348773][T19073] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1120.089805][T27647] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7195'. [ 1120.774904][T19073] Bluetooth: hci0: command 0x1003 tx timeout [ 1120.846847][T18237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1121.597005][T27656] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7197'. [ 1121.614593][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'. [ 1121.972068][T27664] loop1: detected capacity change from 0 to 512 [ 1121.999637][T27662] loop7: detected capacity change from 0 to 1024 [ 1122.008402][T27662] EXT4-fs: Ignoring removed mblk_io_submit option [ 1122.180206][T27662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1122.225261][T27662] EXT4-fs (loop7): bad geometry: bigalloc file system with non-zero first_data_block [ 1122.225261][T27662] [ 1122.270995][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.548852][T27671] loop1: detected capacity change from 0 to 512 [ 1122.560773][T27671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.583527][T27671] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.658490][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1122.658504][ T28] audit: type=1326 audit(1780410707.037:56534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.701157][T27670] netlink: 'syz.7.7201': attribute type 1 has an invalid length. [ 1122.733662][ T28] audit: type=1326 audit(1780410707.037:56535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.807481][ T28] audit: type=1326 audit(1780410707.065:56536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.843389][ T28] audit: type=1326 audit(1780410707.065:56537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.870149][ T28] audit: type=1326 audit(1780410707.065:56538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.897542][ T28] audit: type=1326 audit(1780410707.065:56539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.923344][ T28] audit: type=1326 audit(1780410707.065:56540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.949120][ T28] audit: type=1326 audit(1780410707.065:56541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1122.975115][ T28] audit: type=1326 audit(1780410707.065:56542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1123.050681][ T28] audit: type=1326 audit(1780410707.065:56543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27668 comm="syz.7.7201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c8ffece59 code=0x7ffc0000 [ 1123.078968][T27676] loop7: detected capacity change from 0 to 4096 [ 1123.112336][T27676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.130070][T27678] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7204'. [ 1123.254222][T27681] syzkaller0: entered promiscuous mode [ 1123.259809][T27681] syzkaller0: entered allmulticast mode [ 1123.391221][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.433807][T27685] netlink: 556 bytes leftover after parsing attributes in process `syz.1.7205'. [ 1123.449868][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.484374][T27691] netlink: 556 bytes leftover after parsing attributes in process `syz.7.7208'. [ 1123.488104][T27690] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7209'. [ 1123.504538][T27687] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7207'. [ 1123.521392][T25611] Bluetooth: hci3: Frame reassembly failed (-84) [ 1123.531686][T27692] dvmrp1: entered allmulticast mode [ 1123.538012][T27692] dvmrp1: left allmulticast mode [ 1123.545908][T27694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7210'. [ 1123.617448][T27699] loop6: detected capacity change from 0 to 4096 [ 1123.626706][T27699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.753017][T27702] syzkaller0: entered promiscuous mode [ 1123.758946][T27702] syzkaller0: entered allmulticast mode [ 1123.892198][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.077946][T27706] loop6: detected capacity change from 0 to 1024 [ 1124.086713][T27706] EXT4-fs: Ignoring removed mblk_io_submit option [ 1124.096596][T27706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1124.112277][T27706] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1124.112277][T27706] [ 1124.132432][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.279469][T27710] loop6: detected capacity change from 0 to 512 [ 1124.291251][T27710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.303902][T27710] ext4 filesystem being mounted at /583/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.067223][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.229953][T27716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7217'. [ 1125.326226][T26027] Bluetooth: hci0: command 0x1003 tx timeout [ 1125.336318][T18237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1125.668306][T26050] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1125.668420][T26050] Bluetooth: hci3: command 0x1003 tx timeout [ 1125.668473][T26050] Bluetooth: hci1: command 0x1003 tx timeout [ 1125.668501][T19073] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1125.668602][ T3567] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1125.922214][T27727] loop0: detected capacity change from 0 to 4096 [ 1125.944312][T27727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.088782][T27730] syzkaller0: entered promiscuous mode [ 1126.101603][T27730] syzkaller0: entered allmulticast mode [ 1126.213879][T27732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7221'. [ 1126.278082][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7222'. [ 1126.290779][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.340277][T27740] loop0: detected capacity change from 0 to 512 [ 1126.382544][T27736] loop6: detected capacity change from 0 to 1024 [ 1126.398396][T27740] EXT4-fs: dax option not supported [ 1126.411214][T27742] loop1: detected capacity change from 0 to 512 [ 1126.415282][T27736] EXT4-fs: Ignoring removed mblk_io_submit option [ 1126.432954][T27742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1126.450160][T27736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1126.472162][T27736] EXT4-fs (loop6): bad geometry: bigalloc file system with non-zero first_data_block [ 1126.472162][T27736] [ 1126.484680][T27740] loop0: detected capacity change from 0 to 128 [ 1126.507776][T27740] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1126.532597][T27742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1126.567905][T27740] ext4 filesystem being mounted at /293/file0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.585205][T27742] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1126.614091][T17324] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1126.631823][T27740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7224'. [ 1126.705385][T27756] loop6: detected capacity change from 0 to 1764 [ 1127.025403][T22662] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1127.930132][T27771] program syz.6.7232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.053781][T27772] program syz.6.7232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1128.731539][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.804335][T27793] __nla_validate_parse: 5 callbacks suppressed [ 1128.804362][T27793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7240'. [ 1128.825052][T27795] loop7: detected capacity change from 0 to 512 [ 1128.836967][T27795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1128.857758][T27793] loop0: detected capacity change from 0 to 512 [ 1128.867612][T27793] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1128.875794][T27795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.888510][T27791] loop1: detected capacity change from 0 to 1024 [ 1128.888794][T27795] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.931132][T27791] EXT4-fs: Ignoring removed mblk_io_submit option [ 1128.981611][T27791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1129.002164][T27793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1129.026665][T27793] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1129.046668][T27791] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 1129.046668][T27791] [ 1129.088720][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1129.088736][ T28] audit: type=1400 audit(1780410713.042:56606): avc: denied { write } for pid=27792 comm="syz.0.7240" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1129.143667][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.187034][ T28] audit: type=1400 audit(1780410713.042:56607): avc: denied { create } for pid=27792 comm="syz.0.7240" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1129.337590][T27805] loop2: detected capacity change from 0 to 1024 [ 1129.345835][T27805] EXT4-fs: Ignoring removed mblk_io_submit option [ 1129.353999][ T28] audit: type=1326 audit(1780410713.238:56608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.380494][ T28] audit: type=1326 audit(1780410713.238:56609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.420253][T27805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1129.438081][ T28] audit: type=1326 audit(1780410713.238:56610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.463705][ T28] audit: type=1326 audit(1780410713.238:56611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.489372][ T28] audit: type=1326 audit(1780410713.238:56612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.497709][T27813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7245'. [ 1129.514915][ T28] audit: type=1326 audit(1780410713.238:56613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.515046][ T28] audit: type=1326 audit(1780410713.238:56614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.515072][ T28] audit: type=1326 audit(1780410713.238:56615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27806 comm="syz.1.7243" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfcc09ce59 code=0x7ffc0000 [ 1129.604000][T27805] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1129.604000][T27805] [ 1129.652717][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.731617][T27817] program syz.1.7246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1129.741737][T27817] program syz.1.7246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1129.797435][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7248'. [ 1129.817936][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7247'. [ 1129.870521][T27824] loop1: detected capacity change from 0 to 512 [ 1129.999194][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.011448][T27832] netlink: 556 bytes leftover after parsing attributes in process `syz.6.7252'. [ 1130.036335][T25613] Bluetooth: hci0: Frame reassembly failed (-84) [ 1130.114435][T27842] program syz.2.7258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1130.125246][T27842] program syz.2.7258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1130.135648][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.158611][T27843] loop1: detected capacity change from 0 to 512 [ 1130.190342][T27843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.194793][T27847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7259'. [ 1130.205315][T27843] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1130.428880][T27849] netlink: 'syz.0.7257': attribute type 2 has an invalid length. [ 1130.470129][T25618] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 1130.481799][T25618] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 1130.546999][T25618] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 1130.591427][T25618] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 1131.100820][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.070754][T27874] program syz.7.7267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1132.136352][T27877] program syz.7.7267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1132.140984][T27870] loop1: detected capacity change from 0 to 512 [ 1132.177529][T27870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1132.193104][T27870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.212221][T27870] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.238939][T27884] program syz.2.7270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1132.249968][T27884] program syz.2.7270 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1132.261150][T18237] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1132.407640][T27890] loop2: detected capacity change from 0 to 512 [ 1132.419913][T27890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1132.432435][T27890] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1132.711796][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.124939][T27899] loop0: detected capacity change from 0 to 512 [ 1133.135363][T27899] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1133.165783][T27899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.185567][T27899] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.304909][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1133.326984][T27908] loop7: detected capacity change from 0 to 512 [ 1133.343519][T27910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7279'. [ 1133.345795][T27908] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1133.500883][T27910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1133.532879][T27910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.566521][T27910] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.711857][T27908] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.894508][T27908] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.221905][T27921] program syz.1.7282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1134.251983][T27921] program syz.1.7282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1134.402960][T27924] set_capacity_and_notify: 1 callbacks suppressed [ 1134.402987][T27924] loop1: detected capacity change from 0 to 512 [ 1134.604902][T27924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1134.611813][ T28] kauditd_printk_skb: 1081 callbacks suppressed [ 1134.611826][ T28] audit: type=1400 audit(1780410718.205:57697): avc: denied { mounton } for pid=27923 comm="syz.1.7283" path="/144/bus" dev="tmpfs" ino=784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1134.728602][ T28] audit: type=1400 audit(1780410718.243:57698): avc: denied { perfmon } for pid=27898 comm="syz.0.7275" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1134.862720][T27924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.879512][ T28] audit: type=1400 audit(1780410718.243:57699): avc: denied { tracepoint } for pid=27898 comm="syz.0.7275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1134.911577][T27924] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1134.923847][ T28] audit: type=1400 audit(1780410718.467:57700): avc: denied { create } for pid=27906 comm="syz.7.7278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1134.944503][ T28] audit: type=1400 audit(1780410718.467:57701): avc: denied { map_create } for pid=27906 comm="syz.7.7278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1134.963873][ T28] audit: type=1400 audit(1780410718.486:57702): avc: denied { perfmon } for pid=27906 comm="syz.7.7278" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1134.985264][ T28] audit: type=1400 audit(1780410718.486:57703): avc: denied { map_read map_write } for pid=27906 comm="syz.7.7278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1135.005644][ T28] audit: type=1400 audit(1780410718.486:57704): avc: denied { prog_load } for pid=27906 comm="syz.7.7278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1135.035264][ T28] audit: type=1400 audit(1780410718.486:57705): avc: denied { bpf } for pid=27906 comm="syz.7.7278" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1135.035371][T27931] ================================================================== [ 1135.056255][ T28] audit: type=1400 audit(1780410718.495:57706): avc: denied { open } for pid=27906 comm="syz.7.7278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1135.064069][T27931] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1135.064117][T27931] [ 1135.064124][T27931] write to 0xffffffff86c7e518 of 8 bytes by task 28 on cpu 0: [ 1135.064142][T27931] data_alloc+0x310/0x390 [ 1135.064170][T27931] prb_reserve+0x8d6/0xad0 [ 1135.064197][T27931] vprintk_store+0x54a/0x910 [ 1135.064214][T27931] vprintk_emit+0x1a4/0x600 [ 1135.064233][T27931] vprintk_default+0x26/0x30 [ 1135.084684][T25160] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.090490][T27931] vprintk+0x1d/0x30 [ 1135.090520][T27931] _printk+0x79/0xa0 [ 1135.139287][T27931] kauditd_hold_skb+0x1b1/0x1c0 [ 1135.144143][T27931] kauditd_send_queue+0x273/0x2c0 [ 1135.149169][T27931] kauditd_thread+0x444/0x670 [ 1135.153844][T27931] kthread+0x22a/0x280 [ 1135.157941][T27931] ret_from_fork+0x146/0x330 [ 1135.162541][T27931] ret_from_fork_asm+0x1a/0x30 [ 1135.167317][T27931] [ 1135.169638][T27931] read to 0xffffffff86c7e518 of 16 bytes by task 27931 on cpu 1: [ 1135.177345][T27931] _prb_read_valid+0x1b6/0x950 [ 1135.182118][T27931] prb_read_valid+0x3c/0x60 [ 1135.186631][T27931] console_unlock+0x146/0x280 [ 1135.191303][T27931] con_write+0xca/0x1d0 [ 1135.195504][T27931] n_tty_write+0x826/0xb80 [ 1135.199923][T27931] file_tty_write+0x378/0x680 [ 1135.204799][T27931] tty_write+0x25/0x30 [ 1135.208858][T27931] vfs_write+0x5a6/0x9f0 [ 1135.213101][T27931] ksys_write+0xdc/0x1a0 [ 1135.217348][T27931] __x64_sys_write+0x40/0x50 [ 1135.221936][T27931] x64_sys_call+0x27e1/0x3020 [ 1135.226616][T27931] do_syscall_64+0x12c/0x3b0 [ 1135.231211][T27931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.237109][T27931] [ 1135.239436][T27931] Reported by Kernel Concurrency Sanitizer on: [ 1135.245621][T27931] CPU: 1 UID: 0 PID: 27931 Comm: syz.6.7286 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1135.256567][T27931] Tainted: [W]=WARN [ 1135.260364][T27931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1135.270412][T27931] ================================================================== [ 1135.290171][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.337461][T27935] netlink: 556 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1135.408089][T20556] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.417586][T27936] loop0: detected capacity change from 0 to 1024 [ 1135.424639][T27936] EXT4-fs: Ignoring removed mblk_io_submit option [ 1135.453802][T27936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1135.486895][T27936] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1135.486895][T27936] [ 1135.512385][T22662] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.735517][T25599] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.556266][T18237] Bluetooth: hci0: command 0x1003 tx timeout [ 1137.556262][ T3567] Bluetooth: hci0: Opcode 0x1003 failed: -110