last executing test programs: 6m25.668354349s ago: executing program 32 (id=292): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x7, 0x1, 0xf06, 0xa10c, 0xb4, 0x7f, 0x8}, 0x9c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000080ffffff00020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 5m16.354000953s ago: executing program 0 (id=838): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000063012000000000809500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) 5m16.299825266s ago: executing program 0 (id=840): r0 = socket(0x40000000015, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) (fail_nth: 5) 5m16.288258777s ago: executing program 0 (id=842): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioprio_set$uid(0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = getpid() setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4800) unshare(0x26020480) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r4, &(0x7f0000000100)={0x0, 0x10}) setns(0xffffffffffffffff, 0x66020000) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) wait4(r3, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r5, 0x5, 0xe, 0x0, &(0x7f0000000a80)="9520588da012f38592e7fc9d582e", 0x0, 0x3a, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m13.508201475s ago: executing program 0 (id=858): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa75, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657, 0x0, @perf_bp={0x0}, 0x248}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) fcntl$dupfd(r0, 0x406, r4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x106200, 0x10004, 0x4, 0x5, 0xa, 0xd, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@nouid32}, {@nodioread_nolock}], [{@seclabel}]}, 0x2, 0x5ab, &(0x7f0000000180)="$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") 5m13.337802943s ago: executing program 0 (id=862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x8, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x23, 0x3, 0x3, 0x0, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xd, 0xb}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4018000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 5m13.113727155s ago: executing program 0 (id=863): r0 = syz_io_uring_setup(0x605d, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) io_uring_enter(r0, 0x6c28, 0xaa86, 0x4, 0x0, 0x0) 4m58.078815454s ago: executing program 33 (id=863): r0 = syz_io_uring_setup(0x605d, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x1, 0x22f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) io_uring_enter(r0, 0x6c28, 0xaa86, 0x4, 0x0, 0x0) 4m3.544181442s ago: executing program 1 (id=1358): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffff80, 0x3}, 0x2002, 0x7, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b0", 0x3}], 0x1}}], 0x2, 0x20e8086) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3}, 0x3c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r12 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r12, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x9, 0x3, 0xb18a}], 0x1, 0x0, 0x0, 0x0, 0x42, 0x5c}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) 4m1.689106414s ago: executing program 1 (id=1373): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x70, 0x0, &(0x7f0000001040)) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0x44}}, 0x48040) 4m1.55625242s ago: executing program 1 (id=1375): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") (async) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) (async) io_setup(0x8, &(0x7f0000004200)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_submit(r3, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x247) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 4m1.492008063s ago: executing program 1 (id=1377): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = getgid() mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f00000001c0)=ANY=[@ANYBLOB="4966a673ad543e5d0a7fd80fa078687d723f9da1c126ecfed9adebf4a5eeeb20badd24f0e4989955729506c95222", @ANYRESHEX=r1, @ANYBLOB=',fsmagic=0x0000000000000002,seclabel']) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) inotify_init() inotify_add_watch(r3, &(0x7f0000000140)='./file2\x00', 0x200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000150e"], 0x80}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) openat(r3, &(0x7f0000000100)='./file2\x00', 0x2282c0, 0x25) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x41, &(0x7f0000000040)={&(0x7f0000000400)={0x28, r6, 0x1, 0x2004, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x40030000000000, 0x0, 0x4000005}, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 4m1.011217427s ago: executing program 1 (id=1380): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="33fc8547e0ea74b5c4b9ffa16519fa6a676074569abcb70cb138d32d03a7677d6a526f4a5c15cb270860b0cea8f61b3c", 0x30, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r0, 0x3c, 0x43}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'cbcmac(aes-arm)\x00'}}, &(0x7f0000000180)="735083d56d7beef76aeab4e0f73352ccfec45fdf6bd48f08bb3915ffcea47b3f2ea268ffc0519259c56ef5e27dec11c21faca7972dbd110226129ac8", &(0x7f00000001c0)=""/67) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="5d92b0307af46f4752a9c2906dae4a4895e5615197e9a764a4358e794da2042bc7ebdc395c503ac5e980ebe5e4203795ffb1d4616ec08ee732e67ed860b1ee6952fade7373088e5ed4a9764ea427f33347e9cda97fd31b3b4f3d2b777605d52b6d5c6a19e962659853b981", 0x6b, 0xfffffffffffffff9) keyctl$invalidate(0x15, r1) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000400)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000440)="79cafa2629589c94c950a2d0583232f3c3d66b1b5ea382247c057535a650c91a9fdd4d04fdb960593715cb293a40d4bdfade3d88a5dfc126a610601711a4a6cd7ad1afe9ce0f18f6f19c6302cc2ed01a15599d1f144c200c03378da2af1ab378da19ff249ee2b90cab165150676d7daec8e67ad310cc22f079ea", 0x7a}, {&(0x7f00000004c0)="485c08024891bb7dcc934ea6e8ed605270daa1071cddb0ffe6f74da63186d133ad0f437254b80176bef0d66691a3b587dfd958948ec2e1ba41da62fbe796b32220447f816f1a4b015f353292c327d2ad112e2349643940126a9aaabb3a6d3a18ab248839ad3b73387c3f0a6502476b857e813750ff42cbe70df7288204451bf9d6649bca08ab92b26b9f3081aeff437f90c8fea66adec5235a64f8bfbba6455b6703f1ec215682b8c4f19c064a35a9322b97aa04139212befc5bc57231803389af976e7ab1", 0xc5}, {&(0x7f00000005c0)="790dc4ce0d8dcb6980ee03e346f9b7497fddc0ec0dd91bc661d800a43c580e3e05eaf09640aadd2684882f66d283e9d87edaec5e781415b046d8513ed1a2b3e8109ac66bb819aec8c409ae9b5c0e00b05f4a7f6069079907e99e97b20a43ef4ac8bb0c9114223984ae876e966e292a9fe85c5b33f842d3307b4f21ab3e50524f698b22f7e048e84a0bc7a823b6fe9499a36461f97da0602ffd4cf30cc94f1f2432a230aa6c0fcfa8d9390cba1f2b13d3ea6aa95d60e1bbdf8d0ce00cfa769070", 0xc0}, {&(0x7f0000000680)="6f6cd1ee9bcdf1a0ea07342309b841cb9dde19182ce2f6615160ec3a6a115477529ebd7b3809c5330f3de7", 0x2b}, {&(0x7f00000006c0)="f50cea6a953e3e5b71f953b28e6b247f50c84ba1199d561d997f1ba0e6d6092cddb1177e0b405229fb68cddd6c230fe613a7108edd314ef9559cd70f58b6b2c02967f50c76512def9e270cb4d680a339d711022aa24f568404d2307b594893a93640d6cccf2a536f91837f4b46dc0fc8563b1bc36bd4c7d803b4f14f29583b6bd4bf431eb7d154382662879593c70c58f508728549a940ad2a17082511601f725a040d03410d30a714c9f1b5717b602cf20b4ae6def2d1099e5410e97a4f061c804962303e427cb81dab607321a1d2c4c1d03a0016689bb9e6a06ecedc31d24a71fc12061ff30ee04c720f055335833fead38fc5b0c62a5b", 0xf8}], 0x5}, 0x20000800) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r2, 0xc0805841, &(0x7f0000000880)={0x6, 0x6fed, 0x3, 0xfffffffc, 0x9}) keyctl$get_keyring_id(0x0, r1, 0x6) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000900)) keyctl$unlink(0x9, r1, 0xfffffffffffffffe) syz_open_dev$evdev(&(0x7f0000000940), 0x9, 0x400) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x20401, 0x0, 0xe}, 0x18) r4 = open_tree(r3, &(0x7f0000000a00)='./file0\x00', 0x1000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000000b80)={{r4, &(0x7f0000000a40)='\x00', 0xa2000, &(0x7f0000000a80)={@_ha_fsid={[0x2, 0x5]}, {0x9, 0x4, 0x681, 0xe}}, 0x79b5, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0x8}, {[0x0, 0xfffffffb, 0x6, 0x7]}, 0x6, 0x29, &(0x7f0000000b40)=""/41}) shutdown(r5, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=""/197}) socket$kcm(0x29, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0), &(0x7f0000000e00)=@ng={0x4, 0x15, "9fbd6f"}, 0x5, 0x2) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x18, 0x3f9, 0x300, 0x70bd25, 0x25dfdbff, {0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x10) io_uring_enter(r4, 0x10e9, 0xa9dd, 0x44, &(0x7f0000000f40)={[0xd2b]}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000f80)={0x8}, 0x1) r7 = add_key$fscrypt_provisioning(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x0}, &(0x7f0000001040)={0x2, 0x0, @b}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r4, 0x3a) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ioctl$GIO_UNISCRNMAP(r8, 0x4b69, &(0x7f0000001100)=""/26) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) madvise(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2) file_getattr(r5, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x18, 0x1000) 4m0.279531883s ago: executing program 1 (id=1387): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18db2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x6, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200812, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@euid_eq}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001000)={@fallback=r1, 0x0, 0x0, 0x1000, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x6c, 0x0, 0x0, 0xb7a}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) (async, rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e}) (async) sigaltstack(&(0x7f0000000480)={0x0}, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6, 0x800000000000000, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x8000, 0x0, 0xe02c99340518a9d5, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x700) 4m0.259243974s ago: executing program 34 (id=1387): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18db2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x6, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200812, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@euid_eq}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") (async, rerun: 32) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 32) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) (async) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001000)={@fallback=r1, 0x0, 0x0, 0x1000, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) (async) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x6c, 0x0, 0x0, 0xb7a}, {0x6, 0x0, 0x8, 0x7ffffcb9}]}) (async, rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e}) (async) sigaltstack(&(0x7f0000000480)={0x0}, 0x0) (async) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6, 0x800000000000000, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x8000, 0x0, 0xe02c99340518a9d5, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x700) 2m45.167720737s ago: executing program 6 (id=2095): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/55, 0x37}], 0x1, 0x47, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) ioctl$RTC_PIE_OFF(r2, 0x7006) syz_usb_connect(0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='\r\x00\x00\x00', @ANYRES32], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'tunl0\x00', r6, 0x40, 0x1, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x37, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @multicast1, @multicast1}}}}) 2m44.351720496s ago: executing program 6 (id=2100): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48, 0x0, 0x0, 0x600}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) 2m44.351277766s ago: executing program 6 (id=2101): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket(0x840000000002, 0x1, 0xff) sendmsg$rds(r2, &(0x7f0000000980)={&(0x7f0000000180)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000001c0)=""/63, 0x3f}], 0x2, 0x0, 0x0, 0x40040}, 0x4) 2m44.141834787s ago: executing program 6 (id=2103): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x10}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000140001032dbd7000fcdbdf250c00"], 0x1c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x8, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0xffffffffffffffff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910"], 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r7, &(0x7f0000000540)=[{0x0}], 0x1, 0x20033, 0x51b) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m42.738684386s ago: executing program 6 (id=2114): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x41, 0x0, 0xfffffffffffffe3a}, &(0x7f0000000500)=[{}, {}, {}, {}]) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001c40)={0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60cc1b8ccd43fa6}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd2a, 0x25dfdbfe, 0x101, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20001}, 0x20000004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000227000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/231, 0xe7, 0x0, &(0x7f0000000340)=""/222, 0xde}, &(0x7f0000000080)=0x40) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) 2m41.534337385s ago: executing program 6 (id=2127): timer_create(0x3, &(0x7f0000001340)={0x0, 0x10, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000001380)=0x0) timer_settime(r0, 0x1, &(0x7f00000013c0)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001780)={{}, {0x77359400}}, 0x0) 2m25.478149677s ago: executing program 35 (id=2127): timer_create(0x3, &(0x7f0000001340)={0x0, 0x10, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000001380)=0x0) timer_settime(r0, 0x1, &(0x7f00000013c0)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000001780)={{}, {0x77359400}}, 0x0) 38.309521971s ago: executing program 5 (id=3001): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 37.617831455s ago: executing program 5 (id=3005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0xff}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 36.452723332s ago: executing program 8 (id=3008): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x61, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x891d, &(0x7f0000001840)={'veth1_vlan\x00', @ifru_names='team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000276, 0x0, 0x0, 0x625f00ac, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x4, &(0x7f0000000240)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x20000000, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0xf4, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "88c2b56876657874b40c157cf10c746275347bb2875334"}}, @TIPC_NLA_NODE_ID={0x69, 0x3, "4cb89c8c31f3ca6aeba7e39c2539f3f2d14d8eb3538e28c16c7ff711fce788183f15f438fd662ca38bfa7b5dd0a204bbe9543479f65e071ae7b1b0c90418ff8dac568274c98987ccd6c70d3d6701ace9ac703009e5ab1927845f41a105db3e8675b371b981"}]}]}, 0xf4}}, 0x4001) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl1\x00', r0, 0x2f, 0x3, 0x1f, 0xe77f, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x40, 0x7800, 0x0, 0x1ff}}) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000000b010300000000000000000200000a1fbad2b9ff24cdfd97de7a4c5ffa418dde1a668efb6d29cf698da2eb6bef39bf3b49109f91145856591c7b3c2f7164e8c97a50b2536919e5779a2bb7314cd3286dd9b2b1fdd423112faed3c0d6e3c0b4ee94425e6668ead70852d80aacaf8d48d1ab5a4dcbfef760100c4d195a0f08f5623ff506e9adea7d91fa788dc599999391d8187e0006af69dbb1124911ed830f89bae58335c9256210e057bfc24eaff54e39d332bfaeb53fdd5dca52589cda77e8bc7a7a802e8c5e"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000001c0)={0x0, 0xefffef7b, 0x0, 0x81, 0x7, "1b09000010000000000000002000"}) r8 = syz_open_pts(r3, 0x20800) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x44) 35.2885679s ago: executing program 8 (id=3010): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) shutdown(r2, 0x1) (async) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) (async) bind$inet6(r3, 0x0, 0x0) (async) shutdown(r3, 0x1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet6(0xa, 0x3, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fff}}]}, 0x3, 0x442, &(0x7f0000001180)="$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") (async) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000500), 0x12) (async) r7 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) r8 = fsmount(r7, 0x0, 0x3) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r9, r9) (async) r10 = openat$cgroup(r8, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) 35.262443661s ago: executing program 5 (id=3011): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) (async) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0xd}, &(0x7f00000000c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000002500)=@ethtool_dump={0x19, 0x7, 0x9}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 35.174484476s ago: executing program 8 (id=3014): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x200080c5) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f0000000f40)={[{@commit={'commit', 0x3d, 0x4}}, {@nobarrier}, {@barrier}, {@quota}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x9b9}}, {@jqfmt_vfsv1}, {@jqfmt_vfsv1}]}, 0x0, 0x47e, &(0x7f0000001b40)="$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") r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP3Hc5/8tl/xwxunEcH71PP9PZ0eVCHDq2s//Bx3I42IBxkp5oBGAwDj7f5//Hy1NHyshAABg6GbaU1Kq5B/vzUSpVKlEXGl/LWA5ubVWr92IiKci4nez5QtZfb69Z3LkPQMAAAAAAAAAAAAAAAAAAAAAAAAA0JGmSaQAAADAWIso/Tn5Vedd/ldnX5zp/XxgKvl3+yuBpyLinR+99YO7S83m5ny2/O+Pljd/mC9/eRSfYAAAAAC9uvfp7fm/Rp0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPm/YfvLnenATa/OKy4f/1iRMwVxZ+M6fZ8OsoRcekfSUzu2y+JiIkhxG/di4iPF8VPsrQehSyKP4wfQute0krbCuPHXP5TKIp/eQjx4Ty7n51/3ijq/6V4vj0v7n+TEf9TP67+5794dP6b6NP/rwwY45kHP6/2jX8v4pnJ4vNfN37SJ/4LA0Uvxze+vrvbb23644ir3b8/7TPe/gh7pWpz/U51a2f3+tr60mpttbaxsDD/6uJri68s3qjeWqvX8n8LY3z32V98eFj7LxX+/UvybPq3/8WC400U5P+fB3cffrRbaR2Mf+2Fgvi//km+xcH4pTzOp/Nytv5qt9zqlPd77me/fe6w9q/stb/8OP//1/odtNeBjvLsYL86AMCJ2NrZvb1Ur9c2x7aQ3aU/AWkcpzAVT0Qa41v4dlZ4MKwDpmmaZn2qYNX9iBjkOEkMuaWl4nz2Cn3PAKM+MwEAAMO2d9E/6kwAAAAAAAAAAAAAAAAAAADg/DqNt6z1xtx7BXIyjFdoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMxX8DAAD//xfc3AU=") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000001000000000000000020000000100000000000000baa4ad059b3d5dc403a07cf9f433f380ff0f00000000000073e776f50acd42c786ffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff72f5b09ea6bf822b35642676769f5c5bdb5149178ccd5ac865716888f5008eb922c026de2c389d5084d5106f76109c582cec9492e9968e8ff9e00ecaf3356515b1"], 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000002"], 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0xff) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) pwrite64(r1, &(0x7f0000000080)="30236760ead14b5e1c85325c0b42c5c063b16b7fe9ac0a2ab7af83d39d97605ae4ee7faa0323cf1a641d00e89fb1d918088038de3019cf61d6190863726eadcd03ca6586adcfb4719630effc0241390498384a", 0x53, 0xb) semctl$IPC_RMID(0x0, 0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) r6 = dup(r5) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r6, &(0x7f0000000780)=ANY=[@ANYBLOB='+io +pids \x00io +cpuacct -net -\tpu +cpuset +blkio -blkio -net'], 0x3c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) fdatasync(r7) set_mempolicy(0x8006, &(0x7f0000000040)=0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x50, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 34.807941684s ago: executing program 5 (id=3019): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33) getsockname(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0x80) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a55414, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x10, 0x803, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r8 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000080)=0x7, 0x4) sendmsg$unix(r8, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x3}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40051}, 0x24008006) writev(r7, &(0x7f0000001240)=[{&(0x7f0000000a40), 0x17b}, {&(0x7f0000001740)="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", 0x17b}, {&(0x7f0000000500)="2a6dfe6b588f0649b7c62468b77834dbabbd4b954da4", 0x16}, {&(0x7f0000001640)="acf5964b4d2aba2c68c363b6bc49a8c7becac3bbb7dfcc8b79d6d4f52be12eeb2b79d208ff301d18aa1e5b70729f3b4aa941103981c5f58d8d4971d20b6aa6c7bc3d371b296f014d7bec9aed7f966e46d306d93dabbef889580d6d6e78ba9c72b644dfe391899db31310e59eb3e734ccda545701b2fc7dbb748af3f4f2f22510c8965985c95e73ec6c46ac80a4a74288351133b2890706681f10d66dec0d89e27fdd35fe7ddfe33b4a8d99acecc1586f6d1d257e22e1bf7e390d6d4dbe967e616ccaba4ce0491838ad8469dbfe3c4280330a5c7fc0192c113affde67d5805e2181281f44c32efa30", 0xe8}, {&(0x7f0000000d00)="35b67d93a84d33eb70ff581e3a9d9d0da6dc5d9e513fd7f0d6a7e1a170a9fd02e1e8ab7be3d54f2942d30bb052ff1db99d44bbba505f4ec35bbda360e6b433a93f22eaa64d7024893d4a99395bd583c81e435a0b3c52004bf44246828d6b76a7bdae3a6cfbb9fb", 0x67}, {&(0x7f0000000d80)="3737510ba7998eb0a92eb479b9ac482e6adde06f82a7ed40961de2f2044db9ddc090c9ad2b99c28af1c0147e8302afcf6fdcf929bec6a1a7739a151623ff9e7b9f32748cb18596b18766bb9ec5d09bce07fd8016aeef37d95a4474f8c7a9299958fe", 0x62}, {0x0}, {&(0x7f0000000c00)="41c7c229ebe174b727f00ec3f1d02a27c4bab19ef5ff046bb5aaec1fa8b6d8b49c4ca80426f1d27aaa0a3a5f74b020a430b1cc1f485e8c9013fdfe42f6f11c3e2686e59c5a7738096c5826f4443b74e6640b8b42e5b049f8dd9b7ef8aca94c0a7f7553c48bca6b78498c8f52bea41749243422a96cabd158f601376639e11bd9acdcca6296ab8f4212d1c47c37329f2aa90197826b918c914e4d11f8a79eaaddf1", 0xa1}, {&(0x7f0000001040)="02e5570de9bd58f3ae924514eb95d3085d5b4ffc3ad1b8cdf7f7086f87dfad4ff604ecaacc625a44eea266710d093ac57e807436b57559bc78129208b4f028c7e81351dfef9e381d85c5d7f74e505af08f656fc416ece1fe515b610553eae1493e", 0x61}], 0x9) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x2000c051}, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x9d, "f090fa8989a5cc3be5375d84f4b6a6620d00778c43fff2a46e9ac2a30d4878ce3f6b0bd5c306b1138ee9831ab938714e3a205dbed3dc45fc014b6feab76c9e26e0680e4ee8738dc03ad862aa86b1bc60d0f9ec06e4c46c0b7b7559543662873cab2b478e93a18e447d4b90fee479629f773e3c093e87bd40ed9410cdb602f8b5ebd48c6c20f4246ca48024a964106518e3c6dcbd8e74ef265a6a71de1d"}, &(0x7f0000000040)=0xa5) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000300)={r9, 0x9, 0x20}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x590, 0x0, 0x8, 0x7f02ae, 0x320, 0x200, 0x4c0, 0x2e8, 0x2e8, 0x4c0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x320, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}, @common=@inet=@tos={{0x28}, {0x9, 0x7b, 0xff}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x6, 0x4, 0x2, 0x5, 0x5, @private0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0x0, 0xffffffff, 0xff], [0xff, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 0xb54, 0xd62}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0xec, 0x5, 0x1, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f0000000140)={0x2, 0x0, @loopback, 0x4}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) 34.428890112s ago: executing program 5 (id=3020): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x43b, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xe) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0xfffffffa) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xfe, 0x7ffffdbd}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read$nci(r3, 0x0, 0x0) syz_io_uring_setup(0x3419, &(0x7f0000000180)={0x0, 0xb312, 0x0, 0x0, 0x15b, 0x0, r3}, &(0x7f0000000000), &(0x7f0000000200)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x2f, 0x47, 0x9, 0x0, 0x1, 0x311, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x2, 0x75c019f035ddd355, 0x2, 0x3, 0x9, 0x0, 0x100, 0x0, 0x10000}, r2, 0xc, r3, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x18, 0x30, 0xc96f2b0dc02613b7, 0x71bd23, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000300)="595cf053", 0x4}], 0x1}}], 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0x40c989, 0x0, 0xffffffdf, 0x175}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r6, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) io_destroy(r1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) r10 = socket(0x2, 0x3, 0x9) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f00000011c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@multicast, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @broadcast, 0x4}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xff000000, 0x1, 0x5, {@empty, {[0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x6, 0x401, 0x5, 0x1ff, 0x1, 0x1, 'bond0\x00', 'wg1\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0xc7af274}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 34.407718993s ago: executing program 8 (id=3021): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_robust_list(&(0x7f0000000100)={0x0, 0x1}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000000000000f8ffffffffffff050000000100000003"]) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="070000000000000000000000000000000000000053c4667039c4908f5fa6", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000000000000400"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f0000000000), &(0x7f00000001c0)=""/86}, 0x20) 34.307277458s ago: executing program 5 (id=3022): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x4, 0xfffffe4e, {{0x38, 0x4, 0x3, 0x3, 0xe0, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x5, [@multicast1, @empty, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0x0, [{@local, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0x57, 0x3, 0xf, [{@broadcast, 0xa3}, {@local, 0x3}, {@private=0xa010101, 0x3474}, {@remote, 0x1}, {@remote, 0x7}, {@private=0xa010100, 0xcbb6}, {@broadcast, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @cipso={0x86, 0x5f, 0x1, [{0x6, 0xc, "63b4b6b2e2da694557a8"}, {0x6, 0xa, "7008bdffb854e393"}, {0x7, 0x12, "801f0fd769f6ccde81da68f8c473a891"}, {0x0, 0xf, "4962e9fd26e243ad4b50d3e979"}, {0x6, 0xf, "e162bdd8d8426af443b82249a5"}, {0x6, 0x8, "661b61453640"}, {0x2, 0xb, "2d4dde48b31de68e2e"}]}, @end]}}}}}) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x40000) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x12, 0x9, 0x8a}}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfe, {0x2, 0x18, 0x20, 0xc8, r16}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x8c33db3fea77761f, 0x7, 0x5e, 0x6, 0x10, @private1, @empty, 0x7800, 0x10, 0x2, 0x2}}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r19 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r19, &(0x7f00000000c0)={0x1d, r20, 0xfffffffffffffffe, {}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r19, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r21, 0x0, {0x2, 0xff, 0x5}, 0xfd}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xe6426f2f66b9f47f}, 0x5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x168, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfd92b92e39f226d}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5640a756b6588f4a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0x168}}, 0x1) 34.304911018s ago: executing program 36 (id=3022): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f00), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x4, 0xfffffe4e, {{0x38, 0x4, 0x3, 0x3, 0xe0, 0x64, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0x5, [@multicast1, @empty, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0x0, [{@local, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0x57, 0x3, 0xf, [{@broadcast, 0xa3}, {@local, 0x3}, {@private=0xa010101, 0x3474}, {@remote, 0x1}, {@remote, 0x7}, {@private=0xa010100, 0xcbb6}, {@broadcast, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @cipso={0x86, 0x5f, 0x1, [{0x6, 0xc, "63b4b6b2e2da694557a8"}, {0x6, 0xa, "7008bdffb854e393"}, {0x7, 0x12, "801f0fd769f6ccde81da68f8c473a891"}, {0x0, 0xf, "4962e9fd26e243ad4b50d3e979"}, {0x6, 0xf, "e162bdd8d8426af443b82249a5"}, {0x6, 0x8, "661b61453640"}, {0x2, 0xb, "2d4dde48b31de68e2e"}]}, @end]}}}}}) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r12, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x40000) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x12, 0x9, 0x8a}}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfe, {0x2, 0x18, 0x20, 0xc8, r16}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x8c33db3fea77761f, 0x7, 0x5e, 0x6, 0x10, @private1, @empty, 0x7800, 0x10, 0x2, 0x2}}) socket$can_j1939(0x1d, 0x2, 0x7) (async) r19 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r19, &(0x7f00000000c0)={0x1d, r20, 0xfffffffffffffffe, {}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r19, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r21, 0x0, {0x2, 0xff, 0x5}, 0xfd}, 0x18, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xe6426f2f66b9f47f}, 0x5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x168, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfd92b92e39f226d}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5640a756b6588f4a}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}]}, 0x168}}, 0x1) 33.25815082s ago: executing program 8 (id=3025): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) 32.595719403s ago: executing program 8 (id=3028): unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000002}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000004}) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x0, 0x0, 0x1}, r3, 0x6, 0xffffffffffffffff, 0x0) 32.539661376s ago: executing program 37 (id=3028): unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000002}, 0x5, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000004}) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x3b35, 0x0, 0x0, 0x1}, r3, 0x6, 0xffffffffffffffff, 0x0) 5.648399691s ago: executing program 2 (id=3251): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac9ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000020601000000000600000000000000020e0003006269746d61703a6970000000050004000000000d0900020073797a3100000000050005402200"/72], 0x48}}, 0x0) syz_io_uring_setup(0x2efb, &(0x7f00000003c0)={0x0, 0xb424, 0x80, 0x2000, 0x198}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000600000000000000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) bpf$LINK_DETACH(0x22, &(0x7f00000006c0)=r4, 0x4) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5400000012000103000000000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0000187cb22cff64c0000000000000fffffff00000000008"], 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) r6 = socket(0x21, 0xa, 0x0) setsockopt(r6, 0x107, 0x8, &(0x7f0000000140)="11000000", 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x60820, 0x20) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000006c0)={0x32, 0x6, 0x13, 0x17, 0xb, 0x9, 0x1, 0xc1, 0xffffffffffffffff}) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18102}) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) 5.47606056s ago: executing program 2 (id=3254): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) close(r0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f00000016c0)={[{@check_strict}, {@dmode={'dmode', 0x3d, 0x9}, 0x0}, {@mode={'mode', 0x3d, 0x1}}, {@map_off}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'macgreek'}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@session={'session', 0x3d, 0x3e}}, {@showassoc}, {@mode={'mode', 0x3d, 0xfffffffffffffffd}}, {@check_strict}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f00000017c0)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x30, 0x5f, 0x30, 0x30, 0x2e, 0x30, 0x30]}}, &(0x7f00000015c0)=""/234, 0x21, 0xea, 0x0, 0x8}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0xa3382400, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000040000000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="15110080000000001800128008000100677470000c0002800800030003000000"], 0x38}}, 0x0) ptrace(0x10, r6) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x100118, 0x0, 0x0, 0x0, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r3, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7', 0x1}], 0x1}}], 0x1, 0x0) getsockopt$bt_hci(r3, 0x84, 0x2, &(0x7f0000000080)=""/4111, &(0x7f0000000000)=0x100f) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.904768027s ago: executing program 7 (id=3279): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x840) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000000000000f8ffffffffffff050000000100000003"]) 3.722401236s ago: executing program 7 (id=3283): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x981}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@dioread_lock}]}, 0x3, 0x443, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x80}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FITHAW(r1, 0xc0045878) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x981}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@dioread_lock}]}, 0x3, 0x443, &(0x7f0000000600)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIiEfSpKX0wAUEEgeQkOBQjiFJq1C3QUmQaBVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09jp+1EkT14kD/v2kdWZ215rv8+7YszuxA+hbw9lDErE/In6PiMFqtXmH4eqfWytLU3+vLE0lUS6/9VdS2e/mytJUbdfa8/bVKsWI9LMkjrZpd+HylQuTpdLMfF4fW7z4/tjC5SvPzV6cPD9zfubSxJkzp06Ov3B64vmu5JnldfPIR3PHDr/2zrU3ps5ee/fnb5Na/i15dMnwehufLJe73FxvHWgoJ8UeBsKmFKrdNAYq/X8wClE/eIPx6qc9DQ7YUuVyufzA2puXy8D/WBK9jgDojdoHfXb9W1u2aeixI9x4qXoBlOV9K1+qW4qR5vsMtFzfdtNwRJxd/uerbImtuQ8BANDk+2z882y78V8ajfeF7s3nUIYi4r6IOBgRpyPiUETcH1HZ98GIeGiT7bdOktw+/kmvd5TYBmXjvxfzua3m8V9t9BdDhbx2oJL/QHJutjRzIn9NRmJgd1YfX6eNH1757Yu1tjWO/7Ila782FszjuF7c3fyc6cnFybvJudGNTyKOFNvln6zOBCQRcTgijnTYxuzT3xxrWbU6xXjn/NfRhXmm8tcRT1WP/3Jk+TdlXS+tMz85dk+UZk6M1c6K2/3y69U312r/rvLvguz47217/q/mP5Q0ztcubL6Nq398vuY1Tafn/67k7aZ1H04uLs6PR+xKXq8GXV9fmJ9o2W+ivn+W/8jx9v3/YNRfiaMRkZ3ED0fEIxHxaB77YxHxeEQcXyf/n15+4r3O899aWf7Tmzr+9cKuaF3TvlC48ON3TY0ObSb/7PifqpRG8jUbef/bSFydnc0AAADw35NGxP5I0tHVcpqOjlb/h/9Q7E1LcwuLz5yb++DSdPU7AkMxkNbudA023A8dzy/ra/WJlvrJ/L7xl4U9lfro1FxputfJQ5/bt0b/z/xZ6HV0wJbrbB4t7XocwPbzfU3oX/o/9C/9H/pXm/6/pxdxANuv3ef/xz2IA9h+xYbH/DfBgD7h+h/6l/4P/Uv/h760sCfu/CV5hXY/GbBT4ulRIdIdEYbCFhV6+74EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQLf8GAAD//x/e4TE=") (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async) fdatasync(r0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x80}]}, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) ioctl$FITHAW(r1, 0xc0045878) (async) 3.639613401s ago: executing program 3 (id=3286): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 3.257222359s ago: executing program 3 (id=3290): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3e, 0x4, 0x2, 0x660c1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000000), 0x0}, 0x20) setreuid(0x0, 0xee00) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.116137666s ago: executing program 3 (id=3291): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) mremap(&(0x7f0000d35000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) 3.115890156s ago: executing program 7 (id=3292): socket$key(0xf, 0x3, 0x2) socket(0xa, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x54c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0xfff2, 0xffff}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x508, 0x2, [@TCA_FW_POLICE={0x430, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xafa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc7}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7fff, 0x1000, 0xffff70b5, 0x4, 0xff, 0x9, 0x9, 0xffff, 0xffffffff, 0x60a, 0x2, 0x0, 0x1, 0x0, 0xc7, 0x7fff, 0x6, 0x698, 0x1, 0x5, 0x6, 0x3ff, 0x6, 0x8c7, 0xffffffff, 0x3, 0x40, 0x6, 0x7, 0x8, 0xffffff88, 0x5, 0xffff, 0x5, 0x9, 0x7, 0x2, 0x2, 0x6, 0x3, 0x9, 0x0, 0x1, 0x8, 0x101, 0xfee, 0x1c4, 0x54, 0x0, 0x7, 0xffffc767, 0x5, 0x2, 0xffffffd6, 0xfffffffe, 0xfffffc00, 0xa10, 0x4, 0xfffffffd, 0xb624, 0x9, 0x3, 0x4, 0xfffffffe, 0xe21, 0xd, 0x9, 0x1e, 0x2, 0x3, 0x8, 0x0, 0xfcaa, 0xb, 0x5, 0x101, 0x8, 0x8, 0x0, 0x1, 0x5, 0x8, 0x0, 0x7, 0x9, 0x7e, 0x5, 0xfffffff3, 0x3, 0x1, 0x10000, 0x1, 0xc6, 0x10, 0xb44, 0x80000001, 0x4, 0xd, 0x0, 0x0, 0x7fffffff, 0x9, 0xb00, 0x1, 0x6, 0x4, 0x7fffffff, 0x3, 0xf985, 0x7, 0x0, 0x3, 0x9, 0x5, 0x8, 0x3333, 0x2, 0xfd4, 0x6, 0x9, 0x101, 0x0, 0x13, 0xfffffffc, 0x20000000, 0x800, 0x8, 0x5, 0x9, 0x80000000, 0x97fb, 0xd945, 0x3a0f, 0x4, 0x200003, 0x3, 0x5, 0x4, 0x4, 0x5, 0xfffffffe, 0x2, 0x4, 0x40, 0xffffffff, 0x3, 0x3, 0x7, 0x9, 0x1, 0x3, 0x200, 0x84, 0x9, 0x5, 0x4, 0x7, 0x80000000, 0x3, 0x3, 0x6, 0x8000, 0x3232aa3c, 0x100, 0x7fff, 0x1ff, 0x5, 0x3, 0xc, 0x4, 0x6, 0x5, 0x7, 0x3ff, 0x3, 0x9, 0x9, 0x9, 0x800, 0x9, 0x3, 0x40, 0x1, 0x8, 0x4, 0x1, 0x5, 0x1, 0x2, 0x1, 0xb, 0xb8, 0x1, 0x9, 0x8, 0x9, 0x5, 0xf8, 0x1, 0x7f, 0x8, 0x9, 0x2, 0x5, 0x5, 0x4, 0x8, 0x4, 0x7, 0x3, 0x7c5, 0x0, 0x4, 0x6, 0x3, 0xb, 0xfffffff8, 0x5be, 0xffffffff, 0x80000000, 0x80000001, 0xffffc547, 0x0, 0x6e4, 0x8, 0x5, 0x1000, 0xfffffbff, 0x40, 0x3, 0x34ef, 0x34, 0x7, 0x0, 0x2, 0x2, 0x9, 0x991, 0x2, 0xdf3c, 0xa, 0x2, 0x800, 0xb, 0x7, 0x48125521, 0x4, 0xbf, 0x4, 0xa, 0x2, 0x6b, 0x7, 0x8000, 0x9]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x8001}, @TCA_FW_POLICE={0xc4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x7, 0xfffffeff, 0x3, {0x9, 0x1, 0x7fff, 0x6, 0x4, 0x400}, {0x3, 0x1, 0x3, 0x5, 0x7, 0xfff}, 0x10001, 0x100, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8, 0x4, 0x1350, {0x3, 0x0, 0x9, 0x0, 0x0, 0x12000000}, {0x4, 0x2, 0x6, 0x5, 0xfffc, 0xfc51}, 0x3ff, 0x1, 0x9aa}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x954fae9edc4e1abc, 0x55bd, 0x6, 0x3fc, {0x7, 0x1, 0x9, 0x3, 0x1000, 0x101}, {0xf8, 0x0, 0x4, 0x0, 0x8, 0x8}, 0x2, 0xfffffff7, 0x2}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0xa9}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x54c}}, 0x20044800) unshare(0x60000600) socket(0x28, 0x5, 0xfffffff4) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sync() r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x3, 0x2, 0x4, 0x1}}, 0x80) 2.494900797s ago: executing program 2 (id=3294): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) rmdir(&(0x7f00000002c0)='./control\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3906a7e7}]}}]}, 0x48}}, 0x4008000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r7 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r7, 0x9000) fallocate(r7, 0x0, 0x0, 0x8800000) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r9 = syz_open_pts(r0, 0xa0200) dup3(r9, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.02405952s ago: executing program 7 (id=3295): syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf25047c000004008c8014000180060006008807000008001700", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="63202a3a2a0939ac"], 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000301010200000000000000000200000106001240000100000c00018006000240000700000c0019800800010004"], 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000000001026ce99501ddbc3976b921c2ddd48d96f5369b778b36746c46b4f2715c4918b5722d0c63ffbaf0c3164c6e5e671eb9fb455a23f36514e146f4ea2f178a5da2132dec8e33ead6d78e830b31f7c27e62861bf1568397a5283bbbae4036bce1686bb1d2e6d4ea50d5b7d0b6d8b261095214c1bb681ade05a3f44e9af93a4dfc93adc699a93ec559773b36f32d8e11b31b4c06503415119ce42927b6bf9739b0d8962a9019bec3", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2509000000050008000700000008000100010000000500070000000000"], 0x2c}}, 0x64000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x5, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x2, 0x0, {@ip4=@remote, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) sync() sync() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fchdir(r8) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 2.02249507s ago: executing program 4 (id=3296): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802cf5038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000200)=ANY=[@ANYBLOB="58010000160001002cbd7000fedbdf25ac1414aa000000000000000000000000fc0200e06899282a0e32f400000000004e2400004e2400060a0000a03b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000bb000004d46c0000000000000000000000000000000000000109000000000000000000000000000000010000000000000000000000003000000902000000000000000000000000000001800000000000004ed2000000000000d0acffffffffffff050000000000000003000000000000003d640000000000000600000009000000060000002bbd7000073500000a00014148000000000000000400000004"], 0x158}, 0x1, 0x0, 0x0, 0x2004c094}, 0x24040000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x350, 0x158, 0x4c, 0x1a, 0x158, 0x73, 0x280, 0x258, 0x258, 0x280, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [0xff000000], [], 'wg2\x00', 'caif0\x00', {}, {}, 0x73, 0x0, 0x4}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x28, 0xca}}, @common=@unspec=@connlimit={{0x40}, {[0xff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) 2.00881525s ago: executing program 2 (id=3297): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r0 = inotify_init1(0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff67, &(0x7f0000000240)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x11600, 0x6c320}}}}}}]}, 0x48}}, 0x0) (async) r4 = open(&(0x7f0000000340)='./bus\x00', 0x4c27e, 0x2) preadv2(r4, 0x0, 0x0, 0x5, 0x1, 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) (async, rerun: 32) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x852090, &(0x7f0000000380)=ANY=[], 0x2, 0x5ce, &(0x7f0000000980)="$eJzs3V1v29Ydx/GfbDnWvCEYtiEIgjycJhvgAKlDyY0Co1ccdSSzlUiBpAv7qggWuTAid0PSAYtv5twELba9hQF9Ebvdm9l1sesN2DTwyZMfJDmxayfF92O0PBYPz/kfRuA/h+GDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKl7LceoVdf1gY9NM5rWisDdlfdne/UOLKf1KlfQ/1Wq6nn90/Rf/X30t/d9d3cx/u6lauqhp78fXfvrxz6tz5fZTAnoDeut2Xrzce/ZkOBw8P2X96jlF/K7o2MCPQ7/ndqzx49CsNZvOw/V2bNp+18ZbcWJ7xousm4SRWfbum/ra2qqxK1vhRtBpuV1bfvj4w4bjNM0nK33rRnEYPPxkJfbW/W7XDzpZnXR1Wudx+kX81E9MYt2eMds7w8HqrCDTSvWifPQPYH+8UmNWSw2n0ahXJTUfXSm+qI1Gvd5o1JuP1h49dpyqc8iCo8WjNca+tJ1/5W284U7H++28Dt3Amc0V+V9d+Qq0oU2ZE388tRQpVG/C+kKZ/3/10E7tdzz/l1n+evijcvUNZfn/dv7b7Un5X0aLE+K5mJ8Xeqk9PdMTDTXUQM9Ps9WViWvmyvFf5phMunP3T1ezI6tAvmKF8tWTm31i5KumUEZraqopR59rXW3FMmrLV1dWsbYUK5HNvlGeIlm5ShQqktGyPN2XUZZttSojqxVtKdSGAnXUkpu1sq2dbL+vTonxoFL9NJUaUypl+X88mR/7wDni+Cbn9ZdWvK/O9wAOnMGozP8AAAAAAOAHq5KdfU/n/wu6lZXaftc6lx0WAAAAAAA4R1+3s+vrK+n8X9ItVSbO//eLEwUAAAAAAOA9U8nusUun9Uu6k5fKO6EOTgLMXW6IAAAAAADgjLJ/0L+dLpbS0h1Vjs//j8uefla7sCABAAAAAMCZJF8XhYnP2I/7i5W//1NRtFB51d/8ZWXXTeu5u/P5dvPHWmzf0GgxL2dtNatFk569WSmefnnwEMzv8kVVo9H0OCpTA6geDqBytdj6cAD6sz5Ia/xDHzzN6z4t1+S9LLX9rl3xwu7Hdbnu1bnEbia//3LnD8qG/03QS4PcGQ5WfvPb4dMslldpK692i/sijt0eMSWWr8rzJ7dOHvFCdiNG0e9SRds7w4EzPv7isoxjV2dM6fO17uZ17i7ly6XD46+lfdZXJo0+j2JBZxz5a93L69xbvpcvToiiMSOKQWM8irfaF6eIYnVWFKtnjAIALst29tSfE7NQeUg/mnff4ii3PetNPtOz+yl7ea3lvM7yjezAWr1xwhHdmXVEd/qbZWbOs9uVqdlN+9LJR/SDdyBNyrFpv3856Leejf7bP0r6tsyqx4YfdxuVdBfOf7X7O1178XLvw53dJ18Mvhh82WisNp2PHOdRQwvZMIoFuQcAcILZ79iZWaPyUT6rVjar/s8oN5bxflZcUlCeFRjqqR5kdxtIWlRNi4da/dNf05n42GUID47OWqsaz6ijMln+ezQaPZgxq8vbLZ2mbv56GQAAfkjulnn4zqz8X9Q7If8/KE8FTJh3H87lR98QPKlufULE33A7IgAAZ2Sj7/5bzNj7n9fX1upusm5NFHqfmshvdazxg8RG3robdKzpR2ESeuF8WvjMb9nYxBv9fhglph1Gph/G/mb25ndTvPo9tj03SHwv7netG1vjhUHieolp+bFn+hu/7vrxuo2yjeO+9fy277mJHwYmDjciz64YE1s7VtFv2SDx235aDEw/8ntutGU+C7sbPWtaNvYiv5+EeYNlX37QDqNe2uyVy97XAAC8K1683Hv2ZDgcPP8eC5c9RgAAcNibZGmuGAMAAAAAAAAAAAAAAAAAAAAA4HJMvm9vXhdwa2BR+NtPpIvqa3JhQdLl9f7GhQW9E2FQOFPh6jk3WNM5NTjryLF/MQcoAN+b/wUAAP//4SNc/Q==") (async, rerun: 32) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x2e, 0x4, 0x8, 0x401}, {0xfe00, 0x4, 0x5, 0x2}, {0x7f, 0x3, 0x7f, 0x1}, {0x5, 0x9, 0xa}, {0x100, 0x9, 0x0, 0x4}, {0x5, 0x47, 0x3, 0xe}, {0x5, 0x6, 0x1, 0x1ff}, {0x5, 0x77, 0xe, 0xd23}]}) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={{r6}, 0x11c, 0x8, 0xa}) 1.480881927s ago: executing program 9 (id=3298): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x42}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x80040000, &(0x7f0000000180)="67a9820873974fa640e3f4a37ffe9a05b65b057973aa67c7a67d02dbb5b7ccade777702cf5cc9d0ccf42f8283881446c39480f8f869cd7f8dda1a6bd95dcafe6086bd542acd375453b0d843b384e85ec26689196598dc696da79e074c56532ca3a51e9d62e74d683e9026b00766273722b0922c5a0e36a37216b959cc7818d471baafaf316b6f555", 0x88, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="f6d1b89e788e66759595fd64a6e2c10ce55f1df7c04a992c5ee4726499d6ed8839518a45e71c248aa036d596d2cc30fe6aeb90a19c4af763f6924f001edc36302e53cdecbcec2842e5af2ed7131582856ff01d433adf4bdb553d69ad39019c430b5df53847c99abc945aa663b27a2f984e5c692233c35465ce6b4dc11849d63afae4dd7564ab9fa9bb383cb284fa8a76acb393e437416aa004852e66f5d857b63a27dcdbe7b19446289c57e385c8aa97e4935e") syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') (async) fchdir(r1) (async) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async) syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') (async) fchdir(r2) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x42}) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) syz_clone(0x80040000, &(0x7f0000000180)="67a9820873974fa640e3f4a37ffe9a05b65b057973aa67c7a67d02dbb5b7ccade777702cf5cc9d0ccf42f8283881446c39480f8f869cd7f8dda1a6bd95dcafe6086bd542acd375453b0d843b384e85ec26689196598dc696da79e074c56532ca3a51e9d62e74d683e9026b00766273722b0922c5a0e36a37216b959cc7818d471baafaf316b6f555", 0x88, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="f6d1b89e788e66759595fd64a6e2c10ce55f1df7c04a992c5ee4726499d6ed8839518a45e71c248aa036d596d2cc30fe6aeb90a19c4af763f6924f001edc36302e53cdecbcec2842e5af2ed7131582856ff01d433adf4bdb553d69ad39019c430b5df53847c99abc945aa663b27a2f984e5c692233c35465ce6b4dc11849d63afae4dd7564ab9fa9bb383cb284fa8a76acb393e437416aa004852e66f5d857b63a27dcdbe7b19446289c57e385c8aa97e4935e") (async) 1.352150643s ago: executing program 3 (id=3299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x200000800}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2006300, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.087746176s ago: executing program 9 (id=3300): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x7, 0x1, 0xf06, 0xa10c, 0xb4, 0x7f, 0x8}, 0x9c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000301000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 907.837545ms ago: executing program 7 (id=3301): socket$packet(0x11, 0x2, 0x300) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x33401}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20049848}, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x82002) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x14440, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 743.077693ms ago: executing program 9 (id=3302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x100) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)={0x74, r3, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x100, 0x3d}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ed0501f78666ca6bffc5828ae3d3fe2a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="4f7d30cbf7d4"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x7, 0x100}, 0x15108, 0x0, 0x43a1bd76, 0x7, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r5 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x800, 0x0, 0x101}) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xa0000001}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2400}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 738.113273ms ago: executing program 2 (id=3303): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x2, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0xfffffffe, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0x2, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0x2, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x6, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x88, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x5, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x7, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0x3, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x7, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a4, 0xc, 0x1, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x4, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x14001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0xfffffffe, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x9, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0x1, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0xfffffffc, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x8, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0x2bc, 0xfffffffa, 0x3, 0x2, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x3c, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x5, 0xa, 0x9, 0x200, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd0, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x4, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3fd, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8c1, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") (async) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000002100)=0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, r2, 0xd, r0, 0x0) (async) syz_open_dev$vcsu(&(0x7f0000002140), 0x9, 0x80180) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000240)={[{@nolazytime}, {@abort}, {@jqfmt_vfsv0}, {@inode_readahead_blks}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$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") (async) gettid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x4, 0xcec, 0x0, 0x4, 0x0}) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x29, [0x5, 0x9, 0x9, 0x9, 0x0, 0x0, 0x8, 0xa, 0x1, 0x8, 0xc, 0x2, 0x5, 0x6, 0xb, 0xb], 0x0, [0x8, 0x7fff, 0x9, 0xfc00, 0x7f, 0x0, 0x8834, 0x40, 0x4, 0xc445, 0x5, 0x8, 0x6, 0xb840, 0x9, 0x7], [0x1, 0xde, 0x1ff, 0x4, 0x5d, 0x4, 0x8, 0x4, 0xc5de, 0x1, 0x0, 0x7, 0x7, 0x265, 0x7ff, 0x11]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2c004041}, 0x0) (async) syz_io_uring_setup(0x38a9, &(0x7f00000000c0)={0x0, 0xffffffff, 0x400, 0x0, 0xfffffffe}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r5}) 737.960833ms ago: executing program 4 (id=3304): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) 602.8141ms ago: executing program 7 (id=3305): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x8) ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = epoll_create(0xf) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x30000001}) read$watch_queue(r5, &(0x7f0000004280)=""/144, 0x90) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)={0x140, r6, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_SOPASS={0xc1, 0x3, "3b98cb0ba301983a99aafd0af70b3e9e5ad653618461c2440fa856012befb2e50dd79ebe15ba38ae14a40baeb1c718e6e9def6e82d2fb0337a592586351d6d1f935208958a7a16829640e2918d93181284ac767ffa9e3f5a35929dc793ae1ea3505abf7f662e2fa74fda1c1b0303bea357ccc5e6d9910a04e5dcb68f8a9d8a8cb8005a96b082c4372592f398cb2c0f70c102a98d5e0bd17b1316ea291fc109b9672c80ec6d61f063986a9f7a2ea0d0e62e4575533e68c4c7e011d99867"}, @ETHTOOL_A_WOL_SOPASS={0x66, 0x3, "4a8807c9fed5e8a13b3436daa3ca91c1a6a8d1623191e1c24185be13305e99c8926ce55a27f97d6a08109dbca0914adc58be536c0528befb55aa3b4093ddbba6152af1e4591aaa5c6dca8bc9c5b46da5b3853454e401a6b59b909428793677d595ce"}]}, 0x140}}, 0x4011) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x30dbc0, 0x0) ioctl$TCSETS(r7, 0x40045431, 0x0) syz_open_pts(r7, 0x8000) acct(&(0x7f0000000040)='./file0\x00') ioctl$TIOCCBRK(r7, 0x5428) 402.43929ms ago: executing program 4 (id=3306): socket$key(0xf, 0x3, 0x2) socket(0xa, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x116c0000}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001340)=@deltfilter={0x54c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0xfff2, 0xffff}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x508, 0x2, [@TCA_FW_POLICE={0x430, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xafa}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc7}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7fff, 0x1000, 0xffff70b5, 0x4, 0xff, 0x9, 0x9, 0xffff, 0xffffffff, 0x60a, 0x2, 0x0, 0x1, 0x0, 0xc7, 0x7fff, 0x6, 0x698, 0x1, 0x5, 0x6, 0x3ff, 0x6, 0x8c7, 0xffffffff, 0x3, 0x40, 0x6, 0x7, 0x8, 0xffffff88, 0x5, 0xffff, 0x5, 0x9, 0x7, 0x2, 0x2, 0x6, 0x3, 0x9, 0x0, 0x1, 0x8, 0x101, 0xfee, 0x1c4, 0x54, 0x0, 0x7, 0xffffc767, 0x5, 0x2, 0xffffffd6, 0xfffffffe, 0xfffffc00, 0xa10, 0x4, 0xfffffffd, 0xb624, 0x9, 0x3, 0x4, 0xfffffffe, 0xe21, 0xd, 0x9, 0x1e, 0x2, 0x3, 0x8, 0x0, 0xfcaa, 0xb, 0x5, 0x101, 0x8, 0x8, 0x0, 0x1, 0x5, 0x8, 0x0, 0x7, 0x9, 0x7e, 0x5, 0xfffffff3, 0x3, 0x1, 0x10000, 0x1, 0xc6, 0x10, 0xb44, 0x80000001, 0x4, 0xd, 0x0, 0x0, 0x7fffffff, 0x9, 0xb00, 0x1, 0x6, 0x4, 0x7fffffff, 0x3, 0xf985, 0x7, 0x0, 0x3, 0x9, 0x5, 0x8, 0x3333, 0x2, 0xfd4, 0x6, 0x9, 0x101, 0x0, 0x13, 0xfffffffc, 0x20000000, 0x800, 0x8, 0x5, 0x9, 0x80000000, 0x97fb, 0xd945, 0x3a0f, 0x4, 0x200003, 0x3, 0x5, 0x4, 0x4, 0x5, 0xfffffffe, 0x2, 0x4, 0x40, 0xffffffff, 0x3, 0x3, 0x7, 0x9, 0x1, 0x3, 0x200, 0x84, 0x9, 0x5, 0x4, 0x7, 0x80000000, 0x3, 0x3, 0x6, 0x8000, 0x3232aa3c, 0x100, 0x7fff, 0x1ff, 0x5, 0x3, 0xc, 0x4, 0x6, 0x5, 0x7, 0x3ff, 0x3, 0x9, 0x9, 0x9, 0x800, 0x9, 0x3, 0x40, 0x1, 0x8, 0x4, 0x1, 0x5, 0x1, 0x2, 0x1, 0xb, 0xb8, 0x1, 0x9, 0x8, 0x9, 0x5, 0xf8, 0x1, 0x7f, 0x8, 0x9, 0x2, 0x5, 0x5, 0x4, 0x8, 0x4, 0x7, 0x3, 0x7c5, 0x0, 0x4, 0x6, 0x3, 0xb, 0xfffffff8, 0x5be, 0xffffffff, 0x80000000, 0x80000001, 0xffffc547, 0x0, 0x6e4, 0x8, 0x5, 0x1000, 0xfffffbff, 0x40, 0x3, 0x34ef, 0x34, 0x7, 0x0, 0x2, 0x2, 0x9, 0x991, 0x2, 0xdf3c, 0xa, 0x2, 0x800, 0xb, 0x7, 0x48125521, 0x4, 0xbf, 0x4, 0xa, 0x2, 0x6b, 0x7, 0x8000, 0x9]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0xffe0}}, @TCA_FW_MASK={0x8, 0x5, 0x8001}, @TCA_FW_POLICE={0xc4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x7, 0xfffffeff, 0x3, {0x9, 0x1, 0x7fff, 0x6, 0x4, 0x400}, {0x3, 0x1, 0x3, 0x5, 0x7, 0xfff}, 0x10001, 0x100, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8, 0x4, 0x1350, {0x3, 0x0, 0x9, 0x0, 0x0, 0x12000000}, {0x4, 0x2, 0x6, 0x5, 0xfffc, 0xfc51}, 0x3ff, 0x1, 0x9aa}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x954fae9edc4e1abc, 0x55bd, 0x6, 0x3fc, {0x7, 0x1, 0x9, 0x3, 0x1000, 0x101}, {0xf8, 0x0, 0x4, 0x0, 0x8, 0x8}, 0x2, 0xfffffff7, 0x2}}]}]}}, @TCA_RATE={0x6, 0x5, {0x10, 0xa9}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x54c}}, 0x20044800) unshare(0x60000600) socket(0x28, 0x5, 0xfffffff4) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sync() r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x3, 0x2, 0x4, 0x1}}, 0x80) 256.164727ms ago: executing program 3 (id=3307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) 255.441327ms ago: executing program 2 (id=3308): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000c40)=[{&(0x7f0000000240)={0x27, r1, 0x1, 0x2, 0x6, 0x42, "4d78ebccd02737b05cf3b8b4c3b023284e13c9dcc1d73f200ce9176d998d6465f1791d039ec63ce78006e096eb42e9ef2c7ca4a7d21be75012bc2e5a2e1ce3", 0x2e}, 0x60, &(0x7f0000000440)=[{&(0x7f0000000140)="ba4affd65574d5f648dd09ab0fc271b31d8e5cc0", 0x14}, {&(0x7f0000000380)="f8a7918f1750e2ba6deb9b6e846103c01dcad4e0bf795cb8424a09fb43fec39a7b18d5b4d17f4aa00f6bebf91ab0cc4634eafdc3113853998ed7f2ef4ee94de05899e4e173b09885591379730afc697009ea2f2960784cd8690f602d092e924e15a4703476baedf00c06bc34de0211875321319f27a6de52d9f78879f4ad24977e54f6b06a1afd5abfecd95fa0d22c98038100bf757ed9ff8af8f33f07c822cf7e35012420b8034111abb83c", 0xac}, {&(0x7f0000000300)="c9e8cc53e86bcaec8053c86bcf8ba3c0802686c54e870bb0b93e3dc5bed13004ca03ef0c53e53076436e28cd", 0x2c}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="900000000000000019010000020000008eb3b78045dacbbbb2168bcee2b00c7f8aada2dd34302c8195ae3c40b14f58cdf93a520bd7694959eb188831e46a9e54963bc36de90297d1b150d75c5cde67b191292b7236718d2e787ae335bd6344cb20e515f28e1850c049a861a20c65b5a350fc5f006946f5747c2089937e2ba130e4e42c77b01286d70187b3f475000000"], 0x90, 0x4000000}, {&(0x7f0000000580)={0x27, r2, 0x1, 0x2, 0x2, 0x3, "467fdd121909657cf5ede7e50db5357dd9d8a622e2e1b184ba243acc68959b12250b6b132333d228039bd9469f124522ce13932daa33f8469bafec612797d0", 0x23}, 0x60, &(0x7f00000007c0)=[{&(0x7f0000000680)="3f53dbec16f99f76276b8a9e627b5d1dcc0812", 0x13}, {&(0x7f00000006c0)="01440653ecfa207d20ea4e4f4b0b62ddfb6c9f9353b687823dc27e3ea4c5344d5dc5068244f55d57867b609c386f3a92c7b670c9e2665c89dfc51864707eeb827dac5d167e3c78846bbeac6f9b950bc0460ea952c419e158c180bbd706c2dfda3015c8e38d26b791866a4d1b2827566e8abcc054cca26d24b118abcf0e5c9ed07f9afb121647f5cb5b93b4ee9bdd818e4b5a389fc6f64a9cff87a1f104be239ebabd763937a62fd1c3a21d8be777a3499836cdc75ffa62fe61d661977e930f48f64de3a38c53ea", 0xc7}], 0x2, &(0x7f0000000800)={0x28, 0x114, 0x2, "9aa57149779937119434901f4cde03f1963e3286"}, 0x28, 0x20000040}, {&(0x7f0000000880)={0x27, r3, 0xffffffffffffffff, 0x4, 0x8, 0x2, "bb414bcf75bb78557e450b06538d1d0e95372fe9c01c9f54d6252e492a2419fcb92c50a942c51ce41cd5026c4df2ae78578588a0ceac6a4b9532ab48dbb4ed", 0x13}, 0x60, &(0x7f0000000b80)=[{&(0x7f0000000900)="38efed2a48c3408ce9740d762f6c26a430c857907081b86446f56522d5f3d116baa6e82161a87962250aadb8baf55696834a24a498613e699d93e3c797cc28b8721ba02d07ac0082ccc5cd3f712dd1bcebe6bc24a4399048d6c6fa804f9074cf07d32e37730349027dc33bdb1aeb92e00203c863773bbfa75f6a7a8dda9e902a22aaf15c845ea014557169299c1b460af130a8675ee3a7686d519125f76625c9cfb3a8b21fb7470b1ea7f1ede481", 0xae}, {&(0x7f00000009c0)="8b1086b385dc7922fadb4aa75c08b6e9fbe07d248d3c26546f0347e47cf1588baa1999b0eb212964d91db8623b03c28755e0fbcaab95f39021b8cb2b07f85c28dd5964eb4eef7ff1123f3128c869613bbd27147cef5756899ca15dd11054a4fd84fb4f08432fe01f3c2b95f96d2ea5e2d48d8bdecd47bee68aeac37a5c6f32b2f3", 0x81}, {&(0x7f0000000a80)="285fe92b07710a429abb6ffaf4c81026160e9b801ccf5b4b028ad5270eb0aced4dbaaad490deae9733ae8c94f1a89cfed44e592c63edb112d5fbc2eb2ffa84a5fec00a564965a800cc043db0105f6633f7d6bab975b1705936324519be8772eacfb9d8b31c67b3c59ca3e8fbf5efcb0518a11da1a5f8c0f6ba084354b62b4bfbb8ed14d27da153eb46582bdc001e1fceaad2bf1cae4dc5e65b3f8d69023ddf2998e051c1fae14cbf7db402ecc03a39e58fee12", 0xb3}, {&(0x7f0000000b40)="a3d2da76d954c8cf51c3f8", 0xb}], 0x4, &(0x7f0000000bc0)={0x78, 0x116, 0xc10, "be4e06788a34e115a4e5fbac1dcf8f463730a326fe581ab350565faa5012185d9e7a5fcadf59cae9cf935cee0df9a68897fa9768294f07a89631719f00e5c49c0baee78af9b4dc55d7cd66b8d6a8b623764bbe42bd71c0c6a1b1c3c51538f96f2ed9a31ee2070e1a"}, 0x78, 0x20000000}], 0x3, 0x20000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYRES64], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000600)={0x77359400}, 0x0) r5 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x7, 0x4, @tid=r5}, &(0x7f0000044000)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_usbip_server_init(0x2) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000100085"], 0x3c}}, 0x40000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0xfff5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) 240.624608ms ago: executing program 4 (id=3309): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0xfe, 0x847, &(0x7f00000001c0)="$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") getsockopt(r0, 0x8, 0x9, &(0x7f0000000040)=""/32, &(0x7f0000000100)=0x20) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) socketpair(0x6, 0x3, 0x12, &(0x7f0000000a40)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4d0283, 0x120) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x181240, 0x45}, 0xffffffffffffff5e) socket(0x10, 0x3, 0x0) (async) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0xfe, 0x847, &(0x7f00000001c0)="$eJzs3U9sHFf9APDvuHbiOGp+1Q9UoihNJ0mREpG6a6d1sXoo2/XYmXa9a+2uUSJUtVHrlChOW7WqSiNEyKUFxB9x4ljKseqlJ0BIIHEATkj0wIVDpUq9gAoCCYEQwmhnd5N17LXzx3GgfD4r7xu/efPm+2bH83bWO28CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIikMlMqTSRRzWuLJ9PBKjON+vwG83v1/WxVssF6I5L2T4yOxt5O1t5PXpl9d/vpUOzv/LY/RtvJaFzYffddj3xieKi3/AYB3aiDg2eN9P+SRHy1HdS508vLSy/dgkC20Td+0p0YveZF/r7Sfp7Lanmzns+X57I0b9bT6amp0gMnZpvpbF7NmqearWw+rTSycqveSI9UjqYT09PH02z8VH2xNjdTrma9zIfvnyyVptLHxxeycqNZrz3w+HizciKvVvPaXFFmsvRqtMs83N4Rn8hbaSsrz6fpmbPLS8c3C7VdaGJVzs5VO87+++768JUP/nJ2qb1DDqok6e6YkxMTk5MTUw9NP/RwqTQ8WZpcnVG6SlwuEUMRUSoN35Kdlttr9zp5w909Zs2MiJX/25qDN9ykodHuRDXyqMVinIw00hgqnovHt3dFGiNRiZloRD3m23m/Hbkyv/vo6vX/n37gj7/eaL39/X+vl997eV7naHsoDnQyDgzq/9dEsQWP4UG11t7pRNOf93K8FhfiXJyO5ViOpXjp6qV2XL3EOo9rKXPTj52ddGhra52LLGqRRzOSyGM+ykVOWuTUI43pmIqpKMVTcSJmoxlpzEYe1ciiGaeiGa3Iij2qEo3IohytqEcj0jgSlTgaaUzEdEzH8Ugji/E4FfVYjFrMxUyUi1rOrHRcvCquu7/y9I+f+82Hb7an40ycLV6ciQ0akrTfzO1+P+LPGxRa091fR//fLjHU3cG3pU9im4xe56u6FYdt2BIrxfn/8O0OAwAAALiFkuLT9yQiRuKeYmo2r2Zf6M0eub3RAQAAAFuh+Kbd/nZSnOrfE0n7/L+0Tsn3InZue3gAAADAFkiKa+ySiBiLeztTvcul1vsQAAAAAPgvVPz//0A7GYu4WGQ4/wcAAICPma8NGmP/gx3FGLtj0VzYmfz0T9FojCSXFk7el5wvt8uVz9/RWa6bfP5yja3ZfcmebiVFMjV8YXcSEcOVbH/SG/3yn91rCT4qnvddGYBw0Fj/ySYBxMYBFL/FN+Ngp8zBZzvps705nbWMzebVbLxSrz4ykXQ/HGm98vzZL0XR/K/X5vckcebs8tL4My8sFzWcv9R+vnS+Ozx80lsqumMnbBDLSu9qinvWb/FIcSFGd71jnfWW+tvfHU12aOP2J/3rfD0OdcocGuukY6vbP9pe58T4IxNRLu8ZamUnW6+s9LW+G8VEEUXR8p291ibX8Sq8Hoc7ZQ4fOdxJ1oliclUUz6+NYvJKFJeucVtccxRvHrx48q+/qCfZ8c2iOH6TUQDcLmeKUX+u9EK7il7oH51R1X/ww868/n53V2/J6znKnbnyLqO3fF9fNxxrevf0Rnr31+NIp8yRzvuJ4X3r9CuldY7oL5598ZfdI/qDb3/v+08e+NW7V/Xr1xHF23G0U6abxP//fEAf227zt67qVd9qL/HWwPU2q5PJq0mMJJ2bD8WF+8+eP/3c0nNLz09OHp8qPVgqPTQZI8VbhW6yXqRrNioA/2s2u8fOu1++XHTQXXiSBzc5q06Ge18pGI9n4oVYjmfjWHG1QUTcu36tY31fQzi2yVnrWN8dXo5tcm55pezk1WV3Hk5iQNnjfVvsU98tkr/dohcEALbBoU364STu6gz78+qd3SUul1gpPvy9I0mO9Z93fzEi9g3qc9t9+dHOjXN7Z8cxuC/v9/tu+tnt2CgA8DGXNT5KxlpvJI1GvvDUxPT0RLl1Iksb9coTaSOfmcvSvNbKGpUT5dpcli406q16pfdPy5msmTYXFxbqjVY6W2+kC/VmfrK483vavfV7M5sv11p5pblQzcrNLK3Ua61ypZXO5M1KurD4WDVvnsgaxcLNhaySz+aVciuv19JmfbFRycbTtJllfQXzmazWymfzbCTNa+lCI58vNy5FRHVxPktnsmalkS+06p0Ke+vKa7N7GvNFteOx5h8Kf7gd2xwAbreXX7tw7vTy8tJLNzbxu2spfLvbCACsppcGAAAAAAAAAAAAAID/fGsv12vnXteFgCNxw5cPvrwz2hO7bnTx9sSTnYb0xhW+qcsZ104Mb3WFG0985p2ta8XaekZ6OXdudt3nrlWv6Y7utt2mjXDuX1tX4dOPPnruwqWIKHKS4f7N+9jFvSfez6LXug3qWf8vZb1LXd/YE7HjR9/p5HxuQOFkeIu32HvdBvb+qgcVHlqds5Js8Ie/LYcfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgu/w4AAP//9+1FgQ==") (async) getsockopt(r0, 0x8, 0x9, &(0x7f0000000040)=""/32, &(0x7f0000000100)=0x20) (async) syz_genetlink_get_family_id$net_dm(&(0x7f0000000140), 0xffffffffffffffff) (async) socketpair(0x6, 0x3, 0x12, &(0x7f0000000a40)) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x4d0283, 0x120) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x181240, 0x45}, 0xffffffffffffff5e) (async) 238.731708ms ago: executing program 3 (id=3310): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000002c0)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}, {@inlinecrypt}, {@jqfmt_vfsv0}, {@noquota}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr\x00') exit(0xfffffffffffffffb) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.memory_spread_slab\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@norecovery}, {@mblk_io_submit}, {@barrier}, {@block_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000000000000e0000001000000000000000000000000fc010000000000000000000000000001000000000000000002000000ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000007d9848abc159e6c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000ecff00"], 0x1bc}}, 0x40800) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000d00)='./file0/file0\x00') pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f0005000000000000000500050000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000fedbdf25030000000500050000000000050014000300000008000b00000000000c0010003f4f00000000000008000b000400000005001300fe000000"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0xc010) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8541, 0x0) setresgid(0xee00, 0xee01, 0x0) ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="030000000000000000f8ffffffffffff050000000100000003"]) 192.94881ms ago: executing program 9 (id=3311): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000007c0)='./file0\x00', 0x8401, &(0x7f0000000840)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c686964652c73686f776173736f632c6d61703d6e6f726d616cca5c34bf54d8fef5e1fd96006e6a6f5f6965742c6d65703d6f5c662c646d6f64653d3078303030306c09000030303030303030322c6769643d04d8863ef5bcc105d304bb6fb48c072212dab31b3668de6cb57f6ee704", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x1, 0x688, &(0x7f0000000100)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780"], 0xac}}, 0x0) 58.364717ms ago: executing program 4 (id=3312): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x33, 0x701, 0x70bd2c, 0x25dfdbfe, {0x7}}, 0x14}}, 0x24044094) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, r4, 0x719, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x880) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xee68}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048841}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b502f3ff000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.989157ms ago: executing program 9 (id=3313): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x7, 0x1, 0xf06, 0xa10c, 0xb4, 0x7f, 0x8}, 0x9c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000ff8001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) 187.41µs ago: executing program 9 (id=3314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="c39bbc61", 0x4}], 0x1, 0x1, 0x7ff, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000011aa01bf9806e388ca20c79fda28943442027afa92869b4178c31ba5bacfee482683e89e77a0262ec75486fc841aea79e6c5dea5eecda3ae8134bd00e2d2b800005886ae7fdf85b9a2e7af4a4fa9f848fd12ba"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf253d000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c74696361737400"], 0x4c}, 0x1, 0x0, 0x0, 0x8}, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB], 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="851000000100000095000000"], 0x0, 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000408000000000000000000010000000000000000000000000d000000000000000000000009020000000000"], 0x0, 0x4a}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(r8, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, 0x0) syz_clone(0x3300000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3315): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[], 0x40}, 0x1, 0xba01, 0x0, 0x51}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x1227, &(0x7f00000024c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000dff070000000000000300000d"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x32e}, 0x28) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x8000000}) mknodat$loop(r3, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c05}, 0x4000851) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): tch(7, /dev/loop3p13, 10) failed: No such file or directory [ 385.840075][T14352] loop7: lost filesystem error report for type 5 error -117 [ 385.840229][T14352] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 385.930152][T14352] EXT4-fs (loop7): mount failed [ 386.087939][T14349] loop7: detected capacity change from 0 to 128 [ 386.438175][T14367] 9p: Bad value for 'wfdno' [ 386.498766][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 386.498784][ T28] audit: type=1326 audit(2000000056.647:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 386.558109][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2857'. [ 386.663671][ T28] audit: type=1326 audit(2000000056.647:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 386.739874][ T28] audit: type=1326 audit(2000000056.647:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 386.825320][ T28] audit: type=1326 audit(2000000056.647:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 386.921546][ T28] audit: type=1326 audit(2000000056.647:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 386.964128][ T28] audit: type=1326 audit(2000000056.647:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 387.018286][T14381] lo speed is unknown, defaulting to 1000 [ 387.060709][ T28] audit: type=1326 audit(2000000056.647:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 387.096704][ T28] audit: type=1326 audit(2000000056.647:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 387.120571][ T28] audit: type=1326 audit(2000000056.647:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 387.160172][T14383] lo speed is unknown, defaulting to 1000 [ 387.202512][ T28] audit: type=1326 audit(2000000056.647:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz.7.2860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bcf6ec799 code=0x7ffc0000 [ 387.390480][T14377] lo speed is unknown, defaulting to 1000 [ 388.232832][T14408] loop7: detected capacity change from 0 to 1024 [ 388.252622][T14408] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 388.275777][T14408] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.2870: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 388.295846][T14408] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 388.296124][T14408] EXT4-fs error (device loop7): ext4_quota_enable:7195: comm syz.7.2870: Bad quota inode: 3, type: 0 [ 388.305516][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 388.305563][ C1] EXT4-fs (loop7): initial error at time 2000000058: ext4_ext_check_inode:521: inode 3 [ 388.305591][ C1] EXT4-fs (loop7): last error at time 2000000058: ext4_ext_check_inode:521: inode 3 [ 388.348712][T14408] loop7: lost filesystem error report for type 5 error -117 [ 388.348886][T14408] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 388.373758][T14408] EXT4-fs (loop7): mount failed [ 388.454633][T14408] loop7: detected capacity change from 0 to 128 [ 388.474699][T14415] loop5: detected capacity change from 0 to 128 [ 388.795109][T14422] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14422 comm=syz.3.2873 [ 389.381694][T14431] loop8: detected capacity change from 0 to 512 [ 389.402872][T14431] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 389.434298][T14430] lo speed is unknown, defaulting to 1000 [ 389.444823][T14431] EXT4-fs error (device loop8): ext4_init_orphan_info:618: comm syz.8.2875: orphan file block 0: bad magic [ 389.491915][T14431] loop8: lost filesystem error report for type 5 error -117 [ 389.492163][T14431] EXT4-fs (loop8): mount failed [ 389.499641][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 389.499662][ C0] EXT4-fs (loop8): initial error at time 2000000059: ext4_init_orphan_info:618 [ 389.499688][ C0] EXT4-fs (loop8): last error at time 2000000059: ext4_init_orphan_info:618 [ 389.533799][T14438] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2874'. [ 389.640116][T14438] loop3: detected capacity change from 0 to 8192 [ 389.744225][T14443] 9p: Bad value for 'rfdno' [ 389.810078][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2877'. [ 389.851473][T14445] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2878'. [ 389.865953][T14445] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2878'. [ 390.824749][T14459] syzkaller0: entered promiscuous mode [ 390.854987][T14459] syzkaller0: entered allmulticast mode [ 390.876642][T14461] batadv0: entered promiscuous mode [ 390.892365][T14461] batadv0: left promiscuous mode [ 391.094377][T14467] loop3: detected capacity change from 0 to 1024 [ 391.198134][T14467] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 391.329254][T14467] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.2887: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 391.386388][T14467] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 391.386540][T14467] EXT4-fs error (device loop3): ext4_quota_enable:7195: comm syz.3.2887: Bad quota inode: 3, type: 0 [ 391.395784][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 391.395803][ C0] EXT4-fs (loop3): initial error at time 2000000061: ext4_ext_check_inode:521: inode 3 [ 391.395835][ C0] EXT4-fs (loop3): last error at time 2000000061: ext4_ext_check_inode:521: inode 3 [ 391.445473][T14467] loop3: lost filesystem error report for type 5 error -117 [ 391.448361][T14467] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 391.473026][T14467] EXT4-fs (loop3): mount failed [ 391.606589][T14467] loop3: detected capacity change from 0 to 128 [ 391.636541][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2892'. [ 391.645644][T14483] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2892'. [ 391.763901][T14490] batadv0: entered promiscuous mode [ 391.773307][T14492] 9p: Bad value for 'rfdno' [ 391.809950][T14490] batadv0: left promiscuous mode [ 391.827456][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2894'. [ 391.950958][T14499] loop2: detected capacity change from 0 to 512 [ 392.008149][T14499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.033102][T14499] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.072134][T14499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2896'. [ 392.236819][T13361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.706026][T14513] syzkaller0: entered promiscuous mode [ 392.711787][T14513] syzkaller0: entered allmulticast mode [ 392.852308][T14522] loop3: detected capacity change from 0 to 128 [ 393.018707][T14529] loop5: detected capacity change from 0 to 1024 [ 393.058396][T14529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.146348][ T4615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.231960][T14538] netlink: 'syz.2.2909': attribute type 10 has an invalid length. [ 393.251471][T14538] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.2909'. [ 393.371114][T14547] loop8: detected capacity change from 0 to 512 [ 393.564755][T14547] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.710110][T14547] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 394.090286][T14557] batadv0: entered promiscuous mode [ 394.112322][T14557] batadv0: left promiscuous mode [ 394.168789][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 394.201574][T11957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.250159][T14565] netlink: 108 bytes leftover after parsing attributes in process `syz.8.2914'. [ 394.277725][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2914'. [ 394.330390][T14570] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 394.340096][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 394.340113][ T28] audit: type=1400 audit(2000000063.981:3216): avc: denied { relabelto } for pid=14567 comm="syz.5.2917" name="501" dev="tmpfs" ino=2714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 394.379742][ T28] audit: type=1400 audit(2000000063.981:3217): avc: denied { associate } for pid=14567 comm="syz.5.2917" name="501" dev="tmpfs" ino=2714 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 394.412713][T14571] loop8: detected capacity change from 0 to 512 [ 394.438204][ T28] audit: type=1400 audit(2000000064.056:3218): avc: denied { add_name } for pid=14567 comm="syz.5.2917" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 394.442510][T14569] syzkaller0: entered promiscuous mode [ 394.477760][ T28] audit: type=1400 audit(2000000064.056:3219): avc: denied { associate } for pid=14567 comm="syz.5.2917" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 394.490456][T14569] syzkaller0: entered allmulticast mode [ 394.516306][T14571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 394.542887][T14571] ext4 filesystem being mounted at /127/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.589459][ T28] audit: type=1400 audit(2000000064.205:3220): avc: denied { remove_name } for pid=4615 comm="syz-executor" name="file0" dev="tmpfs" ino=2719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 394.716827][ T28] audit: type=1400 audit(2000000064.205:3221): avc: denied { rmdir } for pid=4615 comm="syz-executor" name="501" dev="tmpfs" ino=2714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 394.724136][T14571] Quota error (device loop8): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 394.775135][T14571] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 394.789824][T14571] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.2918: Failed to acquire dquot type 0 [ 394.872926][T11957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 395.170459][T14564] syzkaller0: entered promiscuous mode [ 395.177231][T14564] syzkaller0: entered allmulticast mode [ 395.258238][T14584] lo speed is unknown, defaulting to 1000 [ 395.405075][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2923'. [ 395.465291][T14592] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2922'. [ 395.606895][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2924'. [ 395.683585][ T28] audit: type=1400 audit(2000000065.234:3222): avc: denied { mounton } for pid=14594 comm="syz.5.2924" path="/" dev="configfs" ino=2079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 396.341901][T14590] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 396.363537][T14647] loop2: detected capacity change from 0 to 512 [ 396.416830][T14647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.448322][T14647] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 396.563025][T14655] loop7: detected capacity change from 0 to 1024 [ 396.635614][T14655] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 396.704902][T14655] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.2927: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 396.774537][T14655] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 396.774734][T14655] EXT4-fs error (device loop7): ext4_quota_enable:7195: comm syz.7.2927: Bad quota inode: 3, type: 0 [ 396.783847][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 396.783870][ C0] EXT4-fs (loop7): initial error at time 2000000066: ext4_ext_check_inode:521: inode 3 [ 396.783915][ C0] EXT4-fs (loop7): last error at time 2000000066: ext4_ext_check_inode:521: inode 3 [ 396.865695][T14655] loop7: lost filesystem error report for type 5 error -117 [ 396.865815][T14655] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 396.891481][T14655] EXT4-fs (loop7): mount failed [ 396.919664][T13361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.959003][T14693] lo speed is unknown, defaulting to 1000 [ 396.989033][T14655] loop7: detected capacity change from 0 to 128 [ 397.005455][ T28] audit: type=1400 audit(2000000066.469:3223): avc: denied { mounton } for pid=14694 comm="syz.5.2931" path="/505/file0" dev="tmpfs" ino=2740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 397.239179][T14704] batadv0: entered promiscuous mode [ 397.248726][T14704] batadv0: left promiscuous mode [ 397.304563][T14709] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2935'. [ 397.351138][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'. [ 397.405198][T14717] loop7: detected capacity change from 0 to 128 [ 397.429451][T14719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2939'. [ 397.457760][T14723] syzkaller0: entered promiscuous mode [ 397.463393][T14723] syzkaller0: entered allmulticast mode [ 399.903448][T14744] loop5: detected capacity change from 0 to 512 [ 399.967082][T14737] loop8: detected capacity change from 0 to 1024 [ 400.689879][T14744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.698726][T14737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.743936][T14752] loop2: detected capacity change from 0 to 1024 [ 400.805811][T14744] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.818853][T14752] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 400.875608][T14744] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2942'. [ 400.900108][T14752] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.2944: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 400.956457][T14752] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 400.956611][T14752] EXT4-fs error (device loop2): ext4_quota_enable:7195: comm syz.2.2944: Bad quota inode: 3, type: 0 [ 400.966835][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 400.966852][ C1] EXT4-fs (loop2): initial error at time 2000000070: ext4_ext_check_inode:521: inode 3 [ 400.966893][ C1] EXT4-fs (loop2): last error at time 2000000070: ext4_ext_check_inode:521: inode 3 [ 401.033500][T11957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.043151][T14752] loop2: lost filesystem error report for type 5 error -117 [ 401.043307][T14752] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 401.076760][ T4615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.086080][T14752] EXT4-fs (loop2): mount failed [ 401.200800][T14746] loop2: detected capacity change from 0 to 128 [ 401.314911][T14779] loop7: detected capacity change from 0 to 764 [ 401.321598][T14779] iso9660: Bad value for 'map' [ 401.337353][T14779] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2950'. [ 401.349410][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2950'. [ 401.371735][T14754] netlink: 'syz.3.2945': attribute type 21 has an invalid length. [ 401.424980][T14785] syzkaller0: entered promiscuous mode [ 401.457758][T14788] loop7: detected capacity change from 0 to 512 [ 401.465403][T14785] syzkaller0: entered allmulticast mode [ 401.486047][T14788] ext3: Unknown parameter 'permit_directio' [ 401.583178][T14792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.608879][T14792] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.622033][T13429] bio_check_eod: 23 callbacks suppressed [ 401.622049][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.622049][T13429] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 401.643712][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.643712][T13429] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 401.657369][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.657369][T13429] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 401.671001][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.671001][T13429] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 401.684498][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.684498][T13429] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 401.698135][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.698135][T13429] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 401.736385][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.736385][T13429] loop2: rw=1, sector=249, nr_sectors = 16 limit=128 [ 401.766560][ T28] kauditd_printk_skb: 106 callbacks suppressed [ 401.781667][ T28] audit: type=1400 audit(2000000070.931:3330): avc: denied { map } for pid=14796 comm="syz.5.2958" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 401.888364][T13429] kworker/u8:26: attempt to access beyond end of device [ 401.888364][T13429] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 402.856050][T13429] kworker/u8:26: attempt to access beyond end of device [ 402.856050][T13429] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 402.982142][T13429] kworker/u8:26: attempt to access beyond end of device [ 402.982142][T13429] loop2: rw=1, sector=305, nr_sectors = 8 limit=128 [ 403.051662][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.246481][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 403.430397][T14816] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 403.492628][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2962'. [ 403.546451][T14816] bond1: entered promiscuous mode [ 403.556310][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2962'. [ 403.639218][T14816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.723439][ T28] audit: type=1400 audit(2000000072.755:3331): avc: denied { setattr } for pid=14821 comm="syz.2.2963" name="[io_uring]" dev="anon_inodefs" ino=40867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.019096][T14829] set_capacity_and_notify: 2 callbacks suppressed [ 404.019112][T14829] loop3: detected capacity change from 0 to 764 [ 404.038468][T14829] iso9660: Bad value for 'map' [ 404.449751][T14846] loop3: detected capacity change from 0 to 512 [ 404.463296][T14846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.533068][ T28] audit: type=1400 audit(2000000073.513:3332): avc: denied { read } for pid=14850 comm="syz.8.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 404.552748][T14851] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 404.553678][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2971'. [ 404.577048][ T28] audit: type=1400 audit(2000000073.541:3333): avc: denied { setopt } for pid=14850 comm="syz.8.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 404.603974][T14846] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.618598][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2971'. [ 404.701434][T14859] loop7: detected capacity change from 0 to 1024 [ 404.774180][T14859] EXT4-fs: inline encryption not supported [ 404.788942][T14862] loop8: detected capacity change from 0 to 128 [ 404.797051][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.828142][T14859] EXT4-fs: Ignoring removed nobh option [ 404.835497][T14859] EXT4-fs: Ignoring removed bh option [ 404.923165][T14859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.063763][T14872] loop3: detected capacity change from 0 to 128 [ 409.410312][T14883] netlink: 'syz.3.2979': attribute type 10 has an invalid length. [ 409.705944][ T28] audit: type=1400 audit(2000000078.349:3334): avc: denied { audit_write } for pid=14885 comm="syz.8.2990" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 409.798201][ T28] audit: type=1107 audit(2000000078.349:3335): pid=14885 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 409.852064][ T28] audit: type=1400 audit(2000000078.423:3336): avc: denied { accept } for pid=14885 comm="syz.8.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 409.987557][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.145800][T14895] loop7: detected capacity change from 0 to 512 [ 410.229822][T14895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.234061][T14897] batadv0: entered promiscuous mode [ 410.253429][T14895] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.276194][T14897] batadv0: left promiscuous mode [ 410.288782][T14895] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2982: corrupted xattr block 33: invalid ea_ino [ 410.303619][T14895] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 410.312925][T14895] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2982: corrupted xattr block 33: invalid ea_ino [ 410.328220][T14895] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 410.338985][ T28] audit: type=1400 audit(2000000078.947:3337): avc: denied { unlink } for pid=14894 comm="syz.7.2982" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 410.366027][T14895] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 410.380967][T14895] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2970: inode #15: comm syz.7.2982: corrupted xattr block 33: invalid ea_ino [ 410.394797][T14895] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 410.395081][T14895] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 410.633138][T14914] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2984'. [ 410.658510][T14912] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 410.791050][T14922] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2987'. [ 410.881276][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.895989][T14926] loop2: detected capacity change from 0 to 512 [ 410.942572][T14926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.005707][T14926] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 411.554785][T13361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.970330][T14947] loop5: detected capacity change from 0 to 512 [ 412.067846][T14947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.119712][T14955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.171986][T14947] ext4 filesystem being mounted at /516/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.186435][T14955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.298641][T14965] loop7: detected capacity change from 0 to 764 [ 412.331646][T14965] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 412.371958][T14967] FAULT_INJECTION: forcing a failure. [ 412.371958][T14967] name failslab, interval 1, probability 0, space 0, times 0 [ 412.413931][T14967] CPU: 0 UID: 0 PID: 14967 Comm: syz.5.2997 Tainted: G W syzkaller #0 PREEMPT(full) [ 412.413965][T14967] Tainted: [W]=WARN [ 412.413971][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.414020][T14967] Call Trace: [ 412.414026][T14967] [ 412.414035][T14967] __dump_stack+0x1d/0x30 [ 412.414063][T14967] dump_stack_lvl+0x95/0xd0 [ 412.414083][T14967] dump_stack+0x15/0x1b [ 412.414107][T14967] should_fail_ex+0x263/0x280 [ 412.414131][T14967] should_failslab+0x8c/0xb0 [ 412.414154][T14967] kmem_cache_alloc_noprof+0x66/0x400 [ 412.414241][T14967] ? ext4_init_io_end+0x31/0xb0 [ 412.414268][T14967] ext4_init_io_end+0x31/0xb0 [ 412.414292][T14967] ext4_do_writepages+0x6ea/0x2840 [ 412.414395][T14967] ? xas_load+0x413/0x430 [ 412.414417][T14967] ? __rcu_read_unlock+0x4e/0x70 [ 412.414437][T14967] ? xa_load+0xb1/0xe0 [ 412.414456][T14967] ? __account_obj_stock+0x211/0x350 [ 412.414537][T14967] ? xas_load+0x413/0x430 [ 412.414555][T14967] ext4_writepages+0x18f/0x320 [ 412.414655][T14967] ? __pfx_ext4_writepages+0x10/0x10 [ 412.414675][T14967] do_writepages+0x1c6/0x310 [ 412.414762][T14967] ? obj_cgroup_charge_account+0x122/0x1a0 [ 412.414789][T14967] ? should_fail_ex+0x30/0x280 [ 412.414817][T14967] ? inode_to_bdi+0x47/0xa0 [ 412.414875][T14967] ? _raw_spin_unlock+0x9/0x30 [ 412.414897][T14967] ? wbc_attach_and_unlock_inode+0x91/0x2b0 [ 412.414923][T14967] filemap_write_and_wait_range+0x166/0x370 [ 412.415009][T14967] fiemap_prep+0x14d/0x170 [ 412.415092][T14967] iomap_fiemap+0xa0/0x4f0 [ 412.415123][T14967] ext4_fiemap+0x1fc/0x220 [ 412.415196][T14967] ? __pfx_ext4_fiemap+0x10/0x10 [ 412.415219][T14967] do_vfs_ioctl+0xc9f/0xe70 [ 412.415332][T14967] ? __rcu_read_unlock+0x4e/0x70 [ 412.415351][T14967] ? __fget_files+0x184/0x1c0 [ 412.415402][T14967] ? mutex_lock+0x57/0x90 [ 412.415431][T14967] __se_sys_ioctl+0x82/0x140 [ 412.415447][T14967] __x64_sys_ioctl+0x43/0x50 [ 412.415537][T14967] x64_sys_call+0x1563/0x3020 [ 412.415563][T14967] do_syscall_64+0x12c/0x370 [ 412.415583][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.415650][T14967] RIP: 0033:0x7ff19386c799 [ 412.415665][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.415680][T14967] RSP: 002b:00007ff19229e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.415699][T14967] RAX: ffffffffffffffda RBX: 00007ff193ae6090 RCX: 00007ff19386c799 [ 412.415712][T14967] RDX: 0000200000000580 RSI: 00000000c020660b RDI: 0000000000000005 [ 412.415791][T14967] RBP: 00007ff19229e090 R08: 0000000000000000 R09: 0000000000000000 [ 412.415802][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.415813][T14967] R13: 00007ff193ae6128 R14: 00007ff193ae6090 R15: 00007ffdffa16538 [ 412.415831][T14967] [ 412.428030][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.769753][ T4615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.785255][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.794257][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.809029][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.818062][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.827056][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.834822][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.843829][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 412.998491][T14982] loop8: detected capacity change from 0 to 1024 [ 413.024575][T14982] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 413.101228][T14982] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.3004: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 413.136706][T14982] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 413.136889][T14982] EXT4-fs error (device loop8): ext4_quota_enable:7195: comm syz.8.3004: Bad quota inode: 3, type: 0 [ 413.146161][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 413.146183][ C0] EXT4-fs (loop8): initial error at time 2000000081: ext4_ext_check_inode:521: inode 3 [ 413.146214][ C0] EXT4-fs (loop8): last error at time 2000000081: ext4_ext_check_inode:521: inode 3 [ 413.189817][T14982] loop8: lost filesystem error report for type 5 error -117 [ 413.219822][T14982] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 413.251279][T14982] EXT4-fs (loop8): mount failed [ 413.253745][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 413.269068][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unknown main item tag 0x0 [ 413.286159][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: unexpected long global item [ 413.298810][ T3476] hid-generic 0009:0002:FFFFFFFE.0002: probe with driver hid-generic failed with error -22 [ 413.404304][T14965] syz.7.3000 (14965) used greatest stack depth: 5432 bytes left [ 413.404320][T14982] loop8: detected capacity change from 0 to 128 [ 413.727685][ T857] bio_check_eod: 101 callbacks suppressed [ 413.727702][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.727702][ T857] loop8: rw=1, sector=153, nr_sectors = 8 limit=128 [ 413.760689][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.760689][ T857] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 413.780198][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.780198][ T857] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 413.795769][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.795769][ T857] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 413.811391][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.811391][ T857] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 413.827293][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.827293][ T857] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 413.842141][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.842141][ T857] loop8: rw=1, sector=249, nr_sectors = 16 limit=128 [ 413.857456][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.857456][ T857] loop8: rw=1, sector=273, nr_sectors = 8 limit=128 [ 413.872253][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.872253][ T857] loop8: rw=1, sector=289, nr_sectors = 8 limit=128 [ 413.886614][ T857] kworker/u8:6: attempt to access beyond end of device [ 413.886614][ T857] loop8: rw=1, sector=305, nr_sectors = 8 limit=128 [ 414.030543][T15001] random: crng reseeded on system resumption [ 414.058201][T14937] batman_adv: batadv0: Interface deactivated: dummy0 [ 414.268349][ T3517] Bluetooth: hci0: command 0x1003 tx timeout [ 414.280133][ T7728] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 415.434474][T14939] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 415.479630][T15004] tipc: MTU too low for tipc bearer [ 415.496123][T13429] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 415.515764][T13429] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 415.529861][T13429] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 415.538393][T13429] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 415.581939][T13429] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 415.594946][T13429] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 415.614169][ T857] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 415.629742][ T857] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 415.667229][T15032] loop8: detected capacity change from 0 to 512 [ 415.702796][T15032] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 415.723311][T15032] EXT4-fs (loop8): couldn't read superblock of external journal [ 415.731248][T15026] sctp: [Deprecated]: syz.5.3011 (pid 15026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.731248][T15026] Use struct sctp_sack_info instead [ 415.756025][T15032] loop8: detected capacity change from 0 to 512 [ 415.792686][T15032] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.824135][T15032] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 415.854009][T15032] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3014: bg 0: block 248: padding at end of block bitmap is not set [ 415.869186][T15032] loop8: lost filesystem error report for type 5 error -117 [ 415.869408][T15032] Quota error (device loop8): write_blk: dquota write failed [ 415.876825][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 415.876846][ C0] EXT4-fs (loop8): last error at time 2000000084: ext4_validate_block_bitmap:441 [ 415.900208][T15032] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 415.914420][T15032] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3014: Failed to acquire dquot type 1 [ 415.937877][T15032] loop8: lost filesystem error report for type 5 error -117 [ 415.938959][T15051] loop2: detected capacity change from 0 to 1024 [ 415.952882][T15032] EXT4-fs (loop8): 1 truncate cleaned up [ 415.959040][T15032] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 415.964302][T15051] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 415.990984][T15058] netlink: 15678 bytes leftover after parsing attributes in process `syz.5.3019'. [ 416.007289][T15032] Quota error (device loop8): write_blk: dquota write failed [ 416.015984][T15051] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #3: comm syz.2.3017: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 416.019916][T15032] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 416.035347][T15051] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 416.053221][T15033] lo speed is unknown, defaulting to 1000 [ 416.053921][T15051] EXT4-fs error (device loop2): ext4_quota_enable:7195: comm syz.2.3017: Bad quota inode: 3, type: 0 [ 416.063379][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 416.078696][T15058] SELinux: Context ›Y7»ôj [ 416.078696][T15058] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 416.078696][T15058] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 416.078979][ C1] EXT4-fs (loop2): initial error at time 2000000084: ext4_ext_check_inode:521 [ 416.085947][T15058] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 416.129626][ C1] : inode 3 [ 416.150057][ C1] EXT4-fs (loop2): last error at time 2000000084: ext4_ext_check_inode:521: inode 3 [ 416.171613][T15032] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3014: Failed to acquire dquot type 1 [ 416.183311][T15051] loop2: lost filesystem error report for type 5 error -117 [ 416.183430][T15051] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 416.207284][T15058] SELinux: Context ¬õ–KM*º,hÃc¶¼I¨Ç¾Êû·ßÌ‹yÖÔõ+á.ë+yÒÿ0ª[prŸ;J©A9ÅõIqÒ j¦Ç¼=7)oM{ìší–nFÓÙ=«¾ø‰Xmnxºœr¶Dß㑉³åž³ç4ÌÚTW²ü}»tŠóôòò%È–Y…É^sìlF¬€¤§Bˆ53²‰hÖmì‰âÝ5þ}ßã;J™¬ìÁXom%~"á¿~9mM¾–~alʺLàI8­„iÛþ&†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 416.286975][T15058] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 416.325910][T15032] Quota error (device loop8): write_blk: dquota write failed [ 416.333812][T15058] SELinux: Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq :Å~€t6µuY¼x’´ð(ÇèQßïž8…Å×÷NPZðeoÄìáþQ[aSêáI> is not valid (left unmapped). [ 416.363681][T15032] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 416.373735][T15032] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3014: Failed to acquire dquot type 1 [ 416.408717][T11957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 416.437864][T15054] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.448487][T15069] loop8: detected capacity change from 0 to 512 [ 416.497055][T15069] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.528573][T15069] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 416.547411][T15054] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.575203][T15033] chnl_net:caif_netlink_parms(): no params data found [ 416.743963][T15054] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.766850][ T857] bond0: (slave netdevsim1): Releasing backup interface [ 416.810337][T15033] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.826073][T15033] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.866190][T15033] bridge_slave_0: entered allmulticast mode [ 416.873068][T15087] loop2: detected capacity change from 0 to 1024 [ 416.886168][T15033] bridge_slave_0: entered promiscuous mode [ 416.900239][T15087] ext4: Unknown parameter 'uid' [ 416.906430][T15033] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.915753][T15033] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.918268][ T28] audit: type=1326 audit(2000000085.083:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.8.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1afb48c799 code=0x7ffc0000 [ 416.924574][T15033] bridge_slave_1: entered allmulticast mode [ 416.979269][ T28] audit: type=1326 audit(2000000085.083:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.8.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1afb48c799 code=0x7ffc0000 [ 416.982678][T15033] bridge_slave_1: entered promiscuous mode [ 417.022188][ T28] audit: type=1326 audit(2000000085.083:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.8.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f1afb48c799 code=0x7ffc0000 [ 417.047045][ T28] audit: type=1326 audit(2000000085.083:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15068 comm="syz.8.3021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1afb48c799 code=0x7ffc0000 [ 417.053834][T15090] loop2: detected capacity change from 0 to 4096 [ 417.085216][T15090] EXT4-fs: Ignoring removed bh option [ 417.110466][T15033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.141785][T15074] lo speed is unknown, defaulting to 1000 [ 417.157307][T13429] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.167241][T15090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.182679][T15033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.201576][T13429] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.217092][T13429] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.235838][T15033] team0: Port device team_slave_0 added [ 417.242950][T15087] netlink: 'syz.2.3024': attribute type 4 has an invalid length. [ 417.252754][T13429] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.273801][T15033] team0: Port device team_slave_1 added [ 417.317319][T15033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.324295][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.354289][T15033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.423679][T15033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.441734][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.490724][T15033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.511277][ T857] bridge_slave_1: left allmulticast mode [ 417.516956][ T857] bridge_slave_1: left promiscuous mode [ 417.524508][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.533693][ T857] bridge_slave_0: left allmulticast mode [ 417.540578][ T857] bridge_slave_0: left promiscuous mode [ 417.546335][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.559073][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.570995][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.583151][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.594810][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.606491][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.618496][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.631111][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.642714][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.654541][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.666288][ T857] geneve1 (unregistering): left allmulticast mode [ 417.666379][T11957] EXT4-fs warning (device loop8): ext4_empty_dir:3087: inode #12: comm syz-executor: directory missing '.' [ 417.674249][ T857] geneve1 (unregistering): left promiscuous mode [ 417.711675][T15077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.915316][ T857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.925607][ T857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.935156][ T857] bond0 (unregistering): Released all slaves [ 417.942474][ T857] bond1 (unregistering): Released all slaves [ 417.985696][T13361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.998611][ T857] tipc: Left network mode [ 418.025148][T15033] hsr_slave_0: entered promiscuous mode [ 418.033825][T15033] hsr_slave_1: entered promiscuous mode [ 418.039665][T15033] debugfs: 'hsr0' already exists in 'hsr' [ 418.046763][T15033] Cannot create hsr debugfs directory [ 418.053841][T15112] lo speed is unknown, defaulting to 1000 [ 418.062370][T15074] chnl_net:caif_netlink_parms(): no params data found [ 418.281833][ T857] dummy0: left promiscuous mode [ 418.287098][ T857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.474367][T15152] loop7: detected capacity change from 0 to 1024 [ 418.493255][T15152] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 418.525719][T15152] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.3032: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 418.544096][ T857] team0 (unregistering): Port device team_slave_1 removed [ 418.551349][T15152] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 418.551562][T15152] EXT4-fs error (device loop7): ext4_quota_enable:7195: comm syz.7.3032: Bad quota inode: 3, type: 0 [ 418.551589][T15152] loop7: lost filesystem error report for type 5 error -117 [ 418.551719][T15152] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 418.551817][T15152] EXT4-fs (loop7): mount failed [ 418.569432][T15124] loop2: detected capacity change from 0 to 256 [ 418.614016][ T857] team0 (unregistering): Port device team_slave_0 removed [ 418.693649][T15074] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.702058][T15074] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.710251][T15074] bridge_slave_0: entered allmulticast mode [ 418.716923][T15074] bridge_slave_0: entered promiscuous mode [ 418.734590][T15074] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.771247][T15074] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.785525][T15074] bridge_slave_1: entered allmulticast mode [ 418.800506][T15074] bridge_slave_1: entered promiscuous mode [ 418.870819][T15074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.883027][T15074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.935490][T15074] team0: Port device team_slave_0 added [ 418.953731][T15074] team0: Port device team_slave_1 added [ 418.966572][T15137] lo speed is unknown, defaulting to 1000 [ 419.136341][T15074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.145904][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.174384][T15074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.186246][T15074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.193261][T15074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.233693][T15074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.297438][T15074] hsr_slave_0: entered promiscuous mode [ 419.312494][T15074] hsr_slave_1: entered promiscuous mode [ 419.335529][T15074] debugfs: 'hsr0' already exists in 'hsr' [ 419.350053][T15183] loop7: detected capacity change from 0 to 128 [ 419.357414][T15074] Cannot create hsr debugfs directory [ 419.476482][T15192] loop7: detected capacity change from 0 to 512 [ 419.487236][T15192] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 419.543673][T15192] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 419.594177][T15137] chnl_net:caif_netlink_parms(): no params data found [ 419.637099][T15192] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3035'. [ 419.775395][T15033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.786653][T15033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.796926][T15137] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.804022][T15137] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.812930][T15137] bridge_slave_0: entered allmulticast mode [ 419.820457][T15137] bridge_slave_0: entered promiscuous mode [ 419.827516][T15137] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.834666][T15137] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.843004][T15137] bridge_slave_1: entered allmulticast mode [ 419.850380][T15137] bridge_slave_1: entered promiscuous mode [ 419.860115][T15033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.868875][T15033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.886341][ T857] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.910434][T15137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.921799][T15137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.949130][ T857] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.965837][T15137] team0: Port device team_slave_0 added [ 419.976381][T15137] team0: Port device team_slave_1 added [ 419.984687][T15074] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 419.997207][T15074] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 420.019923][T15137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.027365][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.053964][T15137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.075034][ T857] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.088947][T15074] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 420.098886][T15137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.107133][T15137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.133485][T15137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.145545][T15074] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 420.160472][ T857] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.202729][T15137] hsr_slave_0: entered promiscuous mode [ 420.208937][T15137] hsr_slave_1: entered promiscuous mode [ 420.215873][T15137] debugfs: 'hsr0' already exists in 'hsr' [ 420.221633][T15137] Cannot create hsr debugfs directory [ 420.311314][ T857] bridge_slave_1: left allmulticast mode [ 420.317230][ T857] bridge_slave_1: left promiscuous mode [ 420.323962][ T857] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.332386][ T857] bridge_slave_0: left allmulticast mode [ 420.338072][ T857] bridge_slave_0: left promiscuous mode [ 420.343974][ T857] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.507662][ T857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.518024][ T857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.528786][ T857] bond0 (unregistering): Released all slaves [ 420.558015][ T857] tipc: Left network mode [ 420.559906][T15033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.588175][T15033] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.602387][T13434] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.609542][T13434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.651224][T13434] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.658409][T13434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.682942][T15246] /dev/loop7: Can't open blockdev [ 420.705953][ T857] hsr_slave_0: left promiscuous mode [ 420.719120][ T857] hsr_slave_1: left promiscuous mode [ 420.724718][ T857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.743441][ T857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.751933][ T857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.759567][ T857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.773358][ T857] veth1_macvtap: left promiscuous mode [ 420.787317][ T857] veth0_macvtap: left promiscuous mode [ 420.806542][ T857] veth1_vlan: left promiscuous mode [ 420.814156][ T857] veth0_vlan: left promiscuous mode [ 420.886988][ T857] team0 (unregistering): Port device team_slave_1 removed [ 420.900516][ T857] team0 (unregistering): Port device team_slave_0 removed [ 420.933364][T15074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.954122][T15074] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.975136][T15074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.987169][T15074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.023309][T13427] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.030418][T13427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.051304][T13427] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.058459][T13427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.105550][T15033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 421.129667][T15033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.181868][T15074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.282304][T15033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.457817][T15033] veth0_vlan: entered promiscuous mode [ 421.472093][T15074] veth0_vlan: entered promiscuous mode [ 421.487753][T15074] veth1_vlan: entered promiscuous mode [ 421.502409][T15074] veth0_macvtap: entered promiscuous mode [ 421.511033][T15074] veth1_macvtap: entered promiscuous mode [ 421.523544][T15074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.556074][T15074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.569456][T15033] veth1_vlan: entered promiscuous mode [ 421.582705][T13429] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.612370][T15304] set_capacity_and_notify: 1 callbacks suppressed [ 421.612387][T15304] loop7: detected capacity change from 0 to 1024 [ 421.631987][T13429] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.644108][T13429] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.661266][T13429] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.672117][T15304] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.689741][T15033] veth0_macvtap: entered promiscuous mode [ 421.740701][T15033] veth1_macvtap: entered promiscuous mode [ 421.804871][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.988528][T15033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.012329][T15033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.063816][T13430] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.082211][T13430] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.111240][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 422.111256][ T28] audit: type=1326 audit(2000000089.957:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15320 comm="syz.9.3023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x80000000 [ 422.159031][T13430] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.200589][T13430] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.285854][T15137] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.353036][T15137] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.369248][T15137] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.379974][T15342] 9p: Bad value for 'rfdno' [ 422.396844][T15137] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.446400][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3013'. [ 423.111605][T15137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.367719][T15137] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.395214][T15357] lo speed is unknown, defaulting to 1000 [ 423.412245][T15376] loop3: detected capacity change from 0 to 512 [ 423.428993][T13430] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.436121][T13430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.446926][T15376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.464029][T13430] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.471227][T13430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.483562][T15376] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.510159][T15137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.520782][T15137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.802453][T15137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.838317][T15033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.873006][T15392] batadv0: entered promiscuous mode [ 423.896632][T15397] 9p: Bad value for 'wfdno' [ 423.916457][T15392] batadv0: left promiscuous mode [ 423.943735][T15395] IPVS: set_ctl: invalid protocol: 2 10.1.1.3:20002 [ 423.954918][T15395] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 424.159989][T15404] loop7: detected capacity change from 0 to 256 [ 424.187208][T15406] loop3: detected capacity change from 0 to 1024 [ 424.231500][T15406] EXT4-fs: inline encryption not supported [ 424.275977][T15406] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 424.348936][T15406] tipc: Started in network mode [ 424.355308][T15406] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 424.369147][ T28] audit: type=1400 audit(2000000092.043:3354): avc: denied { connect } for pid=15420 comm="syz.2.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 424.431366][T15423] loop7: detected capacity change from 0 to 1024 [ 424.442876][T15406] tipc: Enabling of bearer rejected, failed to enable media [ 424.482361][T15423] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 424.535725][T15423] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #3: comm syz.7.3063: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 28930, max 4(4), depth 0(0) [ 424.572920][T15137] veth0_vlan: entered promiscuous mode [ 424.596779][T15423] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 424.604170][T15137] veth1_vlan: entered promiscuous mode [ 424.619978][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 424.626601][ C1] EXT4-fs (loop7): initial error at time 2000000092: ext4_ext_check_inode:521: inode 3 [ 424.636297][ C1] EXT4-fs (loop7): last error at time 2000000092: ext4_ext_check_inode:521: inode 3 [ 424.657937][T15423] EXT4-fs error (device loop7): ext4_quota_enable:7195: comm syz.7.3063: Bad quota inode: 3, type: 0 [ 424.696674][T15450] loop6: detected capacity change from 0 to 8 [ 424.699496][T15137] veth0_macvtap: entered promiscuous mode [ 424.717512][T15423] loop7: lost filesystem error report for type 5 error -117 [ 424.717702][T15423] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 424.719280][T15137] veth1_macvtap: entered promiscuous mode [ 424.726330][ C1] blk_print_req_error: 6 callbacks suppressed [ 424.726363][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 424.762421][ C1] buffer_io_error: 10 callbacks suppressed [ 424.762434][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.769621][T15137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.784211][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 424.788860][T15423] EXT4-fs (loop7): mount failed [ 424.794872][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.810153][T15450] loop6: unable to read partition table [ 424.818485][T15450] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 424.843438][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 424.846849][T15445] team0: Port device vlan2 added [ 424.854197][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.871447][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 424.882196][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.898120][T15137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.919179][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 424.929852][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.930088][T15460] netlink: 320 bytes leftover after parsing attributes in process `syz.9.3068'. [ 424.939421][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 424.957401][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.965375][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 424.976157][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.977496][T10670] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.985448][T15450] loop6: unable to read partition table [ 424.995053][ C1] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 425.010144][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.021096][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 425.031780][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.048185][T15450] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 425.094184][ C0] critical medium error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 425.104882][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 425.148883][T15467] loop2: detected capacity change from 0 to 4096 [ 425.175510][T10670] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.228046][T15467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.252688][T10670] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.305508][T13434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.330009][T15467] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3069: corrupted inode contents [ 425.391286][T15467] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.3069: mark_inode_dirty error [ 425.437030][T15467] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3069: corrupted inode contents [ 425.460691][T15467] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3069: mark_inode_dirty error [ 425.483493][ T28] audit: type=1326 audit(2000000093.119:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 425.509031][ T28] audit: type=1326 audit(2000000093.119:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 425.533791][ T28] audit: type=1326 audit(2000000093.119:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 425.569223][T15467] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3069: corrupted inode contents [ 425.608746][ T28] audit: type=1326 audit(2000000093.119:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 425.627049][T15519] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.3069'. [ 425.655499][T15521] Cannot find set identified by id 0 to match [ 425.669217][T15467] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.3069: mark_inode_dirty error [ 425.720269][T15467] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3069: corrupted inode contents [ 425.778606][T15467] EXT4-fs error (device loop2): ext4_truncate:4587: inode #15: comm syz.2.3069: mark_inode_dirty error [ 425.838458][T15467] EXT4-fs error (device loop2) in ext4_setattr:5983: Corrupt filesystem [ 425.918906][T15497] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3069: corrupted inode contents [ 425.942225][ T28] audit: type=1326 audit(2000000093.221:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 426.020486][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3077'. [ 426.050388][ T28] audit: type=1326 audit(2000000093.221:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 426.107147][ T28] audit: type=1326 audit(2000000093.240:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 426.132686][T15548] loop9: detected capacity change from 0 to 1024 [ 426.149622][T13361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.177904][T15548] EXT4-fs: inline encryption not supported [ 426.220893][T15548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.223733][ T28] audit: type=1326 audit(2000000093.240:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15490 comm="syz.4.3030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b5f0c799 code=0x7ffc0000 [ 426.325035][T15548] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.3078: Allocating blocks 449-513 which overlap fs metadata [ 426.414599][T15548] EXT4-fs (loop9): Remounting filesystem read-only [ 426.441767][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3083'. [ 426.452158][T15572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.464823][T15074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.507277][T15572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.552588][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3085'. [ 426.635741][T15596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3088'. [ 426.652709][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 426.676452][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3087'. [ 426.707889][T15600] netlink: 'syz.4.3087': attribute type 14 has an invalid length. [ 426.748487][T15607] bond2: Removing last ns target with arp_interval on [ 426.757151][T15600] netlink: 'syz.4.3087': attribute type 12 has an invalid length. [ 427.028071][T15628] lo speed is unknown, defaulting to 1000 [ 427.039433][T15631] loop3: detected capacity change from 0 to 1024 [ 427.068840][T15631] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 427.287283][T15649] syzkaller0: entered promiscuous mode [ 427.294051][T15649] syzkaller0: entered allmulticast mode [ 427.426607][T15647] loop4: detected capacity change from 0 to 512 [ 427.483669][T15661] lo speed is unknown, defaulting to 1000 [ 427.567245][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 427.567264][ T28] audit: type=1326 audit(2000000095.045:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.777422][ T28] audit: type=1326 audit(2000000095.045:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.810390][T15647] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3096: invalid indirect mapped block 256 (level 2) [ 427.880734][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3103'. [ 427.884333][T15677] loop9: detected capacity change from 0 to 512 [ 427.948657][ T28] audit: type=1326 audit(2000000095.045:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.948691][ T28] audit: type=1326 audit(2000000095.045:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.948771][ T28] audit: type=1326 audit(2000000095.045:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.948814][ T28] audit: type=1326 audit(2000000095.045:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.948912][ T28] audit: type=1326 audit(2000000095.045:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.948968][ T28] audit: type=1326 audit(2000000095.045:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.949010][ T28] audit: type=1326 audit(2000000095.111:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 427.949038][ T28] audit: type=1326 audit(2000000095.111:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.9.3102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8032c6c799 code=0x7ffc0000 [ 428.081795][T15677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.081876][T15677] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.082588][T15677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.849705][T15738] loop7: detected capacity change from 0 to 1024 [ 428.853386][T15738] EXT4-fs: inline encryption not supported [ 428.865551][T15738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.901002][T15738] EXT4-fs error (device loop7): mb_free_blocks:2047: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 428.901270][T15738] EXT4-fs (loop7): Remounting filesystem read-only [ 428.904192][T15738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3106'. [ 429.035644][T15750] syzkaller0: entered promiscuous mode [ 429.176067][T15647] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 429.212957][T15750] syzkaller0: entered allmulticast mode [ 429.294401][T15754] loop9: detected capacity change from 0 to 512 [ 429.318024][T15754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.318143][T15754] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.535081][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.545154][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 429.553150][ C1] EXT4-fs (loop4): initial error at time 2000000096: ext4_free_branches:1023: inode 11 [ 429.565123][ C1] EXT4-fs (loop4): last error at time 2000000096: ext4_free_branches:1023: inode 11 [ 429.656550][T15647] EXT4-fs (loop4): 2 truncates cleaned up [ 429.702378][T15763] loop7: detected capacity change from 0 to 764 [ 429.744610][T15763] rock: directory entry would overflow storage [ 429.765182][T15763] rock: sig=0x4f50, size=4, remaining=3 [ 429.772396][T15763] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 429.978804][T15647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.015471][T15074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.136833][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.365181][T15790] loop7: detected capacity change from 0 to 764 [ 430.433763][T15790] iso9660: Bad value for 'map' [ 430.455177][T15790] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3117'. [ 430.644979][T15795] lo speed is unknown, defaulting to 1000 [ 430.739866][T15780] ALSA: seq fatal error: cannot create timer (-19) [ 430.930179][T15805] loop2: detected capacity change from 0 to 8192 [ 430.966487][T15815] syzkaller0: entered promiscuous mode [ 430.972550][T15815] syzkaller0: entered allmulticast mode [ 430.982257][ T4216] loop2: p1 < > p2 p4 < p5 > [ 430.986970][ T4216] loop2: partition table partially beyond EOD, truncated [ 430.995535][ T4216] loop2: p1 start 134217728 is beyond EOD, truncated [ 431.005781][ T4216] loop2: p2 size 591360 extends beyond EOD, truncated [ 431.044560][ T4216] loop2: p5 size 591360 extends beyond EOD, truncated [ 431.073755][T15805] loop2: p1 < > p2 p4 < p5 > [ 431.078618][T15805] loop2: partition table partially beyond EOD, truncated [ 431.078741][T15805] loop2: p1 start 134217728 is beyond EOD, truncated [ 431.078762][T15805] loop2: p2 size 591360 extends beyond EOD, truncated [ 431.101005][T15805] loop2: p5 size 591360 extends beyond EOD, truncated [ 431.298597][T15826] lo speed is unknown, defaulting to 1000 [ 431.298570][T15828] netlink: 'syz.3.3127': attribute type 39 has an invalid length. [ 431.527279][T15835] loop7: detected capacity change from 0 to 512 [ 431.717706][T15837] loop4: detected capacity change from 0 to 512 [ 431.726216][T15837] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 431.768520][T15837] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 431.808556][T15837] EXT4-fs (loop4): group descriptors corrupted! [ 432.285211][T15862] lo speed is unknown, defaulting to 1000 [ 432.356710][T15873] IPv6: addrconf: prefix option has invalid lifetime [ 432.739127][T15890] loop7: detected capacity change from 0 to 512 [ 432.902840][T15896] tmpfs: Bad value for 'nr_inodes' [ 433.321736][T15912] pim6reg: tun_chr_ioctl cmd 1074812118 [ 433.342075][T15912] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.383457][T15915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=15915 comm=syz.9.3149 [ 433.396670][T15915] netlink: 'syz.9.3149': attribute type 58 has an invalid length. [ 433.404669][T15915] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3149'. [ 433.416724][T15912] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.482865][T15912] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.580869][T15912] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.656011][T15935] syzkaller0: entered promiscuous mode [ 433.661738][T15935] syzkaller0: entered allmulticast mode [ 433.706272][T15939] loop3: detected capacity change from 0 to 512 [ 433.717045][T15939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.718617][T13427] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.734178][T15939] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 433.816234][T13427] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.844941][T15950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3156'. [ 433.875929][T13427] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.884463][T13427] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.916054][T15955] loop2: detected capacity change from 0 to 512 [ 433.956403][T15943] lo speed is unknown, defaulting to 1000 [ 433.988900][T15955] macvlan0: entered allmulticast mode [ 434.010516][T15955] veth1_vlan: entered allmulticast mode [ 434.073700][T15964] loop2: detected capacity change from 0 to 1024 [ 434.148910][T15964] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 434.220581][T15957] lo speed is unknown, defaulting to 1000 [ 434.237968][T15964] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 434.284766][T15964] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.3157: iget: special inode unallocated [ 434.315281][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3159'. [ 434.338391][T15964] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 434.338554][T15964] EXT4-fs (loop2): Remounting filesystem read-only [ 434.348933][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 434.348958][ C1] EXT4-fs (loop2): initial error at time 2000000101: ext4_get_journal_inode:5863: inode 32 [ 434.348996][ C1] EXT4-fs (loop2): last error at time 2000000101: ext4_get_journal_inode:5863: inode 32 [ 434.391656][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3159'. [ 434.430663][T15976] veth0_macvtap: left promiscuous mode [ 434.457350][T15964] EXT4-fs (loop2): no journal found [ 434.479904][T15964] EXT4-fs (loop2): can't get journal size [ 434.487911][T15964] EXT4-fs (loop2): filesystem is read-only [ 434.494471][T15964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.512503][T15955] syzkaller1: entered promiscuous mode [ 434.521285][T15955] syzkaller1: entered allmulticast mode [ 434.531677][T15955] veth1_vlan: left allmulticast mode [ 434.540007][T15955] macvlan0 (unregistering): left allmulticast mode [ 434.576357][T15033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.641079][T15981] loop7: detected capacity change from 0 to 512 [ 434.667608][T15981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.703382][T15981] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.791329][T13361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.022369][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3164'. [ 435.660897][T16013] syzkaller0: entered promiscuous mode [ 435.666707][T16013] syzkaller0: entered allmulticast mode [ 435.735236][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.832756][T16021] lo speed is unknown, defaulting to 1000 [ 435.945108][T16028] loop7: detected capacity change from 0 to 512 [ 435.962144][T16031] loop2: detected capacity change from 0 to 128 [ 436.009839][T16028] EXT4-fs: Ignoring removed nobh option [ 436.019457][T16021] loop4: detected capacity change from 0 to 512 [ 436.043957][T16021] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 436.048338][T16031] bio_check_eod: 101 callbacks suppressed [ 436.048354][T16031] syz.2.3169: attempt to access beyond end of device [ 436.048354][T16031] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 436.079901][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 436.079919][ T28] audit: type=1326 audit(2000000103.024:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.4.3167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93b5f0c799 code=0x0 [ 436.109661][T16031] syz.2.3169: attempt to access beyond end of device [ 436.109661][T16031] loop2: rw=2049, sector=170, nr_sectors = 16 limit=128 [ 436.109713][T16031] syz.2.3169: attempt to access beyond end of device [ 436.109713][T16031] loop2: rw=2049, sector=202, nr_sectors = 16 limit=128 [ 436.109758][T16031] syz.2.3169: attempt to access beyond end of device [ 436.109758][T16031] loop2: rw=2049, sector=234, nr_sectors = 16 limit=128 [ 436.109839][T16031] syz.2.3169: attempt to access beyond end of device [ 436.109839][T16031] loop2: rw=2049, sector=154, nr_sectors = 16 limit=128 [ 436.109881][T16031] syz.2.3169: attempt to access beyond end of device [ 436.109881][T16031] loop2: rw=2049, sector=218, nr_sectors = 16 limit=128 [ 436.109922][T16031] syz.2.3169: attempt to access beyond end of device [ 436.109922][T16031] loop2: rw=2049, sector=186, nr_sectors = 16 limit=128 [ 436.133158][T16028] EXT4-fs (loop7): 1 orphan inode deleted [ 436.203818][T16031] syz.2.3169: attempt to access beyond end of device [ 436.203818][T16031] loop2: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 436.224700][T16028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.317381][T16041] lo speed is unknown, defaulting to 1000 [ 436.409814][T16028] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.883665][T16061] FAULT_INJECTION: forcing a failure. [ 436.883665][T16061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.898080][T16061] CPU: 1 UID: 0 PID: 16061 Comm: syz.2.3176 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.898136][T16061] Tainted: [W]=WARN [ 436.898143][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.898154][T16061] Call Trace: [ 436.898161][T16061] [ 436.898169][T16061] __dump_stack+0x1d/0x30 [ 436.898202][T16061] dump_stack_lvl+0x95/0xd0 [ 436.898278][T16061] dump_stack+0x15/0x1b [ 436.898298][T16061] should_fail_ex+0x263/0x280 [ 436.898343][T16061] should_fail+0xb/0x20 [ 436.898364][T16061] should_fail_usercopy+0x1a/0x20 [ 436.898393][T16061] _copy_from_user+0x1c/0xb0 [ 436.898549][T16061] ___sys_recvmsg+0xaa/0x3b0 [ 436.898595][T16061] do_recvmmsg+0x1ef/0x560 [ 436.898647][T16061] ? fput+0x8f/0xc0 [ 436.898673][T16061] __x64_sys_recvmmsg+0xe5/0x170 [ 436.898778][T16061] x64_sys_call+0x80f/0x3020 [ 436.898809][T16061] do_syscall_64+0x12c/0x370 [ 436.898890][T16061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.898966][T16061] RIP: 0033:0x7fa9d674c799 [ 436.898983][T16061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.898999][T16061] RSP: 002b:00007fa9d519f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 436.899019][T16061] RAX: ffffffffffffffda RBX: 00007fa9d69c5fa0 RCX: 00007fa9d674c799 [ 436.899053][T16061] RDX: 0000000000000001 RSI: 0000200000004040 RDI: 0000000000000003 [ 436.899068][T16061] RBP: 00007fa9d519f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.899148][T16061] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 436.899164][T16061] R13: 00007fa9d69c6038 R14: 00007fa9d69c5fa0 R15: 00007ffc5f33de48 [ 436.899182][T16061] [ 437.125646][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 437.152609][T16053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.174221][T16067] loop2: detected capacity change from 0 to 4096 [ 437.192013][T16067] EXT4-fs: Ignoring removed bh option [ 437.211435][T16053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.219223][ T28] audit: type=1400 audit(2000000104.072:3441): avc: denied { getopt } for pid=16070 comm="syz.3.3178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 437.286488][ T28] audit: type=1400 audit(2000000104.072:3442): avc: denied { mount } for pid=16070 comm="syz.3.3178" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 437.327165][ T28] audit: type=1400 audit(2000000104.175:3443): avc: denied { prog_load } for pid=16050 comm="syz.7.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 437.340651][T16067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.365148][T16080] syzkaller0: entered promiscuous mode [ 437.371885][T16080] syzkaller0: entered allmulticast mode [ 437.401508][ T28] audit: type=1400 audit(2000000104.259:3444): avc: denied { read write } for pid=16066 comm="syz.2.3177" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.428985][T16067] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.3177: corrupted inode contents [ 437.429277][T16063] loop4: detected capacity change from 0 to 4096 [ 437.450285][T16067] EXT4-fs (loop2): Remounting filesystem read-only [ 437.461480][T16063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.487449][ T28] audit: type=1400 audit(2000000104.259:3445): avc: denied { open } for pid=16066 comm="syz.2.3177" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.515268][ T28] audit: type=1400 audit(2000000104.287:3446): avc: denied { ioctl } for pid=16062 comm="syz.4.3175" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 437.584654][T16084] iso9660: Bad value for 'map' [ 437.610690][T16084] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3181'. [ 437.642687][T13361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.652613][ T857] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 437.664615][ T857] Quota error (device loop2): write_blk: dquota write failed [ 437.680485][ T857] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 437.683919][T16088] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3183'. [ 437.690694][ T28] audit: type=1400 audit(2000000104.530:3447): avc: denied { prog_run } for pid=16087 comm="syz.3.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 437.923292][T16101] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 438.374546][T16105] FAULT_INJECTION: forcing a failure. [ 438.374546][T16105] name failslab, interval 1, probability 0, space 0, times 0 [ 438.388438][T16105] CPU: 1 UID: 0 PID: 16105 Comm: syz.7.3188 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.388522][T16105] Tainted: [W]=WARN [ 438.388530][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.388544][T16105] Call Trace: [ 438.388552][T16105] [ 438.388560][T16105] __dump_stack+0x1d/0x30 [ 438.388585][T16105] dump_stack_lvl+0x95/0xd0 [ 438.388612][T16105] dump_stack+0x15/0x1b [ 438.388636][T16105] should_fail_ex+0x263/0x280 [ 438.388666][T16105] should_failslab+0x8c/0xb0 [ 438.388689][T16105] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 438.388800][T16105] ? scm_fp_dup+0x40/0x1d0 [ 438.388819][T16105] ? __skb_try_recv_datagram+0x289/0x320 [ 438.388851][T16105] kmemdup_noprof+0x2b/0x70 [ 438.388873][T16105] scm_fp_dup+0x40/0x1d0 [ 438.388917][T16105] __unix_dgram_recvmsg+0x6a6/0x870 [ 438.388974][T16105] unix_seqpacket_recvmsg+0xaf/0xc0 [ 438.388998][T16105] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 438.389085][T16105] sock_recvmsg+0xf5/0x120 [ 438.389112][T16105] ____sys_recvmsg+0xf5/0x280 [ 438.389149][T16105] ___sys_recvmsg+0x11f/0x3b0 [ 438.389200][T16105] do_recvmmsg+0x1ef/0x560 [ 438.389232][T16105] ? fput+0x8f/0xc0 [ 438.389279][T16105] __x64_sys_recvmmsg+0xe5/0x170 [ 438.389314][T16105] x64_sys_call+0x80f/0x3020 [ 438.389357][T16105] do_syscall_64+0x12c/0x370 [ 438.389430][T16105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.389451][T16105] RIP: 0033:0x7f7bcf6ec799 [ 438.389474][T16105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.389494][T16105] RSP: 002b:00007f7bce147028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 438.389529][T16105] RAX: ffffffffffffffda RBX: 00007f7bcf965fa0 RCX: 00007f7bcf6ec799 [ 438.389542][T16105] RDX: 0000000000000001 RSI: 0000200000004040 RDI: 0000000000000003 [ 438.389555][T16105] RBP: 00007f7bce147090 R08: 0000000000000000 R09: 0000000000000000 [ 438.389568][T16105] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 438.389581][T16105] R13: 00007f7bcf966038 R14: 00007f7bcf965fa0 R15: 00007ffcc798cb38 [ 438.389628][T16105] [ 438.399279][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.462398][T16108] set_capacity_and_notify: 2 callbacks suppressed [ 438.462416][T16108] loop7: detected capacity change from 0 to 2048 [ 438.467561][T16101] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 438.528055][T16108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.668726][T16111] loop4: detected capacity change from 0 to 512 [ 438.678225][T16111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.697996][T16111] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.712297][T16111] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 438.771089][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.787271][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3191'. [ 438.797396][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.862658][T16127] loop4: detected capacity change from 0 to 764 [ 438.879679][T16127] iso9660: Bad value for 'map' [ 438.890001][T16127] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3193'. [ 439.040644][T16143] loop4: detected capacity change from 0 to 1024 [ 439.047294][T16146] FAULT_INJECTION: forcing a failure. [ 439.047294][T16146] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 439.062349][T16146] CPU: 1 UID: 0 PID: 16146 Comm: syz.7.3199 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.062384][T16146] Tainted: [W]=WARN [ 439.062422][T16146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.062433][T16146] Call Trace: [ 439.062440][T16146] [ 439.062448][T16146] __dump_stack+0x1d/0x30 [ 439.062474][T16146] dump_stack_lvl+0x95/0xd0 [ 439.062497][T16146] dump_stack+0x15/0x1b [ 439.062521][T16146] should_fail_ex+0x263/0x280 [ 439.062593][T16146] should_fail_alloc_page+0xf2/0x100 [ 439.062614][T16146] __alloc_frozen_pages_noprof+0x108/0x360 [ 439.062642][T16146] alloc_pages_mpol+0xb3/0x260 [ 439.062729][T16146] folio_alloc_mpol_noprof+0x39/0x80 [ 439.062755][T16146] shmem_get_folio_gfp+0x3da/0xd60 [ 439.062779][T16146] ? css_rstat_updated+0xbb/0x280 [ 439.062841][T16146] shmem_fault+0xf6/0x250 [ 439.062921][T16146] __do_fault+0xbc/0x200 [ 439.062943][T16146] handle_mm_fault+0xfab/0x3020 [ 439.062987][T16146] do_user_addr_fault+0x3fd/0x1050 [ 439.063079][T16146] exc_page_fault+0x62/0xa0 [ 439.063116][T16146] asm_exc_page_fault+0x26/0x30 [ 439.063158][T16146] RIP: 0010:__put_user_4+0xd/0x20 [ 439.063179][T16146] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 439.063198][T16146] RSP: 0018:ffffc9000382f8f0 EFLAGS: 00050202 [ 439.063220][T16146] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000200000001dd0 [ 439.063317][T16146] RDX: 0000000000000000 RSI: 0000000000000097 RDI: 0000000000000000 [ 439.063332][T16146] RBP: 0000000000000006 R08: 000188811a165367 R09: 0000000000000000 [ 439.063348][T16146] R10: 000188811a165380 R11: 000188811a165387 R12: ffff88811b573cc0 [ 439.063364][T16146] R13: 0000200000001dd0 R14: ffff88811b573cc0 R15: 0000000000000097 [ 439.063416][T16146] receive_fd+0xf6/0x1d0 [ 439.063458][T16146] scm_detach_fds+0x13b/0x410 [ 439.063484][T16146] __scm_recv_common+0x257/0x370 [ 439.063503][T16146] scm_recv_unix+0x4a/0x230 [ 439.063608][T16146] __unix_dgram_recvmsg+0x777/0x870 [ 439.063632][T16146] unix_seqpacket_recvmsg+0xaf/0xc0 [ 439.063668][T16146] ? __pfx_unix_seqpacket_recvmsg+0x10/0x10 [ 439.063701][T16146] sock_recvmsg+0xf5/0x120 [ 439.063722][T16146] ____sys_recvmsg+0xf5/0x280 [ 439.063771][T16146] ___sys_recvmsg+0x11f/0x3b0 [ 439.063821][T16146] do_recvmmsg+0x1ef/0x560 [ 439.063862][T16146] ? fput+0x8f/0xc0 [ 439.063952][T16146] __x64_sys_recvmmsg+0xe5/0x170 [ 439.063990][T16146] x64_sys_call+0x80f/0x3020 [ 439.064091][T16146] do_syscall_64+0x12c/0x370 [ 439.064118][T16146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.064139][T16146] RIP: 0033:0x7f7bcf6ec799 [ 439.064157][T16146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.064238][T16146] RSP: 002b:00007f7bce147028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 439.064256][T16146] RAX: ffffffffffffffda RBX: 00007f7bcf965fa0 RCX: 00007f7bcf6ec799 [ 439.064323][T16146] RDX: 0000000000000001 RSI: 0000200000004040 RDI: 0000000000000003 [ 439.064338][T16146] RBP: 00007f7bce147090 R08: 0000000000000000 R09: 0000000000000000 [ 439.064352][T16146] R10: 0000000040000002 R11: 0000000000000246 R12: 0000000000000001 [ 439.064364][T16146] R13: 00007f7bcf966038 R14: 00007f7bcf965fa0 R15: 00007ffcc798cb38 [ 439.064382][T16146] [ 439.069010][T16143] EXT4-fs: inline encryption not supported [ 439.479423][T16143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.675750][T16160] lo speed is unknown, defaulting to 1000 [ 439.807403][T16168] loop7: detected capacity change from 0 to 1024 [ 439.818223][T16143] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.3197: Allocating blocks 449-513 which overlap fs metadata [ 439.842865][T16143] EXT4-fs (loop4): Remounting filesystem read-only [ 439.901233][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.911903][T16168] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 439.927019][T16174] FAULT_INJECTION: forcing a failure. [ 439.927019][T16174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.932339][T16168] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.951502][T16174] CPU: 0 UID: 0 PID: 16174 Comm: syz.3.3209 Tainted: G W syzkaller #0 PREEMPT(full) [ 439.951579][T16174] Tainted: [W]=WARN [ 439.951586][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.951597][T16174] Call Trace: [ 439.951604][T16174] [ 439.951613][T16174] __dump_stack+0x1d/0x30 [ 439.951637][T16174] dump_stack_lvl+0x95/0xd0 [ 439.951682][T16174] dump_stack+0x15/0x1b [ 439.951700][T16174] should_fail_ex+0x263/0x280 [ 439.951762][T16174] should_fail+0xb/0x20 [ 439.951786][T16174] should_fail_usercopy+0x1a/0x20 [ 439.951844][T16174] _copy_from_user+0x1c/0xb0 [ 439.951870][T16174] ___sys_sendmsg+0xc1/0x1e0 [ 439.951896][T16174] ? path_openat+0x1b01/0x2050 [ 439.951996][T16174] __sys_sendmmsg+0x185/0x320 [ 439.952108][T16174] __x64_sys_sendmmsg+0x57/0x70 [ 439.952135][T16174] x64_sys_call+0x27aa/0x3020 [ 439.952184][T16174] do_syscall_64+0x12c/0x370 [ 439.952206][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.952225][T16174] RIP: 0033:0x7fcc0dc3c799 [ 439.952248][T16174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.952271][T16174] RSP: 002b:00007fcc0c697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.952291][T16174] RAX: ffffffffffffffda RBX: 00007fcc0deb5fa0 RCX: 00007fcc0dc3c799 [ 439.952304][T16174] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 439.952316][T16174] RBP: 00007fcc0c697090 R08: 0000000000000000 R09: 0000000000000000 [ 439.952328][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.952359][T16174] R13: 00007fcc0deb6038 R14: 00007fcc0deb5fa0 R15: 00007fff547b3a78 [ 439.952376][T16174] [ 440.152557][T16176] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3207: bg 0: block 112: padding at end of block bitmap is not set [ 440.214506][T16176] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 440.227623][T16176] EXT4-fs (loop7): This should not happen!! Data will be lost [ 440.227623][T16176] [ 440.254228][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 440.490823][T16189] 9p: Bad value for 'rfdno' [ 441.204006][T16204] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3215'. [ 441.225371][T16204] netlink: 'syz.2.3215': attribute type 10 has an invalid length. [ 441.261677][T16204] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3215'. [ 441.319317][T16204] bond0: entered promiscuous mode [ 441.334223][T16204] bond_slave_0: entered promiscuous mode [ 441.408951][T16204] bond_slave_1: entered promiscuous mode [ 441.438947][T16217] loop4: detected capacity change from 0 to 512 [ 441.463887][T16204] bridge0: port 3(bond0) entered blocking state [ 441.493039][T16204] bridge0: port 3(bond0) entered disabled state [ 441.513806][T16217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.530884][T16217] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 441.590590][T16204] bond0: entered allmulticast mode [ 441.615832][T16204] bond_slave_0: entered allmulticast mode [ 441.645479][T16204] bond_slave_1: entered allmulticast mode [ 441.687995][T16204] bridge0: port 3(bond0) entered blocking state [ 441.694363][T16204] bridge0: port 3(bond0) entered forwarding state [ 441.729632][T16227] FAULT_INJECTION: forcing a failure. [ 441.729632][T16227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.813839][T16227] CPU: 1 UID: 0 PID: 16227 Comm: syz.7.3221 Tainted: G W syzkaller #0 PREEMPT(full) [ 441.813872][T16227] Tainted: [W]=WARN [ 441.813957][T16227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.813972][T16227] Call Trace: [ 441.813981][T16227] [ 441.813989][T16227] __dump_stack+0x1d/0x30 [ 441.814014][T16227] dump_stack_lvl+0x95/0xd0 [ 441.814035][T16227] dump_stack+0x15/0x1b [ 441.814119][T16227] should_fail_ex+0x263/0x280 [ 441.814150][T16227] should_fail+0xb/0x20 [ 441.814172][T16227] should_fail_usercopy+0x1a/0x20 [ 441.814202][T16227] _copy_from_user+0x1c/0xb0 [ 441.814245][T16227] __copy_msghdr+0x244/0x300 [ 441.814282][T16227] ___sys_sendmsg+0x10c/0x1e0 [ 441.814316][T16227] ? path_openat+0x1b01/0x2050 [ 441.814373][T16227] __sys_sendmmsg+0x185/0x320 [ 441.814431][T16227] __x64_sys_sendmmsg+0x57/0x70 [ 441.814465][T16227] x64_sys_call+0x27aa/0x3020 [ 441.814514][T16227] do_syscall_64+0x12c/0x370 [ 441.814542][T16227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.814562][T16227] RIP: 0033:0x7f7bcf6ec799 [ 441.814623][T16227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.814645][T16227] RSP: 002b:00007f7bce147028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 441.814669][T16227] RAX: ffffffffffffffda RBX: 00007f7bcf965fa0 RCX: 00007f7bcf6ec799 [ 441.814683][T16227] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000004 [ 441.814695][T16227] RBP: 00007f7bce147090 R08: 0000000000000000 R09: 0000000000000000 [ 441.814708][T16227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.814720][T16227] R13: 00007f7bcf966038 R14: 00007f7bcf965fa0 R15: 00007ffcc798cb38 [ 441.814741][T16227] [ 442.038171][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.077835][T16230] lo speed is unknown, defaulting to 1000 [ 442.102039][T16243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3223'. [ 442.183318][T16254] loop3: detected capacity change from 0 to 1024 [ 442.225390][T16254] EXT4-fs: inline encryption not supported [ 442.267215][T16262] IPv6: addrconf: prefix option has invalid lifetime [ 442.327179][T16254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.363072][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 442.363093][ T28] audit: type=1400 audit(2000000108.899:3451): avc: denied { map } for pid=16267 comm="syz.4.3229" path="/proc/96/coredump_filter" dev="proc" ino=46808 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 442.408135][T16270] loop4: detected capacity change from 0 to 128 [ 442.440239][T16254] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.3226: Allocating blocks 257-513 which overlap fs metadata [ 442.493229][T16270] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 442.517672][T16254] EXT4-fs (loop3): Remounting filesystem read-only [ 442.536607][T16270] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 442.695926][T16270] can0: slcan on ttyS3. [ 442.989771][T16283] netlink: 'syz.9.3230': attribute type 4 has an invalid length. [ 443.010475][T15033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.020106][T16283] netlink: 'syz.9.3230': attribute type 4 has an invalid length. [ 443.029889][T16270] can0 (unregistered): slcan off ttyS3. [ 443.080826][T15137] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.182481][T16305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3238'. [ 443.183345][T16303] loop3: detected capacity change from 0 to 512 [ 443.196885][T16306] loop4: detected capacity change from 0 to 512 [ 443.214476][T16309] EXT4-fs: Ignoring removed nobh option [ 443.235970][T16306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.253535][T16306] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.265361][T16309] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 443.279473][T16305] EXT4-fs (loop2): bad s_min_extra_isize: 2304 [ 443.338031][T16303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.408745][T16303] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.423948][ T28] audit: type=1326 audit(2000000109.900:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.456968][ T28] audit: type=1326 audit(2000000109.918:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.538769][T16309] EXT4-fs (loop9): 1 truncate cleaned up [ 443.544539][ T28] audit: type=1326 audit(2000000109.918:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.569869][T16309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.616585][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.645781][ T28] audit: type=1326 audit(2000000109.918:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.657394][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3239'. [ 443.670711][ T28] audit: type=1326 audit(2000000109.918:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.702829][ T28] audit: type=1326 audit(2000000109.918:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.727309][T16309] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3239'. [ 443.737740][ T28] audit: type=1326 audit(2000000109.928:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.761434][ T28] audit: type=1326 audit(2000000109.956:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.764578][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3239'. [ 443.792325][ T28] audit: type=1326 audit(2000000109.956:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16297 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0dc3c799 code=0x7ffc0000 [ 443.863010][T16309] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3239'. [ 443.886781][T16330] lo speed is unknown, defaulting to 1000 [ 444.004503][T16333] Restarting kernel threads ... [ 444.010757][T16333] Done restarting kernel threads. [ 444.016493][T16336] netlink: 'syz.2.3241': attribute type 1 has an invalid length. [ 444.072091][T16336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.107382][T16340] set_capacity_and_notify: 2 callbacks suppressed [ 444.109817][T16340] loop7: detected capacity change from 0 to 1024 [ 444.145798][T16303] lo speed is unknown, defaulting to 1000 [ 444.177335][T16336] __nla_validate_parse: 3 callbacks suppressed [ 444.177378][T16336] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3241'. [ 444.214126][T16336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=16336 comm=syz.2.3241 [ 444.228546][T16336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=16336 comm=syz.2.3241 [ 444.251355][T16336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=16336 comm=syz.2.3241 [ 444.251846][T15074] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.264539][T16336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=16336 comm=syz.2.3241 [ 444.264568][T16336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=16336 comm=syz.2.3241 [ 444.366379][T16352] lo speed is unknown, defaulting to 1000 [ 445.156403][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3251'. [ 445.199131][T16373] loop9: detected capacity change from 0 to 512 [ 445.224269][T16371] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16371 comm=syz.2.3251 [ 445.239780][T16373] EXT4-fs: Ignoring removed oldalloc option [ 445.269519][T16375] loop4: detected capacity change from 0 to 1024 [ 445.308467][T16375] EXT4-fs: inline encryption not supported [ 445.313717][T16373] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 445.329917][T16379] loop2: detected capacity change from 0 to 164 [ 445.349294][T16375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.362234][T16373] EXT4-fs (loop9): mount failed [ 445.371881][T16379] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 445.393376][T15033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.441458][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.501484][T16384] loop9: detected capacity change from 0 to 764 [ 445.537506][T16384] iso9660: Bad value for 'map' [ 445.569095][T16388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.572925][T16386] lo speed is unknown, defaulting to 1000 [ 445.576383][T16388] IPv6: NLM_F_CREATE should be set when creating new route [ 445.589287][T16388] IPv6: NLM_F_CREATE should be set when creating new route [ 445.596521][T16388] IPv6: NLM_F_CREATE should be set when creating new route [ 445.697724][T16388] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.743878][T16396] loop9: detected capacity change from 0 to 256 [ 445.819468][T16396] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.836261][T16399] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 445.852345][T16403] netlink: 'syz.4.3262': attribute type 10 has an invalid length. [ 445.883922][T16402] netlink: 'syz.4.3262': attribute type 10 has an invalid length. [ 445.895908][T16402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3262'. [ 445.904894][T16403] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3262'. [ 445.905001][T16403] team0: entered promiscuous mode [ 445.905018][T16403] team_slave_0: entered promiscuous mode [ 445.905156][T16403] team_slave_1: entered promiscuous mode [ 445.905260][T16403] team0: entered allmulticast mode [ 445.905275][T16403] team_slave_0: entered allmulticast mode [ 445.905290][T16403] team_slave_1: entered allmulticast mode [ 445.906501][T16403] bridge0: port 3(team0) entered blocking state [ 446.016566][T16403] bridge0: port 3(team0) entered disabled state [ 446.026112][T16403] bridge0: port 3(team0) entered blocking state [ 446.032453][T16403] bridge0: port 3(team0) entered forwarding state [ 446.045888][T16416] loop7: detected capacity change from 0 to 512 [ 446.224597][T16421] loop3: detected capacity change from 0 to 764 [ 446.230614][T16416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.247442][T16416] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.263468][T16421] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 446.499317][T16429] lo speed is unknown, defaulting to 1000 [ 446.658687][T16433] loop9: detected capacity change from 0 to 764 [ 446.662292][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.674841][T16433] iso9660: Bad value for 'map' [ 446.722173][T16440] syzkaller0: entered promiscuous mode [ 446.729073][T16440] syzkaller0: entered allmulticast mode [ 446.763150][T16444] sctp: [Deprecated]: syz.4.3274 (pid 16444) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.763150][T16444] Use struct sctp_sack_info instead [ 446.798106][T16445] lo speed is unknown, defaulting to 1000 [ 446.902332][T16466] loop7: detected capacity change from 0 to 512 [ 446.960581][T16466] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.987905][T16466] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.115335][T16475] Invalid ELF header magic: != ELF [ 447.153408][T15007] IPVS: starting estimator thread 0... [ 447.161288][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.180108][T16484] FAULT_INJECTION: forcing a failure. [ 447.180108][T16484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.216909][T16484] CPU: 0 UID: 0 PID: 16484 Comm: syz.9.3285 Tainted: G W syzkaller #0 PREEMPT(full) [ 447.216943][T16484] Tainted: [W]=WARN [ 447.216951][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.216963][T16484] Call Trace: [ 447.216970][T16484] [ 447.217038][T16484] __dump_stack+0x1d/0x30 [ 447.217101][T16484] dump_stack_lvl+0x95/0xd0 [ 447.217126][T16484] dump_stack+0x15/0x1b [ 447.217222][T16484] should_fail_ex+0x263/0x280 [ 447.217264][T16484] should_fail+0xb/0x20 [ 447.217288][T16484] should_fail_usercopy+0x1a/0x20 [ 447.217317][T16484] _copy_to_user+0x20/0xa0 [ 447.217347][T16484] simple_read_from_buffer+0xb5/0x130 [ 447.217391][T16484] proc_fail_nth_read+0x10e/0x150 [ 447.217463][T16484] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 447.217492][T16484] vfs_read+0x1ab/0x7f0 [ 447.217520][T16484] ? __rcu_read_unlock+0x4e/0x70 [ 447.217543][T16484] ? __fget_files+0x184/0x1c0 [ 447.217600][T16484] ? mutex_lock+0x57/0x90 [ 447.217634][T16484] ksys_read+0xdc/0x1a0 [ 447.217667][T16484] __x64_sys_read+0x40/0x50 [ 447.217687][T16484] x64_sys_call+0x2886/0x3020 [ 447.217785][T16484] do_syscall_64+0x12c/0x370 [ 447.217810][T16484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.217907][T16484] RIP: 0033:0x7f8032c2cfce [ 447.217927][T16484] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 447.218018][T16484] RSP: 002b:00007f80316befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.218041][T16484] RAX: ffffffffffffffda RBX: 00007f80316bf6c0 RCX: 00007f8032c2cfce [ 447.218057][T16484] RDX: 000000000000000f RSI: 00007f80316bf0a0 RDI: 0000000000000003 [ 447.218069][T16484] RBP: 00007f80316bf090 R08: 0000000000000000 R09: 0000000000000000 [ 447.218081][T16484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.218094][T16484] R13: 00007f8032ee6038 R14: 00007f8032ee5fa0 R15: 00007fff9ad97d08 [ 447.218193][T16484] [ 447.430401][T16481] IPVS: using max 2784 ests per chain, 139200 per kthread [ 447.450165][T16486] EXT4-fs: inline encryption not supported [ 447.461438][T16493] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 447.496857][T16493] EXT4-fs (loop7): 1 truncate cleaned up [ 447.515787][T16493] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.550323][T16486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.630363][T16486] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.3284: Allocating blocks 449-513 which overlap fs metadata [ 447.644899][T16486] EXT4-fs (loop4): Remounting filesystem read-only [ 447.699045][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.796824][T16510] lo speed is unknown, defaulting to 1000 [ 447.884498][T16511] FAT-fs (loop9): Directory bread(block 64) failed [ 447.892452][T16511] FAT-fs (loop9): Directory bread(block 65) failed [ 447.899328][T16511] FAT-fs (loop9): Directory bread(block 66) failed [ 447.907083][T16511] FAT-fs (loop9): Directory bread(block 67) failed [ 447.915235][T16511] FAT-fs (loop9): Directory bread(block 68) failed [ 447.922027][T16511] FAT-fs (loop9): Directory bread(block 69) failed [ 447.929706][T16511] FAT-fs (loop9): Directory bread(block 70) failed [ 447.937764][T16511] FAT-fs (loop9): Directory bread(block 71) failed [ 447.945682][T16511] FAT-fs (loop9): Directory bread(block 72) failed [ 447.952244][T16511] FAT-fs (loop9): Directory bread(block 73) failed [ 447.978706][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3289'. [ 447.988959][T16511] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3289'. [ 448.044443][T15013] Process accounting resumed [ 448.049395][T15013] kworker/1:12: attempt to access beyond end of device [ 448.049395][T15013] loop9: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 448.258987][T15137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.579819][T16518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.610361][T16518] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.754136][T16526] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 449.347933][T16526] lo speed is unknown, defaulting to 1000 [ 449.500892][T16539] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3296'. [ 449.616464][T16532] set_capacity_and_notify: 4 callbacks suppressed [ 449.616495][T16532] loop7: detected capacity change from 0 to 512 [ 449.671242][T16535] veth4: entered allmulticast mode [ 449.675538][T16539] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3296'. [ 449.710900][T16532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.920023][ T8834] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.019126][T16555] batadv0: entered promiscuous mode [ 450.066142][T16555] batadv0: left promiscuous mode [ 450.277614][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 450.277630][ T28] audit: type=1400 audit(2000000116.307:3466): avc: denied { listen } for pid=16569 comm="syz.7.3305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 450.440791][T16577] lo speed is unknown, defaulting to 1000 [ 450.521862][T16580] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3307'. [ 450.533302][T16580] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3307'. [ 450.577571][T16585] netlink: 'syz.4.3309': attribute type 11 has an invalid length. [ 450.600552][T16585] loop4: detected capacity change from 0 to 764 [ 450.601474][T16587] loop3: detected capacity change from 0 to 512 [ 450.614174][T16587] EXT4-fs: inline encryption not supported [ 450.624870][T16588] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 450.631406][T16588] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 450.639714][T16587] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 450.649432][T16588] vhci_hcd vhci_hcd.0: Device attached [ 450.655956][T16588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3308'. [ 450.678752][T16587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.699252][T16587] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 450.726495][T16594] loop9: detected capacity change from 0 to 764 [ 450.735271][T16594] iso9660: Bad value for 'map' [ 450.840830][ T3174] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 450.866953][T16609] loop4: detected capacity change from 0 to 8192 [ 450.905834][ T3174] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 451.024601][T16609] ================================================================== [ 451.032713][T16609] BUG: KCSAN: data-race in __d_drop / fast_dput [ 451.038967][T16609] [ 451.041359][T16609] write to 0xffff88811b2b0250 of 8 bytes by task 16615 on cpu 0: [ 451.049090][T16609] __d_drop+0x14d/0x240 [ 451.053261][T16609] d_invalidate+0x50/0x1d0 [ 451.057676][T16609] path_openat+0x12e6/0x2050 [ 451.062311][T16609] do_file_open+0x16c/0x290 [ 451.066870][T16609] do_sys_openat2+0x94/0x130 [ 451.071461][T16609] __x64_sys_openat+0xf2/0x120 [ 451.076253][T16609] x64_sys_call+0x1e39/0x3020 [ 451.080936][T16609] do_syscall_64+0x12c/0x370 [ 451.085541][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.091426][T16609] [ 451.093744][T16609] read to 0xffff88811b2b0250 of 8 bytes by task 16609 on cpu 1: [ 451.101366][T16609] fast_dput+0x5f/0x2c0 [ 451.105520][T16609] dput+0x24/0x60 [ 451.109188][T16609] filename_mknodat+0x2cb/0x450 [ 451.114077][T16609] __se_sys_mknodat+0x38/0xf0 [ 451.118755][T16609] __x64_sys_mknodat+0x55/0x70 [ 451.123518][T16609] x64_sys_call+0x312/0x3020 [ 451.128296][T16609] do_syscall_64+0x12c/0x370 [ 451.132879][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.138763][T16609] [ 451.141078][T16609] value changed: 0xffff888237657800 -> 0x0000000000000000 [ 451.148177][T16609] [ 451.150497][T16609] Reported by Kernel Concurrency Sanitizer on: [ 451.156658][T16609] CPU: 1 UID: 0 PID: 16609 Comm: syz.4.3315 Tainted: G W syzkaller #0 PREEMPT(full) [ 451.167875][T16609] Tainted: [W]=WARN [ 451.171678][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.182116][T16609] ================================================================== [ 451.447694][T16589] vhci_hcd: connection reset by peer [ 451.453384][T13427] vhci_hcd vhci_hcd.2: stop threads [ 451.459979][T13427] vhci_hcd vhci_hcd.2: release socket [ 451.466749][T13427] vhci_hcd vhci_hcd.2: disconnect device [ 451.512977][T15033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.346387][ T3174] usb 5-1: enqueue for inactive port 0 [ 456.351955][ T3174] usb 5-1: enqueue for inactive port 0 [ 456.432103][ T3174] vhci_hcd vhci_hcd.2: vhci_device speed not set