last executing test programs: 6m14.395594878s ago: executing program 32 (id=92): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 5m55.738210581s ago: executing program 33 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r7 = socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r8, 0x2285, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1700, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) (async) socket$unix(0x1, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) ioctl$SG_IO(r8, 0x2285, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x7, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x6, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) (async) 5m43.915390788s ago: executing program 34 (id=629): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_delete(r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 5m38.608121746s ago: executing program 35 (id=708): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtaction={0x60, 0x30, 0x10b, 0x0, 0x25dfdbfe, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0xd, 0x8, 0xfffffffc, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x894}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008d5}, 0x4804) 5m35.573999141s ago: executing program 36 (id=750): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1, 0x200000000000000}, 0x20) 5m14.269665568s ago: executing program 37 (id=1108): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x8) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000940)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0xfc, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b85e73e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x577}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r4 = gettid() syz_clone3(&(0x7f0000000bc0)={0x85400, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00), {0x38}, &(0x7f0000000a40)=""/227, 0xe3, &(0x7f0000000b40), &(0x7f0000000b80)=[r4], 0x1, {r2}}, 0x58) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000b40)) 5m3.590236588s ago: executing program 38 (id=1051): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x9}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000440)) 4m37.067895598s ago: executing program 39 (id=1601): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x800, 0x0, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0xe}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r5, 0x58, &(0x7f00000000c0)}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f00000000c0)=r7, 0x4) r10 = getpid() fcntl$lock(r7, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x6, r10}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, 0x0, 0x40881) syz_io_uring_submit(r3, r2, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x2, 0xffffffffffffffff, 0x0, 0x0}) unshare(0x2040600) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioprio_set$pid(0x2, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2884c1, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000400)="c5", 0x1}], 0x52, 0x1, 0xfffffffb, 0x1a) setsockopt$SO_J1939_FILTER(r11, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x3, {0x2, 0x0, 0x1}, {0x1, 0x1}, 0xff, 0xff}, {0x1, 0x3, {0x1, 0xf0, 0x3}, {0x1, 0xff}, 0x2}, {0x1, 0x3, {0x0, 0x1, 0x3}, {0x2, 0x1}, 0x1, 0xfd}, {0x2, 0x1, {0x1, 0x1, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xfe}, {0x3, 0x1, {0x2, 0xf0, 0x2}, {0x1, 0xff}, 0xfe, 0x1}, {0x1, 0x2, {0x0, 0xff, 0x2}, {0x2, 0xf0}, 0xfd, 0xff}], 0xc0) io_uring_enter(r0, 0x4ccd, 0x8713, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) 4m29.384859684s ago: executing program 40 (id=1726): munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r0 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x10, 0x3, 0x40004331, 0x0, r2}, &(0x7f00000006c0)=0x0, &(0x7f0000000100)=0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r10, 0x8983, &(0x7f0000000080)={0x1, 'bridge_slave_0\x00', {}, 0xffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r15 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r15, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r1, 0x1, &(0x7f0000000600)=[{&(0x7f0000001000)=""/4085, 0xff5}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m22.276455527s ago: executing program 41 (id=1837): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x44, r4, 0x917, 0x200, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x44}}, 0x4010) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000100)={0x2, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000015001001800128008000100677470000c000280050005000100000008000a00", @ANYRES32=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x2400c080) 4m21.052327297s ago: executing program 42 (id=1857): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) 3m50.301321262s ago: executing program 43 (id=2291): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0xe, 0x8, 0xc1e6, 0x1ff}}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3b12, 0x0, 0x4}}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x1, 0x1c29, 0x8000000000000000}) 3m48.95901095s ago: executing program 44 (id=2304): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r2, &(0x7f0000000280)="020409fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000)=0x5, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000200b70400000100000085000000030000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r6, &(0x7f0000000740)=[{&(0x7f0000000280)="581a", 0x2}], 0x1) setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r6, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r7, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) 3m41.455184635s ago: executing program 45 (id=2412): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3m2.037140134s ago: executing program 3 (id=2952): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) creat(&(0x7f0000000280)='./bus\x00', 0x8) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) syz_clone(0x26802480, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x1) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfe, 0x3}, 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_mr_cache\x00') preadv(r5, &(0x7f0000010440)=[{&(0x7f0000000040)=""/154, 0x9a}], 0x1, 0x47, 0x5) fallocate(r4, 0x81, 0x13, 0x10) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) dup3(r7, r3, 0x0) io_pgetevents(r6, 0x0, 0x3, &(0x7f00000000c0)=[{}, {}, {}], 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0xe]}, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3m1.981257737s ago: executing program 3 (id=2954): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x400000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x104, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 3m1.780483258s ago: executing program 3 (id=2957): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffe, 0x0, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capget(&(0x7f0000000400)={0x19980330}, &(0x7f0000000440)={0x6, 0x2, 0x0, 0xdd8, 0x5, 0x8}) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) 3m1.684675025s ago: executing program 3 (id=2958): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="029fb3e5408248bd1d0c1a55effc9b6ac329519c133be705bf05000000e86b11b5247cf4", @ANYRES16=r1, @ANYBLOB="20002abd7000fbdbdf25210000000600980000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xcbf8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x4003fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, 0x0, 0x25, 0x1b, @val=@netkit={@void, @value=r3}}, 0x1c) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x43, 0xb9) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r4, r3, 0x4, r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r11 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x300000}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3m1.592351949s ago: executing program 3 (id=2960): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000740)={&(0x7f0000000080)={0xa, 0x4e24, 0x10001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1b5c0}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000003e0000000300000000000079047c250024000000000000002900000032000000fe880022000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28000600) r4 = socket$inet6(0x2d, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x11d, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r5, 0x25, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x400, 0x5533, 0xc, 0x4000, r0, 0x8, '\x00', r5, r0, 0x1, 0x4, 0x2, 0xf}, 0x50) 3m1.495931155s ago: executing program 3 (id=2961): socket(0x6, 0xa, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getegid() ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'ip6gretap0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e20, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x800) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xfffffefd, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x27, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1e, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x6, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x8, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0x3, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4f, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x0, 0x9, 0x100, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x8000, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x5, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e4, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x9, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x80000000, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x9, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf, 0xa, 0x100, 0x4, 0x59b, 0x7, 0x9, 0x6, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x3d9, 0x0, 0xc, 0x9, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x6, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xf7ff0000, 0xf, 0x4, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffb, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x5, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000005, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x104, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0xc, 0x3, 0xffffffff, 0x0, 0x7e, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0xb, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x3, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x6, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0xb, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x20000001, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000004, 0x6, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c4, 0x2, 0x389f, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x80000004, 0x1, 0x10000002, 0xfb4, 0xbfa, 0x48, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0xffffffff, 0x6ae574d2, 0x5, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x5, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x3fff, 0x2, 0x17, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xfffffffa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0xfffffffb, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x40, 0x6, 0xffff, 0xfffffffa, 0x3, 0xa850, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x401, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x3, 0x2, 0x80000002, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0x7, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af8b, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x200, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x10400, 0x20001, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m52.612521391s ago: executing program 46 (id=3056): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 2m46.452686109s ago: executing program 47 (id=2961): socket(0x6, 0xa, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getegid() ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)={'ip6gretap0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e20, 0x0, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x800) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xfffffefd, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x27, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1e, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x6, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x8, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0x3, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4f, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x0, 0x9, 0x100, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x8000, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x5, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e4, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x9, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x80000000, 0x2, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x9, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf, 0xa, 0x100, 0x4, 0x59b, 0x7, 0x9, 0x6, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x3d9, 0x0, 0xc, 0x9, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x6, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xf7ff0000, 0xf, 0x4, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffb, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x5, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000005, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x104, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0xc, 0x3, 0xffffffff, 0x0, 0x7e, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0xb, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x3, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x6, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0xb, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x20000001, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000004, 0x6, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c4, 0x2, 0x389f, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x80000004, 0x1, 0x10000002, 0xfb4, 0xbfa, 0x48, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0xffffffff, 0x6ae574d2, 0x5, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x5, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x3fff, 0x2, 0x17, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xfffffffa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0xfffffffb, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x40, 0x6, 0xffff, 0xfffffffa, 0x3, 0xa850, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x401, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x3, 0x2, 0x80000002, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0x7, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af8b, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x200, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x10400, 0x20001, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m20.339660494s ago: executing program 0 (id=3461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002080)='oom_score_adj\x00') pread64(r2, 0x0, 0x0, 0x0) 2m20.167044065s ago: executing program 0 (id=3464): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@abort}, {@nodelalloc}]}, 0x1, 0x25f, &(0x7f0000000380)="$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") r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 2m20.105433577s ago: executing program 0 (id=3466): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x79d6da41a9784433}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="9110c3ff0000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000a40)=[{&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f00000005c0)=""/71, 0x47}, {&(0x7f0000000740)=""/169, 0xa9}, {&(0x7f0000000880)=""/66, 0x42}, {&(0x7f0000000900)=""/233, 0xe9}], 0x5}, 0xb32}, {{&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/36, 0x24}], 0x1}, 0x10000}], 0x2, 0x2, 0x0) mmap(&(0x7f0000288000/0x1000)=nil, 0x1000, 0x80000c, 0x8010, r2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000400)={{0x4, 0x2}, 'port1\x00', 0x58, 0x121808, 0x0, 0x8, 0x5, 0x3, 0x3ff, 0x0, 0x1, 0x9d}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r6, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x9) syz_io_uring_complete(0x0) 2m19.224942209s ago: executing program 0 (id=3479): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9e, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000001c0)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000000)='./file0\x00') r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46ff3) bind$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000500)='./file0\x00') pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x4, 0x5, 0x1, 0x1, 0x0, 0x7, 0x82420, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x3, @perf_config_ext={0x1, 0x9}, 0x1, 0x200, 0x3, 0x2, 0x7, 0xfff, 0x5, 0x0, 0x12, 0x0, 0x3}, r1, 0xd, r2, 0x0) 2m18.568437797s ago: executing program 0 (id=3488): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000001040)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x14) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r2) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4}, 0x14) syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b001142"], 0x0) 2m18.105908394s ago: executing program 0 (id=3492): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x1a3003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x3, 0x20000003, {{0x12, 0x4, 0x2, 0xb, 0x48, 0x64, 0x0, 0xe9, 0x4, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xac}, @rr={0x7, 0x7, 0x6d, [@local]}, @timestamp={0x44, 0x8, 0x3c, 0x0, 0xb, [0x8]}, @timestamp={0x44, 0x20, 0xb8, 0x0, 0x7, [0x6, 0x10, 0x5, 0xf74e, 0x7, 0x101, 0x2]}]}}}}}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x10) fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0xfe44, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x2}, 0x4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$kcm(0x10, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000ec1b000900020073797a3000000000050005000000000078800600044000000000060005408cff00000800"/100], 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 2m18.045540167s ago: executing program 48 (id=3492): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x1a3003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x3, 0x20000003, {{0x12, 0x4, 0x2, 0xb, 0x48, 0x64, 0x0, 0xe9, 0x4, 0x0, @local, @local, {[@rr={0x7, 0x3, 0xac}, @rr={0x7, 0x7, 0x6d, [@local]}, @timestamp={0x44, 0x8, 0x3c, 0x0, 0xb, [0x8]}, @timestamp={0x44, 0x20, 0xb8, 0x0, 0x7, [0x6, 0x10, 0x5, 0xf74e, 0x7, 0x101, 0x2]}]}}}}}) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x10) fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0xfe44, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x2}, 0x4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xdbd76c996685eb82, 0x41071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) socket$kcm(0x10, 0x2, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000ec1b000900020073797a3000000000050005000000000078800600044000000000060005408cff00000800"/100], 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 1m51.223742854s ago: executing program 9 (id=3904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x185583) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) sendmsg$nl_netfilter(r1, &(0x7f0000009d40)={0x0, 0x0, &(0x7f0000009d00)={&(0x7f0000006940)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000002c0)='./bus\x00', 0x20) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000004e22020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m50.729387973s ago: executing program 9 (id=3912): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/13, 0xd}], 0x6) (async) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/13, 0xd}], 0x6) getpgid(0x0) (async) r1 = getpgid(0x0) process_vm_readv(r1, &(0x7f0000000640)=[{&(0x7f0000000400)=""/159, 0x9f}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/199, 0xc7}], 0x3, &(0x7f0000000940)=[{&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000780)=""/94, 0x5e}, {&(0x7f0000000800)=""/198, 0xc6}, {&(0x7f0000000900)=""/9, 0x9}], 0x4, 0x0) r2 = dup(r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xa8, 0x7, @scatter={0x5, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/172, 0xac}, {&(0x7f0000000a40)=""/244, 0xf4}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/100, 0x64}, {&(0x7f0000000c00)=""/67, 0x43}]}, &(0x7f0000000d00)="807d5d22f79b2bd020e13881f8a9e07f35de206cc6a6c810c15952cf4f20cd3efab3ef3f3c33c563dea20a098efa915012e8fc8c7729a47b161332979cefbabdacf711770c29fded1163d132bb50536c2a736f2d760e0e69bc94cb4772f652715990d68f2a8f49178776b9e5901a987f42bb5c5d3d04632849a95c2c60d29af1c131ef8c19a25f2c2365c9a277629de65a310bb42993355bb3ee8ca6c195ea8301f4d1ca7633b37c", &(0x7f0000000dc0)=""/226, 0xf, 0x13, 0x1, &(0x7f0000000ec0)}) r3 = syz_open_dev$sg(&(0x7f0000000f80), 0x8, 0x44000) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002400)={0x53, 0xfffffffffffffffe, 0xeb, 0xee, @scatter={0x5, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/167, 0xa7}, {&(0x7f0000002080)=""/153, 0x99}, {&(0x7f0000002140)=""/17, 0x11}, {&(0x7f0000002180)=""/56, 0x38}]}, &(0x7f0000002240)="4f83c43a9d25cc1e0116f9f52579bd6788103e0422418092ced524f78c24eac51246fdc968172fe1209e40584ecfbdf94593dff657514aada246784dafd24052a14403441a270ce7a49b2cbfb625d25fb6eea5b4aee6e6ca7f5a09671d3972e76fba01b7d9c5a78f751823df73999dbbe7fe1847230781e192aa26876458980a57f2f4175cb3378942a39123e9831bdc371e3f2dd00cdd495379b68db4741880a440a4f5b9af4e42cf30812577afe1fb982474d0709c7a15e05a59e3158f4bd4b2414b75a2bf04f295c2f3a182646051c1eed6706b3190af4c4ce254df620533c8adff406c94de082a2ea4", &(0x7f0000002340)=""/112, 0x4, 0x10012, 0xffffffffffffffff, &(0x7f00000023c0)}) r4 = openat(r2, &(0x7f0000002480)='./file0\x00', 0x40000, 0x142) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000024c0)=""/60, &(0x7f0000002500)=0x3c) recvfrom$llc(r2, &(0x7f0000002540)=""/144, 0x90, 0x102, &(0x7f0000002600)={0x1a, 0x18, 0x9, 0x2, 0x7, 0x6, @link_local}, 0x10) r5 = socket(0xf, 0x5, 0x8) sendmsg(r5, &(0x7f0000002bc0)={&(0x7f0000002640)=@ethernet={0x1}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000026c0)="0b37253d9b96ef35f911b0a00f6d2a43b34090a287bbb6d72d8a8b69a0403a535862e2732280bc8b76f7b2fe868f3e78d21948099b3095721530a3b68bccfab71a4482a28d71bbaba74d330ca6914b1d94f4ee16064b06d8b35ed530a176e5ba4381a896426c08c7c9b23101343e5f553cdeabadd0870d161be1e26fd6ba96f0608d149ce96fb6baa808d6750cba7dfa99eb4b5f705619841c4f64286211b94de62d107921284148f4312a2ba006fa4b3c6c84c12f6d37bd837044da3ddfd948aa79f5cb22b820be373fb694ba374cbe6958b82a612d3e0f0725518ba98e964c1b7dc590c65e572edc479c901c136121819540f7eeab351c", 0xf8}, {&(0x7f00000027c0)="60129aaa25", 0x5}, {&(0x7f0000002800)="c9d14076e8bf956fa57d7acd363f8384d50fdce99179fc55cac81c55cfdedfff47c85a1b6dc5d23f3950860abaad61c900ac94672b4578ae8bc42d1eb490f6f9bca239ec7c702e78c7be0dae8d6240cbe6fa257b139e9c6590bfde1b8ec12618d89a22283ef7f38ba53d7ec03933fa0f5d0a5becac086ea7ebb083812e85bd03235cb282a53a90b1520b51d0774bba71292b35", 0x93}, {&(0x7f00000028c0)="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", 0xfc}, {&(0x7f00000029c0)="d6de463c1f0609eabbcd5cfe9be7e0ecb62f00240b802e4108aba39319caa95c38472361463fad0487425fc45ce3ef25bc27f4a6d420d44b04268ee4b03f95c772ae39fa9a16f7fdd3e1ee775cf61c950b9f05a1c4a25f2cdb22332124232c65f1fe33b573a95d6dbc49a882bb56bc59b650423064b4ca4d35c388bb6d52a76065c61fc6da8dced91dfab22146bf20045bae5ddb457683", 0x97}, {&(0x7f0000002a80)="5d5f6367df6870f9f12aa5d95e3c5663dbf3ff8e9d016ba1c3cae668c4b41143101a35a6d35e746d9f86b500f094e482d6c9bcb12e23376464d722b589463c495d8d44677bd472", 0x47}, {&(0x7f0000002b00)="9153b901ae", 0x5}], 0x7}, 0x4000044) (async) sendmsg(r5, &(0x7f0000002bc0)={&(0x7f0000002640)=@ethernet={0x1}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000026c0)="0b37253d9b96ef35f911b0a00f6d2a43b34090a287bbb6d72d8a8b69a0403a535862e2732280bc8b76f7b2fe868f3e78d21948099b3095721530a3b68bccfab71a4482a28d71bbaba74d330ca6914b1d94f4ee16064b06d8b35ed530a176e5ba4381a896426c08c7c9b23101343e5f553cdeabadd0870d161be1e26fd6ba96f0608d149ce96fb6baa808d6750cba7dfa99eb4b5f705619841c4f64286211b94de62d107921284148f4312a2ba006fa4b3c6c84c12f6d37bd837044da3ddfd948aa79f5cb22b820be373fb694ba374cbe6958b82a612d3e0f0725518ba98e964c1b7dc590c65e572edc479c901c136121819540f7eeab351c", 0xf8}, {&(0x7f00000027c0)="60129aaa25", 0x5}, {&(0x7f0000002800)="c9d14076e8bf956fa57d7acd363f8384d50fdce99179fc55cac81c55cfdedfff47c85a1b6dc5d23f3950860abaad61c900ac94672b4578ae8bc42d1eb490f6f9bca239ec7c702e78c7be0dae8d6240cbe6fa257b139e9c6590bfde1b8ec12618d89a22283ef7f38ba53d7ec03933fa0f5d0a5becac086ea7ebb083812e85bd03235cb282a53a90b1520b51d0774bba71292b35", 0x93}, {&(0x7f00000028c0)="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", 0xfc}, {&(0x7f00000029c0)="d6de463c1f0609eabbcd5cfe9be7e0ecb62f00240b802e4108aba39319caa95c38472361463fad0487425fc45ce3ef25bc27f4a6d420d44b04268ee4b03f95c772ae39fa9a16f7fdd3e1ee775cf61c950b9f05a1c4a25f2cdb22332124232c65f1fe33b573a95d6dbc49a882bb56bc59b650423064b4ca4d35c388bb6d52a76065c61fc6da8dced91dfab22146bf20045bae5ddb457683", 0x97}, {&(0x7f0000002a80)="5d5f6367df6870f9f12aa5d95e3c5663dbf3ff8e9d016ba1c3cae668c4b41143101a35a6d35e746d9f86b500f094e482d6c9bcb12e23376464d722b589463c495d8d44677bd472", 0x47}, {&(0x7f0000002b00)="9153b901ae", 0x5}], 0x7}, 0x4000044) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000003000)={0x1, 0x1, 0x17, 0x18, 0x89, &(0x7f0000002c00)}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/97}) (async) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/97}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003140), 0x208303, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000003180)={0x0, 0x7, 0x1, [0x2, 0x401, 0x2, 0xfff, 0x7efd], [0x1, 0x1ff, 0xe, 0x645, 0x3, 0xe, 0x7, 0x9, 0x0, 0x1, 0x6, 0xa, 0x2, 0x6, 0x4, 0x8, 0x46a, 0x70000000000000, 0x6, 0x8, 0x1, 0x10000, 0x0, 0x3, 0x0, 0x9, 0x2, 0x100, 0x5, 0x5, 0x80, 0x8, 0x94, 0x9, 0x8, 0x0, 0x72, 0x2, 0x7, 0x5, 0x7dcdabf6, 0x7, 0xf78, 0x72, 0x80000000, 0x6, 0x8, 0x7, 0x0, 0xfffffffffffffffb, 0x10000, 0x35d8, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0x8, 0x0, 0xa, 0x2288, 0x800, 0x1, 0xaaa0, 0x76e, 0x6, 0x8000000000000001, 0x7, 0xbe3d, 0xfff, 0xb, 0xe, 0x264e, 0x976e, 0x4, 0x5, 0x7, 0x5, 0xffffffffffffffff, 0x8000000000000001, 0x1, 0x2, 0x7d9a2fc9, 0xe, 0xfff, 0xf0d7, 0x5, 0x7f, 0x4, 0x9, 0x5, 0x9, 0xfffffffffffffffa, 0x100000000, 0xaf4, 0x2, 0x2, 0x5, 0x2, 0x8, 0xe, 0x8, 0x10000, 0x2, 0xa, 0x1ff, 0x7, 0xc, 0x8, 0x8c6, 0xfffffffffffff774, 0x8, 0xff, 0x5, 0x9, 0x1, 0xf709, 0x7621, 0xffffffffffffffff, 0x2, 0x7, 0x2]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000003180)={0x0, 0x7, 0x1, [0x2, 0x401, 0x2, 0xfff, 0x7efd], [0x1, 0x1ff, 0xe, 0x645, 0x3, 0xe, 0x7, 0x9, 0x0, 0x1, 0x6, 0xa, 0x2, 0x6, 0x4, 0x8, 0x46a, 0x70000000000000, 0x6, 0x8, 0x1, 0x10000, 0x0, 0x3, 0x0, 0x9, 0x2, 0x100, 0x5, 0x5, 0x80, 0x8, 0x94, 0x9, 0x8, 0x0, 0x72, 0x2, 0x7, 0x5, 0x7dcdabf6, 0x7, 0xf78, 0x72, 0x80000000, 0x6, 0x8, 0x7, 0x0, 0xfffffffffffffffb, 0x10000, 0x35d8, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0x8, 0x0, 0xa, 0x2288, 0x800, 0x1, 0xaaa0, 0x76e, 0x6, 0x8000000000000001, 0x7, 0xbe3d, 0xfff, 0xb, 0xe, 0x264e, 0x976e, 0x4, 0x5, 0x7, 0x5, 0xffffffffffffffff, 0x8000000000000001, 0x1, 0x2, 0x7d9a2fc9, 0xe, 0xfff, 0xf0d7, 0x5, 0x7f, 0x4, 0x9, 0x5, 0x9, 0xfffffffffffffffa, 0x100000000, 0xaf4, 0x2, 0x2, 0x5, 0x2, 0x8, 0xe, 0x8, 0x10000, 0x2, 0xa, 0x1ff, 0x7, 0xc, 0x8, 0x8c6, 0xfffffffffffff774, 0x8, 0xff, 0x5, 0x9, 0x1, 0xf709, 0x7621, 0xffffffffffffffff, 0x2, 0x7, 0x2]}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000035c0)={0x0, "a49557302a8c2b45d3117b7b20bb0909"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000045c0)={0x0, 0x7, 0x44de, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000049c0)={0x10, 0x0, {0x1780439c, @struct={0x8, 0xe7f}, r7, 0x3, 0x200, 0x9, 0x1, 0xb, 0x1, @usage=0x10, 0x4, 0x200, [0xa, 0xd, 0x7, 0x7ff, 0x8000000000000001, 0x1000]}, {0x0, @usage=0x2, r8, 0x7, 0x5, 0xffffffff80000000, 0xd7b5, 0x4, 0x0, @usage=0x8, 0xffff8000, 0x81, [0x5, 0x2, 0x375, 0x0, 0x8, 0x1]}, {0x3, @struct={0x0, 0x1}, r9, 0x1, 0x0, 0x5, 0x7, 0x100, 0x13, @struct={0x2, 0xcad}, 0x6, 0xc, [0x0, 0x0, 0x81, 0x8, 0x9, 0x7fffffff]}, {0x8, 0x8, 0x8d}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000049c0)={0x10, 0x0, {0x1780439c, @struct={0x8, 0xe7f}, r7, 0x3, 0x200, 0x9, 0x1, 0xb, 0x1, @usage=0x10, 0x4, 0x200, [0xa, 0xd, 0x7, 0x7ff, 0x8000000000000001, 0x1000]}, {0x0, @usage=0x2, r8, 0x7, 0x5, 0xffffffff80000000, 0xd7b5, 0x4, 0x0, @usage=0x8, 0xffff8000, 0x81, [0x5, 0x2, 0x375, 0x0, 0x8, 0x1]}, {0x3, @struct={0x0, 0x1}, r9, 0x1, 0x0, 0x5, 0x7, 0x100, 0x13, @struct={0x2, 0xcad}, 0x6, 0xc, [0x0, 0x0, 0x81, 0x8, 0x9, 0x7fffffff]}, {0x8, 0x8, 0x8d}}) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000004ec0)={{{0xa, 0x1}}, 0xd2, 0x62, &(0x7f0000004dc0)="afe2bdd50d2fcece2ca6a57c8435d5e4815cdbad96ee3366878f0a25b20f59f5b778cdb259c6c453a7b790c5af7446b07540a265888ff70fd9409e33bdc8f44061d079d6a0229802e73267aedcae5a5d5b477d395bfd4ee0a5195f92eef7cacf535763c040b74faa0d9b7259814bd87ecf210a09562e02309d306ef5419d7054717591da0438b5924b54d6407b2ef435b06ba8cbce080cbab88369601d83ba297f5fd1223c95bb86655476cb69c911691ff92aae835d7cbe3710d64a242e2cd83bc97348c9c68df342c47707931e71fdda45"}) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000004f40), r4) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000005040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005000)={&(0x7f0000004f80)={0x64, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000005040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005000)={&(0x7f0000004f80)={0x64, r10, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) write(r2, &(0x7f0000005080)="afdd83fe4afc5ecb591fbf3453c00dada400afe6749b76ad70", 0x19) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000050c0)) (async) ioctl$SG_GET_KEEP_ORPHAN(r3, 0x2288, &(0x7f00000050c0)) mknod(&(0x7f0000005100)='./file1\x00', 0x4, 0x1) (async) mknod(&(0x7f0000005100)='./file1\x00', 0x4, 0x1) pwritev(r5, &(0x7f0000005400)=[{&(0x7f0000005140)="5a18a052e39366e66ed54f62d857d15d5029b5f8c2d2f55bcf79762d74503119671f052282ea1237abb38cb4be6758c8d159906c8e", 0x35}, {&(0x7f0000005180)}, {&(0x7f00000051c0)="769caf202cf1b6573ce09b3c72570822aeeb4752e471ce868c86b3feab9dabfff4a3f2ea68a43184d501a2c7ae494a844d4775e67ed78a02affaa2293494f6467c9cadeb3a4dbb1319cd9d7cf42f18a69fbd0651b64b62d7288a278ae7c7f3ce83c4ac540fe8e7a00e0b62c7b68306fd0b37aa707f3357f40c76554e8a55d1ef4c2da6412983772244fa13ea1031d493b350bd64b033e007d26bfb28edecdbf83c92e379e5314250490c9ca31cf53beca6cf337b0a4edc201f57a180ac8ec5f6bb0841a0a9fe8ce99a0f49ffe3", 0xcd}, {&(0x7f00000052c0)="1eb2ec6ce3962a9177f2062b68cda13dfe3f87b12fb898a7ee54bf21d600e9d9081c6c1a016cbf82c563393abd454726e535093fd797f36399c2bc0c0d8ceaa0c2b83a20759e664831401950cfbdacde62291a3b8794dd77515a8fbfb9642115601227ac14e80303a711965d4e139ec04fb61087509ed1b4b033581ee76b", 0x7e}, {&(0x7f0000005340)="a0cad9c375172f5ce2932b7036f38fae32db774e91906b74a2a15a5a5114a473bded292baf24e37d04d43d137fbfe9fe97f1c182e995c88cd8ae13d1ba96f8ce77434445ca99b6fac6c9a4bc0d207a68e9aa05e5ce19593f9236eaa65fc9847fb41190877fdd5d23a488d5f35b598dbdbf55827e1250f64ff9134edf5e5b662f395cf0428a1862e32fc1652237bb5698", 0x90}], 0x5, 0x7, 0x4) (async) pwritev(r5, &(0x7f0000005400)=[{&(0x7f0000005140)="5a18a052e39366e66ed54f62d857d15d5029b5f8c2d2f55bcf79762d74503119671f052282ea1237abb38cb4be6758c8d159906c8e", 0x35}, {&(0x7f0000005180)}, {&(0x7f00000051c0)="769caf202cf1b6573ce09b3c72570822aeeb4752e471ce868c86b3feab9dabfff4a3f2ea68a43184d501a2c7ae494a844d4775e67ed78a02affaa2293494f6467c9cadeb3a4dbb1319cd9d7cf42f18a69fbd0651b64b62d7288a278ae7c7f3ce83c4ac540fe8e7a00e0b62c7b68306fd0b37aa707f3357f40c76554e8a55d1ef4c2da6412983772244fa13ea1031d493b350bd64b033e007d26bfb28edecdbf83c92e379e5314250490c9ca31cf53beca6cf337b0a4edc201f57a180ac8ec5f6bb0841a0a9fe8ce99a0f49ffe3", 0xcd}, {&(0x7f00000052c0)="1eb2ec6ce3962a9177f2062b68cda13dfe3f87b12fb898a7ee54bf21d600e9d9081c6c1a016cbf82c563393abd454726e535093fd797f36399c2bc0c0d8ceaa0c2b83a20759e664831401950cfbdacde62291a3b8794dd77515a8fbfb9642115601227ac14e80303a711965d4e139ec04fb61087509ed1b4b033581ee76b", 0x7e}, {&(0x7f0000005340)="a0cad9c375172f5ce2932b7036f38fae32db774e91906b74a2a15a5a5114a473bded292baf24e37d04d43d137fbfe9fe97f1c182e995c88cd8ae13d1ba96f8ce77434445ca99b6fac6c9a4bc0d207a68e9aa05e5ce19593f9236eaa65fc9847fb41190877fdd5d23a488d5f35b598dbdbf55827e1250f64ff9134edf5e5b662f395cf0428a1862e32fc1652237bb5698", 0x90}], 0x5, 0x7, 0x4) r11 = openat$full(0xffffffffffffff9c, &(0x7f00000054c0), 0x408000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000005500)=@o_path={&(0x7f0000005480)='./file0\x00', r11, 0x4000, r0}, 0x18) fchmod(r4, 0x14) 1m50.561022593s ago: executing program 9 (id=3913): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[]) 1m49.764712599s ago: executing program 9 (id=3923): r0 = socket(0x2b, 0x1, 0x1) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd000071187c0000000000c3640000f10000007b0a00fe00000000850000002e00000079a00000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = io_uring_setup(0x7a53, &(0x7f0000000240)={0x0, 0x93c7, 0x40, 0x0, 0x17c}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000000)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x16}], 0x1) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d00000000000000ff07000000000000c9fb90d3abc52620e66db24b7c4f64fd9120d01eaf7503e1c7cfe204909190cf53b6c107bdd3bbcb1b23721d91ea46be5b513aafd253d4342e", 0x6c, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock2(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0xf8, 0x1, 0x6b, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x40, 0x8, 0x0, 0x800}}) 1m49.524897883s ago: executing program 9 (id=3925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0xf, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) eventfd2(0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101a00, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/84, 0x54, 0x0, &(0x7f0000000400)=""/230, 0xe6}, &(0x7f0000000180)=0x40) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000200)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1m49.344645403s ago: executing program 9 (id=3929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) capset(0x0, &(0x7f0000000040)={0x200000, 0x40202003, 0x0, 0x7db, 0x7, 0x443c}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x18, &(0x7f0000000940)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000000c0)=0x18, &(0x7f0000000400)='%pK \x00'}, 0x20) r5 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) semget(0x0, 0x76bcb426919c1a47, 0x4a0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) unshare(0x6020400) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000100)={0x10, 0x0, "ee539117f768e0b1bbf68c6381415dcf"}) file_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x800) fsmount(0xffffffffffffffff, 0x0, 0x89) pipe2(0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000001c0)=0x2001) r8 = fcntl$dupfd(r7, 0x0, r7) request_key(&(0x7f0000000280)='blacklist\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000003c0)='/dev/sg#\x00', 0xfffffffffffffffd) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602d5a00002c3c00fc020000000000000000000000000000fe8000000000000000000000000000aa87010000000000000708000000000000000005020000000000004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9692b97110c2334f09dc34d5b58bb3609ef0ab1ebc1a5e5375277feb81bd8fac01e6b0d322d73acb5746150c42426767a7ead907e744294d317647c4fd5233e481ef9b5ba1f00e8c43d0cee7676c0f8ef10ce83719db1f1de3edfbd22227863f6238cb57acb85e21bd6054c3115b45dad638acf03058f2daf1d9cc478f896d435eaa24f17f0751e27becffb3a4cc60a9943335a7209e01ed98f35effeba032f5de"], 0x0) 1m49.318575105s ago: executing program 49 (id=3929): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) capset(0x0, &(0x7f0000000040)={0x200000, 0x40202003, 0x0, 0x7db, 0x7, 0x443c}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e80)={{r2, 0xffffffffffffffff}, &(0x7f0000000500)=0x18, &(0x7f0000000940)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r4}, &(0x7f00000000c0)=0x18, &(0x7f0000000400)='%pK \x00'}, 0x20) r5 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) semget(0x0, 0x76bcb426919c1a47, 0x4a0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000180)) unshare(0x6020400) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000100)={0x10, 0x0, "ee539117f768e0b1bbf68c6381415dcf"}) file_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x800) fsmount(0xffffffffffffffff, 0x0, 0x89) pipe2(0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000001c0)=0x2001) r8 = fcntl$dupfd(r7, 0x0, r7) request_key(&(0x7f0000000280)='blacklist\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f00000003c0)='/dev/sg#\x00', 0xfffffffffffffffd) readv(r8, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd602d5a00002c3c00fc020000000000000000000000000000fe8000000000000000000000000000aa87010000000000000708000000000000000005020000000000004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9692b97110c2334f09dc34d5b58bb3609ef0ab1ebc1a5e5375277feb81bd8fac01e6b0d322d73acb5746150c42426767a7ead907e744294d317647c4fd5233e481ef9b5ba1f00e8c43d0cee7676c0f8ef10ce83719db1f1de3edfbd22227863f6238cb57acb85e21bd6054c3115b45dad638acf03058f2daf1d9cc478f896d435eaa24f17f0751e27becffb3a4cc60a9943335a7209e01ed98f35effeba032f5de"], 0x0) 50.596694613s ago: executing program 2 (id=4370): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000002c0)='./file0\x00', 0x4002, &(0x7f0000000ac0)={[{@rodir}, {@rodir}, {@fat=@discard}, {@utf8no}, {@numtail}, {@uni_xlateno}, {@utf8no}, {@shortname_win95}, {@utf8}, {@shortname_win95}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_lower}, {@utf8}, {@fat=@flush}, {@uni_xlate}, {@shortname_win95}, {@fat=@tz_utc}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@usefree}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x37d, &(0x7f0000000c00)="$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") r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}, 0x1, 0x3f000000}, 0x0) 50.443697282s ago: executing program 2 (id=4373): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x401, 0x100}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x84ba}, &(0x7f0000000240)=0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfb, 0x0, 0x0, 0x9, 0x744b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xa47, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r6, 0x0, 0x25, 0x1, @void}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'tunl0\x00', 0x1000}) setregid(r1, 0xffffffffffffffff) 50.325040469s ago: executing program 2 (id=4374): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000020a000000020000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) 50.287221711s ago: executing program 2 (id=4376): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xffa1, 0xd000000}) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x850, &(0x7f0000000040)=ANY=[@ANYBLOB='sys_immutajle,\x00'], 0x1, 0x267, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4d329a87b379f772, 0x88) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r3, &(0x7f0000000380)=""/110, 0x6e) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x164, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x130, 0x3, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x108, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x53, 0x1, "24d1e3434bf1d4cbc213dbbf29929534f7620c288fcf7cf3a32330370dd9ab80e211a315a1435d28b398e85e8b2779c9f234b3c810e59fa35aa59aa49ec3f35b142d520727db36f675dc5104e4cc51"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "f5a0c9b44bb5a1b4d0286f2371002f301c64ad13c5286e184420a6bae8683c1fe255270f6c"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 49.684247596s ago: executing program 2 (id=4384): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="c09c6c5990b9f9f4f1bff89d144ce0074bbb1a355aebafd244a0af1b6c575ff7fc275520b5c77d376253cad8475154c38920a511f9e486c4456a28982a1cbd3bfb06a990adbfb6fe216959cadf6f6750b86f9161bedb4effcf975c17", 0x5c}, {&(0x7f0000000100)="5e3baf2e39fd1c4c7f44231b130c2769902b7a4c041c7382c4bfc078decde7c8427dddf9f12f531e5291f100ec4cf820c2f95f68149d40214a7ba26e622bc21f1cfb21ba7cb1ae40c7b0288b3ae8cedb21e308d4111240bc12f6f0af584b74d2f4ae979d1e5c738c51eb05b0618dea266224cdfea30a5a4c32b267b617f6bad581e0dfe0c23abdb2", 0x88}, {&(0x7f00000001c0)="909ea9c0ab2e0f0226e45bffd07b4422c8e804c912b604715743ea86324321366344f4b9a5690ab293419c359d74d418dc691ec7f28142887b878773d0cc0c048b873b49e0837afba924b33e7d9f55567976323008a7a36bd1a56c1cd2e95aff21d5ebbe197849a697d44559259cbe4b160454a93836066654700e504f03", 0x7e}, {&(0x7f0000000240)="695146847e1ea6816ea23b9057158d7675ddac39631be6437d023c4c8a97bcc6b79d216971b26121cb04dde60e791254ec1f661eed64dfd7121f46630c4798f23484d6e27b776421cd75a529c3e3baddbe5ddca12c5c27ea00e6ed923548e2d8ec24ee36332c4b851359195034362a58ad011ad64b5957d85dd4b309d2d1277df262699e1611bcde7312d56240b98909ba139ccaea93124a85a285501f9f738b75d0e45b8608121d8c7ca1e17ee2a8daa03e39d2e465c2f5b6811c60f5282a85c0a1b87c02901e840d1e8feefe98c9fa80324a36da2a75b1b57121750fa20f2a", 0xe0}, {&(0x7f0000000340)="5be778de931e1d59dd1cf434f606db171bd915b500278e3f4d175cb6e82b5134b184f1209bae5cbd2293a3c82b4cc0b13e81a674c736352073f2aae065bec6326fc383c1f83c62890092f4c055f0d35a5c64785bf1cf8bbadb0778d3dd345c87b7d65cf54196ee6d4533a4a3b057ed0c341e2aa59e1eeac2256ee6feceeae6c76ccca7a92c067469b152f6c1c0a5d4ec", 0x90}, {&(0x7f0000000080)="253db566786ce1263717a4a521ddcfab", 0x10}, {&(0x7f0000000400)="9df6fe8574408aa8b481859a37cc398f22539c136845c3f289eebeaef267245cc55e97470f4fccd7e9a3d80a1da5307a0009f2cd84930a678a659bf6b16466ff11cd4f135dde427b7b76395de271e0bfcad123a77c2868a340dd7945dd51590db4429db9316bf82ec43e475f59d0217ea4509dff53", 0x75}], 0x7, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@generic={0x44, 0x11, "06f243b6f30c6da823212c8a2f982e"}, @timestamp_addr={0x44, 0x4, 0xd6, 0x1, 0x2}, @ssrr={0x89, 0x7, 0x72, [@multicast2]}, @end, @noop, @timestamp={0x44, 0x14, 0xd3, 0x0, 0xb, [0x3, 0x40000, 0x1, 0x8]}, @cipso={0x86, 0x4b, 0x1, [{0x7, 0x11, "3bfb5d74ab96202a88b3ea272f42c1"}, {0x2, 0xa, "3d5ee31632f14193"}, {0x2, 0x12, "82d48bbb0102451e67750e7f97fcfdff"}, {0x4d501a9a4df8bcf2, 0x6, "80ce4603"}, {0x7, 0x5, 'h\vJ'}, {0x7, 0xd, "c620d60455a3b88a94513d"}]}, @lsrr={0x83, 0x1f, 0x72, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101, @private=0xa010101, @private=0xa010100, @remote]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x25}, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @empty}}}], 0x150}, 0x2404c004) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="0c1874268c0000bd3f4c2ee4c3e4fdfea05e8e04a1a42a60557fb65e7388442bcb546079b365311561bb95fb1aff7128184ea4ca0f437142f62b8f3200e2eb47d44e67968ef5a2b24506d380fd62fac61aa99133d75de2774168ed1224dee2e650791e490c7c3f514a1b39c61d40894d45c2205a1d988b31cd6dc9ba0908fb6e4cd35d064b5085cd470e8282240c64159ba4b6b084446629f37ec8700db7d6dea32c10c93f7f19f2de78816ca02e67b7ab59f59fdf2bea3156f5938df17892e404e8ae", 0x6e}], 0x1, 0x0, 0x0, 0x2000000}}], 0x800000000000369, 0x44000) 49.395975303s ago: executing program 2 (id=4390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0xf, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) eventfd2(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000200)=0x4) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1380a000) 49.386016563s ago: executing program 50 (id=4390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = socket(0x2000000015, 0x80005, 0x0) set_mempolicy(0x0, &(0x7f0000000080)=0xf, 0x0) recvfrom$packet(r1, 0x0, 0x0, 0x40000022, 0x0, 0x0) eventfd2(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000200)=0x4) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1380a000) 31.784878945s ago: executing program 4 (id=4718): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8100, 0x2a9) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000400)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) close_range(r2, 0xffffffffffffffff, 0x3000000) 30.84896619s ago: executing program 4 (id=4740): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setuid(0xee01) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e1e, 0x4000b, @empty, 0x4f762126}, 0x1c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x8c, r4, 0x110, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "6837ea6f6a78"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d640f8caa9"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "eab482dbbd"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9ca9e339db6a0924e5d6d7f143"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x40810) (async) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x40810) 30.709538338s ago: executing program 4 (id=4743): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) close(r3) (async) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809014000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x5, 0x444501) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000002840)={[{}, {@grpquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@data_journal}, {@jqfmt_vfsv1}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffe00}}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x80000000000}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000001100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf09000000000000550901000100000095000000000000001509ffff08000000bf91000000000000b702000002000000850000002a000000b70000000000000795"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x1016, &(0x7f0000001880)=""/4118, 0x41100, 0x28}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000005c0)={{r3}, r4, 0x8, @unused=[0x45, 0x7, 0x4, 0xf], @subvolid=0x7}) 30.540305778s ago: executing program 4 (id=4746): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000540)={0x0, "7baad3a38cff4cb3ea258d462bfc4d73"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001540)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001940)={0xa, 0x2, {0x80000000, @struct={0x0, 0x9}, r1, 0x7, 0xd5f, 0xfffffffffffffffb, 0x300, 0xfffffffffffffffe, 0x480, @usage=0x800, 0x3, 0x7, [0x3ff, 0x0, 0x2, 0x7, 0x40, 0xc]}, {0x100000000, @struct={0x5, 0x2}, 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x273242a1, 0x40c, @struct={0x3, 0x8}, 0xd53, 0xfff, [0x3, 0x5, 0x9, 0x7, 0x5, 0x580]}, {0x9, @struct={0x7}, r2, 0x6, 0x9, 0x2, 0x7, 0x0, 0x400, @usage=0xffffffff, 0x4, 0x4, [0x7, 0x1, 0x8deb, 0x0, 0x2, 0x2]}, {0x5, 0x8, 0x5}}) r3 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) tkill(r5, 0x13) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2b9, &(0x7f0000000280)="$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") socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000540)={0x0, "7baad3a38cff4cb3ea258d462bfc4d73"}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001540)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001940)={0xa, 0x2, {0x80000000, @struct={0x0, 0x9}, r1, 0x7, 0xd5f, 0xfffffffffffffffb, 0x300, 0xfffffffffffffffe, 0x480, @usage=0x800, 0x3, 0x7, [0x3ff, 0x0, 0x2, 0x7, 0x40, 0xc]}, {0x100000000, @struct={0x5, 0x2}, 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x273242a1, 0x40c, @struct={0x3, 0x8}, 0xd53, 0xfff, [0x3, 0x5, 0x9, 0x7, 0x5, 0x580]}, {0x9, @struct={0x7}, r2, 0x6, 0x9, 0x2, 0x7, 0x0, 0x400, @usage=0xffffffff, 0x4, 0x4, [0x7, 0x1, 0x8deb, 0x0, 0x2, 0x2]}, {0x5, 0x8, 0x5}}) (async) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) tkill(r5, 0x13) (async) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") (async) 30.384759397s ago: executing program 4 (id=4747): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x1, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x61}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000000000000100100000c0000000000010000000000"], 0x18}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0xffffffffffffff3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4, 0xc5a6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f0000000500)=r9, 0x4) 30.100584193s ago: executing program 4 (id=4752): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet6(0xa, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) wait4(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000002c0), 0x5}, 0x102802, 0x2, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xb, 0x6, 0xc, 0x7fff, 0x0, 0x9}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) shmget(0x3, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x4, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000200), 0xde40eae3e086d36e}, 0x2029, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x2b, 0x0, 0xffffffff, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x3}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 29.563803014s ago: executing program 51 (id=4752): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$inet6(0xa, 0x2, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) wait4(r0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000002c0), 0x5}, 0x102802, 0x2, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xb, 0x6, 0xc, 0x7fff, 0x0, 0x9}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) shmget(0x3, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x4, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sched\x00') socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000200), 0xde40eae3e086d36e}, 0x2029, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x2b, 0x0, 0xffffffff, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r5, 0x0, 0x3}) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 5.230179207s ago: executing program 6 (id=5193): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "6b745e9bcd50e45200ba70e5479f082757fc3f4ce38863da", "6be3d9cadd733d87c067bd9a3d457949dc66f37a7ab0db9f0a8ad8cbead15ecd"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3c}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x7}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075e, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4008841}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) openat$vcs(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) waitid(0x1, 0x0, 0x0, 0x0, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x800) fgetxattr(r6, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, 0x0, 0x0) getdents64(r6, &(0x7f00000001c0)=""/190, 0xbe) ppoll(&(0x7f0000002740), 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c) 4.051691725s ago: executing program 6 (id=5216): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r0, 0xfffffffa, 0x0, 0x30, 0x0, @ib={0x1b, 0x88a1, 0xd, {"8a35bf929c6e570f6cd197b990287815"}, 0x7, 0x10000, 0x40}, @ib={0x1b, 0x4, 0x10000000, {"00000e000000050000000000000000e2"}, 0x0, 0x5, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000a00), r0, 0x2}}, 0x18) 4.035162976s ago: executing program 6 (id=5217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}}, 0x40800) 3.518971526s ago: executing program 6 (id=5237): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902120001000010000904b8070096000000"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) shutdown(r0, 0x0) signalfd4(r0, &(0x7f0000000100)={[0x3ffffffe]}, 0x8, 0x80000) r2 = socket(0x2, 0x80000, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x11c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1a}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3821}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xcd98}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f1bd4d4}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x891}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xd70}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x43}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffb9}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa447}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2c4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1, 0x4]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x50}]}]}, 0x11c}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe(&(0x7f00000002c0)) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x7fffffff, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r5, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2.002254114s ago: executing program 1 (id=5264): socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) unshare(0x28000600) (async) r2 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8e) unshare(0x8000280) (async) openat(r3, &(0x7f0000000100)='./file1\x00', 0x189042, 0x1a0) (async) fcntl$setstatus(r1, 0x4, 0x2000) (async) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r5, 0x4, 0x42000) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket(0x840000000002, 0x3, 0xff) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0x10, 0x2, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d65746100000000140002800800014000000010080002400000000514000000110001"], 0xf8}}, 0x0) 1.916928319s ago: executing program 1 (id=5266): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r1, 0xfffffffa, 0x0, 0x30, 0x0, @ib={0x1b, 0x88a1, 0xd, {"8a35bf929c6e570f6cd197b990287815"}, 0x7, 0x10000, 0x40}, @ib={0x1b, 0x4, 0x10000000, {"00000e000000050000000000000000e2"}, 0x0, 0x5, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000a00), r1, 0x2}}, 0x18) 1.89440902s ago: executing program 1 (id=5268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') pread64(r3, &(0x7f0000001480)=""/4122, 0x101a, 0x9a) move_mount(r3, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)='./file0\x00', 0x2) tee(r2, r2, 0xa18, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000030400000000fcffffff00000400", @ANYRES32=0x0, @ANYBLOB="510c1ac009112843389dc20a28ba3e00bdff12000000010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x400) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00\x00@\x00'}, 0x28) writev(r10, &(0x7f00000009c0)=[{&(0x7f00000008c0)="581a17", 0x3}], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x7, 0x1000, 0x0, {{0x14, 0x4, 0x1, 0x2c, 0x50, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x24, 0xaf, 0x1, 0x0, [{@remote, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xdf2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@local, 0xf}]}, @timestamp_addr={0x44, 0xc, 0x98, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @timestamp_addr={0x44, 0xc, 0xe8, 0x1, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000002c0)={@private0, 0xe, r11}) 1.711710121s ago: executing program 7 (id=5272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000020000500020000000900020073797a3000000000050004000000000014000780"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) 1.615584957s ago: executing program 7 (id=5274): unshare(0x22020400) socket$inet_icmp_raw(0x2, 0x3, 0x1) memfd_secret(0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x17, &(0x7f0000000080)="0000d85c", 0x4) 1.593006598s ago: executing program 7 (id=5276): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1c0, 0x20a, 0x278, 0x1c0, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x20008084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18}, 0x0) recvmmsg$unix(r8, 0x0, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000140)=ANY=[], 0x42) 1.54532514s ago: executing program 1 (id=5279): r0 = open(&(0x7f0000000040)='./file1\x00', 0x82000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00357428bd70527206fd2611259a00", @ANYRES32=0x0, @ANYBLOB="040082040a0001"], 0x28}}, 0x80c0) unshare(0x20000400) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, 0x0, &(0x7f0000000640)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xea3709c77ee9998d) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000008) eventfd2(0x10001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x48800) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0002000000060011004e22000008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.516912072s ago: executing program 8 (id=5280): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_mr_cache\x00') 1.490643484s ago: executing program 8 (id=5281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1e1802, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockname$inet6(r2, 0x0, &(0x7f00000004c0)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280), 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x81, 0x3, 0x6}, 0x10) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000040), 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000000140)=""/180, 0xb4}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000300)=""/30, 0x1e}], 0x6, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}, 0x40) syz_read_part_table(0x5fb, &(0x7f0000000600)="$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") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x4df4b000) write$ppp(r1, &(0x7f0000000000)="1dd8174e578a3b3e27ff2dc177ce36172367cbf63ab79ee85d1e842469f0c015c4f2187497c027cdfeb14622bfa1c2d7e0f10dc61b", 0x35) 1.435813407s ago: executing program 7 (id=5282): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) pwrite64(r3, 0x0, 0x0, 0x100000000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/dev\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}, {&(0x7f0000000580)=""/142, 0x2000060e}], 0x2, 0x0, 0x0) 1.168759492s ago: executing program 1 (id=5283): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r1, &(0x7f0000000280)="87f853e929678f27ff2bc03f6d923f02ddba0c6a4d13423b12ee6781bb5962c2650e9514ecda6c1ddb7bbbc6be8b34c6a00426ff3cf901f220ccaec2c2225fa2f262c6cb12fd", &(0x7f0000000a00)=""/4096, 0x4}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r1, &(0x7f0000000280)="87f853e929678f27ff2bc03f6d923f02ddba0c6a4d13423b12ee6781bb5962c2650e9514ecda6c1ddb7bbbc6be8b34c6a00426ff3cf901f220ccaec2c2225fa2f262c6cb12fd", &(0x7f0000000a00)=""/4096, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r6, 0x25, 0x0, @val=@tcx}, 0x1c) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r8, &(0x7f0000000840)=[{&(0x7f0000000640)=""/76, 0x4c}, {0x0}], 0x2, 0xf6, 0x5) (async) preadv(r8, &(0x7f0000000840)=[{&(0x7f0000000640)=""/76, 0x4c}, {0x0}], 0x2, 0xf6, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r10, 0x4, r5}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket(0x2000000000000021, 0x2, 0x2) (async) r11 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r11, 0x2) (async) shutdown(r11, 0x2) unlinkat(0xffffffffffffffff, &(0x7f0000003380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) unlinkat(0xffffffffffffffff, &(0x7f0000003380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) ioctl$IMSETDEVNAME(r11, 0x80184947, &(0x7f0000000000)={0x568e520, 'syz1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x4, @time={0x0, 0x10000000}, 0x8, {0x0, 0x9}, 0x5, 0x0, 0x1}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) fdatasync(r12) (async) fdatasync(r12) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20000000) 1.03071284s ago: executing program 8 (id=5285): prctl$PR_MCE_KILL(0x29, 0x1, 0x2) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r2, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x67, &(0x7f0000000940)=[{}, {}], 0x10, 0x10, &(0x7f0000000980), 0x0, 0x0, 0xf5, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x1, @ANYBLOB="7f0000000046999f1d00"/20, @ANYRES32=r4, @ANYRES8=r2, @ANYBLOB="0300000005000000050000000600"/24, @ANYRES32=r1, @ANYBLOB], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r5, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="06", 0x1}], 0x1, 0x0, 0x0, 0x4004}}], 0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=@expire={0x1c4, 0x18, 0x2, 0x70bd2d, 0x25dfdbff, {{{@in=@empty, @in=@empty, 0x4e23, 0x5, 0x4e21, 0x41a, 0x2, 0x80, 0x20, 0x0, r4, r7}, {@in=@loopback, 0x4d3, 0x3c}, @in6=@mcast2, {0x0, 0xf29, 0x462f, 0x3ff, 0x8, 0x401, 0x860}, {0xffffffffffffffc2, 0x8, 0xf7, 0xffffffffffffffff}, {0x1, 0x38b7, 0x40000000}, 0x70bd2d, 0x3506, 0x2, 0x0, 0xf}, 0x3}, [@policy={0xac, 0x7, {{@in=@remote, @in6=@empty, 0x4e24, 0xd, 0x4e20, 0x4, 0x2, 0xe0, 0xa0, 0x0, 0x0, r9}, {0x7, 0x4, 0x4, 0xbf6, 0x2, 0xa1}, {0x8ab, 0x346f, 0x2, 0x9}, 0x9, 0x6e6bb0, 0x0, 0x0, 0x2}}, @srcaddr={0x14, 0xd, @in=@broadcast}, @policy_type={0xa}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4091}, 0x810) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000080)={0x84, @empty, 0x4e23, 0x3, 'none\x00', 0xf, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x81, 0x0}, 0x4e21, 0x3, 'nq\x00', 0x4, 0x81, 0x3}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x8, 0x12d5c, 0x12d5c}}, 0x44) io_setup(0x4, &(0x7f00000014c0)) 766.290126ms ago: executing program 8 (id=5288): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2882, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 712.753439ms ago: executing program 1 (id=5289): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) unshare(0x22020600) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xc}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000003540)={0xf, {"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", 0x1000}}, 0x1006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000000080)=""/17, &(0x7f0000000100)=0x11) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYRES16=r5, @ANYRESDEC, @ANYRESHEX, @ANYRES8=r0, @ANYRES8=r4, @ANYRESDEC=r0, @ANYBLOB="cfd10a81a20f7fd1fb5faa75b58a64e85a6832b17a6afe547cd2ec0e894d605bb87973a6e5a7a3525eda4f98a7cb1f92cc2055053480d7d8c92052cedcce19cad201cde0bd726e358772728cd109f533397069e15c8de1f5dba0076c4246f04f4c358a39ed0eed8bd6bd9be8177d9eea9f46bd2b816550e6a7d0e183606aeadc9088468083ba0c5c93c4dcf896648c5c4dd52e098aae4925d0465400c8012880173f6a72564f370c66257b0e58b2571abebc1194d7cf690e7791dcc76f9a1eacb683", @ANYRES8=r4], 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x20800, &(0x7f0000000480)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@resuid}, {@jqfmt_vfsv1}, {@abort}, {@dax_inode}]}, 0x1, 0x476, &(0x7f00000030c0)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x78280, 0x0) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xc}, 0x120, 0xffff, 0x33f8, 0x1, 0x3, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000180)={r8, r7}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000000), &(0x7f0000000040)=ANY=[], 0xe01, 0x1) llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1008041, &(0x7f0000000000)=ANY=[], 0x0, 0x2cf, &(0x7f00000000c0)="$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") r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 658.001682ms ago: executing program 5 (id=5290): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="83be29bd7000fcdbdf250600000008000e004800000008000d00d0000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x2000c000}, 0x80) 627.021104ms ago: executing program 7 (id=5291): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x2, 0x7, 0x4, 0x0, 0x6}, 0x90000000, 0x82b8ca41, 0x1d24}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b4e7c312ffd1ff5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xb}, {0xa, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c865}, 0x2000c002) 579.458206ms ago: executing program 5 (id=5292): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffa, 0x0, 0x30, 0x0, @ib={0x1b, 0x88a1, 0xd, {"8a35bf929c6e570f6cd197b990287815"}, 0x7, 0x10000, 0x40}, @ib={0x1b, 0x4, 0x10000000, {"00000e000000050000000000000000e2"}, 0x0, 0x5, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000a00), 0xffffffffffffffff, 0x2}}, 0x18) 468.740083ms ago: executing program 5 (id=5293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 456.450304ms ago: executing program 5 (id=5294): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'gre0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x3}, {0xdfcb, 0xd5, 0x3, 0x3}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) write$UHID_INPUT(r0, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x10a9) 366.294159ms ago: executing program 7 (id=5295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1e1802, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockname$inet6(r2, 0x0, &(0x7f00000004c0)) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000280), 0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x81, 0x3, 0x6}, 0x10) recvmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000040), 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000000140)=""/180, 0xb4}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/78, 0x4e}, {&(0x7f0000000300)=""/30, 0x1e}], 0x6, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}, 0x40) syz_read_part_table(0x5fb, &(0x7f0000000600)="$eJzs2zFoVHccB/DfnTkOlOLi5KQOUloXxdGjVbk7FQvhNEuRYkAR8aYThJMeRHTQoyjeIOmWJQ3ckqZTLjdkSkigU4cSMqQEMmRpaZZAlr5yl1dokhZSeqUInw8HP/7/93vv+37Hf33Bey0bvyRJkomI5IeII//w7pF2sXT91PDlyu2ITNyJiC++/vCb3pVM2pHkd+uZdL2WricnjnZfbV3LtVdvbZ+9u9DM/vHIsf4vjk11RgYwHv+x6cLi8ecvauXX9cLDlXJj4+WP33/27a/FSudmszVzI3f1Xtq3lNahtD6OejyNRzEaQ/Es7kftrx//6Vf9M3r4/PH2+vncyXJ79sGlnVL3zfyFftfBc539+N9MvTe/f2Ajopf/5PTbz1uNK+e+O/HuYn1uubKZRlfz++8cHcwLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwULlYPP78Ra38ul54uFJubLzM9XaLlc7NZmvmRu7qvbRvKa1DaX0c9Xgaj2I0qlGN+1Hb3T5yMOGDPy/y+69OF/bmj7fXz/92styefXBpp9R9M38h7Rse3Mh/l5/08p+cfvtJq3HlXP7Eu4v1ueXKZjpR9cCbR//fAwAAAAAAAAAAAAAAAAAAgEEolq6fGr5cuR2RiTsR8dHPX2Z7+0l+92v+TNp3JiKeRcRa+h385MTR7quta7n26q3ts3cXmj/lI0mSJMYiE2MRcWyqM/I/jsUh/R4AAP//omWTPA==") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x4df4b000) write$ppp(r1, &(0x7f0000000000)="1dd8174e578a3b3e27ff2dc177ce36172367cbf63ab79ee85d1e842469f0c015c4f2187497c027cdfeb14622bfa1c2d7e0f10dc61b", 0x35) 305.785353ms ago: executing program 8 (id=5296): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000001600)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nombcache}, {@nodelalloc}, {@init_itable}, {@errors_remount}]}, 0x5, 0x577, &(0x7f0000001080)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1'}, 0xb) write$binfmt_elf64(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/1287], 0x507) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000200)={[{@noload}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@inlinecrypt}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) r6 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0xee00) keyctl$clear(0x7, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200800000000, 0x0, 0x85c, 0x5}) pwrite64(r0, &(0x7f0000002640)="1a1644ccb19dd020b7885fbd6983c2d9cab938d97036c3ee32b90819a24863e5e5818117f15749e84978d9bba4f73fd0f3aa2c09dbe8d19abb919e5cc6d0bc69a6852c714895954e55505b9a9805c64a012566e2bbfd860692511a457e", 0x5d, 0x6) r9 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000078000000186060000000300"], 0x18}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 267.114945ms ago: executing program 6 (id=5297): unshare(0x22020400) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x17, &(0x7f0000000080)="0000d85c", 0x4) 220.418387ms ago: executing program 5 (id=5298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 161.007731ms ago: executing program 6 (id=5299): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000002100)={&(0x7f0000001ac0)={0xa, 0x4e21, 0x7, @empty, 0xff}, 0x1c, 0x0, 0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="140000000400000029"], 0x18}, 0x4044812) 160.737451ms ago: executing program 5 (id=5300): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5c9, &(0x7f0000000c40)="$eJzs3V+IHHcdAPDv7u2l9hJNK7WaapuL1Tb2z17urgRTC5JHbVNq/zwZiUeyuYTby8bbDfauFq4UoYKRUH3SJwVBxYeIoCA+FMT6KPimlAoWUQKhWIqiUVdmdiZsu5vbXO6SMZnPB+buN7+Z3fnOfvOd3flldi6A0ppMflQitkXEqxGxvTf7zhUme7/OzJ49lkyV6HaferOSrvf87Nlj+ar547YmP6oRH0p+/Tpi6/jgdtvLKwtzzWZjKZuf6iyenGovrzx4fHFuvjHfODEzO713z8ze6b37Nm1ff/jcy599/bnHLpw+P/H913bs/EcS77ZsWf9+bJbJmMxek/H4aP+CSsSnN3tjBRmLiFpEfKDoQFi3g7/7+jN5/sbT+t8eY+lcxMTswbe2x+lHio4RuHq6qUstHesCN7JKFB0BUIz8nT45/82nK/kccdMVPGbhRjkJvo6d3987AXw+G9s5czH/tahm64xvzvn9wD+RnX+NmIzOfWc/s+uryRRXaRyGS1t9IdKBusH6r6RjY7dk690dEbsj4mMR8fGIuCci7t3gtp/+QpL/P36zv0/+r63Lzf8nIqIeEfdFxP0R8UBEPLjBbd9+IMn/1i/298l/edzxuaIjoEi/fanoCEiP/3tqtWHH/+oGn3vXiOXd9P8VV9/o73P8L48nnyo6Aor0+N6iI6BI33mz6Ah4ZX/vZG7w/b8at/etl7Q/2DtVjB3JZ/eI+HBEfCQi7oyIuyJiZ3490WX6yqPJ+vVGf9/g+3/13Eb2j7Wd3x/xSN+1XWf68p+5ZSybe286HjBeOXq82dgTEe9Lx4TGb0rmp9fYxtdWf/XosP4f35nk/1OP5+N/yZRsPx8LzOI4V3vXyOGRuc7cRvebnvMvRNxRG5b/SnYlUO+6vm5ETK3vqXflj39x909+M2yFTz6Z5P+eB9bOP1dT97u9cdxh+c9V1r4+cyo9HkzlR4VBL8Ztp4f1P3Ehyf8bf5D/4iT1P7F2/tPj/8Xrddvr30btzLlvDO1fTPL/519eyfF/S+XpNMAtWd+zc53O0nTElspjg/0z64/5RpW/HvnrleR/993D3//fnz0meUGTyv5PRPw3Iv4ZEf+KiAsR8e+I+FtEvLXGNn/x8sM/H9Y/+0yS/7+8qv6Lk+T/yIj6r7yj/tff+PZd+748bNs/+F6S/4n66Pp/KA1md9bj899ol5ugouMEAAAAAAAAYHNU03vgVar1i+1qtV7v3cPvtpioNlvtzv1HW6dOHIns+6Dj1fxKr+1914NOZ98Vzedn3jU/GxG3RsRLYzen8/XDreaRonceSmpbxOs//dLhLVsvUf+J18aKjhK4GpL6P/qtsdWk/bY6h1JJ6v9Hby+m38tS/1Au6h/KS/1Deal/KC/1D+Wl/qG81D+Ul/qH8lL/UF799Q+U0xMHDiRTN7/v54nW/PGFYyf3zeypL546XD/cWjpZn2+15tNv7CyOfr5mq3Vy+qE49exUp9HuTLWXVw4ttk6d6BxK7xt9qDF+DfYJGO3vf/r8z27d+crvKxGx+vDN6RR9985Wq3Bjc+oP5VXra3czBYYDXEM+4wOVEcvfc6kFBzc/FuDa2Ojf+AeuX/fuuMLx/1EfGID/e8b/obxqRQcAFMb4P2D8H8rH+D+UV2OpvbyyMNdsDjSKjgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJzayysLc81mY0lDQ6N0jf8FAAD//1tbT34=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0x1, 0x0) fcntl$setpipe(r3, 0x408, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv2(r1, &(0x7f00000003c0)=[{&(0x7f0000001300)=""/4096, 0x2f800}, {0x0}], 0x2, 0x0, 0xffffffff, 0x0) 0s ago: executing program 8 (id=5301): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x100c2, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3ff, 0x1}, 0x100c2, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101401, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="3d99", 0x2}, {0x0}], 0x2, 0x6, 0x2, 0x24) r2 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000000)={0x23, 0x0, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r6, 0x4b41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080f49f428cd448a0a926b3c066a2a2429320", @ANYRES8=r4, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRESDEC=r6, @ANYRES8=r6, @ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="9867fb3f62eff3bdd666fb4525fd2e68f320ae7de1bfdc9bb5ccc1a78b53108c22b5620d015ce5b9fcf897439c29aba31bedd6f479ca019181d9d22fa3f94634c040eb3c7722fcd60592a2e44ee5471629c49030f5f32f732a711ab3e43b5dc79e096ab45952368a1aebc62ca48225c45e412ddc9dc1de931ae96e18f34092a3743989ff3b4970bad06be5facb8329926e461b9afdfe5f711658ff210834836b792b894c201f8fc4f9c24ee0b3debdfae3ef655a90f9e3f8bd00ff67675401da2d4c4287191af1248a17e59ba3d6c306c2c90300679c066b425a99444c7c8af8e3c540ec21", @ANYRESHEX=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9639658ea95ed371ea3dd361", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) acct(&(0x7f0000000040)='./file0\x00') (async) acct(&(0x7f0000000040)='./file0\x00') kernel console output (not intermixed with test programs): special inode unallocated [ 365.678810][T21820] EXT4-fs (loop4): no journal found [ 365.684093][T21820] EXT4-fs (loop4): can't get journal size [ 365.714742][T21816] wg1 speed is unknown, defaulting to 1000 [ 365.721741][T21820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.741159][T21820] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1324: inode #12: block 16: comm syz.4.4425: path /419/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 365.775880][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 365.775895][ T29] audit: type=1400 audit(1770035255.116:8378): avc: denied { connect } for pid=21813 comm="syz.4.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 365.807613][T21825] __nla_validate_parse: 7 callbacks suppressed [ 365.807630][T21825] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4427'. [ 365.862379][T14657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.885893][T21840] netlink: 'syz.6.4427': attribute type 13 has an invalid length. [ 365.920728][T21845] xt_hashlimit: size too large, truncated to 1048576 [ 365.951956][T21833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4428'. [ 366.178424][T21861] sg_write: data in/out 135/8 bytes for SCSI command 0x74-- guessing data in; [ 366.178424][T21861] program syz.7.4432 not setting count and/or reply_len properly [ 366.375031][T21865] 9p: Bad value for 'rfdno' [ 366.430300][T21840] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.547183][T21886] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4440'. [ 366.654251][T21840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.669614][T21840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.757130][T21840] bond0: left allmulticast mode [ 366.762160][T21840] bond0: left promiscuous mode [ 366.769619][T21840] tipc: Resetting bearer [ 366.795974][ T391] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.796276][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4441'. [ 366.804956][ T391] netdevsim netdevsim6 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 366.805062][ T391] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.851652][ T391] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.860637][ T391] netdevsim netdevsim6 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 366.869782][ T391] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.901769][ T391] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 366.910857][ T391] netdevsim netdevsim6 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 366.920629][ T391] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.040099][ T391] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.049142][ T391] netdevsim netdevsim6 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 367.058087][ T391] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.191318][T21908] syzkaller0: entered promiscuous mode [ 367.196867][T21908] syzkaller0: entered allmulticast mode [ 367.212886][T21916] syzkaller0: entered promiscuous mode [ 367.218485][T21916] syzkaller0: entered allmulticast mode [ 367.232344][T21691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.243966][T21691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 367.256021][T21691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 367.265855][T21691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 367.298196][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4446'. [ 367.320257][T21916] vlan3: entered allmulticast mode [ 367.325501][T21916] dummy0: entered allmulticast mode [ 367.347161][T21932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4448'. [ 367.372404][T21691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.387882][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4448'. [ 367.397343][T21691] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.418575][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.425777][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.434000][T21936] set_capacity_and_notify: 1 callbacks suppressed [ 367.434019][T21936] loop7: detected capacity change from 0 to 128 [ 367.459146][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.466341][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.488633][T21936] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.534966][T21936] EXT4-fs (loop7): shut down requested (2) [ 367.696181][T21960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4453'. [ 367.736712][T21691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.776132][T21978] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4455'. [ 367.824557][T21985] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.893521][T21997] netlink: 888 bytes leftover after parsing attributes in process `syz.5.4458'. [ 368.004025][T22014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=22014 comm=syz.7.4461 [ 368.020384][T22017] FAULT_INJECTION: forcing a failure. [ 368.020384][T22017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.033715][T22017] CPU: 0 UID: 0 PID: 22017 Comm: syz.4.4462 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 368.033752][T22017] Tainted: [W]=WARN [ 368.033759][T22017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.033775][T22017] Call Trace: [ 368.033783][T22017] [ 368.033792][T22017] __dump_stack+0x1d/0x30 [ 368.033893][T22017] dump_stack_lvl+0x95/0xd0 [ 368.033980][T22017] dump_stack+0x15/0x1b [ 368.034006][T22017] should_fail_ex+0x263/0x280 [ 368.034096][T22017] should_fail+0xb/0x20 [ 368.034127][T22017] should_fail_usercopy+0x1a/0x20 [ 368.034233][T22017] _copy_from_iter+0xcf/0xea0 [ 368.034281][T22017] ? rep_movs_alternative+0x4a/0x90 [ 368.034310][T22017] ? _copy_from_iter+0x13e/0xea0 [ 368.034340][T22017] copy_page_from_iter+0x178/0x2a0 [ 368.034368][T22017] skb_copy_datagram_from_iter+0x22d/0x480 [ 368.034458][T22017] unix_dgram_sendmsg+0x40f/0x1060 [ 368.034493][T22017] ? selinux_socket_sendmsg+0x192/0x1c0 [ 368.034528][T22017] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 368.034567][T22017] ____sys_sendmsg+0x5af/0x600 [ 368.034663][T22017] ___sys_sendmsg+0x195/0x1e0 [ 368.034708][T22017] __x64_sys_sendmsg+0xd4/0x160 [ 368.034740][T22017] x64_sys_call+0x17ba/0x3000 [ 368.034775][T22017] do_syscall_64+0xc0/0x2a0 [ 368.034894][T22017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.034984][T22017] RIP: 0033:0x7f394617aeb9 [ 368.035071][T22017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.035093][T22017] RSP: 002b:00007f3944bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.035115][T22017] RAX: ffffffffffffffda RBX: 00007f39463f5fa0 RCX: 00007f394617aeb9 [ 368.035130][T22017] RDX: 0000000000040840 RSI: 0000200000000300 RDI: 0000000000000005 [ 368.035144][T22017] RBP: 00007f3944bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.035159][T22017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.035242][T22017] R13: 00007f39463f6038 R14: 00007f39463f5fa0 R15: 00007ffed5e05ce8 [ 368.035270][T22017] [ 368.377463][ T29] audit: type=1400 audit(1770035257.706:8379): avc: denied { create } for pid=22040 comm="syz.5.4466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 368.401967][T21691] veth0_vlan: entered promiscuous mode [ 368.409732][T22043] loop4: detected capacity change from 0 to 512 [ 368.433712][T21691] veth1_vlan: entered promiscuous mode [ 368.455603][T22043] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.474421][T21691] veth0_macvtap: entered promiscuous mode [ 368.508325][T21691] veth1_macvtap: entered promiscuous mode [ 368.533397][T22043] SELinux: failed to load policy [ 368.541645][T21691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.572095][T21691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.588843][T22053] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22053 comm=syz.5.4468 [ 368.604620][ T391] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.640709][ T391] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.651372][ T29] audit: type=1400 audit(1770035258.006:8380): avc: denied { getopt } for pid=22042 comm="syz.4.4467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 368.654983][ T391] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.722015][T22067] loop7: detected capacity change from 0 to 512 [ 368.726096][ T391] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.732171][T22067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.785370][T22067] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.4472: corrupted in-inode xattr: bad e_name length [ 368.819906][T22067] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.4472: couldn't read orphan inode 15 (err -117) [ 368.849471][T22067] tipc: Started in network mode [ 368.854402][T22067] tipc: Node identity 4246, cluster identity 4711 [ 368.860914][T22067] tipc: Node number set to 16966 [ 369.062084][T22110] loop4: detected capacity change from 0 to 1024 [ 369.189241][T22122] netlink: 'syz.4.4483': attribute type 7 has an invalid length. [ 369.778192][T22158] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 369.786101][T22158] netlink: 'syz.5.4487': attribute type 2 has an invalid length. [ 369.808787][T22159] netlink: 'syz.5.4487': attribute type 1 has an invalid length. [ 369.816630][T22159] netlink: 'syz.5.4487': attribute type 2 has an invalid length. [ 370.022730][T22176] loop8: detected capacity change from 0 to 2048 [ 370.079723][T21229] loop8: p1 < > p4 [ 370.094632][T21229] loop8: p4 size 8388608 extends beyond EOD, truncated [ 370.132514][T22176] loop8: p1 < > p4 [ 370.170915][T22176] loop8: p4 size 8388608 extends beyond EOD, truncated [ 370.235342][T20693] udevd[20693]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 370.249468][T21229] udevd[21229]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 370.294096][T21229] udevd[21229]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 370.328949][T20693] udevd[20693]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 370.365012][T20693] udevd[20693]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 370.376775][T21229] udevd[21229]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 370.553492][ T29] audit: type=1400 audit(1770035259.896:8381): avc: denied { name_bind } for pid=22215 comm="syz.8.4500" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 370.652496][T22223] FAULT_INJECTION: forcing a failure. [ 370.652496][T22223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.665684][T22223] CPU: 0 UID: 0 PID: 22223 Comm: syz.4.4503 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.665721][T22223] Tainted: [W]=WARN [ 370.665729][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.665799][T22223] Call Trace: [ 370.665809][T22223] [ 370.665820][T22223] __dump_stack+0x1d/0x30 [ 370.665853][T22223] dump_stack_lvl+0x95/0xd0 [ 370.665880][T22223] dump_stack+0x15/0x1b [ 370.665900][T22223] should_fail_ex+0x263/0x280 [ 370.665946][T22223] should_fail+0xb/0x20 [ 370.666019][T22223] should_fail_usercopy+0x1a/0x20 [ 370.666066][T22223] copy_folio_from_iter_atomic+0x269/0x1170 [ 370.666094][T22223] ? shmem_write_begin+0xfc/0x1f0 [ 370.666132][T22223] ? shmem_write_begin+0x135/0x1f0 [ 370.666241][T22223] generic_perform_write+0x2c1/0x490 [ 370.666278][T22223] shmem_file_write_iter+0xc5/0xf0 [ 370.666391][T22223] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 370.666435][T22223] vfs_write+0x5a6/0x9f0 [ 370.666469][T22223] ksys_write+0xdc/0x1a0 [ 370.666547][T22223] __x64_sys_write+0x40/0x50 [ 370.666638][T22223] x64_sys_call+0x2847/0x3000 [ 370.666673][T22223] do_syscall_64+0xc0/0x2a0 [ 370.666717][T22223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.666748][T22223] RIP: 0033:0x7f394613b78e [ 370.666820][T22223] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.666893][T22223] RSP: 002b:00007f3944bd6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.666915][T22223] RAX: ffffffffffffffda RBX: 00007f3944bd76c0 RCX: 00007f394613b78e [ 370.666933][T22223] RDX: 0000000000040000 RSI: 00007f393c7b7000 RDI: 0000000000000005 [ 370.666952][T22223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.666969][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 370.667061][T22223] R13: 00007f3944bd6ee0 R14: 00007f3944bd6ea0 R15: 00007f393c7b7000 [ 370.667119][T22223] [ 370.803502][T22227] loop8: detected capacity change from 0 to 256 [ 370.815096][T22223] loop4: detected capacity change from 0 to 512 [ 370.951443][T22231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.002099][T22231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.061668][ T29] audit: type=1400 audit(1770035260.406:8382): avc: denied { setattr } for pid=22251 comm="syz.7.4508" name="L2TP/IPv6" dev="sockfs" ino=77688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.123813][T22255] __nla_validate_parse: 11 callbacks suppressed [ 371.123864][T22255] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4509'. [ 371.186929][T22266] macsec1: left promiscuous mode [ 371.192797][T22266] macsec1: left allmulticast mode [ 371.198120][T22266] veth2: left promiscuous mode [ 371.202936][T22266] veth2: left allmulticast mode [ 371.208174][T22266] bond1: left allmulticast mode [ 371.213171][T22266] syzkaller0: left promiscuous mode [ 371.219215][T22266] syzkaller0: left allmulticast mode [ 371.298162][ T29] audit: type=1326 audit(1770035260.646:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.7.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 371.331646][ T29] audit: type=1326 audit(1770035260.646:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.7.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 371.355261][ T29] audit: type=1326 audit(1770035260.646:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.7.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 371.378925][ T29] audit: type=1326 audit(1770035260.646:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.7.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 371.402688][ T29] audit: type=1326 audit(1770035260.646:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22269 comm="syz.7.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 371.586959][T22299] xt_hashlimit: size too large, truncated to 1048576 [ 371.769503][T22309] vlan2: entered promiscuous mode [ 371.774612][T22309] gretap0: entered promiscuous mode [ 371.980563][T22326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4524'. [ 372.181697][T22343] SELinux: security_context_str_to_sid (ôa`yv©—-”|J+0lè8G[økT—ƒ_È×|nœÉUÓ5 [ 372.181697][T22343] M9) failed with errno=-22 [ 372.205172][T22343] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 372.298096][T22351] No such timeout policy "syz1" [ 372.363639][T22353] netlink: 'syz.6.4529': attribute type 10 has an invalid length. [ 372.372377][T22353] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4529'. [ 372.493889][T22363] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.506983][T22363] vlan2: entered allmulticast mode [ 372.512375][T22363] bond2: entered allmulticast mode [ 372.533847][T22366] netlink: 'syz.7.4536': attribute type 1 has an invalid length. [ 372.644283][T22366] smc: adding net device bond0 with user defined pnetid SYZ2 [ 372.671463][T22366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.698676][T22372] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4537'. [ 372.785365][T22377] À: port 1(vlan1) entered blocking state [ 372.791451][T22377] À: port 1(vlan1) entered disabled state [ 372.801851][T22377] vlan1: entered allmulticast mode [ 372.807082][T22377] veth0_vlan: entered allmulticast mode [ 372.814327][T22377] vlan1: entered promiscuous mode [ 372.906279][T22389] loop4: detected capacity change from 0 to 1024 [ 372.944722][T22389] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.962383][T22389] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.4544: lblock 3 mapped to illegal pblock 3 (length 3) [ 372.980172][T22389] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 372.993268][T22389] EXT4-fs (loop4): This should not happen!! Data will be lost [ 372.993268][T22389] [ 373.006358][T22389] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm syz.4.4544: lblock 8 mapped to illegal pblock 8 (length 8) [ 373.024467][T22389] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 373.036965][T22389] EXT4-fs (loop4): This should not happen!! Data will be lost [ 373.036965][T22389] [ 373.091567][T22403] binfmt_misc: register: failed to install interpreter file ./file0 [ 373.099989][ T29] audit: type=1400 audit(1770035262.436:8388): avc: denied { read } for pid=22401 comm="syz.4.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 373.170407][T22412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4554'. [ 373.182172][T22414] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 373.215341][T22417] loop4: detected capacity change from 0 to 1024 [ 373.230437][T22417] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.249058][T22417] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.4556: lblock 3 mapped to illegal pblock 3 (length 3) [ 373.264342][T22417] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 373.267661][ T29] audit: type=1326 audit(1770035262.616:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22421 comm="syz.6.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 373.276810][T22417] EXT4-fs (loop4): This should not happen!! Data will be lost [ 373.276810][T22417] [ 373.311332][ T29] audit: type=1326 audit(1770035262.666:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22421 comm="syz.6.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 373.330451][T22422] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4557'. [ 373.337844][ T29] audit: type=1326 audit(1770035262.666:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22421 comm="syz.6.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 373.449222][ T52] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm kworker/u8:3: lblock 0 mapped to illegal pblock 0 (length 3) [ 373.463713][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 373.476094][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 373.476094][ T52] [ 373.486545][ T2166] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:6: lblock 4 mapped to illegal pblock 4 (length 2) [ 373.501893][ T2166] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 373.514293][ T2166] EXT4-fs (loop4): This should not happen!! Data will be lost [ 373.514293][ T2166] [ 373.525799][T22433] netlink: 'syz.6.4561': attribute type 10 has an invalid length. [ 373.533729][T22433] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4561'. [ 373.718037][T22441] loop4: detected capacity change from 0 to 512 [ 373.738266][T22441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 373.752704][T22441] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.4565: invalid indirect mapped block 83886080 (level 1) [ 373.768501][T22441] EXT4-fs (loop4): Remounting filesystem read-only [ 373.775586][T22441] EXT4-fs (loop4): 1 orphan inode deleted [ 373.781439][T22441] EXT4-fs (loop4): 1 truncate cleaned up [ 373.795796][T22445] loop7: detected capacity change from 0 to 512 [ 373.810481][T22445] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.994784][T22470] netlink: 'syz.7.4575': attribute type 11 has an invalid length. [ 374.009202][T22463] netlink: 'syz.4.4571': attribute type 12 has an invalid length. [ 374.279290][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4583'. [ 374.301933][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4583'. [ 374.460772][T22504] bond3: option resend_igmp: invalid value (18345) [ 374.467357][T22504] bond3: option resend_igmp: allowed values 0 - 255 [ 374.475122][T22504] bond3 (unregistering): Released all slaves [ 374.511903][T22505] loop4: detected capacity change from 0 to 1024 [ 374.547954][T22505] /dev/loop4: Can't open blockdev [ 374.603772][T22510] loop4: detected capacity change from 0 to 1024 [ 374.696386][T22514] loop4: detected capacity change from 0 to 128 [ 374.775581][T22517] bio_check_eod: 89 callbacks suppressed [ 374.775647][T22517] syz.4.4591: attempt to access beyond end of device [ 374.775647][T22517] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 374.842101][T22517] syz.4.4591: attempt to access beyond end of device [ 374.842101][T22517] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 374.879069][T22517] syz.4.4591: attempt to access beyond end of device [ 374.879069][T22517] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 374.908972][T22517] syz.4.4591: attempt to access beyond end of device [ 374.908972][T22517] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 374.936999][T22517] syz.4.4591: attempt to access beyond end of device [ 374.936999][T22517] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 374.964652][T22517] syz.4.4591: attempt to access beyond end of device [ 374.964652][T22517] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 374.997647][T22517] syz.4.4591: attempt to access beyond end of device [ 374.997647][T22517] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 375.019552][T22517] syz.4.4591: attempt to access beyond end of device [ 375.019552][T22517] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 375.035968][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4590'. [ 375.047678][T22517] syz.4.4591: attempt to access beyond end of device [ 375.047678][T22517] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 375.078024][T22517] syz.4.4591: attempt to access beyond end of device [ 375.078024][T22517] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 375.227208][T22541] netlink: 'syz.4.4600': attribute type 10 has an invalid length. [ 375.264771][T22541] loop4: detected capacity change from 0 to 2048 [ 375.351100][T22552] bond3: Removing last arp target with arp_interval on [ 375.359489][T22552] bond3: entered promiscuous mode [ 375.364624][T22552] bond3: entered allmulticast mode [ 375.373534][T22552] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.388069][T21229] loop4: unable to read partition table [ 375.388095][T21229] loop4: partition table beyond EOD, truncated [ 375.453545][T22541] loop4: unable to read partition table [ 375.459506][T22541] loop4: partition table beyond EOD, truncated [ 375.465764][T22541] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 375.617823][T22586] xt_hashlimit: size too large, truncated to 1048576 [ 375.624798][T22586] xt_hashlimit: max too large, truncated to 1048576 [ 375.683147][T22598] loop7: detected capacity change from 0 to 1024 [ 375.692096][T22598] EXT4-fs (loop7): inodes count not valid: 32 vs 2 [ 375.763958][T22605] FAULT_INJECTION: forcing a failure. [ 375.763958][T22605] name failslab, interval 1, probability 0, space 0, times 0 [ 375.776832][T22605] CPU: 1 UID: 0 PID: 22605 Comm: syz.8.4624 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 375.776875][T22605] Tainted: [W]=WARN [ 375.776885][T22605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.776980][T22605] Call Trace: [ 375.776988][T22605] [ 375.776996][T22605] __dump_stack+0x1d/0x30 [ 375.777092][T22605] dump_stack_lvl+0x95/0xd0 [ 375.777115][T22605] dump_stack+0x15/0x1b [ 375.777142][T22605] should_fail_ex+0x263/0x280 [ 375.777193][T22605] should_failslab+0x8c/0xb0 [ 375.777255][T22605] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 375.777293][T22605] ? sidtab_sid2str_get+0xa0/0x130 [ 375.777364][T22605] kmemdup_noprof+0x2b/0x70 [ 375.777515][T22605] sidtab_sid2str_get+0xa0/0x130 [ 375.777605][T22605] security_sid_to_context_core+0x1eb/0x2e0 [ 375.777682][T22605] security_sid_to_context+0x27/0x40 [ 375.777717][T22605] selinux_lsmprop_to_secctx+0x67/0xf0 [ 375.777749][T22605] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 375.777856][T22605] audit_log_subj_ctx+0xa4/0x3e0 [ 375.777897][T22605] ? skb_put+0xa9/0xf0 [ 375.777936][T22605] audit_log_task_context+0x48/0x70 [ 375.778014][T22605] audit_log_task+0xf3/0x250 [ 375.778074][T22605] audit_seccomp+0x60/0x100 [ 375.778102][T22605] ? __seccomp_filter+0x8db/0x1350 [ 375.778270][T22605] __seccomp_filter+0x8ec/0x1350 [ 375.778307][T22605] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 375.778349][T22605] ? bpf_prog_test_run+0x268/0x340 [ 375.778384][T22605] ? __sys_bpf+0x4c0/0x7b0 [ 375.778448][T22605] __secure_computing+0x81/0x150 [ 375.778491][T22605] syscall_trace_enter+0xce/0x1e0 [ 375.778663][T22605] do_syscall_64+0x9a/0x2a0 [ 375.778738][T22605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.778762][T22605] RIP: 0033:0x7f6ff241b78e [ 375.778784][T22605] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 375.778805][T22605] RSP: 002b:00007f6ff0eb6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 375.778828][T22605] RAX: ffffffffffffffda RBX: 00007f6ff0eb76c0 RCX: 00007f6ff241b78e [ 375.778847][T22605] RDX: 000000000000000f RSI: 00007f6ff0eb70a0 RDI: 0000000000000006 [ 375.778870][T22605] RBP: 00007f6ff0eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 375.778883][T22605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.778961][T22605] R13: 00007f6ff26d6038 R14: 00007f6ff26d5fa0 R15: 00007ffc978fa3b8 [ 375.778988][T22605] [ 376.033752][T22609] loop7: detected capacity change from 0 to 512 [ 376.042729][T22609] EXT4-fs: test_dummy_encryption option not supported [ 376.113497][T22614] veth1_to_bond: entered allmulticast mode [ 376.121214][T22613] veth1_to_bond: left allmulticast mode [ 376.163287][T22618] __nla_validate_parse: 5 callbacks suppressed [ 376.163308][T22618] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4628'. [ 376.179515][T22616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=22616 comm=syz.7.4628 [ 376.199166][T22616] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=22616 comm=syz.7.4628 [ 376.207740][T22617] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4628'. [ 376.215256][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4628'. [ 376.237525][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4628'. [ 376.255731][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4629'. [ 376.269727][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 376.269745][ T29] audit: type=1326 audit(1770035265.106:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22604 comm="syz.8.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6ff241b78e code=0x7ffc0000 [ 376.284031][T22621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4629'. [ 376.298177][ T29] audit: type=1326 audit(1770035265.646:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22604 comm="syz.8.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ff241b78e code=0x7ffc0000 [ 376.329625][ T29] audit: type=1326 audit(1770035265.646:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22604 comm="syz.8.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6ff241b78e code=0x7ffc0000 [ 376.336435][T22621] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4629'. [ 376.353310][ T29] audit: type=1326 audit(1770035265.646:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22604 comm="syz.8.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 376.353350][ T29] audit: type=1326 audit(1770035265.646:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22604 comm="syz.8.4624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 376.439126][ T29] audit: type=1326 audit(1770035265.786:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.7.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 376.463395][ T29] audit: type=1326 audit(1770035265.786:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.7.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 376.464247][T22627] EXT4-fs mount: 18 callbacks suppressed [ 376.464295][T22627] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 ro without journal. Quota mode: none. [ 376.486914][ T29] audit: type=1326 audit(1770035265.786:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.7.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 376.487031][ T29] audit: type=1326 audit(1770035265.786:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.7.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 376.487074][ T29] audit: type=1326 audit(1770035265.786:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22628 comm="syz.7.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 376.532391][T22630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.583966][T22625] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4631'. [ 376.588644][T22631] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.619991][T22630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.679651][T22633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4635'. [ 376.923406][T22647] syzkaller0: entered promiscuous mode [ 376.929164][T22647] syzkaller0: entered allmulticast mode [ 376.938853][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 376.981358][T22651] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4642'. [ 377.059521][T22659] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.068756][T22659] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 377.093155][T22659] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 377.103795][T22659] System zones: 0-2, 18-18, 34-35 [ 377.109874][T22659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 377.142592][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.168452][T22673] 8021q: VLANs not supported on ipvlan0 [ 377.339443][T21229] loop8: p4 < > [ 377.369382][T22679] loop8: p4 < > [ 377.435332][T22677] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.447477][T22677] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 377.727705][T22699] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 377.736789][T22677] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.755038][T22677] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 377.992264][T22677] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.004024][T22677] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 378.039105][T22701] netlink: 'syz.4.4658': attribute type 3 has an invalid length. [ 378.050428][T22701] set_capacity_and_notify: 4 callbacks suppressed [ 378.050449][T22701] loop4: detected capacity change from 0 to 128 [ 378.084544][T22703] syz_tun: entered allmulticast mode [ 378.119141][T22677] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.129618][T22677] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 378.194532][T14759] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.203012][T14759] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.215034][T18461] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.223407][T18461] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.240355][T18461] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.249293][T18461] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.261704][T18461] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 378.270193][T18461] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 378.321286][T22713] loop7: detected capacity change from 0 to 512 [ 378.330671][T22713] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4664: bg 0: block 5: invalid block bitmap [ 378.349796][T22713] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 378.363356][ T9] IPVS: starting estimator thread 0... [ 378.375905][T22713] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4664: invalid indirect mapped block 3 (level 2) [ 378.399859][T22713] EXT4-fs (loop7): 1 orphan inode deleted [ 378.405755][T22713] EXT4-fs (loop7): 1 truncate cleaned up [ 378.413715][T22713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.457189][T20105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.466333][T22718] IPVS: using max 1776 ests per chain, 88800 per kthread [ 378.616533][T22745] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 378.624491][T22745] SELinux: failed to load policy [ 378.918163][T22755] loop4: detected capacity change from 0 to 1024 [ 378.925101][T22755] EXT4-fs: Ignoring removed orlov option [ 378.930890][T22755] EXT4-fs: inline encryption not supported [ 378.938512][T22755] EXT4-fs (loop4): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 378.954134][T22755] loop4: detected capacity change from 0 to 1024 [ 378.969668][T22755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.030914][T14657] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.056414][ T8341] IPVS: starting estimator thread 0... [ 379.148674][T22771] IPVS: using max 1728 ests per chain, 86400 per kthread [ 379.206112][T22788] chnl_net:caif_netlink_parms(): no params data found [ 379.276306][T22792] 9p: Bad value for 'rfdno' [ 379.303659][T22794] FAT-fs (loop9): unable to read boot sector [ 379.768632][T22818] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000 [ 380.146446][T22826] bridge_slave_0: left promiscuous mode [ 380.152346][T22826] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.162810][T22826] bridge_slave_1: left allmulticast mode [ 380.168631][T22826] bridge_slave_1: left promiscuous mode [ 380.174331][T22826] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.189471][T22826] team0: Port device team_slave_0 removed [ 380.208636][T22826] team0: Port device team_slave_1 removed [ 380.222805][T22826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.230370][T22826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.273876][T22831] program syz.4.4700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.287390][T22826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.328712][ T23] !yz!: Port: 1 Link DOWN [ 380.341464][T21229] udevd[21229]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 380.379387][T22833] 9p: Bad value for 'wfdno' [ 380.497191][T22856] loop8: detected capacity change from 0 to 256 [ 380.600239][T22870] loop8: detected capacity change from 0 to 1024 [ 380.631380][T22870] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 380.646790][T22877] loop4: detected capacity change from 0 to 128 [ 380.652801][T22870] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 380.686997][T22870] EXT4-fs (loop8): invalid journal inode [ 380.693189][T22870] EXT4-fs (loop8): can't get journal size [ 380.700424][T22870] EXT4-fs error (device loop8): ext4_protect_reserved_inode:182: inode #2: comm syz.8.4716: blocks 48-48 from inode overlap system zone [ 380.716064][T22870] EXT4-fs (loop8): failed to initialize system zone (-117) [ 380.723552][T22870] EXT4-fs (loop8): mount failed [ 380.770556][T22894] loop8: detected capacity change from 0 to 512 [ 380.791009][T22894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.104382][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.170409][T22940] __nla_validate_parse: 18 callbacks suppressed [ 381.170602][T22940] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4732'. [ 381.325459][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 381.325522][ T29] audit: type=1326 audit(1770035270.666:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.331049][T22951] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4737'. [ 381.332018][ T29] audit: type=1326 audit(1770035270.666:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.358220][T22951] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4737'. [ 381.392676][ T29] audit: type=1326 audit(1770035270.716:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.420224][ T29] audit: type=1326 audit(1770035270.716:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.443865][ T29] audit: type=1326 audit(1770035270.716:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.467447][ T29] audit: type=1326 audit(1770035270.716:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.491063][ T29] audit: type=1326 audit(1770035270.716:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.514950][ T29] audit: type=1326 audit(1770035270.716:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.538672][ T29] audit: type=1326 audit(1770035270.716:8631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.562621][ T29] audit: type=1326 audit(1770035270.716:8632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.5.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aba2eaeb9 code=0x7ffc0000 [ 381.647946][T22965] loop8: detected capacity change from 0 to 512 [ 381.674690][T22965] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.695089][T22965] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 381.712173][T22975] loop4: detected capacity change from 0 to 512 [ 381.722848][T22965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 381.731472][T22965] System zones: 1-12 [ 381.735506][T22965] EXT4-fs (loop8): orphan cleanup on readonly fs [ 381.753268][T22965] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4741: bg 0: block 361: padding at end of block bitmap is not set [ 381.769848][T22965] EXT4-fs (loop8): Remounting filesystem read-only [ 381.776600][T22965] EXT4-fs (loop8): 1 truncate cleaned up [ 381.783142][T22965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 381.952149][T22994] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4741'. [ 381.961637][T22994] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.4741: error -117 reading directory block [ 382.028503][T14657] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 382.036276][T14657] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 382.471334][T23045] netlink: 'syz.5.4755': attribute type 10 has an invalid length. [ 382.479322][T23045] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4755'. [ 382.544913][T23035] wg1 speed is unknown, defaulting to 1000 [ 382.607923][T23035] chnl_net:caif_netlink_parms(): no params data found [ 382.655882][T23035] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.663050][T23035] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.670717][T23035] bridge_slave_0: entered allmulticast mode [ 382.677328][T23035] bridge_slave_0: entered promiscuous mode [ 382.684798][T23035] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.691953][T23035] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.699602][T23035] bridge_slave_1: entered allmulticast mode [ 382.706244][T23035] bridge_slave_1: entered promiscuous mode [ 382.726596][T23035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.737798][T23035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.760251][T23035] team0: Port device team_slave_0 added [ 382.767261][T23035] team0: Port device team_slave_1 added [ 382.784244][T23035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.791315][T23035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.817359][T23035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.828807][T23035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.835779][T23035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.862017][T23035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.891275][T23035] hsr_slave_0: entered promiscuous mode [ 382.898346][T23035] hsr_slave_1: entered promiscuous mode [ 382.904252][T23035] debugfs: 'hsr0' already exists in 'hsr' [ 382.910253][T23035] Cannot create hsr debugfs directory [ 383.291038][T23066] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=97 sclass=netlink_tcpdiag_socket pid=23066 comm=syz.6.4756 [ 383.357267][T23101] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4759'. [ 383.377922][T23101] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4759'. [ 383.409238][T23105] netlink: 'syz.5.4758': attribute type 6 has an invalid length. [ 383.419464][T23105] netlink: 'syz.5.4758': attribute type 10 has an invalid length. [ 383.458605][T23109] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.480620][T23109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.643810][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.654581][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.722883][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.733434][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.745274][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4763'. [ 383.754250][T23133] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4763'. [ 383.789346][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.799863][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.851233][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.861890][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.950976][ T12] bridge_slave_1: left allmulticast mode [ 383.956770][ T12] bridge_slave_1: left promiscuous mode [ 383.962708][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.971078][ T12] bridge_slave_0: left promiscuous mode [ 383.976835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.419852][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.430154][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.440388][ T12] bond0 (unregistering): Released all slaves [ 384.448826][ T12] bond1 (unregistering): Released all slaves [ 384.457930][ T12] bond2 (unregistering): Released all slaves [ 384.495584][ T12] tipc: Disabling bearer [ 384.500916][ T12] tipc: Left network mode [ 384.537809][T23171] netlink: 666 bytes leftover after parsing attributes in process `syz.5.4764'. [ 384.553441][ T12] hsr_slave_0: left promiscuous mode [ 384.559597][ T12] hsr_slave_1: left promiscuous mode [ 384.570430][ T12] veth1_macvtap: left promiscuous mode [ 384.575968][ T12] veth0_macvtap: left promiscuous mode [ 384.581959][ T12] veth1_vlan: left promiscuous mode [ 384.587671][ T12] veth0_vlan: left promiscuous mode [ 384.638447][T22965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.699721][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 384.746731][T23193] netlink: 'syz.8.4766': attribute type 10 has an invalid length. [ 384.764108][ T12] team0 (unregistering): Port device team_slave_1 removed [ 384.782426][ T12] team0 (unregistering): Port device team_slave_0 removed [ 384.818363][T23206] set_capacity_and_notify: 1 callbacks suppressed [ 384.818385][T23206] loop8: detected capacity change from 0 to 2048 [ 384.846818][T23035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 384.866785][T23035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 384.882155][T23035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 384.895390][T23035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 384.953630][T23035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.982733][T21229] loop8: unable to read partition table [ 384.988984][T21229] loop8: partition table beyond EOD, truncated [ 384.996960][T23035] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.032022][ T12] IPVS: stop unused estimator thread 0... [ 385.042211][T14759] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.049370][T14759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.086003][T14759] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.093292][T14759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.132617][T23206] loop8: unable to read partition table [ 385.155443][T23206] loop8: partition table beyond EOD, truncated [ 385.162008][T23206] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 385.214136][T23245] loop7: detected capacity change from 0 to 512 [ 385.242713][T23245] EXT4-fs: Ignoring removed mblk_io_submit option [ 385.248239][ T3001] loop8: unable to read partition table [ 385.263799][ T3001] loop8: partition table beyond EOD, truncated [ 385.265209][T23245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=885ec129, mo2=0006] [ 385.329037][T23245] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.4775: Invalid inode bitmap blk 4 in block_group 0 [ 385.346362][T23245] EXT4-fs (loop7): Remounting filesystem read-only [ 385.358098][T23035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.372960][T23245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.386331][T23245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.434925][T23276] loop8: detected capacity change from 0 to 512 [ 385.477943][T23276] EXT4-fs: Ignoring removed oldalloc option [ 385.512060][T23276] EXT4-fs (loop8): 1 truncate cleaned up [ 385.529952][T23276] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.546874][T23276] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4782: invalid indirect mapped block 234881024 (level 0) [ 385.570334][T23285] loop7: detected capacity change from 0 to 1024 [ 385.576921][T23276] EXT4-fs (loop8): Remounting filesystem read-only [ 385.596799][T23035] veth0_vlan: entered promiscuous mode [ 385.631545][T23035] veth1_vlan: entered promiscuous mode [ 385.679432][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.711949][T23035] veth0_macvtap: entered promiscuous mode [ 385.735181][T23035] veth1_macvtap: entered promiscuous mode [ 385.780857][T23035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.812684][T23035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.851973][T23322] netlink: 'syz.5.4790': attribute type 1 has an invalid length. [ 385.865072][ T391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.888641][ T391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.922135][T23322] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.933187][T23322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=23322 comm=syz.5.4790 [ 385.935238][ T391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.974008][ T391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.189938][T23363] __nla_validate_parse: 5 callbacks suppressed [ 386.189960][T23363] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4797'. [ 386.266657][T23370] loop1: detected capacity change from 0 to 512 [ 386.290166][T23370] EXT4-fs: test_dummy_encryption option not supported [ 386.330097][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 386.330117][ T29] audit: type=1326 audit(1770035275.676:8720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 386.330156][ T29] audit: type=1326 audit(1770035275.676:8721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 386.330208][ T29] audit: type=1326 audit(1770035275.676:8722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 386.330515][ T29] audit: type=1326 audit(1770035275.676:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 386.330574][ T29] audit: type=1326 audit(1770035275.676:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 386.331667][ T29] audit: type=1326 audit(1770035275.676:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6ff241b78e code=0x7ffc0000 [ 386.331705][ T29] audit: type=1326 audit(1770035275.676:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6ff241b78e code=0x7ffc0000 [ 386.331782][ T29] audit: type=1326 audit(1770035275.676:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6ff241b78e code=0x7ffc0000 [ 386.331817][ T29] audit: type=1326 audit(1770035275.676:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 386.332443][ T29] audit: type=1326 audit(1770035275.676:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23371 comm="syz.8.4799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6ff245aeb9 code=0x7ffc0000 [ 386.647093][T23384] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 386.652749][T23326] loop7: detected capacity change from 0 to 128 [ 386.661284][T23326] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.661524][T23326] ext4 filesystem being mounted at /164/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.741062][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4802'. [ 386.743013][T20105] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.809137][T23392] serio: Serial port ttyS3 [ 387.055173][T23409] FAULT_INJECTION: forcing a failure. [ 387.055173][T23409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.055214][T23409] CPU: 1 UID: 0 PID: 23409 Comm: syz.1.4805 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.055349][T23409] Tainted: [W]=WARN [ 387.055459][T23409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.055562][T23409] Call Trace: [ 387.055584][T23409] [ 387.055614][T23409] __dump_stack+0x1d/0x30 [ 387.055698][T23409] dump_stack_lvl+0x95/0xd0 [ 387.055794][T23409] dump_stack+0x15/0x1b [ 387.055859][T23409] should_fail_ex+0x263/0x280 [ 387.055967][T23409] should_fail+0xb/0x20 [ 387.056064][T23409] should_fail_usercopy+0x1a/0x20 [ 387.056217][T23409] _copy_from_iter+0xcf/0xea0 [ 387.056291][T23409] ? __pfx_woken_wake_function+0x10/0x10 [ 387.056384][T23409] file_tty_write+0x322/0x690 [ 387.056480][T23409] ? __pfx_tty_write+0x10/0x10 [ 387.056629][T23409] tty_write+0x25/0x30 [ 387.056713][T23409] vfs_write+0x5a6/0x9f0 [ 387.056828][T23409] ksys_write+0xdc/0x1a0 [ 387.057033][T23409] __x64_sys_write+0x40/0x50 [ 387.057143][T23409] x64_sys_call+0x2847/0x3000 [ 387.057290][T23409] do_syscall_64+0xc0/0x2a0 [ 387.057386][T23409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.057473][T23409] RIP: 0033:0x7f0f68b6aeb9 [ 387.057539][T23409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.057605][T23409] RSP: 002b:00007f0f675c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 387.057718][T23409] RAX: ffffffffffffffda RBX: 00007f0f68de5fa0 RCX: 00007f0f68b6aeb9 [ 387.057764][T23409] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 387.057818][T23409] RBP: 00007f0f675c7090 R08: 0000000000000000 R09: 0000000000000000 [ 387.057869][T23409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.057922][T23409] R13: 00007f0f68de6038 R14: 00007f0f68de5fa0 R15: 00007fff6b981758 [ 387.057990][T23409] [ 387.259100][T23420] loop7: detected capacity change from 0 to 512 [ 387.262836][T23420] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 387.272668][T23420] EXT4-fs (loop7): 1 truncate cleaned up [ 387.273256][T23420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.444462][T20105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.489739][T23441] netlink: 'syz.7.4811': attribute type 4 has an invalid length. [ 387.557143][T23439] wg1 speed is unknown, defaulting to 1000 [ 387.677968][T23451] netlink: 'syz.5.4813': attribute type 4 has an invalid length. [ 387.957596][T23465] wg1 speed is unknown, defaulting to 1000 [ 387.983575][T23462] wg1 speed is unknown, defaulting to 1000 [ 388.035295][T23475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23475 comm=syz.5.4816 [ 388.109919][T23484] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4817'. [ 388.229673][T23493] IPv6: sit1: Disabled Multicast RS [ 388.388309][T23514] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4820'. [ 388.422980][T23518] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4825'. [ 388.463013][T23518] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4825'. [ 388.477892][T23521] syzkaller1: entered promiscuous mode [ 388.483464][T23521] syzkaller1: entered allmulticast mode [ 388.513121][T23516] loop1: detected capacity change from 0 to 4096 [ 388.537963][T23516] EXT4-fs: Ignoring removed bh option [ 388.543493][T23516] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.587709][T23516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.641229][T23035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.760522][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4832'. [ 388.881711][T23543] SELinux: failed to load policy [ 388.900143][T23554] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4837'. [ 389.056606][T23562] loop8: detected capacity change from 0 to 512 [ 389.213865][T23562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.290363][T23582] netlink: 'syz.1.4846': attribute type 1 has an invalid length. [ 389.375165][T23586] loop1: detected capacity change from 0 to 8192 [ 389.392099][T23586] vfat: Unknown parameter '' [ 389.480794][T23589] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4849'. [ 389.787638][T23605] netlink: 'syz.1.4853': attribute type 10 has an invalid length. [ 389.795554][T23605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4853'. [ 389.849659][T23605] loop1: detected capacity change from 0 to 2048 [ 389.926592][T21229] loop1: unable to read partition table [ 389.932749][T21229] loop1: partition table beyond EOD, truncated [ 389.944335][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.953717][T23616] netlink: 'syz.5.4857': attribute type 4 has an invalid length. [ 389.986807][T23619] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 390.054992][T23605] loop1: unable to read partition table [ 390.061673][T23605] loop1: partition table beyond EOD, truncated [ 390.068016][T23605] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 390.153251][T23631] loop8: detected capacity change from 0 to 256 [ 390.175392][ T3001] loop1: unable to read partition table [ 390.181275][ T3001] loop1: partition table beyond EOD, truncated [ 390.213852][T23633] netlink: 'syz.1.4862': attribute type 10 has an invalid length. [ 390.258995][T23633] loop1: detected capacity change from 0 to 2048 [ 390.355713][T23633] loop1: unable to read partition table [ 390.363581][T23633] loop1: partition table beyond EOD, truncated [ 390.369865][T23633] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 390.451205][ T3001] loop1: unable to read partition table [ 390.457023][ T3001] loop1: partition table beyond EOD, truncated [ 390.715805][T23682] netlink: 'syz.5.4878': attribute type 10 has an invalid length. [ 390.930559][T23674] loop1: detected capacity change from 0 to 8192 [ 390.969105][T23674] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.097693][T23693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23693 comm=syz.6.4882 [ 391.210245][T23709] netlink: 'syz.5.4887': attribute type 10 has an invalid length. [ 391.227616][T23711] netlink: 'syz.5.4887': attribute type 10 has an invalid length. [ 391.289389][T23717] sctp: [Deprecated]: syz.1.4890 (pid 23717) Use of int in max_burst socket option deprecated. [ 391.289389][T23717] Use struct sctp_assoc_value instead [ 391.318117][T23717] sctp: [Deprecated]: syz.1.4890 (pid 23717) Use of int in max_burst socket option deprecated. [ 391.318117][T23717] Use struct sctp_assoc_value instead [ 391.331464][T23688] syz.8.4880 (23688) used greatest stack depth: 7296 bytes left [ 391.397724][T23724] netlink: 'syz.1.4893': attribute type 10 has an invalid length. [ 391.405625][T23724] __nla_validate_parse: 6 callbacks suppressed [ 391.405643][T23724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4893'. [ 391.449072][T23728] IPv4: Oversized IP packet from 172.20.20.10 [ 391.455511][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 391.461676][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 391.473805][T23724] loop1: detected capacity change from 0 to 2048 [ 391.481075][T23728] IPv4: Oversized IP packet from 172.20.20.10 [ 391.487306][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 391.493502][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 391.500372][T23728] IPv4: Oversized IP packet from 172.20.20.10 [ 391.506586][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 391.512746][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 391.519922][T23728] IPv4: Oversized IP packet from 172.20.20.10 [ 391.550337][T23728] Process accounting resumed [ 391.570061][T23733] bridge0: entered promiscuous mode [ 391.598208][T23733] loop7: detected capacity change from 0 to 512 [ 391.614108][T21229] loop1: unable to read partition table [ 391.621567][T23733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.637468][T21229] loop1: partition table beyond EOD, truncated [ 391.677508][T23733] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.723359][T20105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.787954][T23724] loop1: unable to read partition table [ 391.793860][T23724] loop1: partition table beyond EOD, truncated [ 391.800253][T23724] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 391.819353][T23742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.846939][T23742] macvlan2: entered promiscuous mode [ 391.853818][T23742] bond1: entered promiscuous mode [ 391.859225][T23742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 391.868067][T23742] bond1: left promiscuous mode [ 391.882829][ T3001] loop1: unable to read partition table [ 392.144140][T23754] syzkaller0: entered promiscuous mode [ 392.149780][T23754] syzkaller0: entered allmulticast mode [ 392.379189][ T3001] loop1: partition table beyond EOD, truncated [ 392.544434][T23777] validate_nla: 2 callbacks suppressed [ 392.544456][T23777] netlink: 'syz.7.4912': attribute type 10 has an invalid length. [ 392.557952][T23777] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4912'. [ 392.584840][T23779] loop1: detected capacity change from 0 to 512 [ 392.598978][T23777] loop7: detected capacity change from 0 to 2048 [ 392.616923][T23779] EXT4-fs: Ignoring removed orlov option [ 392.643238][T23779] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 392.695614][T23779] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.4913: attempt to clear invalid blocks 2 len 1 [ 392.714618][T20693] loop7: unable to read partition table [ 392.720852][T23779] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 392.735705][T20693] loop7: partition table beyond EOD, truncated [ 392.765892][T23779] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4913: invalid indirect mapped block 1819239214 (level 0) [ 392.789555][ T391] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.800012][ T391] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.814017][T23779] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4913: invalid indirect mapped block 1819239214 (level 1) [ 392.829958][T23779] EXT4-fs (loop1): 1 truncate cleaned up [ 392.847590][T23777] loop7: unable to read partition table [ 392.855750][T23779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.868560][T23777] loop7: partition table beyond EOD, truncated [ 392.874780][T23777] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 392.894052][ T391] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.904531][ T391] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.933088][T23035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.954181][ T391] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.964719][ T391] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.010337][T23798] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 393.023350][T23798] bond5 (unregistering): Released all slaves [ 393.050650][ T391] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.061085][ T391] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.089497][ T3001] loop7: unable to read partition table [ 393.095323][ T3001] loop7: partition table beyond EOD, truncated [ 393.120991][T23803] loop1: detected capacity change from 0 to 256 [ 393.136644][T23805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4920'. [ 393.145817][T23805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4920'. [ 393.162077][T23805] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4920'. [ 393.226960][T23805] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4920'. [ 393.249683][T23814] loop7: detected capacity change from 0 to 256 [ 393.302094][T23814] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 393.343632][T23805] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4920'. [ 393.389405][ T391] bond0 (unregistering): Released all slaves [ 393.530321][T23803] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 393.554897][ T391] hsr_slave_0: left promiscuous mode [ 393.586294][ T391] hsr_slave_1: left promiscuous mode [ 393.612318][ T391] veth1_macvtap: left promiscuous mode [ 393.620792][ T391] veth0_macvtap: left promiscuous mode [ 393.636541][ T391] veth1_vlan: left promiscuous mode [ 393.652153][ T391] veth0_vlan: left promiscuous mode [ 394.037763][ T29] kauditd_printk_skb: 1320 callbacks suppressed [ 394.037782][ T29] audit: type=1326 audit(1770035283.386:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.074478][T23909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4945'. [ 394.091383][ T29] audit: type=1326 audit(1770035283.386:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.115102][ T29] audit: type=1326 audit(1770035283.426:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.138879][ T29] audit: type=1326 audit(1770035283.426:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.162592][ T29] audit: type=1326 audit(1770035283.426:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.186220][ T29] audit: type=1326 audit(1770035283.426:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.209954][ T29] audit: type=1326 audit(1770035283.426:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.233606][ T29] audit: type=1326 audit(1770035283.426:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.347641][ T29] audit: type=1326 audit(1770035283.466:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23908 comm="syz.7.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.454046][ T29] audit: type=1326 audit(1770035283.806:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23927 comm="syz.7.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 394.558402][T23943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4952'. [ 394.612613][T23950] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.717692][T23950] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.4955: Allocating blocks 497-513 which overlap fs metadata [ 394.803947][T23957] EXT4-fs (loop7): pa ffff888107e05e00: logic 48, phys. 193, len 20 [ 394.812207][T23957] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 394.860171][T17585] syz_tun (unregistering): left allmulticast mode [ 394.924583][T20105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.026256][T23978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17526 sclass=netlink_route_socket pid=23978 comm=syz.7.4959 [ 395.117715][T23988] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=23988 comm=syz.7.4960 [ 395.447547][T23966] wg1 speed is unknown, defaulting to 1000 [ 395.696364][T23966] chnl_net:caif_netlink_parms(): no params data found [ 395.780211][T24022] wg1 speed is unknown, defaulting to 1000 [ 395.804449][T23966] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.811797][T23966] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.820174][T23966] bridge_slave_0: entered allmulticast mode [ 395.826833][T23966] bridge_slave_0: entered promiscuous mode [ 395.866330][T23966] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.873484][T23966] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.908073][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4970'. [ 395.917396][T23966] bridge_slave_1: entered allmulticast mode [ 395.924325][T23966] bridge_slave_1: entered promiscuous mode [ 395.924493][T24036] set_capacity_and_notify: 1 callbacks suppressed [ 395.924546][T24036] loop8: detected capacity change from 0 to 512 [ 395.949190][T23966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.960635][T23966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.971416][T24036] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 395.995821][T23966] team0: Port device team_slave_0 added [ 396.003197][T23966] team0: Port device team_slave_1 added [ 396.008961][T24036] EXT4-fs (loop8): 1 truncate cleaned up [ 396.015581][T24036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.042570][T23966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.049777][T23966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.076015][T23966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.106384][T23966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.113471][T23966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.139520][T23966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.154665][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.218308][T23966] hsr_slave_0: entered promiscuous mode [ 396.238022][T23966] hsr_slave_1: entered promiscuous mode [ 396.243582][T24053] loop7: detected capacity change from 0 to 1024 [ 396.257409][T24053] ext4: Unknown parameter 'subj_user' [ 396.326106][T24060] loop7: detected capacity change from 0 to 512 [ 396.334488][T24060] EXT4-fs: Ignoring removed orlov option [ 396.341190][T24060] ext4: Unknown parameter '.' [ 396.403398][T14759] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.449208][T14759] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.480969][T14759] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.493414][T24070] loop1: detected capacity change from 0 to 128 [ 396.510323][T23966] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.520357][T23966] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.530223][T23966] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.543887][T24074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16498 sclass=netlink_route_socket pid=24074 comm=syz.8.4983 [ 396.578666][T14759] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.628436][T23966] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.638354][T23966] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.648211][T23966] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.680313][T24081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=24081 comm=syz.8.4983 [ 396.738672][T23966] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.748527][T23966] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.758432][T23966] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.829268][T23966] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.839132][T23966] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.848954][T23966] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.971436][T24103] batadv_slave_0: entered promiscuous mode [ 396.979239][T23966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 396.989560][T24084] netlink: 'syz.7.4987': attribute type 29 has an invalid length. [ 396.998958][T24084] netlink: 'syz.7.4987': attribute type 29 has an invalid length. [ 397.007127][T23966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 397.059493][T24112] loop8: detected capacity change from 0 to 2048 [ 397.068832][T23966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 397.102750][T23966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.153753][T24124] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 397.160351][T24124] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 397.168179][T24124] vhci_hcd vhci_hcd.0: Device attached [ 397.175962][T24124] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 397.182537][T24124] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 397.190312][T24124] vhci_hcd vhci_hcd.0: Device attached [ 397.205237][T23966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.213488][T24107] batadv_slave_0: left promiscuous mode [ 397.226986][T23966] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.238526][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.245664][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.258656][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.265807][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.291282][ T7775] IPVS: starting estimator thread 0... [ 397.344251][T24130] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 397.358245][T24130] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(14) [ 397.364922][T24130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.372692][T24130] vhci_hcd vhci_hcd.0: Device attached [ 397.387522][T24134] IPVS: using max 2256 ests per chain, 112800 per kthread [ 397.406408][T24130] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(16) [ 397.407657][ T7779] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 397.413137][T24130] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 397.428238][T24130] vhci_hcd vhci_hcd.0: Device attached [ 397.451889][T24130] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(18) [ 397.458580][T24130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.466280][T24130] vhci_hcd vhci_hcd.0: Device attached [ 397.491909][T23966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.509101][T24130] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(20) [ 397.515835][T24130] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 397.523583][T24130] vhci_hcd vhci_hcd.0: Device attached [ 397.603831][T24151] loop1: detected capacity change from 0 to 8192 [ 397.624930][T24145] vhci_hcd: connection closed [ 397.625328][ T37] vhci_hcd vhci_hcd.8: stop threads [ 397.630094][T24148] vhci_hcd: connection closed [ 397.635460][ T37] vhci_hcd vhci_hcd.8: release socket [ 397.645623][ T37] vhci_hcd vhci_hcd.8: disconnect device [ 397.652823][T24142] vhci_hcd: connection closed [ 397.653397][T24159] __nla_validate_parse: 3 callbacks suppressed [ 397.653411][T24159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5003'. [ 397.673527][T24137] vhci_hcd: connection closed [ 397.682261][T24077] wg1 speed is unknown, defaulting to 1000 [ 397.704377][ T37] vhci_hcd vhci_hcd.8: stop threads [ 397.709740][ T37] vhci_hcd vhci_hcd.8: release socket [ 397.715160][ T37] vhci_hcd vhci_hcd.8: disconnect device [ 397.728135][ T37] vhci_hcd vhci_hcd.8: stop threads [ 397.733423][ T37] vhci_hcd vhci_hcd.8: release socket [ 397.738912][ T37] vhci_hcd vhci_hcd.8: disconnect device [ 397.744897][ T37] vhci_hcd vhci_hcd.8: stop threads [ 397.750207][ T37] vhci_hcd vhci_hcd.8: release socket [ 397.755793][ T37] vhci_hcd vhci_hcd.8: disconnect device [ 397.844469][T24171] loop7: detected capacity change from 0 to 512 [ 397.856127][T24171] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 397.874477][T24171] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 397.884167][T24171] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 397.902473][T24171] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 397.917268][T14759] vlan1: left allmulticast mode [ 397.922389][T14759] veth0_vlan: left allmulticast mode [ 397.927834][T14759] vlan1: left promiscuous mode [ 397.932760][T14759] À: port 1(vlan1) entered disabled state [ 397.940740][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5007'. [ 398.016156][T24181] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 398.034801][T14759] bond0 (unregistering): (slave geneve3): Releasing backup interface [ 398.162344][T24126] vhci_hcd: connection reset by peer [ 398.162628][T24128] vhci_hcd: connection closed [ 398.167992][ T391] vhci_hcd vhci_hcd.8: stop threads [ 398.178215][ T391] vhci_hcd vhci_hcd.8: release socket [ 398.183643][ T391] vhci_hcd vhci_hcd.8: disconnect device [ 398.204697][ T391] vhci_hcd vhci_hcd.8: stop threads [ 398.210121][ T391] vhci_hcd vhci_hcd.8: release socket [ 398.215678][ T391] vhci_hcd vhci_hcd.8: disconnect device [ 398.259308][T24188] loop8: detected capacity change from 0 to 512 [ 398.266759][T24188] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 398.280777][T24188] EXT4-fs (loop8): 1 truncate cleaned up [ 398.287064][T24188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.318974][T24188] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5012'. [ 398.680191][T14759] bond1 (unregistering): Released all slaves [ 398.689099][T14759] bond0 (unregistering): Released all slaves [ 398.697867][T14759] bond2 (unregistering): Released all slaves [ 398.706630][T14759] bond3 (unregistering): Released all slaves [ 398.715633][T14759] bond4 (unregistering): Released all slaves [ 398.737367][T24188] C: renamed from team_slave_0 (while UP) [ 398.746394][T24188] netlink: 'syz.8.5012': attribute type 3 has an invalid length. [ 398.754225][T24188] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5012'. [ 398.763347][T24188] net_ratelimit: 87 callbacks suppressed [ 398.763363][T24188] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 398.825022][T24185] wg1 speed is unknown, defaulting to 1000 [ 398.832376][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.843660][T14759] tipc: Left network mode [ 398.877751][T23966] veth0_vlan: entered promiscuous mode [ 398.888019][T23966] veth1_vlan: entered promiscuous mode [ 398.906043][T23966] veth0_macvtap: entered promiscuous mode [ 398.913477][T23966] veth1_macvtap: entered promiscuous mode [ 398.956799][T14759] hsr_slave_0: left promiscuous mode [ 398.985619][T14759] hsr_slave_1: left promiscuous mode [ 398.994328][T24202] netlink: 'syz.1.5016': attribute type 10 has an invalid length. [ 399.002273][T24202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5016'. [ 399.037512][T14759] veth1_macvtap: left promiscuous mode [ 399.043054][T14759] veth0_macvtap: left promiscuous mode [ 399.070083][T14759] veth1_vlan: left promiscuous mode [ 399.076869][T24211] loop1: detected capacity change from 0 to 2048 [ 399.086856][T14759] veth0_vlan: left promiscuous mode [ 399.111654][T24213] loop7: detected capacity change from 0 to 1024 [ 399.149687][T24213] EXT4-fs: Invalid want_extra_isize 1025 [ 399.219604][T24211] loop1: unable to read partition table [ 399.226343][T24211] loop1: partition table beyond EOD, truncated [ 399.232818][T24211] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 399.256372][T14759] pimreg (unregistering): left allmulticast mode [ 399.299525][T24224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.327122][ T3001] loop1: unable to read partition table [ 399.346034][ T3001] loop1: partition table beyond EOD, truncated [ 399.355620][T20105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.375001][T18461] smc: removing ib device !yz! [ 399.400701][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 399.400720][ T29] audit: type=1326 audit(1770035288.746:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.435676][ T29] audit: type=1326 audit(1770035288.776:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.459381][ T29] audit: type=1326 audit(1770035288.776:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.483051][ T29] audit: type=1326 audit(1770035288.776:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.506721][ T29] audit: type=1326 audit(1770035288.776:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.530359][ T29] audit: type=1326 audit(1770035288.776:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.554235][ T29] audit: type=1326 audit(1770035288.776:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.577944][ T29] audit: type=1326 audit(1770035288.776:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.601842][ T29] audit: type=1326 audit(1770035288.776:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.615553][T24231] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5021'. [ 399.630324][ T29] audit: type=1326 audit(1770035288.906:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24227 comm="syz.7.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74de0faeb9 code=0x7ffc0000 [ 399.664946][T23966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.728103][T24231] hsr_slave_1 (unregistering): left promiscuous mode [ 399.771051][T23966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.807905][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.868635][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.880757][T24241] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 399.887597][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.911083][T24241] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.944115][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.013082][T24253] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4957'. [ 400.100979][T24262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.111847][T24262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.176708][T14759] IPVS: stop unused estimator thread 0... [ 400.244939][T24285] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.355185][T24301] bond3: Removing last arp target with arp_interval on [ 400.372378][T24301] bond3: entered promiscuous mode [ 400.377551][T24301] bond3: entered allmulticast mode [ 400.383107][T24301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.463013][T24298] infiniband syz2: set active [ 400.467936][T24298] infiniband syz2: added team0 [ 400.502613][T24298] RDS/IB: syz2: added [ 400.506668][T24298] smc: adding ib device syz2 with port count 1 [ 400.514611][T24298] smc: ib device syz2 port 1 has pnetid SYZ2 (user defined) [ 400.551412][T24311] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5040'. [ 400.624736][T24317] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5041'. [ 400.699852][T24324] SELinux: failed to load policy [ 400.705158][T24324] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.732107][T24324] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5042: bg 0: block 248: padding at end of block bitmap is not set [ 400.769418][T24324] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5042: Failed to acquire dquot type 1 [ 400.806931][T24324] EXT4-fs (loop1): 1 truncate cleaned up [ 400.824436][T24324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.861050][T24324] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.889960][T24344] EXT4-fs: Ignoring removed mblk_io_submit option [ 400.896538][T24344] EXT4-fs: Ignoring removed mblk_io_submit option [ 400.941112][T24344] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.990287][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.040333][T23035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.158980][T24361] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5049'. [ 401.225663][T24366] set_capacity_and_notify: 5 callbacks suppressed [ 401.225684][T24366] loop1: detected capacity change from 0 to 128 [ 401.252452][T24366] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 401.294090][T24366] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.380213][T24366] bond1: Removing last arp target with arp_interval on [ 401.413196][T24366] bond1: entered promiscuous mode [ 401.418441][T24366] bond1: entered allmulticast mode [ 401.446280][T24366] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.574388][T14759] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.687806][T24407] syzkaller1: entered promiscuous mode [ 401.693407][T24407] syzkaller1: entered allmulticast mode [ 401.714111][T24409] SELinux: failed to load policy [ 401.905509][T24425] wg1 speed is unknown, defaulting to 1000 [ 402.062201][T24427] xt_hashlimit: size too large, truncated to 1048576 [ 402.198043][T24428] wg1 speed is unknown, defaulting to 1000 [ 402.247257][T24446] Cannot find del_set index 2 as target [ 402.365062][T24453] usb usb7: usbfs: interface 0 claimed by hub while 'syz.7.5085' resets device [ 402.438184][ T7779] usb 17-1: enqueue for inactive port 0 [ 402.449750][ T7779] usb 17-1: enqueue for inactive port 0 [ 402.514134][T24466] netlink: 'syz.8.5091': attribute type 21 has an invalid length. [ 402.546165][T24467] digital: digital_start_poll: Unknown protocol [ 402.547606][ T7779] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 402.648712][T24474] syzkaller1: entered promiscuous mode [ 402.654338][T24474] syzkaller1: entered allmulticast mode [ 403.003112][T24471] Set syz1 is full, maxelem 65536 reached [ 403.078673][T24486] __nla_validate_parse: 4 callbacks suppressed [ 403.078689][T24486] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5096'. [ 403.096024][T24483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 403.110761][T24484] loop5: detected capacity change from 0 to 8192 [ 403.177611][T24495] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 403.244614][T24493] IPVS: stopping master sync thread 24495 ... [ 403.274927][T24493] loop7: detected capacity change from 0 to 512 [ 403.301673][T24493] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 403.337762][T24493] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 403.367506][T24493] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.5098: corrupted inode contents [ 403.392745][T24493] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #11: comm syz.7.5098: mark_inode_dirty error [ 403.415399][T24493] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5098: invalid indirect mapped block 1 (level 1) [ 403.447619][T24493] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.5098: corrupted inode contents [ 403.470126][T24493] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 403.487471][T24493] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.5098: corrupted inode contents [ 403.527646][T24493] EXT4-fs error (device loop7): ext4_truncate:4635: inode #11: comm syz.7.5098: mark_inode_dirty error [ 403.544565][T24493] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 403.555801][T24493] EXT4-fs (loop7): 1 truncate cleaned up [ 403.562239][T24493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.639440][T20105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.812463][T24524] loop5: detected capacity change from 0 to 128 [ 403.835859][T24524] netlink: 'syz.5.5108': attribute type 7 has an invalid length. [ 403.843735][T24524] netlink: 'syz.5.5108': attribute type 8 has an invalid length. [ 403.892811][T24532] FAULT_INJECTION: forcing a failure. [ 403.892811][T24532] name failslab, interval 1, probability 0, space 0, times 0 [ 403.901326][T24528] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5109'. [ 403.905588][T24532] CPU: 0 UID: 0 PID: 24532 Comm: syz.1.5111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 403.905648][T24532] Tainted: [W]=WARN [ 403.905657][T24532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.905675][T24532] Call Trace: [ 403.905684][T24532] [ 403.905694][T24532] __dump_stack+0x1d/0x30 [ 403.905724][T24532] dump_stack_lvl+0x95/0xd0 [ 403.905817][T24532] dump_stack+0x15/0x1b [ 403.905845][T24532] should_fail_ex+0x263/0x280 [ 403.905989][T24532] should_failslab+0x8c/0xb0 [ 403.906151][T24532] kmem_cache_alloc_noprof+0x68/0x490 [ 403.906278][T24532] ? __inet_hash_connect+0x7a0/0x1370 [ 403.906397][T24532] __inet_hash_connect+0x7a0/0x1370 [ 403.906504][T24532] ? __pfx___inet_check_established+0x10/0x10 [ 403.906637][T24532] inet_hash_connect+0xd1/0xf0 [ 403.906767][T24532] tcp_v4_connect+0x7a6/0xaf0 [ 403.906862][T24532] tcp_v6_connect+0x838/0xc90 [ 403.907062][T24532] mptcp_connect+0x5d8/0x900 [ 403.907184][T24532] __inet_stream_connect+0x169/0x7f0 [ 403.907288][T24532] ? _raw_spin_lock_bh+0x56/0xb0 [ 403.907470][T24532] ? _raw_spin_unlock_bh+0x18/0x20 [ 403.907557][T24532] ? lock_sock_nested+0x132/0x160 [ 403.907710][T24532] ? selinux_netlbl_socket_connect+0x114/0x130 [ 403.907881][T24532] inet_stream_connect+0x44/0x70 [ 403.907999][T24532] ? __pfx_inet_stream_connect+0x10/0x10 [ 403.908116][T24532] __sys_connect+0x1f1/0x2a0 [ 403.908262][T24532] __x64_sys_connect+0x3f/0x50 [ 403.908365][T24532] x64_sys_call+0x2e09/0x3000 [ 403.908451][T24532] do_syscall_64+0xc0/0x2a0 [ 403.908626][T24532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.908694][T24532] RIP: 0033:0x7f0f68b6aeb9 [ 403.908749][T24532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.908822][T24532] RSP: 002b:00007f0f675c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 403.908982][T24532] RAX: ffffffffffffffda RBX: 00007f0f68de5fa0 RCX: 00007f0f68b6aeb9 [ 403.909035][T24532] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 403.909079][T24532] RBP: 00007f0f675c7090 R08: 0000000000000000 R09: 0000000000000000 [ 403.909123][T24532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.909165][T24532] R13: 00007f0f68de6038 R14: 00007f0f68de5fa0 R15: 00007fff6b981758 [ 403.909260][T24532] [ 404.009480][T24531] xt_hashlimit: size too large, truncated to 1048576 [ 404.253866][T24528] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.266124][T24528] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.414149][T24528] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.425178][T24528] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.458644][T24541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5113'. [ 404.467823][T24541] digital: digital_start_poll: Unknown protocol [ 404.621234][T24528] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.632234][T24528] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.760346][T24528] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.770801][T24528] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.820431][T24566] loop7: detected capacity change from 0 to 256 [ 404.854461][T24566] FAT-fs (loop7): IO charset iso8859-5 not found [ 404.860177][T22587] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.869100][T22587] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.883182][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 404.883201][ T29] audit: type=1400 audit(1770035294.226:10286): avc: denied { map } for pid=24565 comm="syz.7.5126" path="/proc/630/map_files" dev="proc" ino=85961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 404.922358][T24573] xt_hashlimit: size too large, truncated to 1048576 [ 404.928730][T24571] Cannot find add_set index 0 as target [ 404.959719][T14759] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.968128][T14759] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.000542][T24571] syzkaller0: entered promiscuous mode [ 405.006102][T24571] syzkaller0: entered allmulticast mode [ 405.049544][T14759] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.057936][T14759] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.089153][T24577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5130'. [ 405.093162][T14759] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.106399][T14759] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.212797][T24589] loop1: detected capacity change from 0 to 1024 [ 405.221647][T24595] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5135'. [ 405.241337][T24589] EXT4-fs: Ignoring removed orlov option [ 405.256106][T24595] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5135'. [ 405.294227][T24600] loop5: detected capacity change from 0 to 512 [ 405.308568][T24589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.323319][T24600] EXT4-fs: Ignoring removed orlov option [ 405.367889][T24589] netlink: 'syz.1.5133': attribute type 21 has an invalid length. [ 405.380607][T24589] netlink: 'syz.1.5133': attribute type 1 has an invalid length. [ 405.388554][T24589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5133'. [ 405.408657][T24600] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5136: corrupted in-inode xattr: bad e_name length [ 405.408624][T24612] loop7: detected capacity change from 0 to 512 [ 405.427865][T24612] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 405.449168][T24600] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5136: couldn't read orphan inode 15 (err -117) [ 405.463464][T24612] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 405.469547][T24600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.494062][T24612] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.5138: corrupted inode contents [ 405.541554][T24612] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #11: comm syz.7.5138: mark_inode_dirty error [ 405.567778][T24612] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5138: invalid indirect mapped block 1 (level 1) [ 405.593164][T24623] netlink: 'syz.8.5139': attribute type 10 has an invalid length. [ 405.601079][T24623] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5139'. [ 405.612799][T23035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.622995][T24612] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.5138: corrupted inode contents [ 405.657578][T24612] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 405.670899][T23966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.685182][T24623] loop8: detected capacity change from 0 to 2048 [ 405.689995][T24612] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #11: comm syz.7.5138: corrupted inode contents [ 405.711432][T24612] EXT4-fs error (device loop7): ext4_truncate:4635: inode #11: comm syz.7.5138: mark_inode_dirty error [ 405.723081][T24612] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 405.733481][T24612] EXT4-fs (loop7): 1 truncate cleaned up [ 405.740492][T24612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.783338][T23810] loop8: unable to read partition table [ 405.798618][T23810] loop8: partition table beyond EOD, truncated [ 405.829426][T24637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5144'. [ 405.840634][T20105] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.897211][T24623] loop8: unable to read partition table [ 405.914483][T24623] loop8: partition table beyond EOD, truncated [ 405.920796][T24623] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 405.975068][T24647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24647 comm=syz.6.5146 [ 406.036238][ T3001] loop8: unable to read partition table [ 406.052242][ T3001] loop8: partition table beyond EOD, truncated [ 406.056436][T24663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24663 comm=syz.6.5155 [ 406.099949][T24657] loop7: detected capacity change from 0 to 8192 [ 406.171483][T24674] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 406.259524][T24693] loop5: detected capacity change from 0 to 512 [ 406.286990][T24693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 406.332997][T24693] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5166: corrupted in-inode xattr: bad e_name length [ 406.359613][T24703] loop7: detected capacity change from 0 to 256 [ 406.367725][T24693] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5166: couldn't read orphan inode 15 (err -117) [ 406.405806][T24708] netlink: 'syz.1.5170': attribute type 10 has an invalid length. [ 406.413750][T24708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5170'. [ 406.428990][T24693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.471163][T24693] tipc: Started in network mode [ 406.476229][T24693] tipc: Node identity 4246, cluster identity 4711 [ 406.482734][T24693] tipc: Node number set to 16966 [ 406.489710][T24712] loop1: detected capacity change from 0 to 2048 [ 406.538430][T24719] loop8: detected capacity change from 0 to 1024 [ 406.557692][T23966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.593652][T24719] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.636386][T24733] digital: digital_start_poll: Unknown protocol [ 406.692210][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.761217][T24746] netlink: 'syz.8.5179': attribute type 4 has an invalid length. [ 406.783882][T24746] loop8: detected capacity change from 0 to 128 [ 406.812976][T21229] loop1: unable to read partition table [ 406.828905][T21229] loop1: partition table beyond EOD, truncated [ 406.830501][T24759] netlink: 'syz.5.5182': attribute type 6 has an invalid length. [ 406.900793][T24712] loop1: unable to read partition table [ 406.913433][T24767] netlink: 'syz.6.5183': attribute type 15 has an invalid length. [ 406.921634][T24712] loop1: partition table beyond EOD, truncated [ 406.927888][T24712] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 406.956275][T24767] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.000195][ T3001] loop1: unable to read partition table [ 407.006818][ T3001] loop1: partition table beyond EOD, truncated [ 407.234523][T24803] loop5: detected capacity change from 0 to 512 [ 407.252673][T24803] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 407.341973][ T29] audit: type=1326 audit(1770035296.686:10287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.366643][ T29] audit: type=1326 audit(1770035296.706:10288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.390392][ T29] audit: type=1326 audit(1770035296.706:10289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.414425][ T29] audit: type=1326 audit(1770035296.706:10290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.438484][ T29] audit: type=1326 audit(1770035296.706:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.462177][ T29] audit: type=1326 audit(1770035296.706:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.486228][ T29] audit: type=1326 audit(1770035296.706:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.510042][ T29] audit: type=1326 audit(1770035296.706:10294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.533901][ T29] audit: type=1326 audit(1770035296.706:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24804 comm="syz.6.5193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050306aeb9 code=0x7ffc0000 [ 407.599523][T24814] netlink: 'syz.7.5195': attribute type 10 has an invalid length. [ 407.625914][T24814] loop7: detected capacity change from 0 to 2048 [ 407.685279][T24821] loop1: detected capacity change from 0 to 128 [ 407.711301][T21229] loop7: unable to read partition table [ 407.717278][T21229] loop7: partition table beyond EOD, truncated [ 407.760540][T24814] loop7: unable to read partition table [ 407.766484][T24814] loop7: partition table beyond EOD, truncated [ 407.772721][T24814] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 407.942672][T24844] loop1: detected capacity change from 0 to 1024 [ 407.970542][T24844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.987125][T24844] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5207: bg 0: block 392: padding at end of block bitmap is not set [ 408.002056][T24844] EXT4-fs (loop1): Remounting filesystem read-only [ 408.149887][T24861] FAULT_INJECTION: forcing a failure. [ 408.149887][T24861] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 408.163238][T24861] CPU: 0 UID: 0 PID: 24861 Comm: syz.5.5213 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 408.163369][T24861] Tainted: [W]=WARN [ 408.163376][T24861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.163390][T24861] Call Trace: [ 408.163398][T24861] [ 408.163408][T24861] __dump_stack+0x1d/0x30 [ 408.163440][T24861] dump_stack_lvl+0x95/0xd0 [ 408.163470][T24861] dump_stack+0x15/0x1b [ 408.163493][T24861] should_fail_ex+0x263/0x280 [ 408.163527][T24861] should_fail_alloc_page+0xf2/0x100 [ 408.163564][T24861] __alloc_frozen_pages_noprof+0x108/0x350 [ 408.163605][T24861] alloc_pages_mpol+0xb3/0x260 [ 408.163637][T24861] folio_alloc_mpol_noprof+0x39/0x80 [ 408.163685][T24861] shmem_get_folio_gfp+0x3da/0xd60 [ 408.163731][T24861] shmem_write_begin+0xfc/0x1f0 [ 408.163837][T24861] generic_perform_write+0x183/0x490 [ 408.163885][T24861] shmem_file_write_iter+0xc5/0xf0 [ 408.163967][T24861] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 408.164004][T24861] vfs_write+0x5a6/0x9f0 [ 408.164029][T24861] ksys_write+0xdc/0x1a0 [ 408.164131][T24861] __x64_sys_write+0x40/0x50 [ 408.164150][T24861] x64_sys_call+0x2847/0x3000 [ 408.164234][T24861] do_syscall_64+0xc0/0x2a0 [ 408.164275][T24861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.164377][T24861] RIP: 0033:0x7f844064b78e [ 408.164444][T24861] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.164468][T24861] RSP: 002b:00007f843f0e6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 408.164493][T24861] RAX: ffffffffffffffda RBX: 00007f843f0e76c0 RCX: 00007f844064b78e [ 408.164627][T24861] RDX: 0000000000040000 RSI: 00007f8436cc7000 RDI: 0000000000000005 [ 408.164644][T24861] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.164660][T24861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 408.164677][T24861] R13: 00007f843f0e6ee0 R14: 00007f843f0e6ea0 R15: 00007f8436cc7000 [ 408.164701][T24861] [ 408.431342][T23035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.629551][T24891] loop8: detected capacity change from 0 to 512 [ 408.708226][T24902] __nla_validate_parse: 8 callbacks suppressed [ 408.708248][T24902] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5230'. [ 408.775466][T24909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5233'. [ 409.218497][T24934] loop7: p1 [ 409.233819][ T3001] loop7: p1 [ 409.256046][T21229] udevd[21229]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 409.304659][T21229] udevd[21229]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 409.510323][T24956] EXT4-fs (loop5): 1 orphan inode deleted [ 409.520080][T24956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.533165][T18461] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 409.547784][T24956] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.802981][T24891] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.010378][T24980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5261'. [ 410.091748][T24983] FAT-fs (loop1): Directory bread(block 162) failed [ 410.108918][T24983] FAT-fs (loop1): Directory bread(block 163) failed [ 410.125738][T24983] FAT-fs (loop1): Directory bread(block 164) failed [ 410.135828][T24983] FAT-fs (loop1): Directory bread(block 165) failed [ 410.156040][T24983] FAT-fs (loop1): Directory bread(block 166) failed [ 410.162790][T24983] FAT-fs (loop1): Directory bread(block 167) failed [ 410.177476][T24983] FAT-fs (loop1): Directory bread(block 168) failed [ 410.194455][T24983] FAT-fs (loop1): Directory bread(block 169) failed [ 410.204558][T24983] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.227758][T24983] FAT-fs (loop1): Directory bread(block 162) failed [ 410.234459][T24983] FAT-fs (loop1): Directory bread(block 163) failed [ 410.257866][T24983] bio_check_eod: 41 callbacks suppressed [ 410.257887][T24983] syz.1.5262: attempt to access beyond end of device [ 410.257887][T24983] loop1: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 410.297097][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 410.297120][ T29] audit: type=1326 audit(2000000000.710:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24982 comm="syz.1.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b6aeb9 code=0x7ffc0000 [ 410.306017][T24983] syz.1.5262: attempt to access beyond end of device [ 410.306017][T24983] loop1: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 410.327071][ T29] audit: type=1326 audit(2000000000.710:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24982 comm="syz.1.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b6aeb9 code=0x7ffc0000 [ 410.364403][ T29] audit: type=1326 audit(2000000000.710:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24982 comm="syz.1.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f0f68b6aeb9 code=0x7ffc0000 [ 410.388044][ T29] audit: type=1326 audit(2000000000.710:10482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24982 comm="syz.1.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b6aeb9 code=0x7ffc0000 [ 410.411659][ T29] audit: type=1326 audit(2000000000.710:10483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24982 comm="syz.1.5262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f68b6aeb9 code=0x7ffc0000 [ 410.438052][T23966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.577662][T24999] xt_hashlimit: size too large, truncated to 1048576 [ 410.677770][T25005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5268'. [ 410.688964][T25005] IPv4: Oversized IP packet from 172.20.20.24 [ 410.695204][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 410.701404][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 410.714225][T25007] geneve3: entered promiscuous mode [ 410.719583][T25007] geneve3: entered allmulticast mode [ 410.771990][T25012] netlink: 'syz.7.5272': attribute type 5 has an invalid length. [ 410.779876][T25012] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5272'. [ 410.849214][T24891] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.886307][T25021] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 410.902838][T25022] netlink: 'syz.5.5277': attribute type 10 has an invalid length. [ 410.910909][T25022] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5277'. [ 411.051413][T25022] loop5: unable to read partition table [ 411.067433][T25022] loop5: partition table beyond EOD, truncated [ 411.073684][T25022] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 411.097154][T23810] loop8: unable to read partition table [ 411.113060][T23810] loop8: partition table beyond EOD, truncated [ 411.208634][ T3001] loop5: unable to read partition table [ 411.218247][ T3001] loop5: partition table beyond EOD, truncated [ 411.252244][T25030] loop8: unable to read partition table [ 411.265525][T25030] loop8: partition table beyond EOD, truncated [ 411.271874][T25030] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 411.344029][ T3001] loop8: unable to read partition table [ 411.350108][ T3001] loop8: partition table beyond EOD, truncated [ 411.367706][ T29] audit: type=1400 audit(2000000001.780:10484): avc: denied { shutdown } for pid=25040 comm="syz.1.5283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.387801][ T29] audit: type=1400 audit(2000000001.780:10485): avc: denied { ioctl } for pid=25040 comm="syz.1.5283" path="socket:[87707]" dev="sockfs" ino=87707 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 411.455096][T25041] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.462519][T25041] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.477051][T25048] set_capacity_and_notify: 7 callbacks suppressed [ 411.477075][T25048] loop8: detected capacity change from 0 to 1024 [ 411.499490][T25048] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 411.543670][T25041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.552657][T25048] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.555869][T25041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.606622][T25055] loop5: detected capacity change from 0 to 764 [ 411.634704][T25048] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5285: bg 0: block 112: padding at end of block bitmap is not set [ 411.649932][ T52] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.697712][T14759] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 1) [ 411.711554][ T6476] IPVS: starting estimator thread 0... [ 411.719871][T25055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5287'. [ 411.731603][ T52] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.747713][T14759] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 411.760170][T14759] EXT4-fs (loop8): This should not happen!! Data will be lost [ 411.760170][T14759] [ 411.777875][ T52] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.778033][ T52] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.807756][T25057] IPVS: using max 2208 ests per chain, 110400 per kthread [ 411.808610][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 411.858362][T25059] loop1: detected capacity change from 0 to 512 [ 411.977715][T25067] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 412.111624][T25079] loop8: detected capacity change from 0 to 1024 [ 412.130842][T25079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.134359][T25079] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5296: bg 0: block 392: padding at end of block bitmap is not set [ 412.134557][T25079] EXT4-fs (loop8): Remounting filesystem read-only [ 412.215453][T25077] loop7: detected capacity change from 0 to 2048 [ 412.296756][T25087] loop5: detected capacity change from 0 to 512 [ 412.324494][T23810] loop7: unable to read partition table [ 412.341456][T23810] loop7: partition table beyond EOD, truncated [ 412.369143][T25087] EXT4-fs error (device loop5): __ext4_fill_super:5553: inode #2: comm syz.5.5300: iget: checksum invalid [ 412.396022][T25087] EXT4-fs (loop5): get root inode failed [ 412.401946][T25087] EXT4-fs (loop5): mount failed [ 412.453697][T21691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.476795][T25077] loop7: unable to read partition table [ 412.493147][T25077] loop7: partition table beyond EOD, truncated [ 412.499613][T25077] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 412.528707][ T3001] ================================================================== [ 412.536991][ T3001] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 412.544591][ T3001] [ 412.547001][ T3001] read-write to 0xffff888237d26468 of 1 bytes by task 25096 on cpu 1: [ 412.555189][ T3001] folio_add_lru+0xa4/0x1e0 [ 412.559753][ T3001] shmem_get_folio_gfp+0x7b0/0xd60 [ 412.564919][ T3001] shmem_fault+0xf6/0x250 [ 412.569309][ T3001] __do_fault+0xbc/0x200 [ 412.573586][ T3001] handle_mm_fault+0x11d7/0x3030 [ 412.578835][ T3001] __get_user_pages+0x1023/0x1ea0 [ 412.583930][ T3001] __mm_populate+0x242/0x390 [ 412.588576][ T3001] vm_mmap_pgoff+0x23b/0x2d0 [ 412.593201][ T3001] ksys_mmap_pgoff+0xc1/0x310 [ 412.597936][ T3001] x64_sys_call+0x16bb/0x3000 [ 412.602700][ T3001] do_syscall_64+0xc0/0x2a0 [ 412.607519][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.613471][ T3001] [ 412.615821][ T3001] read to 0xffff888237d26468 of 1 bytes by task 3001 on cpu 0: [ 412.623393][ T3001] __lru_add_drain_all+0x17e/0x450 [ 412.628542][ T3001] lru_add_drain_all+0x10/0x20 [ 412.633354][ T3001] invalidate_bdev+0x47/0x70 [ 412.637980][ T3001] bdev_disk_changed+0xeb/0xcb0 [ 412.643146][ T3001] blkdev_get_whole+0x1f5/0x2d0 [ 412.648222][ T3001] bdev_open+0x280/0x7e0 [ 412.652629][ T3001] bdev_file_open_by_dev+0x1e6/0x250 [ 412.658139][ T3001] disk_scan_partitions+0x148/0x1b0 [ 412.663397][ T3001] blkdev_common_ioctl+0x1236/0x20b0 [ 412.668750][ T3001] blkdev_ioctl+0x31f/0x460 [ 412.673305][ T3001] __se_sys_ioctl+0xce/0x140 [ 412.677954][ T3001] __x64_sys_ioctl+0x43/0x50 [ 412.682595][ T3001] x64_sys_call+0x14b0/0x3000 [ 412.687320][ T3001] do_syscall_64+0xc0/0x2a0 [ 412.691878][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.697835][ T3001] [ 412.700230][ T3001] value changed: 0x10 -> 0x13 [ 412.704948][ T3001] [ 412.707295][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 412.713476][ T3001] CPU: 0 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 412.724370][ T3001] Tainted: [W]=WARN [ 412.728207][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.738298][ T3001] ================================================================== [ 412.860973][T25060] loop1: detected capacity change from 0 to 1024 [ 412.904646][ T3001] loop7: unable to read partition table [ 412.910675][ T3001] loop7: partition table beyond EOD, truncated [ 412.958057][T25060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.279248][T23035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.