last executing test programs: 8m13.712858092s ago: executing program 32 (id=24): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000040)=[{0x0, 0xf8, 0xb, 0x2}, {0x7, 0x5, 0x6, 0x401}, {0xfffb, 0x5, 0x1, 0x4}, {0xffe2, 0x46, 0x0, 0x8}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create(0x200) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x10) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xa0000008}) epoll_wait(r8, &(0x7f00000001c0), 0x0, 0xffffff90) close(r6) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0b"], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000200)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xd8\xdfa\xea62\x90\xfc\x10\xfd\xd8\x06hTa2\xd8\xf9\"N\x8f04\xf5\xcczg\xa0Y\xc5?E\xe8\x0e\x14R`b\xa6\xf1w\xe2\xc0\xe2\xea\a\x02\x15\xb0\xf2\x82\f9b\xc9P\xe21L\xf1NKN\xce\xbd\x18\x1a\xd6\x12\xe6\xc9\xf3\xba\x02 \xed\xf9\xb6\x0f\x15a3\xd9\xa8?\xc4\xc2\x87\xd6\x97=\x06\x93\x06\xf74h\xa8o`\xd0\xdfA\xa8\x9b\xce\"\x01v+j\x19&\xf6yq:\x94\x10#\x89Sp\x8f\xd7\x92\xa1S9\xf2\xb0\xdd:t=\n', 0x6) syz_usb_connect$cdc_ncm(0x1, 0x14a, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x340, 0x25, 0x2, 0x1, 0x0, 0x1}, 0x93, &(0x7f0000000100)=ANY=[@ANYBLOB="050f9300051410040bfebd2c48d3046928651e7c5fc370416003100b14100403d8bd2f8804bccf6723c48daec6ecd16a5c10031b2ee6be53b4d3d53c07cf87685b7a8b135eb9328e6dca7bce384d476dc1a7b8ef03185ea2ee9961244f67af9791ad02e20f074dbaa23c9e3b15dd31373dcf3bc456a3e10f3464ae3f0128dee1b7f76c8381329f886cd281cd4200d3f8e79d63"], 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x441}}]}) 7m41.874028233s ago: executing program 4 (id=191): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000000000000000000000000000000000000ffffffffffffff80000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 7m41.768478186s ago: executing program 4 (id=193): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, r1, 0x5, 0x0, 0x3}, 0x50) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000100)=0xffff, 0x19) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000062, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 7m40.630768201s ago: executing program 4 (id=196): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x2, 0x3}}}], 0x18}, 0x440e0) 7m40.577708382s ago: executing program 4 (id=198): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000002540)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) pwritev(r3, &(0x7f0000003940)=[{&(0x7f0000002580)="ad", 0x1}], 0x1, 0x400, 0x7e5) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000280)={[{@mb_optimize_scan}, {@init_itable}, {@bsdgroups}]}, 0xff, 0xbd9, &(0x7f0000000300)="$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") r4 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[], 0xfebc) write$tun(r1, &(0x7f0000000f00)=ANY=[@ANYBLOB="00000000aaaaaaaaaa30ffffffffffff08004500003000000000002f9078ac1e0001e0000001000086dd001c907881070681134a3185364500000000000000030000d45d334db818b4d761eee968391958fa26b5de410e2fd234732a386a65feb3"], 0x42) syz_read_part_table(0x604, &(0x7f0000000000)="$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") r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000640)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) waitid(0x1, r8, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r8, 0x202, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m39.04802048s ago: executing program 4 (id=215): r0 = socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r0, 0x0, 0x80, 0xe) write$cgroup_devices(r5, 0x0, 0x9) write(r3, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x0) epoll_create1(0x0) epoll_create1(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x7) socket(0x10, 0x3, 0x9) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYBLOB="b9019bb968e88388d2299eebbd2a99c89ab02c88f9d4b68e405fbbafc6d3193caf6705c1f52d3cd35450481e3af9b6b805f1ee175be03f8579f377a11796b9b47a67e0c51049a495d5657edd59b89c2ce686a41ce83e542d5033b5cbf790b9e7c200186e1f5ffed095dc5f2f6159c8fe1306aba5384c58198bc9e1b253b8260673c28809cd2b9f145aa6736ce26d58227223c4ce1bb4fe9ed907052a2512296921e5214e8fb881750616cd5456e2e4ac1694171b7fbf29b5ae6c4115faec610a754e007112c893cdc028e64b6e2f1cb049dd8034c6fff48beb0f9205bb9a4ac650603e81de541aa0a10632623f7e918c"], 0x20}, 0x1, 0x0, 0x0, 0x20088014}, 0x48855) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x80000, @local, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@rthdr={{0x18, 0x29, 0x39, {0x3b, 0x0, 0x2, 0x3}}}], 0x18}, 0x440e0) 7m38.186286196s ago: executing program 4 (id=221): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x100000000000}, 0x0, 0x3b, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x119111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x4000840) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x22, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03"], 0x0, 0x52}, 0x28) poll(&(0x7f0000000040)=[{r1, 0x9000}, {r2}], 0x2, 0x9) (async) ptrace(0x10, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x100}}, 0x0) (async) msgget(0x3, 0x584) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x42}, 0x94) r4 = msgget$private(0x0, 0x100) msgsnd(r4, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) (async) msgsnd(r4, 0x0, 0xcc, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) (async) r5 = getpid() syz_clone3(&(0x7f0000000280)={0x20000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x4, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) socket(0x10, 0x3, 0x0) (async) msgget(0x3, 0x680) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) 7m38.08409086s ago: executing program 33 (id=221): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x100000000000}, 0x0, 0x3b, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x119111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x4000840) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x22, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03"], 0x0, 0x52}, 0x28) poll(&(0x7f0000000040)=[{r1, 0x9000}, {r2}], 0x2, 0x9) (async) ptrace(0x10, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x70, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x100}}, 0x0) (async) msgget(0x3, 0x584) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x42}, 0x94) r4 = msgget$private(0x0, 0x100) msgsnd(r4, &(0x7f0000002900)=ANY=[@ANYBLOB="03"], 0xfd1, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x1, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8580, 0x3}) (async) msgsnd(r4, 0x0, 0xcc, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) (async) r5 = getpid() syz_clone3(&(0x7f0000000280)={0x20000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x4, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) socket(0x10, 0x3, 0x0) (async) msgget(0x3, 0x680) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) 4m50.712502089s ago: executing program 6 (id=1128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc}, 0x14}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') fcntl$notify(r0, 0x402, 0x8000002f) getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100e4457000fcdbdf1c1b"], 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="0369", 0x2}, {&(0x7f00000002c0)="c2", 0x1}, {&(0x7f00000001c0)='~\\', 0x2}, {&(0x7f00000003c0)="92fa4a2329314399c5079df01ee21d2060e2d9f07b86c05ff9ee41412d02db7e68325094fb65fadd1429e3c2ce24df97f536d73a5ab3fcb8db60b219c935aef1ee8197b6b634f54332ff3fd8ca8aaca5aeb2dbdd26328ddd7df40f31bdbd45b69d3be12bf443527625cd52e5f712fecb76b87514097c3fd3b8abbfc36ab782bc293ed68d1c1c43bd", 0x88}], 0x4}}], 0x1, 0x4000800) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x3124084, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 4m50.456261517s ago: executing program 6 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x305341) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x305341) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x2, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff54, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r1, @ANYRES16=r2, @ANYRESHEX=r0, @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) 4m50.236566314s ago: executing program 6 (id=1136): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x2175, &(0x7f0000000240)={0x0, 0x5138, 0x20000, 0x1, 0x39c, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x80, r2, 0x0, 0x0, 0xff, 0x0, 0x2}]) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0xa6a, 0x0, 0x0, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0xa4001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r4) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000900), 0xd}, 0x1101, 0x0, 0x4, 0x6, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000000)=ANY=[@ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, 0x0) getdents(r8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) 4m42.778260734s ago: executing program 6 (id=1173): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket(0x28, 0x5, 0x0) getsockopt(r1, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0x1000}, 0x0, 0x800000, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x20008000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x37) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r5, 0x8b, 0x1000, 0x7fff}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r5, 0x4}, &(0x7f0000000080)=0x8) 4m41.876656182s ago: executing program 6 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) inotify_init() mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23f9cde, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x89901) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='map=off,session=0x0000000000000017\x00sbsector=0x0000000100000001,sbsector=0x0000000000000005,session=0x0000000000000062,nojolietAiocharset=cp865,iocharset=cp737,session=0x0000000000000058,showassoc,mode=0xffffffaffffffffe,norock,\x00'], 0xfa, 0x69f, &(0x7f0000000840)="$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") 4m41.101220795s ago: executing program 6 (id=1185): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000001f40)=""/4089, 0x0, 0xff9, 0x9, 0x80}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40202, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x0, 0x5}, 0x4, 0x0, 0x90000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x4c405) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0xfffffffffffffff9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000001f40)=""/4089, 0x0, 0xff9, 0x9, 0x80}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) (async) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40202, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x0, 0x5}, 0x4, 0x0, 0x90000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x4c405) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0xfffffffffffffff9) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 4m40.931230931s ago: executing program 34 (id=1185): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000001f40)=""/4089, 0x0, 0xff9, 0x9, 0x80}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40202, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x0, 0x5}, 0x4, 0x0, 0x90000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x4c405) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0xfffffffffffffff9) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000001f40)=""/4089, 0x0, 0xff9, 0x9, 0x80}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) (async) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40202, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x0, 0x5}, 0x4, 0x0, 0x90000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x4c405) (async) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000140)=0xfffffffffffffff9) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000200)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 4m1.063662729s ago: executing program 1 (id=1443): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2a, r1}) r2 = io_uring_setup(0x1b60, &(0x7f00000003c0)={0x0, 0xeb19, 0x8, 0x0, 0x3c7}) io_uring_enter(r2, 0x6340, 0x4345, 0x10, &(0x7f0000000440), 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) r4 = fcntl$dupfd(r0, 0x0, r2) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r5, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x35}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000008}, 0x20000000) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x68, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1b9}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc050) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r4) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100d4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x2, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004018}, 0x4040000) socket$netlink(0x10, 0x3, 0x4) ioctl$BLKGETDISKSEQ(r4, 0x80081280, &(0x7f00000008c0)) getgroups(0x3, &(0x7f0000000900)=[0xee00, 0xffffffffffffffff, 0xee00]) ioctl$TUNSETGROUP(r4, 0x400454ce, r8) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000980), r3) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000c80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f00000009c0)={0x254, r9, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x104, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa60e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b3f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa23b}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2a2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c81}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7aa68051}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x208d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5744030d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x317d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x354d913c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1265b981}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x613cf6ff}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5363}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2a23}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b664fe9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8430}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fcf35fb}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b3a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x181d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f6cb3ea}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x900f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36d4b5b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a392e78}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x765a1b01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b23ae16}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x158f62be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2af7a94a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c1ca4c1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x486d8c19}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f84d790}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43e17d25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3db2ff1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5af0bfd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x184ba401}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000}, 0x40011) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xec, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ksm_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:policy_src_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:gpg_exec_t:s0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x8080}, 0x20004000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000e80), r3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000ec0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f80)={r4, 0x58, &(0x7f0000000f00)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000fc0)={r10, 0x10000, 0x18}, 0xc) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000001000)=@v1={0x0, @aes128, 0x0, @desc2}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)={0x188, r11, 0x20, 0xf, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x10b, 0x2a, [@perr={0x84, 0x102, {0x4, 0x10, [{{}, @device_a, 0x5d8, @void, 0x4}, {{}, @device_b, 0x2, @void, 0x5}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x16}, {{}, @device_b, 0x0, @void, 0x13}, {{}, @device_b, 0x2, @void, 0x35}, {{0x0, 0x1}, @device_b, 0x3d97, @value=@device_b, 0x26}, {{0x0, 0x1}, @device_a, 0x81, @value=@broadcast, 0x4}, {{0x0, 0x1}, @device_a, 0x7, @value=@device_b, 0x16}, {{}, @broadcast, 0x7, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x1}, {{0x0, 0x1}, @device_b, 0xfc7b, @value=@broadcast, 0x19}, {{}, @device_a, 0x7, @void, 0x11}, {{}, @device_a, 0x5, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x27}, {{0x0, 0x1}, @device_a, 0xd, @value, 0x16}, {{}, @broadcast, 0xb75e, @void, 0x27}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="56cbc460cf95"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ea9bd89c13c3"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000844}, 0x43) socket$netlink(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x10, 0x6, 0x8, 0x5, 0x4001, 0xffffffffffffffff, 0xede, '\x00', 0x0, r4, 0x4, 0x0, 0x4}, 0x50) 4m0.997182851s ago: executing program 1 (id=1449): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x8001, 0x8, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={0x0, 0x0, 0x10}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000003c0)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x1) 3m58.686839413s ago: executing program 1 (id=1462): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x5, 0x203, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xdffbffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) readv(r0, &(0x7f0000002900)=[{&(0x7f0000000340)=""/128, 0x80}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/10, 0xa}, {&(0x7f00000027c0)=""/218, 0xda}, {&(0x7f00000028c0)=""/57, 0x39}], 0x5) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={0xffc, r4, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x2e}}}}, [@NL80211_ATTR_TX_RATES={0xcc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xa, 0x7, 0xe1, 0x7, 0x4, 0xc, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x9, 0x1, 0x2, 0x5, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0xc, 0x9, 0xc, 0x6c, 0xc, 0x4, 0x0, 0x6, 0x9, 0x1b, 0x2, 0xd, 0x24]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x4, 0x1}, {0x2, 0x7}, {0x3}, {0x4, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x5, 0x6}, {0x7, 0x8}, {0x5, 0x8}, {0x5, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0x7}, {0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x7, 0x3}, {0x1}, {0x1, 0x6}, {0x3, 0x4}, {0x5}, {0x1, 0x7}, {0x6, 0x3}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x6, 0x5}, {0x7, 0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x2}, {}, {0x2, 0x4}, {0x4, 0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0xd}, {0x3, 0x5}, {0x2, 0x4}, {0x2, 0x9}, {0x5, 0x9}, {0x3, 0x1}, {0x5, 0x5}, {0x2, 0x5}, {0x6, 0x5}, {0x2, 0xa}, {0x5, 0x7}, {0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x3, 0x2}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x2, 0x4}, {0x3}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0x1}, {0x5, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xbe81, 0x3ff, 0x3, 0x1, 0x10, 0x4239, 0xd7a1, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x223, 0x8, 0x9, 0x100, 0x0, 0x5f58, 0x16b, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x30, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xd2ad, 0x7, 0x8, 0x7, 0xa, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x6, 0x591b, 0x2, 0xc, 0x9, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x2b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0xc, 0x7c, 0x36, 0x6c, 0x4, 0x10, 0x5, 0x12, 0x48, 0x9, 0x24, 0x10, 0x18, 0xb, 0x6, 0x1, 0x3, 0x24, 0x12, 0x30]}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0xec00, 0x5, 0x80, 0x63db, 0x5, 0x326]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x1c00, 0x8]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x8}, {0x7, 0xa}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x5}, {0x3, 0x1b}, {0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x1, 0x1, 0x8, 0x800, 0x8, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x7, 0x1, 0x7, 0x1, 0x88f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x5, 0xffff, 0x1, 0x8001, 0x0, 0x101]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x342, 0x0, 0x6, 0x3, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x9}, {0x2, 0x3}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x3}, {0x6, 0x2}, {0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x1}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x5, 0xa}, {0x5, 0x3}, {0x2, 0x3}, {0x4, 0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x3, 0x1}, {0x4, 0x3}, {0x5, 0x9}, {0x5, 0x1c}, {0x1, 0x8}, {0x6, 0x2}, {0x7, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x4}, {0x5, 0x8}, {0x3, 0x1}, {0x1, 0x7}, {0x6, 0x8}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x1, 0x8}, {0x4, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x6, 0x9}, {0x3, 0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x3}, {0x6, 0x2}, {0x4, 0x6}, {0x1}, {0x1, 0x6}, {0x1, 0x1}, {0x7, 0x8}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0xa}, {0x6}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x21e9, 0x40, 0x100, 0x8, 0x9, 0x1e, 0x8, 0xfb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x18, 0x36, 0x1, 0x16, 0x3, 0x1, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x1, 0x18, 0x9, 0xc, 0x18, 0x30, 0x0, 0x24, 0x5, 0x3, 0x60, 0x1b, 0x6c, 0x30, 0x36, 0x30, 0x6, 0x16, 0x9, 0x30, 0xc2d24507c0dd37e4, 0xc, 0x1, 0x1, 0x1b]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x3, 0x60, 0x6c, 0x60, 0x36, 0x30, 0x30, 0x30, 0xc, 0x48, 0xb, 0x12, 0x18, 0x3, 0x3, 0x60, 0xc, 0x24, 0x48, 0x2, 0xb, 0x9, 0x36, 0x24, 0xc, 0x12, 0x1b, 0x6, 0x36, 0x12, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xc, 0x60, 0xc, 0x6c, 0x5, 0x1b, 0x9, 0x18, 0x4, 0x24, 0x9, 0x1b, 0x30, 0x1, 0x60, 0x0, 0x4, 0x12, 0x6, 0x16, 0x24, 0x18, 0xc]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x7, 0x3, 0x270, 0x7ff, 0x7, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0xb, 0x4, 0x4, 0x2, 0x18, 0x48, 0x40, 0x6c, 0x0, 0x60, 0x1b, 0x24, 0x60, 0xc, 0x48, 0x2, 0x18, 0x2, 0xb, 0x1, 0x6c, 0x12, 0x9, 0x12, 0x30, 0x30, 0x1, 0x12, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x60, 0xb, 0x9, 0x9, 0x48, 0x1, 0x9, 0x3, 0x6, 0x36, 0x9, 0x9, 0x3, 0x5, 0x6c, 0x60, 0x12, 0xb, 0x2, 0x36, 0x16, 0x36, 0xc, 0x48, 0x2, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0x5, 0x68, 0x100, 0x4, 0x2, 0x6a3f]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0xb, 0x60]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0x6ab, 0x4b41, 0xcf4, 0x7, 0x7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3b5, 0x101, 0x6, 0x2, 0x2000, 0x1, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x160, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x3}, {0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x3, 0x3, 0x7fff, 0x0, 0x5, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3cef, 0xf8df, 0x6e, 0x7, 0x1b, 0xbf, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x7fff, 0x5, 0x2, 0x401, 0x5, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x9, 0x4, 0x5, 0x7, 0xeb, 0x2]}}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6f0, 0x5, 0xfaed, 0x40, 0x2, 0xf, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6c, 0x12, 0xb, 0x60, 0xb, 0x2, 0x48, 0x60, 0x79, 0x1d, 0x24, 0x4, 0x6c, 0x48, 0x2, 0x12, 0x48, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x332b, 0x8, 0x5, 0xc, 0x8, 0x1, 0x3, 0x81]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x5, 0x12, 0x3, 0x1b, 0x16, 0x5, 0xc, 0x6, 0x24, 0x60, 0xb, 0x12, 0x6, 0x12, 0x18, 0x36, 0xb, 0x30, 0x12, 0x2, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x9, 0x8982, 0x9, 0xffd0, 0x6, 0x0, 0xff]}}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0xa}, {0x7, 0x1}, {0x3, 0x3}, {}, {0x1, 0xa}, {0x3, 0x8}, {0x6, 0x6}, {}, {0x3, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x2}, {0x3, 0x9}, {0x6, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {}, {0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x6}, {0x5}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x3}, {0x2}, {0x5, 0x6}, {0x2, 0x2}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x6}, {0x7, 0x9}, {0x1, 0x8}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0x3}, {0x6, 0x8}, {0x3, 0x2}, {0x5, 0xa}, {0x6, 0x9}]}]}]}, @NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x2, 0x9, 0x6, 0x12, 0x12, 0x4, 0x48, 0x3, 0x6, 0x18, 0x16, 0x6c, 0x4, 0x48, 0x2d, 0x6c, 0xb, 0x16, 0x26, 0x30, 0x6c, 0x1b]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x0, 0x4}, {0x7, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x5}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x3, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x7, 0x8}, {0x4, 0x2}, {0x7, 0xa}, {0x0, 0x4}]}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x7, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x3, 0x9}, {0x6, 0x6}, {0x1, 0x6}, {0x0, 0xa}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x7, 0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x8}, {0x3, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x7}, {0x5, 0xa}, {0x5, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x3, 0x5}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x1, 0x10, 0x8, 0x8, 0x3cb, 0x7]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x1}, {0x6, 0x9}, {0x6, 0x8}, {0x4, 0x1}, {0x2, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x9}, {0x7, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x6}, {0x3, 0xa}, {0x5, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x6, 0xa}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x23ab, 0x8, 0xfffe, 0xb, 0x7, 0x6, 0x7fff, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0xfff, 0x7929, 0x3, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x4}, {0x7, 0x9}, {0x3, 0x6}, {0x2, 0x7}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x9}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0xa}, {0x2, 0x5}, {0x5, 0x5}, {0x6, 0x1}, {0x2, 0x3}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x5}, {0x5}, {0x7, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x3}, {0x3}, {0x1, 0x9}, {0x4, 0x1d}, {0x0, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0x3}, {}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x5}, {0x2}, {0x7, 0x6}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0xa}, {0x2, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x7, 0x7}, {0x7}, {0x0, 0x1}, {0x7, 0x8}, {0x3, 0x3}, {}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x1, 0x3}, {0x7, 0x8}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x3}, {0x4, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x6, 0x2}, {0x7, 0x9}, {0x6, 0x7}, {0x3, 0x7}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x0, 0x6, 0x8, 0xfe, 0x9, 0x101]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x7ff, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x7, 0x2}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0xa}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x7, 0x4}, {0x5}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x6}, {}, {0x5, 0xa}, {0x6}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x1, 0x7}, {0x4, 0x6}, {0x2, 0x2}, {0x5}, {0x3}, {0x0, 0x5}, {0x5}, {0x1, 0xa}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x8}, {0x4, 0x1}, {0x2}, {0x1, 0x4}, {0x6}, {0x5, 0xa}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x7}, {0x3, 0x7}, {0x1, 0x6}, {0x1}, {0x6, 0x9}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0xa}, {0x2, 0x5}, {0x3, 0x2}, {0x3, 0x5}, {0x7, 0x6}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x7}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0x4, 0x30, 0x5, 0x3, 0x36, 0x1, 0x12, 0x12, 0x1b, 0xc, 0x2, 0x3, 0x36, 0x60]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xb, 0x40, 0xb2, 0x8, 0x8001, 0x9, 0x7]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x18, 0x12, 0x48, 0x1b, 0x5, 0xc, 0x16, 0x3, 0x30, 0x18, 0x2, 0x0, 0x3, 0x36, 0x48, 0x2, 0x6c, 0x9, 0xc, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x8, 0x2890, 0xf54, 0x8001, 0x8, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x9, 0x3, 0x400, 0xb2, 0x1, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x16, 0x6, 0x1b, 0x48, 0xc, 0x16]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x1b, 0x6, 0x4, 0x48, 0xc, 0x9, 0x16, 0x24, 0x4, 0x5, 0x16, 0x12, 0xc, 0x3aa454f932e03f0b, 0x36, 0x36, 0x6, 0x3, 0xc]}]}]}, @NL80211_ATTR_TX_RATES={0x3f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xb8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x9, 0x8001, 0x2, 0x5, 0x28, 0xf, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0xa}, {0x2, 0x8}, {0x2, 0x3}, {0x0, 0x2}, {0x4, 0x5}, {0x5, 0x3}, {0x2, 0xa}, {0x7, 0x8}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x3}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x6, 0x6}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x9}, {0x5, 0x6}, {0x5, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x7, 0xa}, {0x6, 0x1}, {0x4, 0xa}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x6}, {0x1, 0x3}, {0x6, 0x1}, {0x0, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x3ff, 0xfff, 0x8, 0x3ff, 0x5, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x8, 0x1000, 0x6, 0x30, 0xbc, 0xfffa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x0, 0x3, 0x8, 0x3, 0x9, 0x2]}}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4e20, 0x1, 0x6, 0x0, 0x3, 0x2, 0x9, 0x8001]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xc, 0x80, 0x7ff, 0x1, 0x12, 0x9, 0x25]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xd2, 0x60, 0x2d, 0x24, 0x16, 0x48, 0x18, 0x16, 0xb, 0x24, 0x1, 0x36, 0x3, 0x12, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x4}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x1}, {0x5, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x6}, {0x1, 0x9}, {0x4, 0x8}, {0x0, 0x4}, {0x1, 0x9}, {0x0, 0x3}, {0x7}, {0x1, 0x2}, {0x4, 0x2}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {}, {}, {0x7, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x2, 0x1}, {0x7, 0x6}, {0x0, 0x6}, {0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x4, 0x6}, {0x3, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x2}, {0x2, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0xa}, {0x4, 0x4}, {0x3, 0x9}, {0x4, 0x5}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0x1}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x5, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x1}, {0x2, 0x5}, {0x6, 0xa}, {0x5, 0x9}, {0x5, 0x8}, {0x1}, {0x7, 0x9}, {0x0, 0x6}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x6, 0x3}, {0x3}, {0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x5, 0xa}, {0x6, 0x8}, {0x1, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x5, 0x7}, {0x0, 0x7}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x7}, {0x4, 0x5}, {0x2, 0xa}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0x1}, {0x6, 0x4}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0xfffb, 0x9, 0x0, 0x2, 0x3ff, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x5}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x6}, {0x4, 0x3}, {0x7, 0x1}, {0x0, 0xa}, {0x2, 0xa}, {0x7}, {0x0, 0x2}, {0x6, 0xa}, {0x5, 0x2}, {0x7, 0x4}, {0x1, 0x4}, {0x0, 0x4}, {0x2, 0x5}, {0x3, 0x3}, {0x2, 0x3}, {0x2, 0x4}, {0x4, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x3}, {0x6, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x1, 0x4}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x1}, {0x5, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x6}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {}, {0x1, 0x1}, {0x7, 0x5}, {0x3, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x7, 0x4}, {0x5}, {0x1}, {0x5, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x5, 0x6}, {0x0, 0x8}, {0x6, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x4}, {0x5, 0x8}, {0x6, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x5}, {0x4, 0x4}, {0x3}, {0x5, 0x2}, {0x1, 0x8}, {}, {0x7, 0x9}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x3}, {0x2, 0x8}, {0x6, 0x6}, {0x3, 0x8}, {0x3, 0x3}, {0x2, 0x8}, {0x3, 0x5}, {0x7, 0xa}, {0x5, 0x5}, {0x1, 0x9}, {0x6, 0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x3}, {}, {0x2, 0x6}, {0x4, 0x6}, {0x1, 0x9}, {0x4, 0x4}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x2}, {0x2, 0x5}, {0x7, 0x3}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x0, 0x8000, 0x0, 0x2, 0xffff, 0xfffe, 0x1e]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x3}, {0x5, 0x8}, {0x0, 0x5}, {0x5, 0x8}, {0x4, 0x8}, {0x1}, {0x0, 0x6}, {0x4, 0x8}, {0x7, 0x6}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x5}, {0x3, 0x9}, {0x2, 0x5}, {0x7}, {0x1, 0xa}, {0x0, 0x4}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x4}, {0x3, 0x8}, {0x6, 0x6}, {0x4, 0x5}, {0x1, 0x17}, {0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x48, 0xb, 0xb, 0x3, 0x0, 0x2, 0x18, 0x36, 0x4, 0x6, 0x60, 0x0, 0x60, 0x60, 0x48, 0x1b, 0x6c, 0xc, 0x16, 0x1, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb94, 0xf7a1, 0xfff, 0x10, 0xa35, 0x80, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x3ff, 0x42c, 0x7f, 0x0, 0x2, 0xfffd]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe9d1, 0xb58, 0x8, 0x6, 0x1, 0x1, 0x10, 0x1]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xffff, 0x4, 0x5, 0xf, 0x5, 0xf8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x3, 0x48, 0x4, 0x60, 0x6, 0x16, 0x6c, 0x6, 0x36, 0x24, 0x16, 0x6c, 0x1a, 0x36, 0x36, 0x60, 0x6c, 0x16, 0x6, 0x56e5587abcc8552b, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x12, 0x36, 0x4, 0x48, 0x30, 0x2, 0x6c, 0x6c, 0x36, 0x6, 0x16, 0xc, 0x6c, 0x16, 0x12, 0x6c, 0x16, 0xc, 0x58, 0x48, 0x1, 0x12, 0x18, 0x6c, 0x24, 0x5, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x80, 0xb2, 0x19a7, 0x5, 0x9, 0x4, 0x5]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x6, 0x1}, {0x4, 0x6}, {0x4, 0x3}, {0x5, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x7}, {0x5, 0x7}, {0x5, 0x1}, {0x3, 0x7}, {0x4}, {0x6}, {0x6, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x8}, {0x0, 0x1}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x9}, {0x5, 0x7}, {0x2}, {0x1, 0x1}, {0x4, 0x6}, {0x2, 0x7}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x5, 0xa}, {0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x5}, {0x6, 0x3}, {0x4, 0x6}, {0x7, 0x5}, {0x5, 0x1}, {0x0, 0x4}, {0x4}, {0x2, 0x7}, {0x4, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x3, 0x5}, {0x2, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0xa}, {0x6, 0x9}, {0x5, 0x1}, {0x5}, {0x7, 0x1}, {0x6, 0x4}, {0x7, 0x1}, {0x6, 0x7}, {0x4, 0x3}, {0x2, 0x3}, {0x2, 0x8}, {0x6, 0x2}, {0x0, 0x3}, {0x5}, {0x2, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x240, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x60, 0xb, 0x30, 0x47, 0x36, 0x31, 0x30, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x60, 0x60, 0x30, 0x1b, 0x1, 0x16, 0x2, 0x12, 0xb, 0x45, 0x1b, 0x30, 0x16, 0xb, 0x12, 0xc, 0x10, 0x2, 0x48, 0xc, 0x24, 0x16]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x9}, {0x0, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x8b4, 0x6, 0x5fa, 0x8, 0x8, 0x7, 0x6162]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x5, 0x1, 0xc, 0x5, 0x48, 0x0, 0x6, 0x24, 0x4, 0x2, 0x18, 0x18, 0x4, 0x4, 0xb, 0x6, 0xc, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7ff, 0x3, 0xfe00, 0xf6, 0x7fff, 0x8, 0x81]}}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0xc280d7a7ca286d7}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6, 0x16, 0x60, 0xb, 0x5a, 0xf, 0x12, 0x6c, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x48, 0x60, 0x36, 0x4, 0x60, 0x16, 0x5, 0x18, 0x24, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xf213, 0x7ff, 0x7, 0x1ff, 0x3, 0x7ff, 0x2]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x9, 0x48, 0x2, 0x60, 0x9]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x400, 0x3, 0x0, 0x3, 0xad29, 0xffff, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x60, 0x16, 0x1b, 0x0, 0x1b, 0xc, 0x18, 0x6c, 0x60, 0x18, 0x6c, 0x25, 0x1b, 0x60, 0x6, 0x36, 0x5, 0x24, 0x24, 0x60, 0x6c, 0x2f, 0x16, 0x60, 0x24, 0x2, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0x107, 0x7fff, 0x100, 0x1, 0x4, 0x2, 0xbc42]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x27b2, 0x8, 0x7, 0x23e, 0xff, 0x1, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1, 0x1b, 0x48, 0x1, 0x12, 0x60, 0x12, 0x60, 0x36, 0x1b, 0x36, 0x60, 0x36, 0xc, 0xb, 0xc, 0x3, 0x5, 0x1b]}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x4, 0x6}, {0x4}, {0x1, 0x2}, {0x0, 0x1}, {0x4, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x6, 0x7}, {0x1}, {0x0, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0x9}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x2, 0x5}, {0x2, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0xe, 0x1, 0x1, 0x526d, 0xb158, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7e, 0x8, 0xff, 0x1, 0x5, 0x40, 0x1f8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5f1, 0x6, 0x57c1, 0x4, 0x200, 0x9, 0x0, 0xc33]}}]}]}, @NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x3, 0x6}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x9}, {0x4, 0x6}, {0x5, 0x9}, {0x7, 0xa}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x2, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x2, 0x2}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x5}, {0x4}, {0x7, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x3, 0x9}, {0x5, 0x7}, {0x5, 0x7}, {0x2}, {0x1, 0x2}, {0x3, 0x3}, {0x4}, {0x2, 0x5}, {0x0, 0x7}, {0x5, 0x9}, {0x7, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6, 0x6, 0xb, 0x1b, 0x6, 0x6c, 0x1e, 0x18, 0x0, 0x36, 0x6, 0x30, 0xb, 0x6, 0x6c, 0xb, 0x16, 0x12, 0xc, 0x12, 0x7e, 0x60, 0x24, 0x33, 0x36, 0x9, 0x7, 0x48, 0x3, 0xf, 0x1b, 0xe77b597dfe126cc7]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x4, 0x9, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0x5, 0xc, 0xfff, 0x29, 0x7, 0xce0b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x101, 0x8, 0x3, 0x666, 0xcb, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x3, 0x5, 0x800, 0x0, 0x2, 0x9, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x6, 0x8, 0x800, 0x6, 0x8, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x5}, {0x1, 0x8}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x3}, {0x6, 0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x3, 0x9}, {0x5, 0x2}, {0x1, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x1, 0x7}, {0x7, 0x4}, {0x2, 0x3}, {0x5}, {0x7}, {0x6, 0x7}, {0x3, 0x1}, {0x1, 0xa}, {0x3, 0x4}, {0x6, 0xa}, {0x7, 0x7}, {0x6, 0x3}, {0x2, 0x8}, {0x1}, {0x5, 0x5}, {0x6, 0x3}, {0x4, 0x9}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x1}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x4}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0xa}, {0x1, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x1, 0x4}, {0x7, 0x3}, {0x3, 0x5}, {0x2, 0x7}, {0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x1, 0x8}, {0x6, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x2, 0x8}, {0x1, 0x9}, {0x5, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x1b, 0x4, 0xb, 0x1, 0x6, 0x3, 0x18]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x74, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8001, 0x9, 0x1, 0x10, 0x4, 0x80, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x4, 0x5, 0x9, 0x7, 0x858a, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x4, 0x3, 0x8, 0x800, 0x8, 0x3ff]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff6, 0x7fff, 0x4, 0x0, 0x7fff, 0xa, 0x1, 0x9]}}]}]}]}, 0xffc}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) socket$kcm(0x21, 0x2, 0xa) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r9, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, 0x0}, 0x20) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000680)={&(0x7f0000000000), 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x200, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6771}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6c3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x92b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x434ffa28}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @local, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3c4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x800}, 0x881) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250500000028000180030000007564703a73797a320000000014000280080003008a000000080004000cdb0000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 3m58.041669933s ago: executing program 1 (id=1472): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x221008b, &(0x7f00000003c0)={[{@resgid}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@user_xattr}, {@grpjquota, 0x22}, {@errors_continue}, {@grpquota}, {@jqfmt_vfsv1}, {@lazytime}]}, 0xfe, 0x45e, &(0x7f0000002dc0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYBLOB='\b\x00\n'], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x0, 0x0, 0x4) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m57.725699152s ago: executing program 1 (id=1474): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x8001, 0x8, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={0x0, 0x0, 0x10}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r2, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES16], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000003c0)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b80)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000340), 0x2, 0x1) 3m56.17742418s ago: executing program 1 (id=1482): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x22, 0x100000005, 0xfffffffd, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0xe, 0x1}, 0x1d0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, r3) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0x10c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0xa) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000100)='./bus\x00', r4}, 0x18) 3m56.17707735s ago: executing program 35 (id=1482): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x22, 0x100000005, 0xfffffffd, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0xe, 0x1}, 0x1d0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x14}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x4, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)="00000102", 0x4, r3) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0x10c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x10, r0) syz_emit_ethernet(0xaf, 0x0, 0x0) poll(0x0, 0x0, 0xa) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x113) fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000100)='./bus\x00', r4}, 0x18) 56.046844113s ago: executing program 2 (id=2875): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0xe, 0x40040, 0x89, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x7000000}, 0xfffffffffffffdbb}, 0x48) 55.732503993s ago: executing program 2 (id=2877): r0 = getpgid(0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) setns(r2, 0x10000000) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xb4, 0x9, 0x5, 0x0, 0x90000000, 0x50060, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0xa, 0x6, 0x80000000, 0x8, 0xfffffffffffffffa, 0x4, 0x72c7, 0x0, 0xffffff3a, 0x0, 0x2}, r0, 0x1, r2, 0x3) getcwd(&(0x7f0000000780)=""/140, 0x8c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000002c0)="fa87c7e72022c7b864b07519029431b0f73faf3562d4199e9f31c1dd1202787cdc0dad572930535fe281583dce41f94472697f744b2aec18a02dafedcfe93533ddc8f52bf553629fad5e0e873ea442348753ce7f0b8a", 0x56}, {&(0x7f0000000340)="0a2b131fed7c3b0ace259fcc73c7401df65ac597b979f6cc76064e5a3b452de24ce402ad11a56e85c9fe9f3c2e305933c9adbcc8576d051634f516897eb95943656f8b840b1fb922463f63432934f3dab5c65c44056b72e7ff918b9ca85191d8d7e22c1be0d7d93d7856a47685f073eaf6b24c19e5e73fdedd74dda9d44152b5df29f2349596ce5a365d9fa9fada901203e43cac955d56a9f4493c207d27df2a9d69485639b494a07538110dba4426e4b42597c59909d96869e7d7", 0xbb}, {&(0x7f00000000c0)="ae2917d5a4b014842a61845c01908087c19287ad5d95", 0x16}, {&(0x7f0000000640)="3fd86240836c56786709aa10b4c27b60ae1dc382c772f8c8004beffbfbff60aee2e3c6af39836c9fc4dbdda40a19e1f2635d7af399581a0f70ddefce87466f1440e2c21a8773ac4f3b2d5c8bfa9451ed3be6e55b68033085556f00db59648336586bf01013a839293a8dce06f9698af2761f685737637ac4282fbef83a45127bc95758c0f7cd74cd77275225e4ff440dd513073746f42cb68a3c32e14c2e6903b2cff77d7a22d28977b8ef1650cbaf8ee0c82770aea9896ef6b2ffba68e7757498d5a8324de270c9a29579bb0443f50f6c84bdd789e89c28a3ff0f5a3cafff994cd1ff8ebcbe46", 0xe7}, {&(0x7f0000000740)="a92a26692895c48e5670e19cc646f85a75772f22", 0x14}], 0x5}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c00)="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", 0x1a0}, {&(0x7f0000000180)="1aeb55be05b8cb68829468342ed6d01cd14c06cd68e4", 0x16}, {&(0x7f0000000400)="20eb11f5dcb75e86a5ec6af98f1d204cdef835dab3b800e65b40116ef11375b8a30d0bfc6ff7587b1ee4b778e7c674", 0x2f}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 54.782065872s ago: executing program 2 (id=2878): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000001080)={0x6, 0x4ff99ce9, 0x3, 0x9, 0x0, "3c412d2f9f4335aa62a9177afe68fa77d3da01"}) r1 = socket(0x10, 0x1, 0xffffffff) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000068000100080000000600070003000000100008800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4040040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x10, 0x6, 0x4}, &(0x7f00000003c0)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000004c0)={r7, @in={{0x2, 0x4e24, @loopback}}, 0x5, 0x90, 0x6, 0x8, 0x9, 0x9, 0x85}, 0x9c) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r8, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) unshare(0x22020600) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x159) fcntl$setflags(r9, 0x2, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_LIST_PHY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x23, 0x6, 0x0, 0x0, 0x0, 0x63e3, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x110010, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6ae7}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r12 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r12, &(0x7f00000000c0)={0x1d, r13}, 0x10) sendmsg$can_bcm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000080), &(0x7f0000000240)=r14}, 0x20) 54.424040583s ago: executing program 2 (id=2882): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x408c4) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x2c, r3, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x8004) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 53.418661914s ago: executing program 2 (id=2894): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r2 = dup3(r1, r1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x6}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}, {&(0x7f0000000800)="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", 0xf6}, {&(0x7f0000000640)="919caf482212d7befab3daa34d9d615a80ec7401d4abf949dde6402aaffd9d51319a0ffbb3e53f2fb06b0ec214a0911ca5ead9b9c382dc2c98f43f9a98e8d16eb8f5802576737d6b9c636e4c265bd6c0b1a01c5c130d553e8dc6545fb163ddc6f8629f2a993bae3abe73261e4fd21d30e4621da2ad1a74cae3badbd35a4c7c41ec6bdfa95e3fdd68da37d7824360112d09d3eeb96b8875570240f62d308ada1d03d3382ada", 0xa5}, {&(0x7f0000000700)="017ecdab3229bfb09d438f6b9998879eb20985e9c1a06bc552424f86a450064e5dc5cf489a46d33a02fc27b1abf93fda07721f54d9d4f4e3d8765e4d9be1806bae3ec2557574916bd88ce6a45fd5d0c8ab7bc3ee3610dd4ba307033320b8e57c7099c408a7b3e6bacc087bfa212ed531596b78e83537a209c39441e914667b18a71e40718f3a114220407db99da46c7d827b9308222c7a06e5633ab9e9243e57d528a7", 0xfffffd85}], 0x4, 0x0, 0x0, 0x7a000000}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x84) close(0x3) 52.812405073s ago: executing program 2 (id=2900): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x6, 0x3514f67d, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x20, 0x7, 0x8, 0xfffffe03}}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@remote, @in=@rand_addr=0x64010102, 0x4e20, 0xfffe, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x3a, r1, r3}, {0x1, 0x60, 0x6, 0x6, 0x297c, 0x6, 0x7ff, 0xffffffff}, {0x8001, 0x7, 0x80, 0x9}, 0xfff, 0x6e6bbd, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d5, 0x2b}, 0x2, @in6=@private0, 0x3504, 0x3, 0x0, 0x10, 0x2, 0x2, 0x6}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4000000baea10d84552ac7f7d69943529074207bb574e4e0dbd4120689e772ca9ee917a633dc6113a5460eb5a31c83e969c28e37dace53610806d06974c92789b76", @ANYRES16=r6, @ANYBLOB="090200000000000000000100000005"], 0x24}}, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) 52.812209333s ago: executing program 36 (id=2900): r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x29, 0x7f, 0x6, 0x3514f67d, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x20, 0x7, 0x8, 0xfffffe03}}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, r3) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@remote, @in=@rand_addr=0x64010102, 0x4e20, 0xfffe, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x3a, r1, r3}, {0x1, 0x60, 0x6, 0x6, 0x297c, 0x6, 0x7ff, 0xffffffff}, {0x8001, 0x7, 0x80, 0x9}, 0xfff, 0x6e6bbd, 0x0, 0x1, 0x2}, {{@in=@remote, 0x4d5, 0x2b}, 0x2, @in6=@private0, 0x3504, 0x3, 0x0, 0x10, 0x2, 0x2, 0x6}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4000000baea10d84552ac7f7d69943529074207bb574e4e0dbd4120689e772ca9ee917a633dc6113a5460eb5a31c83e969c28e37dace53610806d06974c92789b76", @ANYRES16=r6, @ANYBLOB="090200000000000000000100000005"], 0x24}}, 0x0) ptrace(0x10, 0x0) ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x181}) 42.920572928s ago: executing program 3 (id=3013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setresuid(0xee00, 0xee00, 0xee01) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000080)='id\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@K@J\b\xd5w\xf3}q\x92\x02oqK,\x97q\xc3Yg\xf6\x98\xa1j\x90y\x01\xc6\x81y\"n\xb9v\x1cA\xa6E7\x1c\xa7\xfa3\x12\xed\xe6\xaaz\xba\xbd\x81[\x8c\xb6\xf6Z~\xdb\x95\xdc\xc9\xf5\xb7\xfezj\xd0s>O\xe9\x91b\xdc\xb7\xb4\x9aS\xf6{\xe5\xf1\xabyn\x14\x04\xc7~v`\xe8\xb0\x7f8\t\xa8\xf7\xb9\xb92\xa5\b\xb8\xce6A\x92D#\xb6c\xad\xabIr\x061\xbe\x9aEF6O\xe1\xbb\xc6\x17|\xfa{!-\xe4\xe1\xaf;\xf6\x81\"\x8a\xb5\x12\xd4d\xd3\xa2\x134\xca\x04.\xdfbN\xee{\xcc\x8a\xa4\xe0\x1d\x13[\xe7\xc1\xa2u~\x11\xf3\xd0') setreuid(0xffffffffffffffff, 0xee01) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=r3, @ANYBLOB="08000f"], 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000210001000400000000000000fc020000000000000000000000000001ff02000000000000000000000000000100000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="852c38a9872f0f4b2bc3907439541f7a97f479597b3f55"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080007030300020014000d004610002c005ef6f12eac000000082f9078acfca87226369ca9c194e9389018160001bfffffff940400", @ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES8=r2], 0x3a) 42.869003399s ago: executing program 3 (id=3016): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) dup(r1) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000080)}], 0x0, 0x2}, 0x20) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0x7f}, 0x0, 0x0, 0x0) (async) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r1) r7 = socket(0xa, 0x801, 0x0) getsockopt(r7, 0x0, 0x1fd, 0x0, &(0x7f0000001ffc)) 42.711961314s ago: executing program 3 (id=3020): sendto$inet(0xffffffffffffffff, &(0x7f0000000900)='.U', 0x2, 0x12, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000001) (async) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0xc6082, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa6d9d000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 41.710108835s ago: executing program 3 (id=3028): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0xe, 0x40040, 0x89, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, 0xfffffffffffffdbb}, 0x48) 40.158240833s ago: executing program 3 (id=3030): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x40422, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x280000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000012c0)=""/4071, &(0x7f0000000040)=0xfe7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x7b1dc735d166a256) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002500010002000000fcffff7f00000000000000000c000200010000000400000008000500", @ANYRES32=0x0, @ANYBLOB="e968d2fd3906f3577a6a4007ce25b3d7d9922cd2ad9da7500e268d70eb4796039ce009833385a12f5c6d07552ae286ed7680df42f9d455c656f0f3e07ab5cd39cdb2036c523688b672e39590f5bf9eb389b8d2ca15c4c0093ed5efecb66a8142c2cd3ab8d21b557e9396b92cf2c8d4a1f4b6707f9f300cca6d"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x4, 0xff, 0xbd54, 0x7f, 0x16, "c81e824ac9946ed0ed1e329e120bdebda62371"}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xffffffffffffffef, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000540)={{}, {0x3}, 0x80, 0x0, 0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="2b5560f91afb02cd03dc15cb049bef3be6d34912f9642ce38852301ca7d977608f1c70af2ed52962d94e10b9f303a1142ffcac7732b6d23aa699fe1f67fec378ea5f65a0da1d501a7d8e96a82b77f06180876e8b9e7da5e73cce2bba0acba77e669b63a3a1a1f778051cf7bb8ec6d4c0f7f858d6dacfc53af1c026c60eec9a4c27cf90ff760a69eaf6173d4236dea50f7342fc97c0fbe57c8bfa32f7077a69a3dba66071d32d0eda521b26d0dc4287673a5eff080109a46d3427c6fbdc27bc69f49fc6d852e651fb23d70a34a9993e217e238bc0130e310782f84e20e48679677929b24d38d07628061d0eb9c7e49abe72931c2e326f198d8d", 0xf9, 0x0, &(0x7f0000000680)={0x2, 0x126, {0x0, 0xc, 0x36, "07ab5ea042e8f6bb022a862a353b894557d2fe2c629a79131e6e28d27c83393dd86673f937665883fab22cdd3dd42fc2bc26a7cc4c3d9d53f2ae700ccee19a66b0619a66333c8b3e48dc973c11472a71f6f7d9e577e7ca5cb7e6fed063fba2e329d09b2bc8db1661599b2af19d6430ecce25c016866ed4cb9017687d2c81575f2c98f5b407686f011a98206421a27622426a6793790804beae701c587689a67b9dd254701e1460eaf0c364fd45272e5ed7bc2bd9ac300a037441f4b812e1ee87514bd663489f19cb5c5f2bb35647ba0bc12f3df9f15143", 0x42, "bee6a3104af5b11ace257427df1225c3f2e8a40d2391026e3272d4bfd5fed6747157d16f667be656768bb17eff8999a4391c69f3184f90903afbee85f0c38e9165ce"}, 0x7, "8e205d48bc240a"}, 0x50}) 39.579193911s ago: executing program 3 (id=3038): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x20, 0x84, 0x8, "fe8000000000000002"}], 0x20}, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x10000000, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 24.421088938s ago: executing program 37 (id=3038): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x20, 0x84, 0x8, "fe8000000000000002"}], 0x20}, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x0, 0x10000000, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 11.232944364s ago: executing program 0 (id=3179): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x81, 0x401, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x39, 0x0}}, @mcast2, 0x8000, 0x40, 0x1, 0x7}}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) mlockall(0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c0002800800010084"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x7e, 0x51b, &(0x7f0000001000)="$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") write$UHID_INPUT(r4, &(0x7f0000002080)={0x7, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 10.604600564s ago: executing program 0 (id=3183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x1) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xacd6a4e1331c8c5c, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005380)={&(0x7f0000004340)=ANY=[@ANYRESOCT=r0], 0x0, 0x28, 0x0, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r5 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r5, 0x0, 0x0, 0x8800000) r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000100)=[{&(0x7f0000000000)="45db1d", 0x3}], 0x1, 0x8, 0x0, 0xb) sendto$inet(r6, &(0x7f0000000400)="be0d2ff928866bd80a8ff11fc30d150f7d90fc67862254f4d55dbe4be3f1215f85c1a2cf2babbbb461ab544ab3ed2c0dfab42b4ca104e6bed609166c8b15e8b1148c9d68e116fbab99bbe0d7ec588d376da95ba1048edc0f018fa60f8b61960af4aff0c07e04700c2f3db60cf0cd25643ebcad77ae906af8698128f29de03e3dc6c09633b93832ba23070fad8e1dce50de4491495f4e6de83ddd9764545f893749b917459a88ee3ccf2b9b270fc443e5ac69bcb0db65e0d669886d142e8f3c8a049b301529733a485e580c", 0xcb, 0x20000815, &(0x7f0000000500)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454c9, 0x1) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 10.266383604s ago: executing program 8 (id=3187): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0xd5) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x300, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r3, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYBLOB="3bbb2a0aa5aa87eb0b0de66f52653bc71df9d4e7e783d249f4e683858a506312877df97baec60c3f5f6b2c084122bb2ae7ad5638f100e12c7d6359c978e01224ab101f147d2d17799f16b7d555e48df670af289d1c38163621c08580606b9e7cc919c42353b708d542862ef811813c7a7db66050926c1dd30ec705ee7df7f0a3ba7a1da839f7ff66b1030e25c75e9487374d1863d690a31ddf65b3af19d4e8a2ad6d47", @ANYRESOCT=r5, @ANYBLOB="cd3b230e0135b3d9c55db7f925143b7864"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ff00000000000000020000000000000000009fdf51e80000000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r10}, 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)="269e", 0x2, 0xfffffffffffffffd) r13 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd133cfb2979dc95ee34f9c3da5707ae00", 0x34}, 0x48, 0xffffffffffffffff) r14 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r12, r13, r14, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r3, &(0x7f0000000700)="9f1e748872691ee828c533ab579f931fc34ff24ef0974d0d294822c67ec44e9fe855c713d6df36ee3ec5bf03092222db0c8797e32e4d7178cad702a1ebf8a9363f878a10f2b0e6"}, 0x20) keyctl$get_security(0x11, r14, &(0x7f0000000640)=""/184, 0xb8) gettid() 10.144582048s ago: executing program 8 (id=3190): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x4, &(0x7f0000000040)=[{0x0, 0xf8, 0xb, 0x2}, {0x7, 0x5, 0x6, 0x401}, {0xfffb, 0x5, 0x1, 0x4}, {0xffe2, 0x46, 0x0, 0x8}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = epoll_create(0x200) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_wait(r5, &(0x7f00000001c0), 0x0, 0xffffff90) close(r4) memfd_create(&(0x7f0000000200)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\\xd8\xdfa\xea62\x90\xfc\x10\xfd\xd8\x06hTa2\xd8\xf9\"N\x8f04\xf5\xcczg\xa0Y\xc5?E\xe8\x0e\x14R`b\xa6\xf1w\xe2\xc0\xe2\xea\a\x02\x15\xb0\xf2\x82\f9b\xc9P\xe21L\xf1NKN\xce\xbd\x18\x1a\xd6\x12\xe6\xc9\xf3\xba\x02 \xed\xf9\xb6\x0f\x15a3\xd9\xa8?\xc4\xc2\x87\xd6\x97=\x06\x93\x06\xf74h\xa8o`\xd0\xdfA\xa8\x9b\xce\"\x01v+j\x19&\xf6yq:\x94\x10#\x89Sp\x8f\xd7\x92\xa1S9\xf2\xb0\xdd:t=\n', 0x6) syz_usb_connect$cdc_ncm(0x1, 0x14a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090238010201f852090904000001020d00000724060001b70605240000000d240f010200000007007801fa06241a060008be241301efe27112aab657399b7f6fb0f55ab1822a53df0a017b598e647647af167d242043a374c6a5a09392f2cccd4b0cfc664fabacab6b15bdf61d207c98fb947c10085105dcaa8331beed976c25b7240ae58fe962eb3d017e7b6ed1184ae8bac958704b311f3cc0cde86f3b20cb65b3844302a8346e121e164771ba75088ae2895074cb92b33623afcbe389b38b5f92b3f4ed9d2a569da6d46bb933ce619d4e6e211430ce5a395f74f1702d860459681162acf5c8087ea0d96865642f07241407004600072414080007000a240707da0c060007000424020209058103100001029d2ead5201a6a41b4873839ada0000000905820200"], &(0x7f00000005c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x340, 0x25, 0x2, 0x1, 0x0, 0x1}, 0x93, &(0x7f0000000100)=ANY=[@ANYBLOB="050f9300051410040bfebd2c48d3046928651e7c5fc370416003100b14100403d8bd2f8804bccf6723c48daec6ecd16a5c10031b2ee6be53b4d3d53c07cf87685b7a8b135eb9328e6dca7bce384d476dc1a7b8ef03185ea2ee9961244f67af9791ad02e20f074dbaa23c9e3b15dd31373dcf3bc456a3e10f3464ae3f0128dee1b7f76c8381329f886cd281cd4200d3f8e79d63"], 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x441}}]}) 9.570700616s ago: executing program 0 (id=3196): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) (fail_nth: 2) 9.456302399s ago: executing program 0 (id=3197): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x17, 0x200000000000025d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='cgroup\x00') lseek(r5, 0x339, 0x0) socket$kcm(0x10, 0x2, 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$nl_route(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[@ANYBLOB="940000001200080025bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="800100008015010008000d000010000008001b000700000005001000ff00000008001c00", @ANYRES32=r3, @ANYRES32=r7, @ANYRES32, @ANYBLOB="14002b80080003000400000008000800", @ANYRES32=r3, @ANYBLOB="08001f0005e92e000000"], 0x94}, 0x1, 0x0, 0x0, 0xc000}, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r4) close(r3) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xa634, 0x2000, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r11, 0x421, 0x70bd2a, 0x25dffbfb}, 0x14}}, 0x200048c4) 7.543472438s ago: executing program 5 (id=3219): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) (fail_nth: 4) 7.204631999s ago: executing program 5 (id=3222): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x538, &(0x7f0000000680)="$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") removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)=@known='user.incfs.id\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904011d080201000000040000a1180004000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000140)=""/149, 0x95}], 0x2}, 0x2002) 7.069867793s ago: executing program 7 (id=3225): r0 = getpgrp(0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r2 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xf509, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") io_uring_enter(r8, 0x12a, 0x14, 0x17, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) read(r1, &(0x7f00000000c0)=""/234, 0xea) r9 = io_uring_setup(0x11bc, &(0x7f0000000000)={0x0, 0x8b9f, 0x400, 0x1, 0xc0}) r10 = epoll_create(0x5) epoll_pwait(r10, &(0x7f0000004340)=[{}], 0x1, 0xf10c, 0x0, 0x0) close(r9) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 7.069368043s ago: executing program 8 (id=3226): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200010, &(0x7f0000000540)={[{@test_dummy_encryption}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}], [{@euid_lt={'euid<', r0}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lsm_set_self_attr(0x0, &(0x7f0000000a80)={0x6e, 0x8, 0x1001, 0xfe1, "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"}, 0x1001, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x1c, 0x0, 0x0, @ib={0x1b, 0x1, 0xfffffff7, {"d7d0d8b84d3e160a576c7db88d0567e6"}, 0x7, 0x6, 0x8}, @in={0x2, 0x4e24, @loopback}}}, 0x118) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8ffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000040)={0x10, @short={0x2, 0x1}}, 0x14) socket$kcm(0x29, 0x5, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8001000) 7.020549134s ago: executing program 5 (id=3227): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x40422, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x280000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000012c0)=""/4071, &(0x7f0000000040)=0xfe7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x7b1dc735d166a256) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002500010002000000fcffff7f00000000000000000c000200010000000400000008000500", @ANYRES32=0x0, @ANYBLOB="e968d2fd3906f3577a6a4007ce25b3d7d9922cd2ad9da7500e268d70eb4796039ce009833385a12f5c6d07552ae286ed7680df42f9d455c656f0f3e07ab5cd39cdb2036c523688b672e39590f5bf9eb389b8d2ca15c4c0093ed5efecb66a8142c2cd3ab8d21b557e9396b92cf2c8d4a1f4b6707f9f300cca6d"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xffffffffffffffef, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 5.909590018s ago: executing program 8 (id=3229): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xbb8}}, './file0\x00'}) ioctl$TIOCSBRK(r1, 0x5427) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x1b, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="2e00000011008b10000f80ee59acbc04130800480f0000005ef5c62900421803001825800000000000000280000c00", 0x2f}], 0x1}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.816663351s ago: executing program 5 (id=3231): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69801}}, 0x20}, 0x1, 0x0, 0x0, 0x240048c0}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f00000000000000000000000000000000011400200000000000000000000000ffff000000000500070000000000060002000100000008000a0004000000"], 0x5c}}, 0x0) 5.291548948s ago: executing program 7 (id=3233): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) ioprio_set$pid(0x1, r0, 0x6000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c00028008000100"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x2000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 5.275048318s ago: executing program 5 (id=3235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r7 = io_uring_setup(0x18e5, 0x0) syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000, 0x0, 0xfffffffc, 0x0, r7}, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1011084, &(0x7f00000007c0)={[{@nofavordynmods}, {@none}, {}, {@xattr}, {@xattr}, {@favordynmods}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='posixacl'}, {@permit_directio}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0x10001, 0x0) 5.232909669s ago: executing program 9 (id=3236): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0x1, 0x3, 0x5, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000008c0)={[{@test_dummy_encryption_v1}, {@nojournal_checksum}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x598, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xfd, 0x5aec}, {0x20, 0xf, 0x4, 0xfffff010}, {0x6, 0x0, 0x7, 0x1}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) r9 = socket(0x1, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) rt_sigpending(&(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 5.080569534s ago: executing program 7 (id=3237): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904011d080201000000040000a1180004000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) socket$kcm(0x10, 0x400000002, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="70acbf5097a0682850eb14538e6c3a865c908a5746c7993575574d48835a1bc21c915003ceddbcca8e67d664fb6462778d119d685a4ee08c10bfce5518024e42db6240106fbae856f0c3834fe815a7f1c1a515cb104b5507a1746b9a3958e756cfadc6a60aca7c6cf38bcc01e6fb1cd4fe7e0f11f28ac79e2bda88a75f3388d69cfa4e612e8d9dab6ef981474d77f3bb353f95cba4ad77d22a910139b2ee2c97941eab7faac99ff538d864ed699769359cd12d4e81ab56303245dc8fcc59686cf6c37ae576dc7b5da5969a62"], 0xfe33) 4.078189095s ago: executing program 7 (id=3238): listen(0xffffffffffffffff, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) 2.823386814s ago: executing program 7 (id=3239): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x200, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x7ed, &(0x7f00000002c0)={0x0, 0x4d51, 0x800, 0x23000, 0x72}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa, 0x4, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x840000000002, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x11, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r3], 0xc4}}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r4, &(0x7f0000000500)="1445", 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff000}, 0x94) 2.002259189s ago: executing program 8 (id=3240): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000340)=""/57, 0x39}, {&(0x7f0000000380)=""/236, 0xec}], 0x5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@grpid}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300}) 823.027665ms ago: executing program 0 (id=3241): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x40422, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x280000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000012c0)=""/4071, &(0x7f0000000040)=0xfe7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c0}, 0x7b1dc735d166a256) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x5}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c0000002500010002000000fcffff7f00000000000000000c000200010000000400000008000500", @ANYRES32=0x0, @ANYBLOB="e968d2fd3906f3577a6a4007ce25b3d7d9922cd2ad9da7500e268d70eb4796039ce009833385a12f5c6d07552ae286ed7680df42f9d455c656f0f3e07ab5cd39cdb2036c523688b672e39590f5bf9eb389b8d2ca15c4c0093ed5efecb66a8142c2cd3ab8d21b557e9396b92cf2c8d4a1f4b6707f9f300cca6d"], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xffffffffffffffef, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 430.337337ms ago: executing program 5 (id=3242): unshare(0x22020700) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x4) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) 391.744439ms ago: executing program 9 (id=3243): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 314.996911ms ago: executing program 9 (id=3244): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000040)=0xfefffff1, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_netfilter(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x33c, 0xa, 0x9, 0x5, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x3}, [@generic="e7c75d2e774d020c6849ef754a7cae1d259f23532f5e16ccefe658895c22d591cfacc0cca46289b322a7e564e49b515a19fd613f837ef2d4a393b88b6a1d03f74ca262ba69cc735d6d773ab0921e4a853610fb2531b356127d8ddd5b43253e1ed0a3a2181ef3b91b3c87dc00eea50c0b466c6468c040674a1d8d015d7e02d3eee374b8a3fdf04ba680e72aeb4c5b685a6f66e13cdb4d7449bc0df5975fd0f240b29022a465fe1f7c493e864aac0ac3ce66276ec000569f7e9284e2a186c34c1c16ea5cd56831f33a156a944bbfc312c010b4792da9cf7f", @generic="f099a725e51011824fb194154ba96419d15aae8886a0d01adae65333cadf142b621e9388291f2fc920ed79e7d34360a7790e574402661be2ea6f82f1b2d61c3b17eff1e05522625fd627fac809691f6e104a2612d3ba07f9715b6effcc59de613df370e2d5aa6e07368c6b1e4b91d801e0c1def66ef082a07b43e7802bcdb73b125ba994da1c299e18c4828e65e8c6757bfffc703aa1d0290722b8aef278883ce7188324ea901f503b189cb3a6287b07388952974f0872af8e64896941cac335be82c23d914a5c5f71", @generic="8d352d21c5af36f381f7d341973969b3199d19ee6d18b6674a097083c7b2a753b9edb9ce6b7dd7b63828db09d728773fa9f4d06d96fbb3041babdf5977bd63d2ee220050b4ceb1c1554c36de5c596f1e05a3161875630055b521398c265a61ae37fb6aef6acd46c46adfa81fc37f8147c79b833b6086c9d21884b1682cd5f787cc671c7164b3e67dd216c7266b7e472ed8e8f337e3c576db1f973c1774535854e1af04410fa6fdb6e3721bf521e90ac1934a47ef643b6936ce55b8e0cef390e98d9416a7b05cd858b1ffbc4df14822995b55cf1effd821d201094d91f5ab854262141f6da1ccb3d47e038e8090be968f8749bb3492a3", @generic="9caad569f831fdc6ae42fee550a10dc2c85a5885a27029080ac20b7d09d57411529a765ab62c22ce5624f6ee5bbdc3729075d4ec87f20f9ed67abb2ce97faaa51c9d93add418c2e62adbfb59e2561c5f8b12c095520ad71caa2ff5e7139ea40208dc5882c2578f9a4ee29d62216ec3241c49a84d27b1002cc97f4d90f09193e081c905f52bb17482dc0517872049db"]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) 220.066254ms ago: executing program 9 (id=3245): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x0, 0x1000004d, 0x9, 0x7fff, 0x3, 0x4, 0x9, 0xe8e9, 0x5}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000f20000000000d94445701e49ebf9a41516fcaedfd36cfa9dbb120bb3bc9f7c0e573b82f558defa0dfc3b2bd1bd66b8ee8a2e8b8097b7ae2a6bab753b2866c1db7dc7887a9f20cd524b65fa15a00f8f4810ad0d95cdf86ba47bc071d5884e236259f616e877cbb1f3316ecfa804ced098ba7d782f52e063c190c7e4fc92e1a8d7056479c8fafbef014714584f001587b9614dffe53d0d287e6e7d186ef0d62288579d2d85497e912ea65e8ed433ef2df4af81874be3245be77890c266b3a83be79dd5d362e2f959ecd20fb65092bc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r2}, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 119.211317ms ago: executing program 8 (id=3246): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40240, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0f3000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d3500ffffff00006507000002080000070700004c0000003e75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2726f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfda047bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded527a0bfe5504eb355cb0000000000000073be27152effbed9ed6a4e8f9c55a2ff11245f2c20856d491b80d749cf8917dbe01cc6c7b747923621bb16efb2025d19a1a27b0348135e32e442da8f26e05283ece8ad92c77f8141c7a2037380f28c9c638ee0151f4620b9b64185db0321a4e809a5438cdef28f7adac1735a50006fbae20d0930b55f0081db6fa0d14024cefa1611ef384de38787324bfb9f79a1e164c8fe80a2d9e4199960"], &(0x7f0000000100)='GPL\x00'}, 0x27) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x18}, 0x2000c8d0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x104, 0x4, 0x3e8, 0x1f0, 0x0, 0x108, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x7}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010102, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0xd55}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 63.687799ms ago: executing program 9 (id=3247): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x80, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x10}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_U32={0xfffffffffffffd6f, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x101}, {0x9, 0x0, 0x2, 0xb}}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20041810}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xa88, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xe, 0xffff}, {0x3, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x40}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xfa00000}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x3}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7fffffff}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48801}, 0x4) 706.191µs ago: executing program 7 (id=3248): socket(0x10, 0x3, 0x0) setregid(0x0, 0xee01) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904011d080201000000040000a1180004000000000000000e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000180)=[r0]) r1 = socket$kcm(0x10, 0x400000002, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1, 0x8ffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r3, 0x10, 0x37ec, 0x683) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) 294.011µs ago: executing program 9 (id=3249): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$session_to_parent(0x12) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80004, 0xc) renameat2(r1, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2) 0s ago: executing program 0 (id=3250): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000041000/0x3000)=nil, &(0x7f00001f9000/0x1000)=nil, &(0x7f0000267000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00001fd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x1b, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 00000 r/w without journal. Quota mode: none. [ 468.324202][T13981] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2759'. [ 468.334983][T13985] EXT4-fs (loop5): shut down requested (0) [ 468.354305][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.679264][ T28] audit: type=1400 audit(1778766717.322:4671): avc: denied { append } for pid=13994 comm="syz.5.2761" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 468.707972][T13995] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2761'. [ 468.905666][T14001] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2765'. [ 468.929031][ T28] audit: type=1400 audit(1778766717.412:4672): avc: denied { map } for pid=13994 comm="syz.5.2761" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 469.123185][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2771'. [ 469.144770][T14022] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2771'. [ 469.179375][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2771'. [ 469.223326][T14022] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2771'. [ 469.380281][T14034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.401337][T14034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.645350][T14041] loop5: detected capacity change from 0 to 128 [ 469.672685][T14041] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 469.696113][T14041] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.739678][ T3623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 470.001467][T14056] netlink: 'syz.5.2780': attribute type 4 has an invalid length. [ 470.646001][T14060] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2781'. [ 470.929723][T14070] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 471.590148][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 471.590168][ T28] audit: type=1400 audit(1778766720.232:4674): avc: denied { ioctl } for pid=14080 comm="syz.5.2789" path="mnt:[4026532377]" dev="nsfs" ino=4026532377 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 471.714473][T14085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14085 comm=syz.7.2790 [ 471.753293][T14086] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2788'. [ 471.807068][T14085] bridge2: entered promiscuous mode [ 471.822202][T14085] bridge2: entered allmulticast mode [ 471.839151][T14093] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2792'. [ 472.104064][T14106] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=14106 comm=syz.5.2796 [ 472.160946][T14112] tipc: Enabling of bearer rejected, already enabled [ 472.854544][ T28] audit: type=1326 audit(1778766721.492:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 472.901777][ T28] audit: type=1326 audit(1778766721.492:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 472.964110][ T28] audit: type=1326 audit(1778766721.492:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 473.023700][ T28] audit: type=1326 audit(1778766721.492:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 473.065678][T14138] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 473.076035][ T28] audit: type=1326 audit(1778766721.492:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 473.121583][ T28] audit: type=1326 audit(1778766721.542:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 473.159991][ T28] audit: type=1326 audit(1778766721.552:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5be617d68e code=0x7ffc0000 [ 473.203834][ T28] audit: type=1326 audit(1778766721.552:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5be617d68e code=0x7ffc0000 [ 473.237543][ T28] audit: type=1326 audit(1778766721.552:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14127 comm="syz.7.2801" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5be617d68e code=0x7ffc0000 [ 473.527116][T14183] __nla_validate_parse: 4 callbacks suppressed [ 473.579086][T14183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2818'. [ 473.665321][T14194] loop5: detected capacity change from 0 to 1024 [ 473.690997][T14194] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.707434][T14194] EXT4-fs (loop5): shut down requested (0) [ 473.726017][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.792598][T14205] SELinux: failed to load policy [ 473.903972][T14211] loop5: detected capacity change from 0 to 8192 [ 473.924662][T14211] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 473.938359][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 473.957060][T14211] FAT-fs (loop5): Filesystem has been set read-only [ 473.972036][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 473.989872][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.007855][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.037355][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.055085][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.064343][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.073324][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.083833][T14211] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.092793][T14209] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 474.487712][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2836'. [ 474.798199][T14258] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=14258 comm=syz.2.2840 [ 474.811287][T14258] tipc: Enabling of bearer rejected, already enabled [ 474.822290][T14258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2840'. [ 475.040204][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'. [ 475.132888][T14292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55126 sclass=netlink_route_socket pid=14292 comm=syz.3.2850 [ 475.171950][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'. [ 475.193178][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'. [ 475.278694][T14296] tmpfs: Unknown parameter 'grpquota' [ 475.329620][T14296] vlan2: entered allmulticast mode [ 475.335846][T14296] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2851'. [ 475.438221][T14311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=14311 comm=syz.8.2855 [ 475.470162][T14311] tipc: Enabling of bearer rejected, already enabled [ 475.501431][T14307] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2855'. [ 475.807940][T14329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14329 comm=syz.5.2861 [ 475.885890][T14343] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2863'. [ 475.924650][T14343] bond2: entered promiscuous mode [ 475.948705][T14343] bond2: entered allmulticast mode [ 475.966437][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2865'. [ 475.997086][T14346] netlink: 'syz.5.2865': attribute type 2 has an invalid length. [ 476.032814][T14323] netlink: 'syz.2.2859': attribute type 1 has an invalid length. [ 476.043842][T14349] netlink: 'syz.8.2866': attribute type 9 has an invalid length. [ 476.052095][T14346] netlink: 'syz.5.2865': attribute type 2 has an invalid length. [ 476.067360][T14346] netlink: 'syz.5.2865': attribute type 1 has an invalid length. [ 476.131270][T14351] loop5: detected capacity change from 0 to 1024 [ 476.160264][T14351] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.196511][T14351] EXT4-fs (loop5): shut down requested (0) [ 476.279773][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.980655][T14383] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 477.951452][T14390] loop8: detected capacity change from 0 to 1024 [ 478.002970][T14390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.044940][T14390] EXT4-fs (loop8): shut down requested (0) [ 478.185271][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.239036][T14397] 9pnet_virtio: no channels available for device ./bus [ 478.348834][T14403] FAULT_INJECTION: forcing a failure. [ 478.348834][T14403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.362194][T14403] CPU: 1 UID: 0 PID: 14403 Comm: syz.5.2881 Tainted: G W syzkaller #0 PREEMPT(full) [ 478.362299][T14403] Tainted: [W]=WARN [ 478.362306][T14403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.362334][T14403] Call Trace: [ 478.362339][T14403] [ 478.362346][T14403] __dump_stack+0x1d/0x30 [ 478.362369][T14403] dump_stack_lvl+0x95/0xd0 [ 478.362456][T14403] dump_stack+0x15/0x1b [ 478.362475][T14403] should_fail_ex+0x263/0x280 [ 478.362504][T14403] should_fail+0xb/0x20 [ 478.362523][T14403] should_fail_usercopy+0x1a/0x20 [ 478.362597][T14403] _copy_from_user+0x1c/0xb0 [ 478.362656][T14403] ___sys_sendmsg+0xc1/0x1e0 [ 478.362676][T14403] ? path_openat+0x1b01/0x2050 [ 478.362727][T14403] __sys_sendmmsg+0x185/0x320 [ 478.362803][T14403] __x64_sys_sendmmsg+0x57/0x70 [ 478.362841][T14403] x64_sys_call+0x27aa/0x3020 [ 478.362861][T14403] do_syscall_64+0x12c/0x3b0 [ 478.362964][T14403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.362986][T14403] RIP: 0033:0x7fb8f0a3ce59 [ 478.363001][T14403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.363015][T14403] RSP: 002b:00007fb8ef497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 478.363033][T14403] RAX: ffffffffffffffda RBX: 00007fb8f0cb5fa0 RCX: 00007fb8f0a3ce59 [ 478.363102][T14403] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 478.363115][T14403] RBP: 00007fb8ef497090 R08: 0000000000000000 R09: 0000000000000000 [ 478.363129][T14403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.363141][T14403] R13: 00007fb8f0cb6038 R14: 00007fb8f0cb5fa0 R15: 00007ffce24b7478 [ 478.363210][T14403] [ 478.610501][T14407] lo speed is unknown, defaulting to 1000 [ 478.693802][T14411] lo speed is unknown, defaulting to 1000 [ 478.870343][ T28] kauditd_printk_skb: 165 callbacks suppressed [ 478.870433][ T28] audit: type=1400 audit(1778766727.512:4849): avc: denied { mounton } for pid=14422 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 478.936971][ T7642] syz_tun (unregistering): left allmulticast mode [ 479.022599][T14422] lo speed is unknown, defaulting to 1000 [ 479.085720][T14437] 9p: Bad value for 'wfdno' [ 479.179963][ T28] audit: type=1400 audit(1778766727.822:4850): avc: denied { write } for pid=14445 comm="syz.5.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 479.200301][T14443] loop8: detected capacity change from 0 to 1024 [ 479.213133][ T28] audit: type=1326 audit(1778766727.842:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.241124][T14447] __nla_validate_parse: 2 callbacks suppressed [ 479.241136][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2892'. [ 479.256406][ T28] audit: type=1326 audit(1778766727.842:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.256436][ T28] audit: type=1326 audit(1778766727.842:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.256475][ T28] audit: type=1326 audit(1778766727.842:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.256519][ T28] audit: type=1326 audit(1778766727.842:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.256555][ T28] audit: type=1326 audit(1778766727.842:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.359673][ T4954] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.384391][ T28] audit: type=1326 audit(1778766727.842:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.394420][ T4954] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.427753][ T28] audit: type=1326 audit(1778766727.842:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14445 comm="syz.5.2892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8f0a3ce59 code=0x7ffc0000 [ 479.429881][T14443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.483770][T14443] EXT4-fs (loop8): shut down requested (0) [ 479.491506][T14447] ip6tnl1: entered allmulticast mode [ 479.509394][T14422] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.517597][T14422] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.526722][T14422] bridge_slave_0: entered allmulticast mode [ 479.527362][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.534915][T14422] bridge_slave_0: entered promiscuous mode [ 479.555442][ T4954] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.588195][ T4954] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.612590][T14422] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.628324][T14422] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.654863][T14422] bridge_slave_1: entered allmulticast mode [ 479.663776][T14422] bridge_slave_1: entered promiscuous mode [ 479.696948][ T4954] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.706857][ T4954] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.727763][T14422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.738436][T14422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.758541][ T4954] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 479.768468][ T4954] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.780020][T14422] team0: Port device team_slave_0 added [ 479.786504][T14422] team0: Port device team_slave_1 added [ 479.818518][T14422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.836458][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.863028][T14422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.877378][T14422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.886009][T14422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.900877][T14476] 9p: Bad value for 'wfdno' [ 479.924469][T14476] loop8: detected capacity change from 0 to 512 [ 479.926301][T14422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.968760][T14476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.986189][T14476] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 480.003090][T14476] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.2902: corrupted inode contents [ 480.015297][T14476] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz.8.2902: mark_inode_dirty error [ 480.027004][T14476] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.2902: corrupted inode contents [ 480.039147][T14476] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.2902: mark_inode_dirty error [ 480.061123][T14422] hsr_slave_0: entered promiscuous mode [ 480.067679][T14422] hsr_slave_1: entered promiscuous mode [ 480.073614][T14422] debugfs: 'hsr0' already exists in 'hsr' [ 480.079584][T14422] Cannot create hsr debugfs directory [ 480.080802][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.249062][T14498] loop8: detected capacity change from 0 to 512 [ 480.255824][T14498] EXT4-fs: Ignoring removed orlov option [ 480.261504][T14498] EXT4-fs: dax option not supported [ 480.275366][ T4954] team0: left allmulticast mode [ 480.280344][ T4954] team_slave_1: left allmulticast mode [ 480.285822][ T4954] dummy0: left allmulticast mode [ 480.290895][ T4954] team0: left promiscuous mode [ 480.295695][ T4954] team_slave_0: left promiscuous mode [ 480.301162][ T4954] team_slave_1: left promiscuous mode [ 480.306793][ T4954] dummy0: left promiscuous mode [ 480.311933][ T4954] bridge0: port 3(team0) entered disabled state [ 480.327649][ T4954] bridge_slave_1: left allmulticast mode [ 480.333331][ T4954] bridge_slave_1: left promiscuous mode [ 480.339024][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.349755][ T4954] bridge_slave_0: left allmulticast mode [ 480.355421][ T4954] bridge_slave_0: left promiscuous mode [ 480.361571][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.549043][T14524] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2911'. [ 480.598948][T14529] 9p: Bad value for 'rfdno' [ 480.670000][ T4954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.679906][ T4954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.689609][ T4954] bond0 (unregistering): Released all slaves [ 480.689720][T14527] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2912'. [ 480.698007][ T4954] bond1 (unregistering): Released all slaves [ 480.982469][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 481.004847][T14477] lo speed is unknown, defaulting to 1000 [ 481.545667][ T4954] tipc: Disabling bearer [ 481.551733][ T4954] tipc: Left network mode [ 481.555691][T14555] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.2916'. [ 481.574702][T14555] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.2916'. [ 481.597936][ T4954] hsr_slave_0: left promiscuous mode [ 481.603992][ T4954] hsr_slave_1: left promiscuous mode [ 481.614105][ T4954] batadv_slave_1: left allmulticast mode [ 481.621251][ T4954] batadv_slave_1: left promiscuous mode [ 481.627788][ T4954] veth1_macvtap: left promiscuous mode [ 481.633276][ T4954] veth0_macvtap: left promiscuous mode [ 481.649065][T14558] netlink: 'syz.7.2916': attribute type 16 has an invalid length. [ 481.664240][T14560] loop5: detected capacity change from 0 to 256 [ 481.694632][T14560] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2917'. [ 481.719117][ T4954] team0 (unregistering): Port device team_slave_1 removed [ 481.737068][ T4954] team0 (unregistering): Port device team_slave_0 removed [ 481.752422][T14564] loop5: detected capacity change from 0 to 512 [ 481.760071][T14564] EXT4-fs: Ignoring removed oldalloc option [ 481.766612][T14564] EXT4-fs: Mount option(s) incompatible with ext2 [ 481.777409][ T4954] team0 (unregistering): Port device dummy0 removed [ 481.835743][T14572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.847620][T14573] loop5: detected capacity change from 0 to 512 [ 481.854328][T14572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.880890][T14576] 9p: Bad value for 'rfdno' [ 481.898732][T14576] loop8: detected capacity change from 0 to 512 [ 481.928051][T14576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.949505][T14576] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.966211][T14576] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.2922: corrupted inode contents [ 481.977499][T14477] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.985347][T14477] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.992617][T14576] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz.8.2922: mark_inode_dirty error [ 481.993416][T14477] bridge_slave_0: entered allmulticast mode [ 482.010083][T14576] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.2922: corrupted inode contents [ 482.010499][T14477] bridge_slave_0: entered promiscuous mode [ 482.035757][T14422] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 482.043500][T14576] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.2922: mark_inode_dirty error [ 482.056555][T14422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.064166][T14477] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.071578][T14477] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.079293][T14477] bridge_slave_1: entered allmulticast mode [ 482.095247][T14477] bridge_slave_1: entered promiscuous mode [ 482.096396][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.111524][T14422] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 482.120844][T14422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.129979][T14477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.141675][ T4954] IPVS: stop unused estimator thread 0... [ 482.147619][T14422] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 482.163748][T14422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.172668][T14477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.188498][T14422] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 482.197000][T14422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.204500][T14600] loop8: detected capacity change from 0 to 128 [ 482.211201][T14477] team0: Port device team_slave_0 added [ 482.231795][T14477] team0: Port device team_slave_1 added [ 482.260499][T14477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.273376][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.302179][T14477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.315121][T14477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.323523][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.349818][T14477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.361526][ T4954] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.379891][T14600] syz.8.2923: attempt to access beyond end of device [ 482.379891][T14600] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 482.393499][T14600] syz.8.2923: attempt to access beyond end of device [ 482.393499][T14600] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 482.413583][T14600] syz.8.2923: attempt to access beyond end of device [ 482.413583][T14600] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 482.433388][T14477] hsr_slave_0: entered promiscuous mode [ 482.445779][T14477] hsr_slave_1: entered promiscuous mode [ 482.452846][T14600] syz.8.2923: attempt to access beyond end of device [ 482.452846][T14600] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 482.487592][ T4954] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.506301][T14600] syz.8.2923: attempt to access beyond end of device [ 482.506301][T14600] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 482.547496][ T4954] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.597533][ T4954] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.635592][T14422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.681358][ T4053] kworker/u8:10: attempt to access beyond end of device [ 482.681358][ T4053] loop8: rw=1, sector=166, nr_sectors = 1 limit=128 [ 482.715995][T14422] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.717457][ T4053] Buffer I/O error on dev loop8, logical block 166, lost async page write [ 482.749884][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.756989][ T4945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.785417][T14655] 9p: Bad value for 'rfdno' [ 482.808807][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.816141][ T4945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.845012][T14655] loop5: detected capacity change from 0 to 512 [ 482.901870][T14655] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.930554][ T4954] bridge_slave_1: left allmulticast mode [ 482.936303][ T4954] bridge_slave_1: left promiscuous mode [ 482.946955][ T4954] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.955610][T14655] ext4 filesystem being mounted at /550/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 482.981400][ T4954] bridge_slave_0: left allmulticast mode [ 482.998005][ T4954] bridge_slave_0: left promiscuous mode [ 483.007277][ T4954] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.015091][T14655] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.2931: corrupted inode contents [ 483.028109][T14638] syz.7.2927 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 483.038114][T14638] CPU: 0 UID: 0 PID: 14638 Comm: syz.7.2927 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.038187][T14638] Tainted: [W]=WARN [ 483.038194][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.038207][T14638] Call Trace: [ 483.038214][T14638] [ 483.038222][T14638] __dump_stack+0x1d/0x30 [ 483.038243][T14638] dump_stack_lvl+0x95/0xd0 [ 483.038296][T14638] dump_stack+0x15/0x1b [ 483.038311][T14638] dump_header+0x80/0x240 [ 483.038330][T14638] oom_kill_process+0x295/0x350 [ 483.038427][T14638] out_of_memory+0x97d/0xb80 [ 483.038533][T14638] try_charge_memcg+0x62f/0xa10 [ 483.038563][T14638] charge_memcg+0x6d/0x120 [ 483.038584][T14638] __mem_cgroup_charge+0x28/0xb0 [ 483.038641][T14638] handle_mm_fault+0x105f/0x2e70 [ 483.038662][T14638] ? _raw_spin_lock+0x52/0xa0 [ 483.038693][T14638] __get_user_pages+0x1290/0x1f10 [ 483.038731][T14638] __mm_populate+0x242/0x390 [ 483.038754][T14638] __se_sys_mlockall+0x35f/0x3c0 [ 483.038812][T14638] __x64_sys_mlockall+0x1f/0x30 [ 483.038836][T14638] x64_sys_call+0xf90/0x3020 [ 483.038863][T14638] do_syscall_64+0x12c/0x3b0 [ 483.038889][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.038916][T14638] RIP: 0033:0x7f5be61bce59 [ 483.038998][T14638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.039014][T14638] RSP: 002b:00007f5be4bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 483.039066][T14638] RAX: ffffffffffffffda RBX: 00007f5be6436090 RCX: 00007f5be61bce59 [ 483.039082][T14638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 483.039093][T14638] RBP: 00007f5be6252d6f R08: 0000000000000000 R09: 0000000000000000 [ 483.039104][T14638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.039154][T14638] R13: 00007f5be6436128 R14: 00007f5be6436090 R15: 00007ffe58c77d58 [ 483.039170][T14638] [ 483.039193][T14638] memory: usage 304832kB, limit 307200kB, failcnt 401 [ 483.078307][T14655] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #2: comm syz.5.2931: mark_inode_dirty error [ 483.081222][ T4954] erspan0: left allmulticast mode [ 483.101251][T14655] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.2931: corrupted inode contents [ 483.110657][ T4954] erspan0: left promiscuous mode [ 483.140049][T14655] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2931: mark_inode_dirty error [ 483.175647][T14638] memory+swap: usage 353948kB, limit 9007199254740988kB, failcnt 0 [ 483.291806][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.306035][ T4954] bridge3: port 1(erspan0) entered disabled state [ 483.450255][T14686] loop8: detected capacity change from 0 to 1024 [ 483.465677][T14638] kmem: usage 244716kB, limit 9007199254740988kB, failcnt 0 [ 483.479543][T14686] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 483.487394][T14638] Memory cgroup stats for /syz7: [ 483.488532][T14638] cache 0 [ 483.508821][T14638] rss 9650176 [ 483.516243][T14638] shmem 0 [ 483.522361][T14638] mapped_file 0 [ 483.527452][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2935'. [ 483.529472][T14638] dirty 0 [ 483.559465][T14690] xt_hashlimit: size too large, truncated to 1048576 [ 483.566858][T14638] writeback 0 [ 483.573231][T14638] workingset_refault_anon 32 [ 483.586800][T14638] workingset_refault_file 0 [ 483.594529][T14638] swap 50434048 [ 483.598133][T14638] swapcached 50704384 [ 483.602119][T14638] pgpgin 288241 [ 483.605581][T14638] pgpgout 285882 [ 483.609331][T14638] pgfault 304111 [ 483.612880][T14638] pgmajfault 22 [ 483.616328][T14638] inactive_anon 0 [ 483.620259][T14638] active_anon 16384 [ 483.624095][T14638] inactive_file 0 [ 483.628328][T14638] active_file 0 [ 483.631939][T14638] unevictable 9646080 [ 483.635921][T14638] hierarchical_memory_limit 314572800 [ 483.641366][T14638] hierarchical_memsw_limit 9223372036854771712 [ 483.647790][T14638] total_cache 0 [ 483.651253][T14638] total_rss 9650176 [ 483.655056][T14638] total_shmem 0 [ 483.658610][T14638] total_mapped_file 0 [ 483.662630][T14638] total_dirty 0 [ 483.666193][T14638] total_writeback 0 [ 483.676216][T14638] total_workingset_refault_anon 32 [ 483.681485][T14638] total_workingset_refault_file 0 [ 483.686517][T14638] total_swap 50434048 [ 483.690623][T14638] total_swapcached 50704384 [ 483.695193][T14638] total_pgpgin 288241 [ 483.699281][T14638] total_pgpgout 285882 [ 483.703394][T14638] total_pgfault 304111 [ 483.707824][T14638] total_pgmajfault 22 [ 483.711885][T14638] total_inactive_anon 0 [ 483.716088][T14638] total_active_anon 16384 [ 483.720545][T14638] total_inactive_file 0 [ 483.724786][T14638] total_active_file 0 [ 483.728892][T14638] total_unevictable 9646080 [ 483.733558][T14638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2927,pid=14636,uid=0 [ 483.751443][T14638] Memory cgroup out of memory: Killed process 14636 (syz.7.2927) total-vm:90460kB, anon-rss:10648kB, file-rss:58568kB, shmem-rss:0kB, UID:0 pgtables:216kB oom_score_adj:0 [ 483.834316][ T4954] bond0 (unregistering): Released all slaves [ 483.860429][ T4954] bond1 (unregistering): Released all slaves [ 483.888499][T14477] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 483.915888][ T28] kauditd_printk_skb: 183 callbacks suppressed [ 483.915901][ T28] audit: type=1400 audit(1778766732.552:5042): avc: denied { write } for pid=14697 comm="syz.8.2938" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 483.947071][ T28] audit: type=1400 audit(1778766732.562:5043): avc: denied { write } for pid=14696 comm="syz.5.2937" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 483.976631][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.988752][ T28] audit: type=1400 audit(1778766732.582:5044): avc: denied { open } for pid=14697 comm="syz.8.2938" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 484.014137][ T4954] tipc: Disabling bearer [ 484.030398][ T4954] tipc: Left network mode [ 484.030968][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2937'. [ 484.048654][T14704] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 484.061722][T14698] tc_dump_action: action bad kind [ 484.066807][T14477] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 484.073866][T14704] ext4 filesystem being mounted at /273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 484.107783][ T28] audit: type=1400 audit(1778766732.702:5045): avc: denied { write } for pid=14703 comm="syz.8.2940" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.140232][ T28] audit: type=1400 audit(1778766732.762:5046): avc: denied { write } for pid=14713 comm="syz.8.2940" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.166797][ T28] audit: type=1400 audit(1778766732.762:5047): avc: denied { write } for pid=14713 comm="syz.8.2940" path="/273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/core" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 484.171082][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.232972][ T28] audit: type=1400 audit(1778766732.872:5048): avc: denied { write } for pid=14703 comm="syz.8.2940" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.270995][ T4954] hsr_slave_0: left promiscuous mode [ 484.290103][ T28] audit: type=1400 audit(1778766732.872:5049): avc: denied { write } for pid=14703 comm="syz.8.2940" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.312263][ T4954] hsr_slave_1: left promiscuous mode [ 484.318588][ T28] audit: type=1400 audit(1778766732.872:5050): avc: denied { write } for pid=14703 comm="syz.8.2940" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 484.377288][ T4954] team_slave_1 (unregistering): left promiscuous mode [ 484.397695][ T4954] team0 (unregistering): Port device team_slave_1 removed [ 484.407100][ T4954] team_slave_0 (unregistering): left promiscuous mode [ 484.417417][ T4954] team0 (unregistering): Port device team_slave_0 removed [ 484.471153][T14477] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 484.479361][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.486989][T14477] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 484.495574][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.524405][T14735] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2947'. [ 484.583661][T14744] netlink: 'syz.7.2948': attribute type 1 has an invalid length. [ 484.584476][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.620116][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2949'. [ 484.635183][ T28] audit: type=1400 audit(1778766733.272:5051): avc: denied { write } for pid=14737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 484.637507][T14744] bond2: entered promiscuous mode [ 484.663600][T14744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.685970][T14477] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.705165][T14744] bond2: (slave bridge4): making interface the new active one [ 484.715942][T14744] bridge4: entered promiscuous mode [ 484.723239][T14744] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 484.739206][ T4056] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.746315][ T4056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.758201][ T4954] IPVS: stop unused estimator thread 0... [ 484.770048][ T4050] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.777146][ T4050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.789384][T14422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.865180][ T9539] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.978297][T14422] veth0_vlan: entered promiscuous mode [ 484.985883][T14422] veth1_vlan: entered promiscuous mode [ 485.002379][T14422] veth0_macvtap: entered promiscuous mode [ 485.018694][T14422] veth1_macvtap: entered promiscuous mode [ 485.058454][T14422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.076839][T14422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.108675][ T4053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.127512][ T4053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.152676][ T4065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.177795][ T4065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.198683][T14810] ipt_rpfilter: unknown options [ 485.303807][T14477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.324348][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 485.349267][T14829] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2963'. [ 485.538432][T14859] set_capacity_and_notify: 1 callbacks suppressed [ 485.538448][T14859] loop3: detected capacity change from 0 to 128 [ 485.686208][T14869] loop5: detected capacity change from 0 to 512 [ 485.710279][T14477] veth0_vlan: entered promiscuous mode [ 485.836124][T14876] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000) [ 485.844992][T14876] FAT-fs (loop3): Filesystem has been set read-only [ 485.930517][T14869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.976356][T14869] ext4 filesystem being mounted at /565/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.041142][T14869] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.2970: corrupted inode contents [ 486.053800][T14869] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #2: comm syz.5.2970: mark_inode_dirty error [ 486.081429][T14477] veth1_vlan: entered promiscuous mode [ 486.136847][T14477] veth0_macvtap: entered promiscuous mode [ 486.146210][T14477] veth1_macvtap: entered promiscuous mode [ 486.161962][T14477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.172208][T14477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.278356][T14869] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #2: comm syz.5.2970: corrupted inode contents [ 486.292230][T14869] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.2970: mark_inode_dirty error [ 486.524399][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.538452][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 486.575630][ T4056] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.688496][ T4056] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.706171][ T4056] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.725410][T14890] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 486.735712][ T4056] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.753043][T14894] loop8: detected capacity change from 0 to 4096 [ 486.782644][T14894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.874374][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.985633][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2978'. [ 487.001353][T14904] FAULT_INJECTION: forcing a failure. [ 487.001353][T14904] name failslab, interval 1, probability 0, space 0, times 0 [ 487.014159][T14904] CPU: 1 UID: 0 PID: 14904 Comm: syz.9.2901 Tainted: G W syzkaller #0 PREEMPT(full) [ 487.014201][T14904] Tainted: [W]=WARN [ 487.014208][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.014218][T14904] Call Trace: [ 487.014224][T14904] [ 487.014231][T14904] __dump_stack+0x1d/0x30 [ 487.014255][T14904] dump_stack_lvl+0x95/0xd0 [ 487.014276][T14904] dump_stack+0x15/0x1b [ 487.014361][T14904] should_fail_ex+0x263/0x280 [ 487.014386][T14904] should_failslab+0x8c/0xb0 [ 487.014409][T14904] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 487.014478][T14904] ? __alloc_skb+0x2d6/0x690 [ 487.014531][T14904] __alloc_skb+0x2d6/0x690 [ 487.014545][T14904] ? __rcu_read_unlock+0x4e/0x70 [ 487.014566][T14904] ? __alloc_skb+0x200/0x690 [ 487.014585][T14904] alloc_skb_with_frags+0x7e/0x3d0 [ 487.014607][T14904] ? memcg_list_lru_alloc+0xd0/0x4f0 [ 487.014679][T14904] ? set_normalized_timespec64+0xe0/0x110 [ 487.014777][T14904] ? __account_obj_stock+0x3ba/0x5f0 [ 487.014799][T14904] sock_alloc_send_pskb+0x44d/0x500 [ 487.014827][T14904] unix_dgram_sendmsg+0x391/0x1050 [ 487.014845][T14904] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 487.014940][T14904] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 487.014956][T14904] ____sys_sendmsg+0x563/0x5b0 [ 487.015048][T14904] ___sys_sendmsg+0x195/0x1e0 [ 487.015069][T14904] ? path_openat+0x1b01/0x2050 [ 487.015099][T14904] __sys_sendmmsg+0x185/0x320 [ 487.015126][T14904] __x64_sys_sendmmsg+0x57/0x70 [ 487.015192][T14904] x64_sys_call+0x27aa/0x3020 [ 487.015211][T14904] do_syscall_64+0x12c/0x3b0 [ 487.015305][T14904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.015323][T14904] RIP: 0033:0x7f4820ecce59 [ 487.015337][T14904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.015352][T14904] RSP: 002b:00007f481f91f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 487.015412][T14904] RAX: ffffffffffffffda RBX: 00007f4821145fa0 RCX: 00007f4820ecce59 [ 487.015427][T14904] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 487.015440][T14904] RBP: 00007f481f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 487.015451][T14904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.015463][T14904] R13: 00007f4821146038 R14: 00007f4821145fa0 R15: 00007ffc71c2ae88 [ 487.015483][T14904] [ 487.091772][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 487.202581][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 487.225913][T14925] loop8: detected capacity change from 0 to 1024 [ 487.281437][T14925] EXT4-fs: test_dummy_encryption option not supported [ 487.298069][T14931] loop3: detected capacity change from 0 to 512 [ 487.392945][T14931] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 487.427276][T14931] EXT4-fs (loop3): 1 truncate cleaned up [ 487.433398][T14931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.511599][T14422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.522738][T14947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14947 comm=syz.5.2984 [ 487.537924][T14953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14953 comm=syz.5.2984 [ 487.666798][T14956] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 487.896754][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 487.948132][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 487.985700][T14992] loop8: detected capacity change from 0 to 512 [ 488.014196][T14992] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 488.018316][T14991] loop9: detected capacity change from 0 to 4096 [ 488.037130][T14992] EXT4-fs (loop8): invalid journal inode [ 488.044489][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2997'. [ 488.053483][T14992] EXT4-fs (loop8): can't get journal size [ 488.057661][T14991] ext4: Unknown parameter 'fsname' [ 488.086696][T14992] EXT4-fs (loop8): 1 truncate cleaned up [ 488.109801][T14992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.177251][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.395736][T15014] bond1: peer notification delay (2048) is not a multiple of miimon (100), value rounded to 2000 ms [ 488.407050][T15014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.431070][T15014] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=273 sclass=netlink_xfrm_socket pid=15014 comm=syz.9.2999 [ 488.508036][T15019] bridge0: port 3(vlan2) entered blocking state [ 488.526467][T15020] loop9: detected capacity change from 0 to 512 [ 488.539816][T15020] ext4: Unknown parameter 'mask' [ 488.556128][T15019] bridge0: port 3(vlan2) entered disabled state [ 488.562581][T15019] vlan2: entered allmulticast mode [ 488.567749][T15019] bridge0: entered allmulticast mode [ 488.573312][T15019] bridge0: entered promiscuous mode [ 488.597027][T15019] vlan2: left allmulticast mode [ 488.602101][T15019] bridge0: left allmulticast mode [ 488.870328][ T4539] bridge0: left promiscuous mode [ 489.181019][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 489.181035][ T28] audit: type=1400 audit(1778766737.822:5173): avc: denied { write } for pid=15036 comm="syz.8.3005" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 489.238482][ T28] audit: type=1400 audit(1778766737.852:5174): avc: denied { read write } for pid=15037 comm="syz.5.3004" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 489.269439][ T28] audit: type=1400 audit(1778766737.852:5175): avc: denied { open } for pid=15037 comm="syz.5.3004" path="/dev/usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 489.302679][ T28] audit: type=1400 audit(1778766737.852:5176): avc: denied { setattr } for pid=15036 comm="syz.8.3005" name="RAWv6" dev="sockfs" ino=41362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.362958][ T28] audit: type=1400 audit(1778766737.852:5177): avc: denied { ioctl } for pid=15037 comm="syz.5.3004" path="/dev/usbmon4" dev="devtmpfs" ino=154 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 489.397729][T15052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3008'. [ 489.406895][ T28] audit: type=1400 audit(1778766737.852:5178): avc: denied { read append } for pid=15037 comm="syz.5.3004" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 489.442817][ T28] audit: type=1400 audit(1778766737.852:5179): avc: denied { open } for pid=15037 comm="syz.5.3004" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 489.485823][ T28] audit: type=1400 audit(1778766737.862:5180): avc: denied { listen } for pid=15027 comm="syz.7.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 489.506083][ T28] audit: type=1400 audit(1778766737.862:5181): avc: denied { write } for pid=15027 comm="syz.7.3001" lport=51959 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 489.555641][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3011'. [ 489.564849][ T28] audit: type=1400 audit(1778766738.192:5182): avc: denied { bind } for pid=15058 comm="syz.5.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 489.587867][T15062] netlink: 'syz.9.3010': attribute type 3 has an invalid length. [ 489.937921][T15079] FAULT_INJECTION: forcing a failure. [ 489.937921][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.968137][T15079] CPU: 1 UID: 0 PID: 15079 Comm: syz.9.3017 Tainted: G W syzkaller #0 PREEMPT(full) [ 489.968171][T15079] Tainted: [W]=WARN [ 489.968249][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 489.968282][T15079] Call Trace: [ 489.968289][T15079] [ 489.968296][T15079] __dump_stack+0x1d/0x30 [ 489.968334][T15079] dump_stack_lvl+0x95/0xd0 [ 489.968355][T15079] dump_stack+0x15/0x1b [ 489.968374][T15079] should_fail_ex+0x263/0x280 [ 489.968418][T15079] should_fail+0xb/0x20 [ 489.968442][T15079] should_fail_usercopy+0x1a/0x20 [ 489.968467][T15079] _copy_to_user+0x20/0xa0 [ 489.968522][T15079] simple_read_from_buffer+0xb5/0x130 [ 489.968555][T15079] proc_fail_nth_read+0x10e/0x150 [ 489.968581][T15079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.968667][T15079] vfs_read+0x1ab/0x7f0 [ 489.968692][T15079] ? __rcu_read_unlock+0x4e/0x70 [ 489.968713][T15079] ? __fget_files+0x184/0x1c0 [ 489.968732][T15079] ? mutex_lock+0x57/0x90 [ 489.968794][T15079] ksys_read+0xdc/0x1a0 [ 489.968822][T15079] __x64_sys_read+0x40/0x50 [ 489.968853][T15079] x64_sys_call+0x2886/0x3020 [ 489.968932][T15079] do_syscall_64+0x12c/0x3b0 [ 489.968955][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.968972][T15079] RIP: 0033:0x7f4820e8d68e [ 489.968987][T15079] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.969058][T15079] RSP: 002b:00007f481f91efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.969078][T15079] RAX: ffffffffffffffda RBX: 00007f481f91f6c0 RCX: 00007f4820e8d68e [ 489.969144][T15079] RDX: 000000000000000f RSI: 00007f481f91f0a0 RDI: 0000000000000005 [ 489.969155][T15079] RBP: 00007f481f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 489.969165][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.969176][T15079] R13: 00007f4821146038 R14: 00007f4821145fa0 R15: 00007ffc71c2ae88 [ 489.969198][T15079] [ 490.295905][T15095] loop8: detected capacity change from 0 to 512 [ 492.481238][T15095] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.505328][T15095] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.531248][T15095] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.3022: corrupted inode contents [ 492.555350][T15095] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #2: comm syz.8.3022: mark_inode_dirty error [ 492.581412][T15095] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #2: comm syz.8.3022: corrupted inode contents [ 492.605713][T15095] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.3022: mark_inode_dirty error [ 492.754243][T15130] netlink: 'syz.7.3032': attribute type 4 has an invalid length. [ 492.762305][T15130] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3032'. [ 492.960346][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.176066][T15148] loop8: detected capacity change from 0 to 1024 [ 494.185226][T15148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.204920][T15147] EXT4-fs (loop8): shut down requested (0) [ 494.211669][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 494.211712][ T28] audit: type=1400 audit(1778766742.852:5220): avc: denied { read } for pid=2960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 494.364903][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.400722][ T28] audit: type=1400 audit(1778766742.852:5221): avc: denied { search } for pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.529293][ T28] audit: type=1400 audit(1778766742.852:5222): avc: denied { append } for pid=2960 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 494.642889][ T28] audit: type=1400 audit(1778766742.852:5223): avc: denied { open } for pid=2960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 494.771869][ T28] audit: type=1400 audit(1778766742.852:5224): avc: denied { getattr } for pid=2960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 495.199456][ T28] audit: type=1400 audit(1778766743.832:5225): avc: denied { setopt } for pid=15182 comm="syz.7.3047" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 495.358683][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3047'. [ 495.367768][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3047'. [ 495.473268][T15185] FAULT_INJECTION: forcing a failure. [ 495.473268][T15185] name failslab, interval 1, probability 0, space 0, times 0 [ 495.486050][T15185] CPU: 0 UID: 0 PID: 15185 Comm: syz.8.3048 Tainted: G W syzkaller #0 PREEMPT(full) [ 495.486082][T15185] Tainted: [W]=WARN [ 495.486090][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.486102][T15185] Call Trace: [ 495.486110][T15185] [ 495.486157][T15185] __dump_stack+0x1d/0x30 [ 495.486182][T15185] dump_stack_lvl+0x95/0xd0 [ 495.486201][T15185] dump_stack+0x15/0x1b [ 495.486217][T15185] should_fail_ex+0x263/0x280 [ 495.486240][T15185] should_failslab+0x8c/0xb0 [ 495.486290][T15185] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 495.486321][T15185] ? __alloc_skb+0x2d6/0x690 [ 495.486336][T15185] ? selinux_socket_sock_rcv_skb+0x221/0x640 [ 495.486365][T15185] __alloc_skb+0x2d6/0x690 [ 495.486392][T15185] ? __alloc_skb+0x200/0x690 [ 495.486408][T15185] alloc_skb_with_frags+0x7e/0x3d0 [ 495.486442][T15185] ? avc_has_perm+0x101/0x190 [ 495.486468][T15185] sock_alloc_send_pskb+0x44d/0x500 [ 495.486571][T15185] unix_dgram_sendmsg+0x391/0x1050 [ 495.486592][T15185] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 495.486684][T15185] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 495.486727][T15185] ____sys_sendmsg+0x563/0x5b0 [ 495.486751][T15185] ___sys_sendmsg+0x195/0x1e0 [ 495.486811][T15185] ? path_openat+0x1b01/0x2050 [ 495.486849][T15185] __sys_sendmmsg+0x185/0x320 [ 495.486899][T15185] __x64_sys_sendmmsg+0x57/0x70 [ 495.486918][T15185] x64_sys_call+0x27aa/0x3020 [ 495.486962][T15185] do_syscall_64+0x12c/0x3b0 [ 495.486991][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.487009][T15185] RIP: 0033:0x7f220056ce59 [ 495.487024][T15185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.487043][T15185] RSP: 002b:00007f21fefbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.487127][T15185] RAX: ffffffffffffffda RBX: 00007f22007e5fa0 RCX: 00007f220056ce59 [ 495.487139][T15185] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 495.487155][T15185] RBP: 00007f21fefbf090 R08: 0000000000000000 R09: 0000000000000000 [ 495.487168][T15185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.487180][T15185] R13: 00007f22007e6038 R14: 00007f22007e5fa0 R15: 00007ffdf7e883d8 [ 495.487214][T15185] [ 495.851855][ T28] audit: type=1400 audit(1778766744.492:5226): avc: denied { setopt } for pid=15195 comm="syz.7.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 495.908362][ T28] audit: type=1400 audit(1778766744.512:5227): avc: denied { ioctl } for pid=15195 comm="syz.7.3051" path="socket:[40742]" dev="sockfs" ino=40742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 495.975274][ T28] audit: type=1400 audit(1778766744.512:5228): avc: denied { bind } for pid=15195 comm="syz.7.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 496.114148][ T28] audit: type=1400 audit(1778766744.752:5229): avc: denied { name_connect } for pid=15204 comm="syz.7.3053" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 496.637840][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.650608][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.730224][T15219] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=15219 comm=syz.7.3057 [ 496.757468][T15219] tipc: Enabling of bearer rejected, already enabled [ 496.775158][T15219] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3057'. [ 497.174562][T15230] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 497.394235][T15233] loop8: detected capacity change from 0 to 8192 [ 497.418966][T15233] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3061'. [ 498.111945][T15264] loop5: detected capacity change from 0 to 512 [ 498.136964][T15264] EXT4-fs (loop5): 1 truncate cleaned up [ 498.165052][T15264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.623276][T15283] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3070'. [ 498.650654][T15284] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3070'. [ 498.710423][T15286] cgroup: noprefix used incorrectly [ 498.742653][T15291] loop9: detected capacity change from 0 to 128 [ 498.824760][T15296] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3073'. [ 499.112767][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.577895][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 499.577910][ T28] audit: type=1400 audit(1778766748.222:5265): avc: denied { name_bind } for pid=15310 comm="syz.5.3075" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 499.679212][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.686489][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.716891][ T28] audit: type=1400 audit(1778766748.352:5266): avc: denied { create } for pid=15314 comm="syz.8.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.768064][T15296] bridge_slave_0: left allmulticast mode [ 499.782509][T15296] bridge_slave_0: left promiscuous mode [ 499.785676][ T28] audit: type=1400 audit(1778766748.382:5267): avc: denied { connect } for pid=15314 comm="syz.8.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.797429][T15296] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.832945][ T28] audit: type=1400 audit(1778766748.392:5268): avc: denied { bind } for pid=15314 comm="syz.8.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.833030][T15317] xt_hashlimit: max too large, truncated to 1048576 [ 499.869192][ T28] audit: type=1400 audit(1778766748.392:5269): avc: denied { write } for pid=15314 comm="syz.8.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.883538][T15317] reject_tg_check: 55 callbacks suppressed [ 499.883553][T15317] ipt_REJECT: TCP_RESET invalid for non-tcp [ 499.900505][T15296] bridge_slave_1: left allmulticast mode [ 499.912007][T15296] bridge_slave_1: left promiscuous mode [ 499.916701][ T28] audit: type=1400 audit(1778766748.392:5270): avc: denied { getopt } for pid=15314 comm="syz.8.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 499.927399][T15296] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.978751][T15296] bond0: (slave bond_slave_0): Releasing backup interface [ 499.997076][T15296] bond0: (slave bond_slave_1): Releasing backup interface [ 500.021549][T15296] team0: Port device team_slave_0 removed [ 500.040076][T15296] team0: Port device team_slave_1 removed [ 500.048835][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.068837][T15296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.088649][T15320] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=15320 comm=syz.8.3078 [ 500.089685][T15296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.128464][T15296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.149364][T15296] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 500.186247][T15320] tipc: Enabling of bearer rejected, already enabled [ 500.229187][T15319] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3078'. [ 500.350339][T15339] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.357754][T15339] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.383541][ T28] audit: type=1400 audit(1778766750.020:5271): avc: denied { write } for pid=15329 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.424770][T15334] netlink: 140 bytes leftover after parsing attributes in process `syz.9.3081'. [ 500.516587][T15326] loop5: detected capacity change from 0 to 512 [ 500.546553][ T28] audit: type=1400 audit(1778766750.180:5272): avc: denied { write } for pid=15347 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.580994][T15326] EXT4-fs: Ignoring removed nobh option [ 500.620730][T15352] loop9: detected capacity change from 0 to 512 [ 500.639243][ T28] audit: type=1400 audit(1778766750.250:5273): avc: denied { ioctl } for pid=15351 comm="syz.9.3084" path="socket:[41891]" dev="sockfs" ino=41891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 500.678963][T15352] ext3: Unknown parameter 'fowner' [ 500.685572][T15326] EXT4-fs (loop5): orphan cleanup on readonly fs [ 500.703077][T15326] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.3079: EA inode hash validation failed [ 500.776669][T15326] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 500.790442][T15326] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3079: corrupted inode contents [ 500.802253][T15326] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 500.802480][T15326] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.3079: mark_inode_dirty error [ 500.823063][T15326] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 500.823229][T15326] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.3079: corrupted inode contents [ 500.833723][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 500.834067][ C1] EXT4-fs (loop5): initial error at time 1778766750: ext4_do_update_inode:5690: inode 15 [ 500.834210][ C1] EXT4-fs (loop5): last error at time 1778766750: ext4_dirty_inode:6587: inode 15 [ 500.964390][ T28] audit: type=1400 audit(1778766750.600:5274): avc: denied { write } for pid=15360 comm="syz.9.3087" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 501.010620][T15326] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 501.012477][T15326] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.3079: mark_inode_dirty error [ 501.067525][T15326] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 501.068007][T15326] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.3079: mark inode dirty (error -117) [ 501.125402][T15326] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 501.127852][T15326] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 501.218979][T15326] EXT4-fs (loop5): 1 orphan inode deleted [ 501.247655][T15326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 501.467146][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.505530][T15390] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3088'. [ 501.687288][T15399] netlink: 264 bytes leftover after parsing attributes in process `syz.9.3090'. [ 501.715234][T15395] loop5: detected capacity change from 0 to 1024 [ 501.777261][T15395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 501.817353][T15395] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.840789][T15401] loop9: detected capacity change from 0 to 2048 [ 501.912609][T15401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.929386][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 502.063678][T14477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.127382][T15423] loop5: detected capacity change from 0 to 1024 [ 502.180155][T15423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.224996][T15423] EXT4-fs (loop5): shut down requested (0) [ 502.265518][T15430] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=15430 comm=syz.9.3092 [ 502.316510][T15425] tipc: Started in network mode [ 502.339320][T15425] tipc: Node identity ac14140f, cluster identity 4711 [ 502.352746][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.375098][T15425] tipc: New replicast peer: 255.255.255.255 [ 502.382492][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3095'. [ 502.392170][T15425] tipc: Enabled bearer , priority 10 [ 502.409248][T15425] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3092'. [ 502.418265][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3095'. [ 502.418314][T15437] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3095'. [ 502.426867][T15440] loop5: detected capacity change from 0 to 512 [ 502.518824][T15440] EXT4-fs: Ignoring removed nobh option [ 502.558723][T15440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.605053][T15440] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.634258][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x1 [ 502.645849][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.663863][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.677214][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.694491][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.710254][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.725588][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.728439][T15447] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 502.743459][T15448] loop9: detected capacity change from 0 to 2048 [ 502.746745][T15448] EXT4-fs: Ignoring removed i_version option [ 502.761480][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.777060][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x2 [ 502.797039][ T3398] hid-generic 0080:0008:0000.0001: unknown main item tag 0x0 [ 502.807537][T15448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.829720][ T3398] hid-generic 0080:0008:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 502.844648][T15448] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.880471][T15448] EXT4-fs (loop9): resizing filesystem from 256 to 0 blocks [ 502.888135][T15448] EXT4-fs warning (device loop9): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 502.895657][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.106812][T15453] fido_id[15453]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 503.507192][ T4540] tipc: Node number set to 2886997007 [ 504.032834][T14477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.104496][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 505.104560][ T28] audit: type=1400 audit(1778766754.740:5298): avc: denied { mount } for pid=15469 comm="syz.9.3101" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 505.265630][ T28] audit: type=1400 audit(1778766754.900:5299): avc: denied { map } for pid=15472 comm="syz.9.3102" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 505.270252][T15473] loop9: detected capacity change from 0 to 1024 [ 505.296230][T15473] EXT4-fs: Ignoring removed orlov option [ 505.376416][ T28] audit: type=1400 audit(1778766754.900:5300): avc: denied { execute } for pid=15472 comm="syz.9.3102" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 505.498969][T15473] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.610870][ T28] audit: type=1400 audit(1778766755.250:5301): avc: denied { write } for pid=15472 comm="syz.9.3102" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 505.681426][T15480] loop5: detected capacity change from 0 to 1024 [ 505.717361][T14477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.728320][T15480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.750368][T15480] EXT4-fs (loop5): shut down requested (0) [ 505.810230][ T28] audit: type=1400 audit(1778766755.450:5302): avc: denied { read write } for pid=15488 comm="syz.9.3106" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 505.848512][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.927888][ T28] audit: type=1400 audit(1778766755.470:5303): avc: denied { open } for pid=15488 comm="syz.9.3106" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 506.038012][ T28] audit: type=1400 audit(1778766755.540:5304): avc: denied { write } for pid=15488 comm="syz.9.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 506.101606][T15507] loop5: detected capacity change from 0 to 512 [ 506.102595][ T28] audit: type=1400 audit(1778766755.620:5305): avc: denied { shutdown } for pid=15498 comm="syz.5.3109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 506.131697][T15507] EXT4-fs: journaled quota format not specified [ 506.386745][T15514] loop5: detected capacity change from 0 to 512 [ 506.413830][T15514] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.3113: inode has both inline data and extents flags [ 506.481847][T15514] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 506.490052][T15514] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.3113: couldn't read orphan inode 15 (err -117) [ 506.511019][T15514] loop5: lost filesystem error report for type 5 error -117 [ 506.532205][T15514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.587219][T15520] loop8: detected capacity change from 0 to 128 [ 506.606144][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.873467][T15523] FAT-fs (loop8): error, invalid access to FAT (entry 0x0fff0000) [ 506.881469][T15523] FAT-fs (loop8): Filesystem has been set read-only [ 506.894476][ T28] audit: type=1400 audit(1778766756.500:5306): avc: denied { ioctl } for pid=15519 comm="syz.8.3115" path="socket:[43212]" dev="sockfs" ino=43212 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 507.077601][T15526] loop9: detected capacity change from 0 to 1024 [ 507.110293][T15526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.126985][T15526] EXT4-fs (loop9): shut down requested (0) [ 507.147559][ T28] audit: type=1400 audit(1778766756.790:5307): avc: denied { mounton } for pid=15529 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 507.311349][T14477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.708958][T15548] loop9: detected capacity change from 0 to 764 [ 507.795698][T15557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15557 comm=syz.8.3122 [ 507.829662][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3122'. [ 507.847262][T15557] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3122'. [ 507.894843][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3122'. [ 507.897128][T15556] loop9: detected capacity change from 0 to 2048 [ 507.926963][T15529] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.953284][T15529] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.970047][T15556] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.992127][T15529] bridge_slave_0: entered allmulticast mode [ 508.009314][T15529] bridge_slave_0: entered promiscuous mode [ 508.029131][T15529] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.052021][T15529] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.074971][T15529] bridge_slave_1: entered allmulticast mode [ 508.096462][T15529] bridge_slave_1: entered promiscuous mode [ 508.164301][T15529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.195726][T15529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.213833][ T4053] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 508.233955][ T4053] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 508.244481][T15529] team0: Port device team_slave_0 added [ 508.247854][ T4053] EXT4-fs (loop9): This should not happen!! Data will be lost [ 508.247854][ T4053] [ 508.267772][ T4053] EXT4-fs (loop9): Total free blocks count 0 [ 508.273999][ T4053] EXT4-fs (loop9): Free/Dirty block details [ 508.280028][ T4053] EXT4-fs (loop9): free_blocks=4096 [ 508.285475][ T4053] EXT4-fs (loop9): dirty_blocks=512 [ 508.294947][ T4053] EXT4-fs (loop9): Block reservation details [ 508.301979][T15529] team0: Port device team_slave_1 added [ 508.308785][ T4053] EXT4-fs (loop9): i_reserved_data_blocks=32 [ 508.315842][ T4053] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 508.331884][T14477] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 508.345598][T15529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.352863][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.378975][T15529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.393675][T15529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.401813][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.435971][T15578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15578 comm=syz.7.3126 [ 508.440819][T15529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.465711][T15573] IPv6: sit1: Disabled Multicast RS [ 508.491841][T15529] hsr_slave_0: entered promiscuous mode [ 508.507968][T15529] hsr_slave_1: entered promiscuous mode [ 508.514002][T15529] debugfs: 'hsr0' already exists in 'hsr' [ 508.520034][T15529] Cannot create hsr debugfs directory [ 508.857795][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 509.871638][ T4050] batman_adv: batadv0: Removing interface: ip6gretap0 [ 510.031132][ T4050] bond2 (unregistering): (slave geneve2): Releasing active interface [ 510.039546][ T4050] geneve2 (unregistering): left allmulticast mode [ 510.148538][ T4050] bond0 (unregistering): Released all slaves [ 510.810153][T15615] loop9: detected capacity change from 0 to 256 [ 510.985054][ T4050] bond1 (unregistering): Released all slaves [ 510.995347][ T4050] bond2 (unregistering): Released all slaves [ 511.004487][ T4050] bond3 (unregistering): Released all slaves [ 511.364293][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 511.364305][ T28] audit: type=1400 audit(1778766761.000:5316): avc: denied { listen } for pid=15606 comm="syz.9.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 511.428448][T15610] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3129'. [ 511.864734][ T28] audit: type=1400 audit(1778766761.500:5317): avc: denied { write } for pid=15623 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 511.892786][T15569] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.909249][T15569] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.936729][T15569] bridge_slave_0: entered allmulticast mode [ 511.954800][T15569] bridge_slave_0: entered promiscuous mode [ 511.972481][ T28] audit: type=1400 audit(1778766761.610:5318): avc: denied { write } for pid=15641 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.005177][T15569] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.018719][T15569] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.033587][T15569] bridge_slave_1: entered allmulticast mode [ 512.041833][T15569] bridge_slave_1: entered promiscuous mode [ 512.050829][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 512.084122][T15569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.094883][T15569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.115214][T15569] team0: Port device team_slave_0 added [ 512.121839][T15569] team0: Port device team_slave_1 added [ 512.153223][T15569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.160593][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.193040][T15569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.204816][T15569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.212006][T15569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.262905][ T28] audit: type=1400 audit(1778766761.900:5319): avc: denied { write } for pid=15651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.265211][T15569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.325197][T15671] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 512.339036][ T28] audit: type=1400 audit(1778766761.960:5320): avc: denied { write } for pid=15670 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.378915][ T28] audit: type=1400 audit(1778766762.020:5321): avc: denied { write } for pid=15673 comm="syz.7.3135" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 512.419576][ T28] audit: type=1326 audit(1778766762.050:5322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15673 comm="syz.7.3135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 512.422709][T15569] hsr_slave_0: entered promiscuous mode [ 512.445070][ T28] audit: type=1326 audit(1778766762.050:5323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15673 comm="syz.7.3135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 512.445097][ T28] audit: type=1326 audit(1778766762.050:5325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15673 comm="syz.7.3135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 512.479341][T15569] hsr_slave_1: entered promiscuous mode [ 512.507572][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3135'. [ 512.517763][T15569] debugfs: 'hsr0' already exists in 'hsr' [ 512.523502][T15569] Cannot create hsr debugfs directory [ 512.529587][ T28] audit: type=1326 audit(1778766762.050:5324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15673 comm="syz.7.3135" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be61bce59 code=0x7ffc0000 [ 512.917882][T15694] netlink: 'syz.8.3137': attribute type 4 has an invalid length. [ 512.925658][T15694] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3137'. [ 513.152181][T15529] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 513.243958][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.291259][ T4050] tipc: Disabling bearer [ 513.296852][ T4050] tipc: Left network mode [ 513.303264][T15529] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 513.332864][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.452511][ T4050] hsr_slave_0: left promiscuous mode [ 513.556970][T15529] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 513.572818][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.600781][T15529] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 513.612861][T15529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.840247][T15529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.864193][T15529] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.884950][ T4065] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.892031][ T4065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.907611][ T4065] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.914716][ T4065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.998925][T15529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.036590][T15529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.185798][T15569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 514.234964][T15569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.262580][T15569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 514.289031][T15569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.313842][ T4050] IPVS: stop unused estimator thread 0... [ 514.323098][T15569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 514.353944][T15569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.387092][T15569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.411281][T15569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.502934][ T4050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.765965][T15734] loop8: detected capacity change from 0 to 512 [ 514.907902][T15734] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.049680][T15529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.064275][ T4050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.238938][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.277899][T15569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.313485][ T4050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.348789][T15569] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.386743][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.393846][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.435307][ T4050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.464848][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.471971][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.523616][T15569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.548954][T15569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.686935][ T4050] bridge_slave_1: left allmulticast mode [ 515.702008][ T4050] bridge_slave_1: left promiscuous mode [ 515.716355][ T4050] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.733839][ T4050] bridge_slave_0: left allmulticast mode [ 515.742587][ T4050] bridge_slave_0: left promiscuous mode [ 515.749482][ T4050] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.000266][ T4050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.009407][T15805] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3147'. [ 516.028799][ T4050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.046040][ T4050] bond0 (unregistering): Released all slaves [ 516.149125][T15819] loop8: detected capacity change from 0 to 512 [ 516.244851][T15819] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 516.256988][T15819] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 516.268078][T15819] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3146: Corrupt directory, running e2fsck is recommended [ 516.291028][T15819] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 516.301669][T15819] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3146: corrupted in-inode xattr: e_name out of bounds [ 516.316538][T15819] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 516.317429][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 516.334308][ C0] EXT4-fs (loop8): initial error at time 1778766765: ext4_iget_extra_inode:5128: inode 15 [ 516.345720][ C0] EXT4-fs (loop8): last error at time 1778766765: ext4_iget_extra_inode:5128: inode 15 [ 516.363802][T15819] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3146: couldn't read orphan inode 15 (err -117) [ 516.376727][T15819] loop8: lost filesystem error report for type 5 error -117 [ 516.385578][T15819] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.361816][T15529] veth0_vlan: entered promiscuous mode [ 517.396103][T15529] veth1_vlan: entered promiscuous mode [ 517.449751][T15529] veth0_macvtap: entered promiscuous mode [ 517.480084][T15529] veth1_macvtap: entered promiscuous mode [ 517.499914][T15569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.532822][T15529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.562147][T15529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.595733][ T4061] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.622862][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.636621][ T4061] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.653278][ T4061] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.673581][ T4050] hsr_slave_0: left promiscuous mode [ 517.692109][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 517.692124][ T28] audit: type=1400 audit(1778766767.330:5358): avc: denied { write } for pid=15828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.723044][ T4050] hsr_slave_1: left promiscuous mode [ 517.738801][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.756201][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.765534][ T28] audit: type=1400 audit(1778766767.400:5359): avc: denied { write } for pid=15852 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.792468][ T4050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.801822][ T4050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.812540][ T4050] veth1_macvtap: left promiscuous mode [ 517.822439][ T4050] veth0_macvtap: left promiscuous mode [ 517.830019][ T4050] veth1_vlan: left promiscuous mode [ 517.844325][ T4050] veth0_vlan: left promiscuous mode [ 517.986905][ T4050] team0 (unregistering): Port device team_slave_1 removed [ 517.996469][ T28] audit: type=1400 audit(1778766767.630:5360): avc: denied { write } for pid=15864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.037109][ T4050] team0 (unregistering): Port device team_slave_0 removed [ 518.071388][ T28] audit: type=1400 audit(1778766767.660:5361): avc: denied { write } for pid=15875 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.122133][ T4061] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.146950][ T28] audit: type=1400 audit(1778766767.780:5362): avc: denied { write } for pid=15878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.260935][ T28] audit: type=1400 audit(1778766767.870:5363): avc: denied { write } for pid=15897 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.272595][T15896] loop9: detected capacity change from 0 to 8192 [ 518.336038][T15896] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 518.438918][T15569] veth0_vlan: entered promiscuous mode [ 518.464421][T15569] veth1_vlan: entered promiscuous mode [ 518.538632][ T28] audit: type=1400 audit(1778766768.180:5364): avc: denied { mount } for pid=15902 comm="syz.7.3154" name="/" dev="ramfs" ino=44296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 518.567458][T15569] veth0_macvtap: entered promiscuous mode [ 518.664739][T15924] loop5: detected capacity change from 0 to 1764 [ 518.711889][ T28] audit: type=1400 audit(1778766768.310:5365): avc: denied { mount } for pid=15915 comm="syz.5.3155" name="/" dev="loop5" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 518.781449][T15569] veth1_macvtap: entered promiscuous mode [ 518.935117][T15569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.994583][ T28] audit: type=1400 audit(1778766768.320:5366): avc: denied { watch } for pid=15915 comm="syz.5.3155" path="/1/file0/file0" dev="loop5" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 519.026194][T15569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.081521][ T28] audit: type=1400 audit(1778766768.390:5367): avc: denied { create } for pid=15925 comm="syz.9.3156" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 519.118507][T15936] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 519.170009][ T4056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.219033][ T4056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.264380][T15944] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3158'. [ 519.278028][ T4056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.349306][ T4056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.450097][T15967] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3164'. [ 519.751833][T15992] netlink: 'syz.9.3165': attribute type 1 has an invalid length. [ 519.783898][T15992] loop9: detected capacity change from 0 to 128 [ 520.419029][T16024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3166'. [ 520.455911][T16024] 0ªî{X¹¦: entered promiscuous mode [ 520.977511][T16043] netlink: 'syz.5.3170': attribute type 2 has an invalid length. [ 520.990890][T16037] xt_hashlimit: size too large, truncated to 1048576 [ 521.068078][T16045] loop9: detected capacity change from 0 to 512 [ 521.092412][T16045] ext4: Unknown parameter 'noquota.journal_dev' [ 521.178344][T16055] bridge0: port 1(syz_tun) entered blocking state [ 521.195967][T16055] bridge0: port 1(syz_tun) entered disabled state [ 521.213608][T16055] syz_tun: entered allmulticast mode [ 521.227868][T16055] syz_tun: entered promiscuous mode [ 521.647978][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'. [ 521.680731][T16094] loop0: detected capacity change from 0 to 512 [ 521.687456][T16094] EXT4-fs: Ignoring removed nobh option [ 521.853841][T16094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.866434][T16094] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.026912][T15569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.091678][T16144] netlink: 'syz.0.3183': attribute type 21 has an invalid length. [ 522.127128][T16144] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3183'. [ 522.127789][T16148] FAULT_INJECTION: forcing a failure. [ 522.127789][T16148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.155107][T16144] netlink: 'syz.0.3183': attribute type 5 has an invalid length. [ 522.176670][T16148] CPU: 0 UID: 0 PID: 16148 Comm: syz.5.3185 Tainted: G W syzkaller #0 PREEMPT(full) [ 522.176775][T16148] Tainted: [W]=WARN [ 522.176782][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.176795][T16148] Call Trace: [ 522.176803][T16148] [ 522.176810][T16148] __dump_stack+0x1d/0x30 [ 522.176864][T16148] dump_stack_lvl+0x95/0xd0 [ 522.177019][T16148] dump_stack+0x15/0x1b [ 522.177035][T16148] should_fail_ex+0x263/0x280 [ 522.177056][T16148] should_fail+0xb/0x20 [ 522.177141][T16148] should_fail_usercopy+0x1a/0x20 [ 522.177169][T16148] _copy_from_user+0x1c/0xb0 [ 522.177196][T16148] do_sock_getsockopt+0x122/0x570 [ 522.177281][T16148] __x64_sys_getsockopt+0x11d/0x1a0 [ 522.177301][T16148] x64_sys_call+0x2dcf/0x3020 [ 522.177320][T16148] do_syscall_64+0x12c/0x3b0 [ 522.177347][T16148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.177369][T16148] RIP: 0033:0x7f15c868ce59 [ 522.177382][T16148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.177455][T16148] RSP: 002b:00007f15c70e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 522.177475][T16148] RAX: ffffffffffffffda RBX: 00007f15c8905fa0 RCX: 00007f15c868ce59 [ 522.177488][T16148] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000003 [ 522.177500][T16148] RBP: 00007f15c70e7090 R08: 0000200000000000 R09: 0000000000000000 [ 522.177512][T16148] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 522.177524][T16148] R13: 00007f15c8906038 R14: 00007f15c8905fa0 R15: 00007fff19180e08 [ 522.177587][T16148] [ 522.185726][T16144] netlink: 'syz.0.3183': attribute type 6 has an invalid length. [ 522.338858][T16150] loop0: detected capacity change from 0 to 4096 [ 522.414036][T16144] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3183'. [ 522.417289][T16150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.629570][T16144] tun0: tun_chr_ioctl cmd 21731 [ 522.857268][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 522.857319][ T28] audit: type=1400 audit(1778766772.490:5404): avc: denied { write } for pid=16158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.903133][T16191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.911762][T16191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.970581][ T28] audit: type=1400 audit(1778766772.580:5405): avc: denied { write } for pid=16195 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.074169][ T28] audit: type=1400 audit(1778766772.710:5406): avc: denied { mount } for pid=16205 comm="syz.7.3195" name="/" dev="hugetlbfs" ino=45168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 523.099163][T15569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.122273][T16202] loop9: detected capacity change from 0 to 8192 [ 523.131525][ T28] audit: type=1400 audit(1778766772.770:5407): avc: denied { write } for pid=16197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.168074][T16215] FAULT_INJECTION: forcing a failure. [ 523.168074][T16215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.181613][T16215] CPU: 1 UID: 0 PID: 16215 Comm: syz.0.3196 Tainted: G W syzkaller #0 PREEMPT(full) [ 523.181718][T16215] Tainted: [W]=WARN [ 523.181726][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.181738][T16215] Call Trace: [ 523.181745][T16215] [ 523.181753][T16215] __dump_stack+0x1d/0x30 [ 523.181776][T16215] dump_stack_lvl+0x95/0xd0 [ 523.181816][T16215] dump_stack+0x15/0x1b [ 523.181831][T16215] should_fail_ex+0x263/0x280 [ 523.181894][T16215] should_fail+0xb/0x20 [ 523.181914][T16215] should_fail_usercopy+0x1a/0x20 [ 523.181939][T16215] _copy_from_user+0x1c/0xb0 [ 523.182041][T16215] mptcp_getsockopt+0x871/0x1850 [ 523.182060][T16215] ? irqentry_exit+0x55c/0x5d0 [ 523.182078][T16215] ? lockref_put_return+0xf7/0x130 [ 523.182177][T16215] ? __rcu_read_unlock+0x4e/0x70 [ 523.182194][T16215] ? terminate_walk+0x1e6/0x210 [ 523.182259][T16215] ? path_openat+0x1ab2/0x2050 [ 523.182287][T16215] ? path_openat+0x1b01/0x2050 [ 523.182306][T16215] ? __rcu_read_unlock+0x4e/0x70 [ 523.182321][T16215] ? avc_has_perm_noaudit+0xab/0x130 [ 523.182342][T16215] ? avc_has_perm+0x101/0x190 [ 523.182401][T16215] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 523.182427][T16215] sock_common_getsockopt+0x60/0x70 [ 523.182453][T16215] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 523.182474][T16215] do_sock_getsockopt+0x2f5/0x570 [ 523.182495][T16215] __x64_sys_getsockopt+0x11d/0x1a0 [ 523.182580][T16215] x64_sys_call+0x2dcf/0x3020 [ 523.182598][T16215] do_syscall_64+0x12c/0x3b0 [ 523.182618][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.182651][T16215] RIP: 0033:0x7f76fa4ece59 [ 523.182664][T16215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.182678][T16215] RSP: 002b:00007f76f8f3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 523.182694][T16215] RAX: ffffffffffffffda RBX: 00007f76fa765fa0 RCX: 00007f76fa4ece59 [ 523.182719][T16215] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000003 [ 523.182805][T16215] RBP: 00007f76f8f3f090 R08: 0000200000000000 R09: 0000000000000000 [ 523.182816][T16215] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 523.182826][T16215] R13: 00007f76fa766038 R14: 00007f76fa765fa0 R15: 00007fff0b13f388 [ 523.182840][T16215] [ 523.190192][ T28] audit: type=1400 audit(1778766772.830:5408): avc: denied { write } for pid=16214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.469928][T16202] loop9: p1 < > p4 < > [ 523.490657][T16228] netlink: 'syz.5.3198': attribute type 9 has an invalid length. [ 523.554597][ T28] audit: type=1400 audit(1778766773.190:5409): avc: denied { write } for pid=16220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.587022][T15612] udevd[15612]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 523.602719][T14037] udevd[14037]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 523.624431][ T28] audit: type=1400 audit(1778766773.260:5410): avc: denied { write } for pid=16239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.704901][T16242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=16242 comm=syz.5.3201 [ 523.720252][ T28] audit: type=1400 audit(1778766773.330:5411): avc: denied { lock } for pid=16241 comm="syz.5.3201" path="socket:[45198]" dev="sockfs" ino=45198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 523.797368][T16251] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 523.870830][ T28] audit: type=1400 audit(1778766773.510:5412): avc: denied { write } for pid=16243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.936816][ T28] audit: type=1400 audit(1778766773.570:5413): avc: denied { write } for pid=16261 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.134414][T16268] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=16268 comm=syz.5.3204 [ 524.164316][T16268] tipc: Started in network mode [ 524.177372][T16268] tipc: Node identity ac14140f, cluster identity 4711 [ 524.194536][T16268] tipc: New replicast peer: 255.255.255.255 [ 524.200746][T16268] tipc: Enabled bearer , priority 10 [ 524.214367][T16268] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3204'. [ 524.300104][T16298] FAULT_INJECTION: forcing a failure. [ 524.300104][T16298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.314989][T16298] CPU: 0 UID: 0 PID: 16298 Comm: syz.5.3207 Tainted: G W syzkaller #0 PREEMPT(full) [ 524.315065][T16298] Tainted: [W]=WARN [ 524.315072][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.315083][T16298] Call Trace: [ 524.315088][T16298] [ 524.315095][T16298] __dump_stack+0x1d/0x30 [ 524.315183][T16298] dump_stack_lvl+0x95/0xd0 [ 524.315225][T16298] dump_stack+0x15/0x1b [ 524.315321][T16298] should_fail_ex+0x263/0x280 [ 524.315414][T16298] should_fail+0xb/0x20 [ 524.315462][T16298] should_fail_usercopy+0x1a/0x20 [ 524.315535][T16298] _copy_to_user+0x20/0xa0 [ 524.315581][T16298] mptcp_getsockopt+0x1362/0x1850 [ 524.315603][T16298] ? __perf_event_task_sched_in+0xa65/0xad0 [ 524.315655][T16298] ? xfd_validate_state+0x45/0xf0 [ 524.315680][T16298] ? _raw_spin_unlock+0x9/0x30 [ 524.315751][T16298] ? finish_task_switch+0x128/0x320 [ 524.315770][T16298] ? __schedule+0x951/0xd40 [ 524.315798][T16298] ? path_openat+0x1b01/0x2050 [ 524.315874][T16298] ? preempt_schedule_irq+0x2d/0x50 [ 524.315899][T16298] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 524.315930][T16298] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 524.316017][T16298] ? irqentry_exit+0x7d/0x5d0 [ 524.316039][T16298] ? avc_has_perm+0x101/0x190 [ 524.316088][T16298] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 524.316110][T16298] sock_common_getsockopt+0x60/0x70 [ 524.316218][T16298] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 524.316242][T16298] do_sock_getsockopt+0x2f5/0x570 [ 524.316267][T16298] __x64_sys_getsockopt+0x11d/0x1a0 [ 524.316356][T16298] x64_sys_call+0x2dcf/0x3020 [ 524.316375][T16298] do_syscall_64+0x12c/0x3b0 [ 524.316457][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.316628][T16298] RIP: 0033:0x7f15c868ce59 [ 524.316644][T16298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.316663][T16298] RSP: 002b:00007f15c70e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 524.316684][T16298] RAX: ffffffffffffffda RBX: 00007f15c8905fa0 RCX: 00007f15c868ce59 [ 524.316699][T16298] RDX: 0000000000000003 RSI: 000000000000011c RDI: 0000000000000003 [ 524.316710][T16298] RBP: 00007f15c70e7090 R08: 0000200000000000 R09: 0000000000000000 [ 524.316799][T16298] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 524.316812][T16298] R13: 00007f15c8906038 R14: 00007f15c8905fa0 R15: 00007fff19180e08 [ 524.316831][T16298] [ 524.746457][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 524.831772][T16325] loop5: detected capacity change from 0 to 512 [ 524.853168][T16325] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 524.872762][T16325] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.3211: iget: special inode unallocated [ 524.892908][T16325] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 524.893082][T16325] EXT4-fs (loop5): no journal found [ 524.902246][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 524.902268][ C1] EXT4-fs (loop5): initial error at time 1778766774: ext4_get_journal_inode:5896: inode 32 [ 524.902298][ C1] EXT4-fs (loop5): last error at time 1778766774: ext4_get_journal_inode:5896: inode 32 [ 524.935159][T16325] EXT4-fs (loop5): can't get journal size [ 524.941461][T16325] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 524.960251][T16325] EXT4-fs (loop5): failed to initialize system zone (-117) [ 524.974619][T16325] EXT4-fs (loop5): mount failed [ 525.015285][ T3019] 8021q: adding VLAN 0 to HW filter on device eth2 [ 525.046397][T16348] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3215'. [ 525.114332][T16359] FAULT_INJECTION: forcing a failure. [ 525.114332][T16359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.145442][T16359] CPU: 0 UID: 0 PID: 16359 Comm: syz.5.3219 Tainted: G W syzkaller #0 PREEMPT(full) [ 525.145477][T16359] Tainted: [W]=WARN [ 525.145484][T16359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 525.145497][T16359] Call Trace: [ 525.145504][T16359] [ 525.145513][T16359] __dump_stack+0x1d/0x30 [ 525.145677][T16359] dump_stack_lvl+0x95/0xd0 [ 525.145696][T16359] dump_stack+0x15/0x1b [ 525.145715][T16359] should_fail_ex+0x263/0x280 [ 525.145808][T16359] should_fail+0xb/0x20 [ 525.145827][T16359] should_fail_usercopy+0x1a/0x20 [ 525.145849][T16359] _copy_to_user+0x20/0xa0 [ 525.145876][T16359] simple_read_from_buffer+0xb5/0x130 [ 525.145918][T16359] proc_fail_nth_read+0x10e/0x150 [ 525.145948][T16359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 525.146011][T16359] vfs_read+0x1ab/0x7f0 [ 525.146042][T16359] ksys_read+0xdc/0x1a0 [ 525.146068][T16359] __x64_sys_read+0x40/0x50 [ 525.146153][T16359] x64_sys_call+0x2886/0x3020 [ 525.146174][T16359] do_syscall_64+0x12c/0x3b0 [ 525.146201][T16359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.146261][T16359] RIP: 0033:0x7f15c864d68e [ 525.146276][T16359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 525.146307][T16359] RSP: 002b:00007f15c70e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.146327][T16359] RAX: ffffffffffffffda RBX: 00007f15c70e76c0 RCX: 00007f15c864d68e [ 525.146342][T16359] RDX: 000000000000000f RSI: 00007f15c70e70a0 RDI: 0000000000000004 [ 525.146355][T16359] RBP: 00007f15c70e7090 R08: 0000000000000000 R09: 0000000000000000 [ 525.146421][T16359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.146434][T16359] R13: 00007f15c8906038 R14: 00007f15c8905fa0 R15: 00007fff19180e08 [ 525.146455][T16359] [ 525.348896][ T3385] tipc: Node number set to 2886997007 [ 525.432829][T16368] loop5: detected capacity change from 0 to 512 [ 525.474063][T16368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 525.500120][T16368] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 525.536128][T16368] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.3222: Failed to acquire dquot type 0 [ 525.560000][T16368] netlink: 'syz.5.3222': attribute type 4 has an invalid length. [ 525.578544][T16368] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3222'. [ 525.612565][T15529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 525.647284][ T3019] 8021q: adding VLAN 0 to HW filter on device eth3 [ 525.672843][T16391] loop8: detected capacity change from 0 to 1024 [ 525.709050][T16391] EXT4-fs: test_dummy_encryption option not supported [ 525.975697][T16401] loop9: detected capacity change from 0 to 1024 [ 526.080212][T16401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.126417][T16401] EXT4-fs (loop9): shut down requested (0) [ 526.779609][T14477] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.907486][T16418] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 526.937207][T16420] FAULT_INJECTION: forcing a failure. [ 526.937207][T16420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.963934][T16421] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3229'. [ 526.996355][T16420] CPU: 0 UID: 0 PID: 16420 Comm: syz.9.3232 Tainted: G W syzkaller #0 PREEMPT(full) [ 526.996387][T16420] Tainted: [W]=WARN [ 526.996393][T16420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 526.996403][T16420] Call Trace: [ 526.996410][T16420] [ 526.996453][T16420] __dump_stack+0x1d/0x30 [ 526.996479][T16420] dump_stack_lvl+0x95/0xd0 [ 526.996498][T16420] dump_stack+0x15/0x1b [ 526.996518][T16420] should_fail_ex+0x263/0x280 [ 526.996594][T16420] should_fail+0xb/0x20 [ 526.996632][T16420] should_fail_usercopy+0x1a/0x20 [ 526.996657][T16420] _copy_to_user+0x20/0xa0 [ 526.996684][T16420] simple_read_from_buffer+0xb5/0x130 [ 526.996780][T16420] proc_fail_nth_read+0x10e/0x150 [ 526.996806][T16420] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 526.996830][T16420] vfs_read+0x1ab/0x7f0 [ 526.996905][T16420] ksys_read+0xdc/0x1a0 [ 526.996970][T16420] __x64_sys_read+0x40/0x50 [ 526.997101][T16420] x64_sys_call+0x2886/0x3020 [ 526.997121][T16420] do_syscall_64+0x12c/0x3b0 [ 526.997150][T16420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.997170][T16420] RIP: 0033:0x7f4820e8d68e [ 526.997185][T16420] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.997203][T16420] RSP: 002b:00007f481f91efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.997240][T16420] RAX: ffffffffffffffda RBX: 00007f481f91f6c0 RCX: 00007f4820e8d68e [ 526.997253][T16420] RDX: 000000000000000f RSI: 00007f481f91f0a0 RDI: 0000000000000004 [ 526.997264][T16420] RBP: 00007f481f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 526.997321][T16420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.997335][T16420] R13: 00007f4821146038 R14: 00007f4821145fa0 R15: 00007ffc71c2ae88 [ 526.997356][T16420] [ 527.371213][T16421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.419094][T16436] loop5: detected capacity change from 0 to 1024 [ 527.440690][T16436] EXT4-fs: test_dummy_encryption option not supported [ 527.456825][T16421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.476393][T16421] bond0 (unregistering): Released all slaves [ 527.507414][T16441] loop9: detected capacity change from 0 to 1024 [ 527.526100][T16441] EXT4-fs: test_dummy_encryption option not supported [ 527.582035][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 528.797250][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 528.797270][ T28] audit: type=1400 audit(1778766778.360:5433): avc: denied { append } for pid=16434 comm="syz.5.3235" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 528.883113][T16448] loop5: detected capacity change from 0 to 512 [ 528.894752][T16448] EXT4-fs: Ignoring removed orlov option [ 529.648692][T16448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 531.625708][T16462] loop8: detected capacity change from 0 to 1024 [ 531.850659][T16462] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 531.878256][T16448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 531.888245][T16448] System zones: 1-12 [ 531.894654][T16448] EXT4-fs: error -4 creating inode table initialization thread [ 531.905316][T16448] EXT4-fs (loop5): mount failed [ 532.141367][T16462] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 2: comm syz.8.3240: lblock 2 mapped to illegal pblock 2 (length 1) [ 532.160659][T16462] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 532.177172][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 532.192676][ C0] EXT4-fs (loop8): initial error at time 1778766781: ext4_map_blocks:791: inode 3: block 2 [ 532.202684][ C0] EXT4-fs (loop8): last error at time 1778766781: ext4_map_blocks:791: inode 3: block 2 [ 532.214049][T16462] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 532.224194][T16462] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 48: comm syz.8.3240: lblock 0 mapped to illegal pblock 48 (length 1) [ 532.287604][T16462] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 532.288953][T16462] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 532.306899][ T28] audit: type=1400 audit(1778766781.930:5434): avc: denied { create } for pid=16470 comm="syz.5.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 532.312535][T16477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2314 sclass=netlink_route_socket pid=16477 comm=syz.9.3244 [ 532.341507][T16473] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 532.348041][T16473] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 532.357759][T16473] vhci_hcd vhci_hcd.0: Device attached [ 532.359502][T16462] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.3240: Failed to acquire dquot type 0 [ 532.369808][ T28] audit: type=1400 audit(1778766781.930:5435): avc: denied { getopt } for pid=16470 comm="syz.5.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 532.380291][T16479] vhci_hcd vhci_hcd.0: port 0 already used [ 532.397250][T16462] loop8: lost filesystem error report for type 5 error -117 [ 532.400080][T16462] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 532.416976][T16462] loop8: lost filesystem error report for type 5 error -117 [ 532.418349][T16462] EXT4-fs error (device loop8): ext4_evict_inode:267: inode #11: comm syz.8.3240: mark_inode_dirty error [ 532.428892][T16475] vhci_hcd: connection closed [ 532.437192][T16462] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 532.442165][T16462] EXT4-fs warning (device loop8): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 532.459700][ T4056] vhci_hcd vhci_hcd.5: stop threads [ 532.461853][T16462] EXT4-fs (loop8): 1 orphan inode deleted [ 532.468222][ T4056] vhci_hcd vhci_hcd.5: release socket [ 532.473278][T16462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.478275][ T4061] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 532.497612][ T4056] vhci_hcd vhci_hcd.5: disconnect device [ 532.506729][ T4061] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 532.509955][ T4061] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 532.516794][T16462] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #2: block 16: comm syz.8.3240: lblock 262144 mapped to illegal pblock 16 (length 8) [ 532.551774][ T4061] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:17: Failed to release dquot type 0 [ 532.566802][ T9539] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.577454][ T9539] EXT4-fs error (device loop8): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 532.590354][ T9539] loop8: lost filesystem error report for type 5 error -117 [ 532.590545][ T9539] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 532.632808][ T2978] ================================================================== [ 532.640925][ T2978] BUG: KCSAN: data-race in d_delete / lookup_fast [ 532.647355][ T2978] [ 532.649691][ T2978] read-write to 0xffff88810742a9c0 of 4 bytes by task 15612 on cpu 1: [ 532.657836][ T2978] d_delete+0xbe/0xe0 [ 532.661830][ T2978] d_delete_notify+0x32/0x100 [ 532.666521][ T2978] vfs_unlink+0x289/0x490 [ 532.670858][ T2978] filename_unlinkat+0x1e2/0x410 [ 532.675810][ T2978] __se_sys_unlink+0x2b/0xe0 [ 532.679990][ T9539] loop8: lost filesystem error report for type 5 error -117 [ 532.680407][ T2978] __x64_sys_unlink+0x1f/0x30 [ 532.680513][ T9539] EXT4-fs error (device loop8): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 532.687686][ T2978] x64_sys_call+0x2eb6/0x3020 [ 532.687710][ T2978] do_syscall_64+0x12c/0x3b0 [ 532.687732][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.687752][ T2978] [ 532.687758][ T2978] read to 0xffff88810742a9c0 of 4 bytes by task 2978 on cpu 0: [ 532.693623][ T9539] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 532.703587][ T2978] lookup_fast+0xf0/0x320 [ 532.703613][ T2978] path_lookupat+0x15c/0x500 [ 532.703631][ T2978] filename_lookup+0x190/0x390 [ 532.751341][ T2978] do_readlinkat+0x74/0x2f0 [ 532.755848][ T2978] __x64_sys_readlink+0x47/0x60 [ 532.760684][ T2978] x64_sys_call+0x2b51/0x3020 [ 532.765349][ T2978] do_syscall_64+0x12c/0x3b0 [ 532.769931][ T2978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.775808][ T2978] [ 532.778111][ T2978] value changed: 0x00300180 -> 0x00004080 [ 532.783807][ T2978] [ 532.786110][ T2978] Reported by Kernel Concurrency Sanitizer on: [ 532.792241][ T2978] CPU: 0 UID: 0 PID: 2978 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 532.802642][ T2978] Tainted: [W]=WARN [ 532.806424][ T2978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.816462][ T2978] ================================================================== [ 539.608048][ T28] audit: type=1400 audit(1778766789.250:5436): avc: denied { write } for pid=16505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.632411][ T28] audit: type=1400 audit(1778766789.260:5437): avc: denied { write } for pid=16516 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.689512][ T28] audit: type=1400 audit(1778766789.330:5438): avc: denied { write } for pid=16519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 539.713730][ T28] audit: type=1400 audit(1778766789.350:5439): avc: denied { write } for pid=16530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.055944][ T28] audit: type=1400 audit(1778766791.690:5440): avc: denied { write } for pid=16533 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.081062][ T28] audit: type=1400 audit(1778766791.710:5441): avc: denied { write } for pid=16544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1