last executing test programs: 5m14.816055163s ago: executing program 32 (id=247): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x2000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffe, 0xe5, 0x3, @buffer={0x0, 0x91, &(0x7f00000000c0)=""/145}, &(0x7f00000001c0)="9a0a53ac46ecf9ea53d4e7074af9dcead1453a39a975ce88e2d10e0cc20bc9e5094b05ebc6bcd2c65ea54be327f8e22068a4abcbc95597b9a85b65c4964b2d2c9ef2e4ec1c7365826d0e14458acab4afdd00db9228ec63edee5a84fca04d444c950e473ceb0673dfbaca06416a5f5f388a662167c25228b33b0ac89a493be86c431ea9bfcb55f2f497d3ad01df886928567960573d5f9ec026ef9cc719349545141e95e113ac575e12c1e7b173cfc0adc9ea9cf2bd633347435e298a4451882f946c5e00196bfd110ba5e86d27e671e8363c9f1d98598eac6eb34458c85df6d3dde6998d8e", &(0x7f00000002c0)=""/104, 0x4, 0x21, 0x1, &(0x7f0000000340)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x11, 0xa, 0x201, 0x70bd2a, 0x25dfdbfe, {0x5, 0x0, 0x7}, [@generic="c157ce30fed014"]}, 0x1c}}, 0x90) 5m6.626528822s ago: executing program 33 (id=388): r0 = socket$inet_udp(0x2, 0x2, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') acct(&(0x7f0000000340)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000bc0)='ext2\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[], [{@permit_directio}]}, 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") creat(&(0x7f0000000080)='./file1\x00', 0x182) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="62ed992ee70e419c"}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x80, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 5m6.274032743s ago: executing program 34 (id=395): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4m57.064553342s ago: executing program 35 (id=532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c6a4ffff6c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400029308000500", @ANYRES32=r5], 0x70}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000180)={'veth1_vlan\x00', 0x400}) (async, rerun: 32) close(0x3) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6000000000383a00fe8000000000000000000000000000aaff020000000000000000000000000001020090780000000160102dab00002f00fc000000000000000000000000000001000000000000000000000000000000012498a9ecba66320d504ce282bb8584d22b74eccd0f2f6f3bfbe934ec535944"], 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xc, 0xffff}, {0x0, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xdb1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = semget$private(0x0, 0x6, 0x0) semtimedop(r8, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) (async) semop(r8, &(0x7f00000000c0), 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x4048051}, 0x440c0) (async) recvmmsg(r9, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x3}], 0x1, 0x2142, 0x0) (async) semtimedop(r8, &(0x7f0000000080)=[{0x1, 0x8000}], 0x1, 0x0) semop(r8, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) (async) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000000)) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20048054) 4m21.025078561s ago: executing program 36 (id=1233): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x1b, 0x0, "bb41053574544524474004200b424e7a03000000000000008a0e2f964e0000c503bb2d8afaa4ff1f56c54de76d8b6d2c0100ffffffffffff7bbe00000000000000f1864da3290d00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffefffffffd, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000200000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800e0001006970366772657461700000001c00028008000100", @ANYRES32, @ANYBLOB="297235feda382900080014000900000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x109) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) close(r4) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) accept4(r0, 0x0, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x256, &(0x7f0000000680)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x6020480) write$binfmt_script(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m38.039207579s ago: executing program 37 (id=2032): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-7'], 0x9) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, 0x0) (async) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) sendmmsg$inet6(r4, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030600"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32], 0x40}, 0x1, 0xba01}, 0x0) 2m36.407176825s ago: executing program 38 (id=1855): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="02070900040000002dbd7000ffdbdf2502000b"], 0x20}, 0x1, 0x0, 0x900}, 0x4040014) 1m50.677087141s ago: executing program 39 (id=2899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x40}}, 0x4000) close(r0) r1 = gettid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x12, 0x1, 0xfffffffd, 0x2, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x5002) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xed0, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x80) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x6b, 0x0, 0x8}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000180)={0x14, r7, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x0, 0x2c, 0xf014}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x48}, 0x1, 0x0, 0x0, 0x850}, 0x40810) 1m28.634164561s ago: executing program 40 (id=3328): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@fadd={0x58, 0x114, 0x6, {{0x45bb, 0x1000}, 0x0, 0x0, 0x7b8, 0x6, 0x200, 0x8, 0x21, 0xf}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x6}], 0x70}, 0x0) (async, rerun: 32) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async, rerun: 32) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @empty, 0x5}}, 0x4, 0x500, 0x200, 0x7fff, 0x20, 0x9}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={r3, 0x9}, &(0x7f00000000c0)=0x8) (async) sendfile(r1, r2, 0x0, 0x20000023896) 1m13.410273282s ago: executing program 41 (id=3672): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x6, 0xe0000000, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRES8], 0x1, 0x286, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000180)) 52.325981137s ago: executing program 5 (id=4142): r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) syz_read_part_table(0x105d, &(0x7f0000001080)="$eJzsz81pAzEYBNDRJuwPhKSEnFNF0kRcgCtZ3Ipv7sUd+Oo6ZCQWl2D78B5iENLoA4XnWktK8tn3w7Xl2NfST1p+ZD9t5XI5JkOmzCXtWZJ2VfN+Tn7zc586/rXcZa31MNXxu9fmrwxvffyy1f5PD/0rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyoWwAAAP//PrwL2w==") (rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async, rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (rerun: 32) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x4, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x4, 0x800000000a, 0x1}) r6 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r7 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x88efed919f7b313e, 0x1}, 0x20) r8 = syz_io_uring_setup(0x1026, &(0x7f0000000340)={0x0, 0x2d36, 0x1000, 0x0, 0x25d}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_setup(0x6500, &(0x7f00000002c0)={0x0, 0x4b16, 0x200, 0x3, 0x305, 0x0, r8}) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) r11 = syz_open_dev$evdev(&(0x7f0000000140), 0x7708, 0x80040) ioctl$EVIOCGID(r11, 0x80084502, &(0x7f0000000180)=""/231) (async) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={0x0, 0xa0}}, 0x0) 52.317729767s ago: executing program 5 (id=4149): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x17, 0x0, @dev, 0x2000000}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 52.285526879s ago: executing program 5 (id=4151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 52.194954724s ago: executing program 5 (id=4153): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@bsdgroups}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") unshare(0x22020600) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) ftruncate(r2, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x1852, 0x10000, 0x0, 0x1bf}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r3, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1, 0x8}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r4, 0x100847c0, 0x0, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0xff, 0x8, 0xd, 0x401, 0x6, 0xfffffffe, {0x0, @in6={{0xa, 0x4e21, 0xc3b8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0xd6b, 0x6, 0x7f, 0xe, 0x9}}, &(0x7f0000000000)=0xb0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_trace', 0x141a82, 0x0) sendfile(r10, r10, 0x0, 0x3) sendmsg$nl_xfrm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc019a0a9dc82775c4e267600400001900010000000000fddbdf25e0000001002000000000000000000000ac1414bb0000000000000000000000000003000bffc79ff3377eaf3d631510dd52c6e41ae10b38ab2d55e7c22582c11564bbee42151c86fdc9219857314f130d9e4f0e84669ae2696b1eb8921146", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000020000000044010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000000000000000000000000000000000002000000000000000008000000080000fcffffff000000000000000000000000000000000000000033000000000000007f0000010000000000000000000000000335000003020000000000000002000000000000fe80000000000000000000000000002f0000000033000000000000000a010101000000000000000000000000043500000001010000000000bf0a000000000001fc00000000000000000000000000000100000000330000000a000000ac1414bb00000000000000000000000000000000010200000100"/436], 0x1fc}}, 0x4000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r11, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) faccessat(r1, &(0x7f0000000400)='./file1\x00', 0x24) 51.814964376s ago: executing program 5 (id=4166): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r0, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) 51.103488778s ago: executing program 4 (id=4190): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/freeze_filesystems', 0xa3002, 0x90) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex_waitv(&(0x7f00000001c0)=[{0x1, 0x0, 0x2}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x5, 0x991, 0xfffffffc, 0x81, 0xd, "3ff74df68ef9b3b25a3bfcd88278e1033aa8ea"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="07b190493c14ef4856d684f216de139043a02634bb8843219e4b82c6c4f99acca2e2ff633071ba305b7a0762200e5908970f12884824468195aba5aca04ccbb7df31c42e9d7e57045ef3f97eb10b6af5c2d3cccfe57da06da9749b185f967a282428781cc121c59093356c3330fcdacdc91e84fab8ab291785d5d0f95409dd934a0a93caaa3e30a787733f5c45cf3df429401297f50bca680550e28652954c5d7cfdee53530956df38eb5adfb93ac8797ee6a8e1e510d847f9222a6496e7745b7d9769d14ac5f50d85", @ANYRES8=r1], 0x44}}, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/freeze_filesystems', 0xa3002, 0x90) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) futex_waitv(&(0x7f00000001c0)=[{0x1, 0x0, 0x2}], 0x1, 0x0, &(0x7f00000003c0), 0x0) (async) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x5, 0x991, 0xfffffffc, 0x81, 0xd, "3ff74df68ef9b3b25a3bfcd88278e1033aa8ea"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="07b190493c14ef4856d684f216de139043a02634bb8843219e4b82c6c4f99acca2e2ff633071ba305b7a0762200e5908970f12884824468195aba5aca04ccbb7df31c42e9d7e57045ef3f97eb10b6af5c2d3cccfe57da06da9749b185f967a282428781cc121c59093356c3330fcdacdc91e84fab8ab291785d5d0f95409dd934a0a93caaa3e30a787733f5c45cf3df429401297f50bca680550e28652954c5d7cfdee53530956df38eb5adfb93ac8797ee6a8e1e510d847f9222a6496e7745b7d9769d14ac5f50d85", @ANYRES8=r1], 0x44}}, 0x2) (async) 51.037549112s ago: executing program 4 (id=4191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xf87, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602580a60f51000000000000000000000000fffffffffffffe80000000000000003a0000000000aa84"], 0x0) 50.982857315s ago: executing program 5 (id=4192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 50.982300365s ago: executing program 42 (id=4192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 50.982144085s ago: executing program 4 (id=4194): socketpair(0x2a, 0x6, 0x1000, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7fff}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x18, 0x80, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) llistxattr(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140)=""/37, 0x25) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = epoll_create1(0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a140000001100010000000000090000000700000a91d153c65d4e798d0e8d07d4a59e385b28cf75e275580bd4a8d3b82bd8b2d9bc5ac6de77df4ffe7ba954987b3e8d0007700461fa04d05b18e106adf8b5080130e7de9f6f6c1b570b6003f6fd8c5a6c7668c328bc165c8aed9fa8c848e6f0c1ba7a452c5a5bd61c17a6a20104e7ad6094fa3cc48099b473f8f5f7e554a2e48bf0587469a6f69ddeead1"], 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000280)={0x3000001b}) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000eb0301ee0b000000000000000a1400b5a5b5853877a9627fe42603b30000f60301"], 0x28}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84022, &(0x7f0000000000)=ANY=[@ANYBLOB="01005f696e6f6465733d342c00"]) 50.840460254s ago: executing program 4 (id=4195): syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f00000003c0)) write(r1, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getgroups(0x8, &(0x7f0000001080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendfile(r1, r0, 0x0, 0x3ffff) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 50.411061819s ago: executing program 4 (id=4197): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000880)="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"/276, 0x114) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x81, 0x9, 0x93aa}) get_robust_list(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000090601020000000000000000030000000900020073797a3100000000050001000700000054000780060004404e1f0000180014801400024000000000000000000000000000000000050007003a000000050015000600000008000840000000021800018014000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000000)={'pimreg1\x00', {0x2, 0x4e24, @private=0xa010101}}) unshare(0x72040000) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x9d}}], 0x58}, 0x40) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRESDEC=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x74}}, 0x0) 49.597219986s ago: executing program 4 (id=4217): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000100)=0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4000c, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@nodelalloc, 0x32}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$eJzs3U9vG2kZAPBnnLikbUpSwaFUolS0KKmgdtLQNuJQQELApRJQ7iUkThTFiaPYaZuoglR8ACSEAIkTJy5IfAAk1I+AkCrBHQECrXbb3cNK3a1XHttpmtpNuvWf3fj3k8Z+Zzzj53nH8ut5Z16NAxhY5yPiQkQ8q1arlyJirLE805hipz7V1nvy+P58bUqiWr31dhKR1JfVVpvc854nG5uNRMSPvhfx0+TluOWt7ZW5YrGw0ZjPV1bX8+Wt7cvLq3NLhaXC2szM9LXZ67NXZ6c6Us/RiLjxnf/+5pd//O6Nv37t7r9u/3/yZ0ljecSp3Xp0Wr3q2XRfNA1HxEY3gvXJcFpDAAA+DZrH+V+OiEsxFkPp0RwAAABwlFS/ORofJBFVAAAA4MjKpGNgk0yuMQ5gNDKZXK4+hvfzcSJTLJUrX10sba4t1MfKjkc2s7hcLEw1xgqPRzapzU+n5efzV/bNz0TE6Yj49djxdD43Xyou9PvkBwAAAAyIk/v6/++N1fv/ezztW3IAAABA54z3OwEAAACg6/T/AQAA4OjT/wcAAIAj7Qc3b9amavP/rxfubG2ulO5cXiiUV3Krm/O5+dLGem6pVFpK79m3etD7FUul9a/H2ua9fKVQruTLW9u3V0uba5Xbyy/8BTYAAADQQ6e/9PCfSUTsfON4OtUc63dSQE8Mv87K/+leHkDvDfU7AaBvXuv3HzhSsv1OAOi75IDX2w7e+VvncwEAALpj4gutr/8PHXhuYCfToxSBLnH+DwaX6/8wuFz/h8GVjaHQkYfBdtAtQPdc/39arVafzx36+v/ejQAAgH4YTackk4tIzwOMRiaTy0WcSvsE2WRxuViYiojPRsQ/xrKfqc1Pp1smB44ZBgAAAAAAAAAAAAAAAAAAAAAAAADqqtUkqgAAAMCRFpH5X5LezT9iYuzi6P7zA8eS98fS54i4+/tbv703V6lsTNeWv7O7vPK7xvIr/TiDAQAAAOzX7Kc3+/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ElPHt+fb069jPvWtyNivFX84RhJn0ciGxEn3k1ieM92SUQMdSD+zoOIONMqflJLK8YbWbSKf7zP8U92ID4Msoe19udbrb5/mTifPrf+/l1LW6g31779y+y2f0Mt4teWnTpkjLOP/pxvG/9BxNnh1u1PM37Spv25cMj4P/nx9na716p/iJho+fuTvBArX1ldz5e3ti8vr84tFZYKazMz09dmr89enZ3KLy4XC43HljF+9cW/PHtV/U+0iT9+QP0vHrL+Hz669/hz9WJ2d/PkefzJC60//zNt4mcan/9XGuXa6xPN8k69vNe5P/393Kvqv9Cm/gd9/pOHrP+lH/7i34dcFQDogfLW9spcsVjYGOjCG+2N2mFRdzMcaaTX/x31MQq1xF9vq+/3LMOfd+Gda0fmn4w9/2aFvjVJAABAl7zcBwYAAAAAAAAAAAAAAAAAAAB6rRe3E8vui7mTPnbi7vkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3zUQAAAP//dFrSwg==") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd70000435000002000100200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'hsr0\x00', @local}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x4000200, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)="71f0b86d24ad6470d9a22cd10e5322915678145303847760e9b7107e97b9ac135dcd47671fe8e75dd4c4abada7c7285133da916fbd81569bb0cb84dccd27b64784a65d3c402f7d98c82e28564607b95b5ebb37b33004fb1a1177ca129bdc10", 0x5f, r4}, 0x68) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x8004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 49.52550778s ago: executing program 43 (id=4217): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x800}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = memfd_secret(0x80000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000100)=0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4000c, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@minixdf}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@nodelalloc, 0x32}]}, 0x1, 0x4f0, &(0x7f00000003c0)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff00000000020000000800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd70000435000002000100200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x0, {0xa, 0x4e24, 0x3, @loopback, 0x3}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'hsr0\x00', @local}) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000000c0)=0x4000200, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)="71f0b86d24ad6470d9a22cd10e5322915678145303847760e9b7107e97b9ac135dcd47671fe8e75dd4c4abada7c7285133da916fbd81569bb0cb84dccd27b64784a65d3c402f7d98c82e28564607b95b5ebb37b33004fb1a1177ca129bdc10", 0x5f, r4}, 0x68) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x34, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x8004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 44.961718248s ago: executing program 1 (id=4315): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x7fff}]) r3 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f0000000480)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES64=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0xa6a4b5, &(0x7f0000000d80)=ANY=[@ANYRES16, @ANYRES64=r4, @ANYBLOB="61722b26b3fa26ec935d0845287ac3dcf232dd183e1c6fa535f9ad4eb04b6e9e3ace74460ffec40f4ebd7f0852", @ANYRESDEC=r3, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@llc={0x1a, 0x118, 0x5, 0x8, 0x7, 0x20, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}, 0x0) 43.825964194s ago: executing program 1 (id=4336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x4) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0001000000060010000900000008000100aa", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x21000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) (async) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x49c, 0x2c, 0xf4a256f2fe4ecb83, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x9, 0xfff1}, {0x10, 0x10}, {0x8, 0xb}}, [@f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @remote}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x1, 0x6}, {0x1, 0x9, 0x1}, 0x2f, 0x1, 0x7}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xc}}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010100}]}}, @f_rsvp={{0x9}, {0x1c, 0x2, [@TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x8}}]}}, @f_rsvp={{0x9}, {0x3f4, 0x2, [@TCA_RSVP_ACT={0x3b8, 0x6, [@m_nat={0x6c, 0x7, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffd, 0x5, 0xffffffffffffffff, 0x1, 0x6}, @local, @rand_addr=0x64010102, 0xffffffff}}]}, {0x1b, 0x6, "516dc268ac34e16e30c2ec05bca4eef29c44f42aaf54f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x10c, 0xb, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x7, 0x20000000, 0x6, 0x8}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1ff, 0x6, 0x2, 0x80000001}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0xfffffffe, 0x4, 0x43feb06e, 0x61}}}]}, {0x8a, 0x6, "7fb7cd5378d43fd5aa0dce4934fa22b4c642183560f2c09e1759d0a59860e2cfba18b085f9c129379d0987955a52bed8045d7b551da498c23b9bf27970cb8575bf4415befac2e998424e621dac10a55f1dd9e2277e563ec9daba04f4aace1dd8a8a4a8f1932812d784faf49dd7a01fbb5c87250b4e7ad46d536a7b7403ed5333aab8fa0e8ee6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xc4, 0x4, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x368}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa24}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd, 0x22, 0x1, 0xfffffff7, 0x200}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf70}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe, 0x8, 0x7, 0x101, 0x80}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd2b}]}, {0x38, 0x6, "48512432d863474a8ffc3911fd5c1f10bf55fc3770d6fcabb03704eb1a9033dc6d454ca66e09e67eb9cc1c449c3a67ba503b886f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0xc0, 0x7, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x67}]}, {0x84, 0x6, "e8e15bc2230663a08b759d68c39927abe1dc799a2a9fe8383464bf597bf026f12674d76f8de6eae3b706636967b464f760bd6b891c3e362eca1b13e01705272ed14cf0edea3188077d89c0d569843b73abb93b1e0535393ee4d0cddc1e1a2c1ead0c294a09447d0f472762e39a3c6caf151072c78dae202e80213aa496ff0432"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0xb8, 0x5, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x34f, 0x5}}]}, {0x7e, 0x6, "ef52e23fa3e31f15d9e46427355ae7081740a80a1996de6f2244c82c5b10ccd0335d3c1916cbde3947541ad82c6d0ce54fdcb7c6568a23dd36064961f1b64960ed8b2a4f90678bb659908604b3b62f7577107091069a3a46673d649ea5781abda687cf3bcd7ede7a25d02dd27d1ccc4ff3e7116ceb3348ac5fd9"}, {0xc}, {0xc, 0x8, {0x2f2d141ac861d6d2, 0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x509, 0x5}, {0x1, 0x59, 0x6}, 0x8, 0x6, 0x8}}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x27}}]}}]}, 0x49c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 43.610861767s ago: executing program 1 (id=4344): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 43.573792829s ago: executing program 1 (id=4347): syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0xa) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000440)=0x40) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x45300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed0f", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 43.167773712s ago: executing program 1 (id=4354): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000fc0)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="e6", 0x1}], 0x1}, 0x4048003) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) accept4$inet(r5, 0x0, &(0x7f0000000100), 0x80800) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r3, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r8 = socket$isdn(0x22, 0x3, 0x25) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x0) keyctl$session_to_parent(0x12) ppoll(&(0x7f0000000100)=[{r1, 0x9000}, {r0, 0x87}, {0xffffffffffffffff, 0x6}, {r7, 0x2}, {r8, 0x6040}], 0x5, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000200)={[0x6317]}, 0x8) 42.249426577s ago: executing program 1 (id=4377): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8, 0x80800) signalfd4(r2, &(0x7f0000001180)={[0x8]}, 0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 42.248656676s ago: executing program 44 (id=4377): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$eJzs3U1sHHcVAPA3rp04jkirgkoUpekkKVIiUndtty5WD2W7HjvT2rvW7holqlAbNU6J4vRTVWmEaHNpASEhThxLOVa99AZCAokDcEKiBy4ckCr1hAoCCYEAyWhnd+O1Y6/z5Vi0v5/Vndn/vJl5/9npvJ3NzmwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJFUpkulsSTm8uriqXRzlel6bb7P9O7yfrlm0Ge9EUnrvxgejv3tpv1fWJ18T+vhSBxsPzsYw63BcFzae89dj35+cKA7f5+EbtThzScN9T5JIt5sJXXhzPLy0svbkMht9L2fd0aGexp3RfTZvv9aaT3OZtW8Ucvny7NZmjdq6dTkZOnBkzONdCafyxqnG81sPq3Us3KzVk+PVY6nY1NTE2k2erq2WJ2dLs9l3cZHHhgvlSbTJ0YXsnK9Uas++MRoo3Iyn5vLq7NFzHjptWjFPNLaEZ/Mm2kzK8+n6bnzy0sTW/WuFTS2pmX3mo4dvP+uj1/96O/nl1o75GYLSTo75vjY2Pj42OTDUw8/UioNjpfG1zaU1okrETEQ0YrYlp2WnbV3g7bBzh5z1YSIlTtvzcEbbtJAp/7HXORRjcU4FWmkMVA8rv4NRSWmox61mG89/8PQuulpdA6Q3fr/pQf/8rt+6+2t/90qv3918oEo6v+h9rNDm9X/q7K4/r+xO681svp+O5vetlfi9bgUF+JMLMdyLMXLN5LDrvVL3ca/gVu7vNnIohp5NKIWecxHuWhJOy1pTMVkTEYpno6TMRN7Io2ZyGMusmjE6WhEM7Jij6pEPbIoRzNqUY80jkUljrdenZiKqZiINLIYjdNRi8WoxmxMR7lYyrk4X2z3iXV53fPtZ3723O8/fqc1fiVorE9HktabuVbQ3/oEXVXur6P+dyPU/0+b4c4x61rjb+nxG27GSlH/B699hv/8ZDvTAQAAALZBUnz6nkTEUNxbjM3kc9lTO50WAAAAcAsVX9s72BoMtcbujaR1/l/aIPLD254bAAAAcGskxTV2SUSMxH3tse7lUht9CAAAAAD8Hyr+/f9QazAS8UbR4PwfAAAAPmW+s9k99j/a1bnHbmNhd/KLv0a9PpRcXrkyX/niHe2RzuBrV6Y0Zw4k+zoLKQaTg5f2JhExWMkOJt27X/53d3v4SfF4YPUGhJvd6z8pElg4dX9ysbxRAtE/geJZfD8Ot2MOn20Pz3antNcyMpPPZaOV2tyjY0nnw5Hmq8+f/2YU3f9udX5fEufOLy+NPvvC8tkil8utpVy+2Ln7cdKdK6J9QUWfXFY6WyDu3bjHQ8WFGJ31jrTXW+rt/0B79oH+/U961/lWHGnHHBlpD0fW9n+4tc6x0UfHolzeN9DMTjVfXenpfSeLsXbP31zT8+t4Fd6Ko+2Yo8eOtgcbZDG+Jovnr85ivHf7X9u2uOYs3jn8xql//LqWZBNbZTFxk1kA7JRzxV1/VqvQnqIK/XulrVXQ1tXdPd05r+cod271XUZ3/p5aNxhXVff0Rqr7W3GsHXOs/X5i8MAGdaW0wRH9xfMv/qZzRH/ovR/9+OuHfvvBurp+HVm8F8fbMZ1B3P2rTWpsfeXO5BtPra2q77bmeHfT9TbmxpO4o7URix8fiksPnL945rml55aeHx+fmCw9VCo9PB5DxVuFzmCTTFUegM+2Pr+x0yq9yQffuhK62a/wJA9tcVZ995WvFIzGs/FCLMfZOFFcbRAR92281JGeryGc2OKsdaTnF15ObHFuuRo7vj5299Ek9kbEBrETPVvsiz8sBv/cphcEAG6DI1vU4aT7DuG1z3XmWBdxR5Kc2OK8e20tP94+d+2eHcfmtXwjX9nm7QEAnwVZ/ZNkpPl2Uq/nC0+PTU2NlZsns7ReqzyZ1vPp2SzNq82sXjlZrs5m6UK91qxVuh8dT2eNtLG4sFCrN9OZWj1dqDXyU8Uvv6edn35vZPPlajOvNBbmsnIjSyu1arNcaabTeaOSLiw+Ppc3Tmb1YubGQlbJZ/JKuZnXqmmjtlivZKNp2siynsB8Oqs285k8G0rzarpQz+fL9csRMbc4n6XTWaNSzxeatfYCu+vKqzO1+nyx2NEi7Zd6u//nndjmALDTXnn90oUzy8tLL9/YyB+vJXin+wgArLVBld6zowkBAAAAAAAAAAAAAABXufpyvVbrmpbh6H+R31Dc8OWDr+yOm7n68NM38uX32y/LzS/wvpduZjl7YnnXasuuzs6y89vnukeeeeyxC6styWDv5n38jf0n/5RFt3d9lrPx/ykbXer69r6IXT/9Qbvlq5sEJ4O3uKcfRsQNzL6S9Im5/cciAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjK/wIAAP//BPFR5w==") r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8, 0x80800) signalfd4(r2, &(0x7f0000001180)={[0x8]}, 0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 37.416564129s ago: executing program 2 (id=4474): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff14) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r0], 0x28}}, 0x802) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) 36.854280402s ago: executing program 2 (id=4481): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000090000b70500000000000085000000a500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 36.742703079s ago: executing program 2 (id=4482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000080040007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 36.700880191s ago: executing program 2 (id=4486): r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d6d697865642c696f636861727365743d61736369692c646973636172642c696f636861727365743d63703836312c73686f72746e616d653d77696e39352c696f636861727365743d757466382c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6e6f6e756d7461696c3d312c726f6469722c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c7065726d69745f646972656374696f2c66d07f6f6e746578743d726f6f742c00"], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002d0001002abd70000000000008000000", @ANYRES32=0x0, @ANYBLOB="0400698005e1018088000000"], 0x24}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x13, 0x0, 0x0, 0x7ffc1ffb}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40ef000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) r5 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYRES32=r4, @ANYRESOCT=r3, @ANYBLOB="bb8b8272ac59dd5bcf62069c2308cfc85b5921fe83916273f70ba8e10570d2af85dafb364785f581373f1ca14c53b918a6f4a970dfcf5f702b073d1d8f647bddb2455539c6deb369ac9d7bff51c90536cb684423a3b7082fd52b80a311bafae31eabafde5cdf4e8ceca8b89126f852d23b59a7f6397b12c7b6d94b2db6a0366e219a51766639249cb624d6ca7e2e9dc9ab574d3ba53810387ca367cef59b077e1bc46f6dbacb62", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x298bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000018000100ffff95ff000000000ab28f0a434d228afcd98dfc5ef05cf429000000000000000000810000000001000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4048080) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0xc, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x800001ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x1a, 0x0, 0x0) 36.150290193s ago: executing program 2 (id=4499): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 35.774175535s ago: executing program 2 (id=4506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00c22ffffe8000000000000000000000000000aaff020000000000000000000008000001"], 0xf8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r5 = socket$inet(0x2, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "4e1f9fa9a9b5a6e2bc7305b2fa31972845625f4ddf5208b2f453b85e47f698986516a157510c8a1f63b62e9dceca177779d9e35d246c965a2313f54386d64172", 0x15}, 0x48, 0xfffffffffffffff9) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r8, 0x0, 0x6, 0x2, 0x7, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7800, 0x7800, 0x401}}) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x275a, 0x0) 35.738829647s ago: executing program 45 (id=4506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00c22ffffe8000000000000000000000000000aaff020000000000000000000008000001"], 0xf8) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r5 = socket$inet(0x2, 0x2, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "4e1f9fa9a9b5a6e2bc7305b2fa31972845625f4ddf5208b2f453b85e47f698986516a157510c8a1f63b62e9dceca177779d9e35d246c965a2313f54386d64172", 0x15}, 0x48, 0xfffffffffffffff9) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', r8, 0x0, 0x6, 0x2, 0x7, 0x4, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7800, 0x7800, 0x401}}) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_all\x00', 0x275a, 0x0) 34.67508222s ago: executing program 6 (id=4538): r0 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 34.66250443s ago: executing program 6 (id=4539): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x203, 0xfffd, 0x0, 0x1, 0x0}) 34.644527091s ago: executing program 6 (id=4540): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f9ffff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000fff30000b70500000000000085000000a500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 34.586244305s ago: executing program 6 (id=4541): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$eJzs3E1sG8UeAPD/Ok76Xr+S19f3oKVAoCAqPpI2LdADB0BC4lAkJDiUo0nSqtRtUBMkWkU0oKpckGgl7giJCxJnDpw4IeCExIUD3FGlCvVC4WS09tqsHbt1EqdO6t9Pcj2zO8nMf3dnd3anmwAG1nj6TxKxPSJ+iYjRiCi0Fhivfd28sTj9543F6SQqldd+T9Ifiz9uLE7XiybZ97Zapph+FS4l8XybeufPXzhdKpdnz2X5yYUzb0/On7/w1KkzpZOzJ2fPTh09euTwoWefmXq6J3H+J23r3vfm9u15+Y2rr0wfv/rm918muUbn4+iN4VjKbZNWj/a2sr7bkUsnxaZVM6PNRQt3pkV0Y0tEtaMOR8RIjMbQpZ2NdaPx0gd9bRywriqVSmWq8+qlCnAXS6LfLQD6o36hT+9/6587NPTYEK6/ULsBSuO+mX1qa4qNG9XhlvvbXlqMiONLf32afmJdnkMAADT7Jh3/PNlu/FeI/+fK7czmhsayuZRdEfHfiNgdEf+LqJa9JyLuXWH94y355eOfwrVVBdaldPz3XDa31Tz+a0xTjA1luR3V+IeTE6fKswezbXIghrek+UNtf3sS1Umg+OnjTvWP58Z/6Setvz4WzNpxrbil+WdmSgulNQeeuf5+xN5iu/izCbxsDmtPROxdZR2nHv9iX/OSoUbq9vHfQnGVDcqpfBbxWG3/L0VL/HXJrecnJ/8V5dmDk/WjYrkffrz8aqf61xR/D6T7f2vb478R/1iSn6+dX/YrRm5Xx+VfP+x4T7Pa438keb2p8ndLCwvnDkWMJMeWL8894E7z9aMvLZ/Gf2B/+/6/K/7ZEvdFRHoQ3x8RD0TEg1nbH4qIhyNif76BLTOc3734yFurj399pfEfW9H+X3li6PS3X3eqv7v9f6SaOpAt6eb8120D17LtAAAAYLMoRMT2SAoTjXShMDFR+z/8u2NroTw3v/DEibl3zs7U3hEYi+FC/UnXaJaP7PnnWO756FR11jziYpY/nD03/mTo39X8xPRceabfwcOA29ah/6d+G+p364B114N5NGCT0v9hcK2+/ztzwGZ3m17sDzbAXcxVHAZXu/5/sQ/tAO48138YXI3+f6WLwrnXvVpf3gQ2H9d/GFz6PwyktbzXvyES8XnErcskG6WpK0p8lF9SP0FvhIaVTtQOmyhsjA3VlIhIonOZQuSWlNqViSsbIYoOiWLXf9XifOViqVz++au1VNrnExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/B0AAP//7mLcmg==") epoll_create(0x6) (async) r0 = epoll_create(0x6) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r1, 0xc0c0128e, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x40000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r4, &(0x7f0000000680), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r4, &(0x7f0000000680), 0x0}, 0x20) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0xa8, 0x40200000000afe8) (async) ptrace$pokeuser(0x6, r5, 0xa8, 0x40200000000afe8) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x87, 0xda27667550a60019}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001680), r6) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4880) (async) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}}, 0x4880) syz_read_part_table(0x5fb, &(0x7f0000000600)="$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") (async) syz_read_part_table(0x5fb, &(0x7f0000000600)="$eJzs2zFoVHccB/DfnTkOlOLi5KQOUloXxdGjVbk7FQvhNEuRYkAR8aYThJMeRHTQoyjeIOmWJQ3ckqZTLjdkSkigU4cSMqQEMmRpaZZAlr5yl1dokhZSeqUInw8HP/7/93vv+37Hf33Bey0bvyRJkomI5IeII//w7pF2sXT91PDlyu2ITNyJiC++/vCb3pVM2pHkd+uZdL2WricnjnZfbV3LtVdvbZ+9u9DM/vHIsf4vjk11RgYwHv+x6cLi8ecvauXX9cLDlXJj4+WP33/27a/FSudmszVzI3f1Xtq3lNahtD6OejyNRzEaQ/Es7kftrx//6Vf9M3r4/PH2+vncyXJ79sGlnVL3zfyFftfBc539+N9MvTe/f2Ajopf/5PTbz1uNK+e+O/HuYn1uubKZRlfz++8cHcwLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwULlYPP78Ra38ul54uFJubLzM9XaLlc7NZmvmRu7qvbRvKa1DaX0c9Xgaj2I0qlGN+1Hb3T5yMOGDPy/y+69OF/bmj7fXz/92styefXBpp9R9M38h7Rse3Mh/l5/08p+cfvtJq3HlXP7Eu4v1ueXKZjpR9cCbR//fAwAAAAAAAAAAAAAAAAAAgEEolq6fGr5cuR2RiTsR8dHPX2Z7+0l+92v+TNp3JiKeRcRa+h385MTR7quta7n26q3ts3cXmj/lI0mSJMYiE2MRcWyqM/I/jsUh/R4AAP//omWTPA==") r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x9) ioctl$BLKDISCARD(r8, 0x1277, &(0x7f0000000040)=0x10000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_CREATE_FILE(r10, 0xc058671e, &(0x7f00000002c0)={{}, {0x392a3c81}, 0x4, 0x0, 0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000400)="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", 0x131, 0x0, &(0x7f0000000c00)={0x2, 0x1dd, {0x0, 0xc, 0xfe, "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", 0xd2, "8b5b1674c1f539a0564181e97d44bf9e988f3be8e7ee5e87b155a0ccd888bb1486d941970d1994c57fd3723324a5b5eefc4d9dd19268b4b9a13668b219a4d88ace48b5689b67a559495dda68063a0239038f82cbc35b7ff2e23e482d421ab64a85f17152f42b5c26f5a1434294162c3a5c938a175c8de5d113656e026cb3bd7e5d950920a198d3b8a4c8b9a0aef158de83aeeda3b5455e2faf286aab044ae2734b62abb0d048da41bb03f8ea70a999d3b12ba1a3069286a3c3cc3003dcfcf528dafa40e6120e0756f12dcee34b0390f9140a"}, 0x8d, "ff9599714751ce40746e1543d90689af2f901a8fe1e47fa8b8e25892b8b273910fa6df0b691561223c16f884993637e2a40859178f9bad34d7055227e78431310196618484a7e175afbaab40d7315e08dbb32d952e82139ab884ce5b881d5e9766c2ee22c5e44814b82a75460e687d03cda593b7faa91773a0aefc25d85708f0819d4288177d9311f278387e03"}, 0x276}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = mq_open(&(0x7f0000000f00)='bond0\x00', 0x80, 0x1, &(0x7f0000000f40)={0x72bd, 0x6}) fsetxattr$security_evm(r12, &(0x7f0000000f80), &(0x7f0000000fc0)=@ng={0x4, 0x7, "9d59da3e47ce45"}, 0x9, 0x1) (async) fsetxattr$security_evm(r12, &(0x7f0000000f80), &(0x7f0000000fc0)=@ng={0x4, 0x7, "9d59da3e47ce45"}, 0x9, 0x1) ioctl$SIOCSIFMTU(r11, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x3}) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000540)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x993}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000040) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r8, &(0x7f0000000ec0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000540)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x993}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000040) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x8d, 0x1, 0x400, 0x8000, r8, 0x5, '\x00', r9, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) 34.126065582s ago: executing program 6 (id=4549): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x203, 0xfffd, 0x0, 0x1, 0x0}) 33.63478802s ago: executing program 6 (id=4552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000060000001042022eb"], 0x7a) 33.588172743s ago: executing program 46 (id=4552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000060000001042022eb"], 0x7a) 3.844088924s ago: executing program 0 (id=5138): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000c00"], 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 3.546404032s ago: executing program 0 (id=5147): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x11, r4, 0x1, 0xf, 0x6, @broadcast}, 0x14) close_range(r0, 0xffffffffffffffff, 0x2000000) 3.470669236s ago: executing program 0 (id=5149): syz_usb_connect(0x2, 0x6ee78b90ef7fb6da, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x40, 0xfffffffd, 0x400, {{0x15, 0x4, 0x3, 0x16, 0x54, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101, {[@timestamp={0x44, 0x28, 0xe6, 0x0, 0xd, [0x10000, 0x7, 0xc, 0x7, 0x0, 0x1, 0x5, 0x7, 0xfffffffb]}, @ssrr={0x89, 0x17, 0xb0, [@local, @private=0xa010102, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4051}, 0x41) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000005c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) fadvise64(0xffffffffffffffff, 0x36a9, 0x9, 0x1) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$eJzs3U9oHNcZAPBvZncl/1EtFVpoiw+mLbhgvJL8p3V7sq+lBoMPhV5asVoLoZXWaKXWEoLKd1PqQ0iCL84tOeSYkEMOIZccc80lIeeAiUUClg/Jht2dldeyZK8UrdfR/n4w0nvzRvu9N7vf084wwwQwsE41fqQRv46Ia0nEaEdbPrLGU63tNjfWSkOxVkqiXr/+dRJJRDzaWCu1t0+y38cjYj0ifhURHxcizqRbLznULtRWVuemKpXyYlYfX5q/OV5bWT07Oz81U54pL5z/058vXrpwcfLcZGd3H9c7a4W9jfXOF3f/d+fTv96/+867J9dLr00lcTlGsrbOcRyk1j4pxOVt6y/0IlgfJf3uAPuSy/K8kUq/jNHIZVm/k3rn5DD8UroH9FB9OKK+paMIDIBE0sOAan8PaBz/tpeX+f3jwZXWAUgj7ubGWum/0Y6fb52biCPNY5Nj3yRPHZk0jjfHXmZHOZTWb0fERD7/7Oc/yT5/+zdxEB2kpz660nqjnn3/0635J3aYf0ba505/pGz+G4qI5vy3uUP83C7z37UuY3z3jy/f3DX+7eH4Tb51bvfp+MlW/GSH+GlE/KvL+Pf+/sGl3drqb0Wcjp3jtyXPPz88fmO2Up5o/dwxxoenT/5l9/FHHNslfuuc7ZFmRzrHP5T1Ke1y/O9/8t5v158T/w+/2yl++tz9fzQi/t9l/J8/evtvu7U9uJ08bHwL2Ov7n0Qh7ncZ/4+XT32eFZ01BAAAAAAAAACAA5Q2r2VL0uJWOU2LxdY9vL+IY2mlWls6c6O6vDDduuZtLApp+0qr0VY9adQns+txxzbq9fpspXyuXc/az+eygLmjzXqxVK1M93nsAAAAAAAAAAAAAAAAAAAA8Ko4vu3+/29zzfv/tz+uGjisdn/kN3DYyX8YXJ35f6LjwYvA4ef/PwysuvyHwSX/YXDJfxhc8h8Gl/yHwSX/YXDJfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IlrV682lvrjjbVSoz6dX1meq/777HS5NlecXy4VS9XFm8WZanWmUi6WqvMver2kWr05EQvLt8aXyrWl8drK6j/nq8sL7WeKlgs9HxEAAAAAAAAAAAAAAAAAAAD89Iw0lyQtRhRa9TQtFiN+FhFjSSQ3ZivliYg4ERGf5QrDjfpkvzsNAAAAAAAAAAAAAAAAAAAAh0xtZXVuqlIpL/aukM9C9TBE94X8XjaOiPWD7UbjFff8V4VsB/Z51x2OQu7V+By++oU+TkoAAAAAAAAAAAAAAAAAADCgntz02+1ffN/bDgEAAAAAAAAAAAAAAAAAAMBASr9KIqKxnB79/cj21qFkM9f8HRH/uXf99VtTS0uLk431D7fWL72RrT/Xj/4D3WrnaRoRjTwGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnqitrM5NVSrlxf0UkohoLC/YuN9jBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiPHwIAAP//R8/KnQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x2, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffe0}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44845}, 0x4048884) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xc00) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x148) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000000)=0x2) fallocate(r7, 0x3, 0xefd, 0x10000) 1.781613055s ago: executing program 8 (id=5181): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0xac14140f}, "0000b50800000000"}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x101b00, 0x9, 0x43a1bd76, 0x7, 0xd, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x203, 0xfffd, 0x0, 0x1, 0x0}) 1.258379026s ago: executing program 8 (id=5186): socket$inet6_udp(0xa, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x9, 0x0, 0x100000000000009, 0x91000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@local, @broadcast, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x67, 0x0, 0x2, 0x67, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0) splice(r5, 0x0, r7, 0x0, 0x4007fffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$binfmt_elf64(r6, 0x0, 0xfffffd88) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20008055}, 0x0) sendmsg$tipc(r9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r11 = msgget$private(0x0, 0x790) msgsnd(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x401, 0x0) msgsnd(r11, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) msgctl$IPC_SET(r11, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x52, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x982, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 1.078411136s ago: executing program 3 (id=5192): syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0xac14140f}, "0000b50800000000"}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0xa00c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x101b00, 0x9, 0x43a1bd76, 0x7, 0xd, 0xa6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x203, 0xfffd, 0x0, 0x1, 0x0}) 1.00942559s ago: executing program 7 (id=5194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf810000fffffff807080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 943.039505ms ago: executing program 7 (id=5195): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3810746, &(0x7f0000002800), 0xff, 0x451, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000280)=ANY=[], 0x1, 0x385, &(0x7f0000000740)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c844) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) sendto$inet(r2, &(0x7f0000000140)="84f8928f8abe492693ad2746e01f4f4dc465a23a", 0x14, 0xc000, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3810746, &(0x7f0000002800), 0xff, 0x451, &(0x7f0000000d00)="$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") (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000280)=ANY=[], 0x1, 0x385, &(0x7f0000000740)="$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") (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r0}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) (async) open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c844) (async) socket(0x840000000002, 0x3, 0xff) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) (async) sendto$inet(r2, &(0x7f0000000140)="84f8928f8abe492693ad2746e01f4f4dc465a23a", 0x14, 0xc000, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) 930.194705ms ago: executing program 7 (id=5196): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 900.664807ms ago: executing program 7 (id=5197): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0xffff, 0x10b, 0x0, 0x1, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82040, 0x170) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x1, @private=0xa010100}, 0x10) (async) bind$inet(r0, &(0x7f0000000500)={0x2, 0x1, @private=0xa010100}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000040)=""/178, 0xb2}], 0x1, 0x8, 0xffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) 814.630342ms ago: executing program 7 (id=5198): syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="8580f83288e1aaaaaa780a010102e000000111819078ac1414bb"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100000, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/18, @ANYRES32, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003010102000000000000000000000005060012400001000060e6c348e9df09f3e615f96996a6ccc272e42fff846e478b2ae7060ec0f5d979219520fc05b6509a521810a600ac402d30cea73c5e8c89cf737ce30411b664c5ec67d1ee68129c0468c9c65a7054"], 0x1c}}, 0x20008090) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40880) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x78, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x20008002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000000002400078008000500000000000800050000000000080005000000000008000500000000000400078014000780080006"], 0xd0}}, 0x0) 693.133779ms ago: executing program 9 (id=5200): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x11, r4, 0x1, 0xf, 0x6, @broadcast}, 0x14) close_range(r0, 0xffffffffffffffff, 0xfffffffc) 634.741732ms ago: executing program 9 (id=5201): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x10, 0x1, 0x42, @private2, @empty, 0x10, 0x10, 0xfffffffe, 0x5}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, r3, 0x4, 0x6, 0x3}, 0x50) 633.637602ms ago: executing program 9 (id=5202): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x1, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) flock(r3, 0x2) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfed1, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fec3000000000511907800000000e000000100004e200064907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0a09340abe32126cc70d0d944b58f0335bbd311f6efd4cd"], 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x482282) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x10}, 0x112, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000100000}, 0xffffffffffffffff, 0x0, r8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000340)=0xc) setreuid(r10, r10) r11 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8eda00ed1dbbf0c8) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f0000000300)={0xd2f0, 0x2000, 0x6, 0xadea}) socket$packet(0x11, 0x3, 0x300) r12 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f00000001c0)=0x20000088) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRESOCT=r9, @ANYBLOB='\x00\x00\x00\x00\x00!\x00'/20, @ANYRES64=r7, @ANYRES32, @ANYBLOB="0000000000000000000000000000eaffff2e06000000000000000be938dcc97f7010818c58cfc72882911dd51654983e4846f642abee660fb502006077003f2c0804a851c9e9d5b23d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 611.096643ms ago: executing program 0 (id=5203): r0 = fsopen(&(0x7f0000000380)='selinuxfs\x00', 0x0) cachestat(r0, &(0x7f00000002c0)={0x400, 0x2400000000000000}, 0xfffffffffffffffc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000007f00000000000000f1ffffff911185000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 564.256186ms ago: executing program 0 (id=5204): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000006001042022eb"], 0x7a) 519.949269ms ago: executing program 3 (id=5205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0xf87, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602580a60f51000000000000000000000000fffffffffffffe8000000000000000008dff000000aa84"], 0x0) 27.711388ms ago: executing program 3 (id=5206): socket(0x2b, 0x80801, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000005a00056086816cf33473273804000080080003"], 0x1c}], 0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) acct(&(0x7f0000000100)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) acct(0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) pwritev(r4, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0xa) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000140)={0x4, 0x9, 0x7, 0x6, 0x10001}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x4a, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a20000000000a01020000000000000000010020000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300180000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 27.418677ms ago: executing program 0 (id=5207): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$BTRFS_IOC_START_SYNC(r0, 0x402c542c, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000340)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001d80)=""/4096, 0x1000}, {0x0}], 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0xfffffffffffffffe) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_MASTER={0x8}, @IFLA_EVENT={0x8, 0x2c, 0x335}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x800, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000018c0)={'team0\x00'}) 27.207608ms ago: executing program 8 (id=5208): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 26.870158ms ago: executing program 3 (id=5209): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xaf4, 0x0) write$rfkill(r5, &(0x7f0000000100)={0x0, 0x3, 0x3, 0x1}, 0x8) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000001200)) socket$kcm(0x11, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setresuid(0x0, 0xee00, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5, 0xfffffffc, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x10, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x9, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {0x0, 0x2000, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) read$rfkill(r4, &(0x7f00000001c0), 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@data_writeback}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 26.644068ms ago: executing program 9 (id=5210): gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) 26.487348ms ago: executing program 8 (id=5211): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x44, 0x30, 0x200, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r3 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) setreuid(0x0, 0xee00) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 64) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000280), &(0x7f0000000340)=r0}, 0x20) (async) io_uring_enter(r1, 0x7b1d, 0xe93c, 0xc, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x1}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x100000001, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4000000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x4, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x800) 24.471738ms ago: executing program 8 (id=5212): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3600000001"], 0x20) 24.274028ms ago: executing program 9 (id=5213): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3600000001"], 0x20) (fail_nth: 1) 24.012498ms ago: executing program 3 (id=5214): ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="16b7d420dce79f25eebc025631ff8ea81e8b7d8a8028c62f725dbd46da682b5c9edf2648768b893bc68597ce1e2eb850ee431b6bf52b8c49138a267bdc2506e33ef0a4fca77a3e1b56291fab8116be0435eabf582dff469add4e8f48f43193723d6aa362b9f34cb47603c588d3f287023db13574d10e1f5b37bb97ac5c") r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close(r0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async, rerun: 64) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7e, 0x7e, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @datasec={0x1, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x7, 0x1}, {0x2, 0xfff, 0xfffffff7}, {0x4, 0x101, 0x3ff}], "20da"}, @func={0xe, 0x0, 0x0, 0xc, 0x3}, @const={0x7, 0x0, 0x0, 0xa, 0x3}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000280)=""/4096, 0x9b, 0x1000, 0x0, 0x8, 0x10000}, 0x28) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0xd, 0x100, 0x2, 0x3, 0x46020, 0xffffffffffffffff, 0x42fe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) (rerun: 64) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001440)='projid_map\x00') (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) (async, rerun: 64) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001640)='./file0\x00'}, 0x18) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@bloom_filter={0x1e, 0x4, 0x8001, 0x8, 0x208a, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0x11, &(0x7f00000000c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, @fallback=0x1a, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x2, 0x9, 0x1, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001740)=[r3, r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f0000001780)=[{0x2, 0x5, 0x8, 0x2}], 0x10, 0x1f}, 0x94) (async) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000001880)={0xa, 0x9}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000018c0)={'vxcan1\x00'}) (async) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, 0x0}, &(0x7f0000001a00)=0xc) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001a40)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001b40)=0xe8) (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5500) (async) r16 = fcntl$getown(r3, 0x9) (async) syz_clone3(&(0x7f0000001e40)={0x100000, &(0x7f0000001c40), &(0x7f0000001c80)=0x0, &(0x7f0000001cc0), {0x32}, &(0x7f0000001d00)=""/34, 0x22, &(0x7f0000001d40)=""/143, &(0x7f0000001e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000001ec0)={{0x3, r12, r13, r14, r15, 0x0, 0xfffe}, 0x0, 0x0, 0x7fffffff, 0xd0ee, 0x7, 0x89, 0x0, 0x8, 0x3, 0x5e9, r16, r17}) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$qrtr(0x2a, 0x2, 0x0) (rerun: 64) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r11, 0x80047210, &(0x7f0000001f40)) r18 = socket(0x1f, 0x6, 0x7502) r19 = syz_genetlink_get_family_id$tipc(&(0x7f0000001fc0), r18) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, r19, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc850}, 0x84) 10.152879ms ago: executing program 8 (id=5215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000400)={"9be5fb9e5d07a4c38418ae71d062da66", 0x0, 0x0, {0xeffe, 0x7}, {0x4, 0xff}, 0x7, [0x2, 0x960b, 0x4, 0x80, 0x7, 0xffffffff00000000, 0x80000000, 0x7, 0x1, 0x9, 0x9, 0x8000000000000001, 0x3, 0x0, 0x7, 0x4]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a05"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000640)={{r3}, r5, 0x0, @unused=[0x9, 0x2, 0x2, 0xc], @devid}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @empty}, 0xc) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf252a00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) (async) socket$inet(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000400)={"9be5fb9e5d07a4c38418ae71d062da66", 0x0, 0x0, {0xeffe, 0x7}, {0x4, 0xff}, 0x7, [0x2, 0x960b, 0x4, 0x80, 0x7, 0xffffffff00000000, 0x80000000, 0x7, 0x1, 0x9, 0x9, 0x8000000000000001, 0x3, 0x0, 0x7, 0x4]}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a05"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000640)={{r3}, r5, 0x0, @unused=[0x9, 0x2, 0x2, 0xc], @devid}) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000080)={@multicast2, @empty}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf252a00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) (async) 9.762718ms ago: executing program 7 (id=5216): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x1b, 0x0, "bb41053574544524474004200b424e7a03000000000000008a0e2f964e0000c503bb2d8afaa4ff1f56c54de76d8b6d2c0100ffffffffffff7bbe00000000000000f1864da3290d00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x2, 0x20008, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffefffffffd, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010400000200000000000000e000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800e0001006970366772657461700000001c00028008000100", @ANYRES32, @ANYBLOB="297235feda382900080014000900000008000a00", @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x109) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) close(r4) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000340), 0x2000011a) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) accept4(r0, 0x0, 0x0, 0x80000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0), 0xff, 0x256, &(0x7f0000000680)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x6020480) write$binfmt_script(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 191.019µs ago: executing program 9 (id=5217): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, 0x0, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 0s ago: executing program 3 (id=5218): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b7000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r3}, 0x38) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000000c0)={0x385200080, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x9, 0x5, 0xa3, 0x3, 0x0, 0x8af, 0x1011, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9}, 0x4, 0x3, 0xffff, 0x0, 0xd, 0x5, 0x4, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r1, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r5, 0xbd67d31543339c84) r6 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0)) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r7) keyctl$revoke(0x3, r8) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) kernel console output (not intermixed with test programs): ) entered disabled state [ 315.382877][T21281] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4385: couldn't read orphan inode 15 (err -117) [ 315.506632][T21281] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.598940][ T52] bond2 (unregistering): (slave geneve3): Releasing active interface [ 315.633608][ T52] team0: Port device geneve1 removed [ 315.640757][T20418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 315.720951][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.744426][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.757060][ T52] bond0 (unregistering): Released all slaves [ 315.770100][ T52] bond1 (unregistering): Released all slaves [ 315.784778][ T52] bond2 (unregistering): Released all slaves [ 315.871599][ T52] hsr_slave_0: left promiscuous mode [ 315.899752][ T52] hsr_slave_1: left promiscuous mode [ 315.905884][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.913351][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.932557][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.940392][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.962423][ T52] veth1_macvtap: left promiscuous mode [ 315.968533][ T52] veth0_macvtap: left promiscuous mode [ 315.977718][ T52] veth1_vlan: left promiscuous mode [ 315.984647][ T52] veth0_vlan: left promiscuous mode [ 316.080704][ T52] team0 (unregistering): Port device team_slave_1 removed [ 316.093019][ T52] team0 (unregistering): Port device team_slave_0 removed [ 316.150005][T21335] lo speed is unknown, defaulting to 1000 [ 316.194301][T21337] lo speed is unknown, defaulting to 1000 [ 316.200567][T21240] chnl_net:caif_netlink_parms(): no params data found [ 316.238065][T21373] netlink: 'syz.3.4400': attribute type 1 has an invalid length. [ 316.359004][T21240] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.366338][T21240] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.374002][T21240] bridge_slave_0: entered allmulticast mode [ 316.380613][T21240] bridge_slave_0: entered promiscuous mode [ 316.388067][T21240] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.395399][T21240] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.403294][T21240] bridge_slave_1: entered allmulticast mode [ 316.410053][T21240] bridge_slave_1: entered promiscuous mode [ 316.431213][T21240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.442128][T21240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.501515][T21240] team0: Port device team_slave_0 added [ 316.511579][T21240] team0: Port device team_slave_1 added [ 316.514610][ T52] IPVS: stop unused estimator thread 0... [ 316.557551][T21240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.564932][T21240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.591737][T21240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.609443][T21240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.616710][T21240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.643466][T21240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.657412][T21387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21387 comm=syz.2.4402 [ 316.713089][T21240] hsr_slave_0: entered promiscuous mode [ 316.721006][T21240] hsr_slave_1: entered promiscuous mode [ 316.728818][T21240] debugfs: 'hsr0' already exists in 'hsr' [ 316.734645][T21240] Cannot create hsr debugfs directory [ 316.989098][T21439] loop8: detected capacity change from 0 to 512 [ 316.995912][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 316.995929][ T29] audit: type=1400 audit(2000000306.940:24432): avc: denied { create } for pid=21435 comm="syz.3.4411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.997543][T21439] journal_path: Non-blockdev passed as './file0' [ 317.029695][T21439] EXT4-fs: error: could not find journal device path [ 317.093738][ T29] audit: type=1400 audit(2000000307.045:24433): avc: denied { name_bind } for pid=21450 comm="syz.6.4414" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 317.123003][T21451] loop6: detected capacity change from 0 to 128 [ 317.130861][ T29] audit: type=1400 audit(2000000307.077:24434): avc: denied { write } for pid=21450 comm="syz.6.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.152402][ T29] audit: type=1400 audit(2000000307.077:24435): avc: denied { nlmsg_write } for pid=21450 comm="syz.6.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.173748][T21451] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 317.204080][ T29] audit: type=1400 audit(2000000307.140:24436): avc: denied { mount } for pid=21450 comm="syz.6.4414" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 317.237043][T21455] netlink: 'syz.8.4415': attribute type 10 has an invalid length. [ 317.260299][T21455] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.267685][T21455] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.286282][T21455] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.293696][T21455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.301213][T21455] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.308475][T21455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.322704][T21455] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 317.354609][T21240] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.361637][ T29] audit: type=1400 audit(2000000307.318:24437): avc: denied { unmount } for pid=20289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 317.410722][T21240] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.421098][T21240] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 317.471193][T21240] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 317.521612][T21480] lo speed is unknown, defaulting to 1000 [ 317.638306][T21506] FAULT_INJECTION: forcing a failure. [ 317.638306][T21506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.652125][T21506] CPU: 1 UID: 0 PID: 21506 Comm: syz.8.4425 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 317.652173][T21506] Tainted: [W]=WARN [ 317.652206][T21506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.652222][T21506] Call Trace: [ 317.652229][T21506] [ 317.652239][T21506] __dump_stack+0x1d/0x30 [ 317.652271][T21506] dump_stack_lvl+0x95/0xd0 [ 317.652366][T21506] dump_stack+0x15/0x1b [ 317.652391][T21506] should_fail_ex+0x263/0x280 [ 317.652426][T21506] should_fail+0xb/0x20 [ 317.652458][T21506] should_fail_usercopy+0x1a/0x20 [ 317.652512][T21506] _copy_from_user+0x1c/0xb0 [ 317.652546][T21506] ___sys_recvmsg+0xaa/0x3b0 [ 317.652618][T21506] do_recvmmsg+0x1ef/0x560 [ 317.652649][T21506] ? fput+0x8f/0xc0 [ 317.652750][T21506] __x64_sys_recvmmsg+0xe5/0x170 [ 317.652785][T21506] x64_sys_call+0x2b75/0x3000 [ 317.652815][T21506] do_syscall_64+0xc0/0x2a0 [ 317.652893][T21506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.652921][T21506] RIP: 0033:0x7face3f5aeb9 [ 317.652940][T21506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.652969][T21506] RSP: 002b:00007face2996028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 317.652996][T21506] RAX: ffffffffffffffda RBX: 00007face41d6090 RCX: 00007face3f5aeb9 [ 317.653013][T21506] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 317.653085][T21506] RBP: 00007face2996090 R08: 0000000000000000 R09: 0000000000000000 [ 317.653099][T21506] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 317.653214][T21506] R13: 00007face41d6128 R14: 00007face41d6090 R15: 00007ffc6c9fc638 [ 317.653238][T21506] [ 317.654467][T21240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.851015][T21240] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.902038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.909170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.938716][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.946117][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.970034][T21240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.980766][T21240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.043928][ T29] audit: type=1400 audit(2000000308.042:24438): avc: denied { read write } for pid=21545 comm="syz.6.4435" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.068150][ T29] audit: type=1400 audit(2000000308.042:24439): avc: denied { open } for pid=21545 comm="syz.6.4435" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.147041][T21561] loop2: detected capacity change from 0 to 512 [ 318.153381][ T29] audit: type=1400 audit(2000000308.105:24440): avc: denied { ioctl } for pid=21545 comm="syz.6.4435" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 318.153472][ T29] audit: type=1400 audit(2000000308.116:24441): avc: denied { ioctl } for pid=21545 comm="syz.6.4435" path="socket:[63099]" dev="sockfs" ino=63099 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 318.210714][T10178] IPVS: starting estimator thread 0... [ 318.285201][T21562] xt_socket: unknown flags 0x50 [ 318.296657][T21564] IPVS: using max 2160 ests per chain, 108000 per kthread [ 318.367474][T21585] netlink: 'syz.2.4442': attribute type 2 has an invalid length. [ 318.417473][T21240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.435107][T21546] loop6: detected capacity change from 0 to 1024 [ 318.459158][T21546] EXT4-fs: Ignoring removed bh option [ 318.485084][T21599] loop8: detected capacity change from 0 to 512 [ 318.487270][T21546] EXT4-fs (loop6): inodes count not valid: 41 vs 32 [ 318.509112][T21599] EXT4-fs: Ignoring removed i_version option [ 318.519266][T21599] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 318.726027][T21632] loop2: detected capacity change from 0 to 128 [ 318.761854][T21632] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.790846][T21632] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 318.806115][T21240] veth0_vlan: entered promiscuous mode [ 318.823540][T21240] veth1_vlan: entered promiscuous mode [ 318.839077][T21240] veth0_macvtap: entered promiscuous mode [ 318.852114][T21240] veth1_macvtap: entered promiscuous mode [ 318.870817][T21240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.880445][T21240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.893448][T20418] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.915279][T21650] loop8: detected capacity change from 0 to 1024 [ 318.932369][ T6740] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.949407][T21650] EXT4-fs: inline encryption not supported [ 318.961088][ T6740] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.976054][T21650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.998598][ T6740] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.010393][T21661] __nla_validate_parse: 6 callbacks suppressed [ 319.010411][T21661] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4454'. [ 319.037446][ T6740] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.100260][T21650] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 319.131679][T21650] EXT4-fs (loop8): Remounting filesystem read-only [ 319.147822][T21650] program syz.8.4460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.173864][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'. [ 319.281497][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.566446][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4471'. [ 319.606319][T21736] xt_HMARK: spi-set and port-set can't be combined [ 319.656057][ T5082] IPVS: starting estimator thread 0... [ 319.672511][T21753] xt_socket: unknown flags 0x50 [ 319.684210][T21753] loop7: detected capacity change from 0 to 1024 [ 319.694079][T21753] EXT4-fs: Ignoring removed bh option [ 319.702734][T21753] EXT4-fs (loop7): inodes count not valid: 41 vs 32 [ 319.742931][T21762] loop6: detected capacity change from 0 to 512 [ 319.744244][T21754] IPVS: using max 2208 ests per chain, 110400 per kthread [ 319.867601][T21771] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 319.902514][T21745] lo speed is unknown, defaulting to 1000 [ 319.918517][T21771] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 319.962478][T21768] lo speed is unknown, defaulting to 1000 [ 320.183235][T21798] bond3: option min_links: invalid value (18446744073709551601) [ 320.191101][T21798] bond3: option min_links: allowed values 0 - 2147483647 [ 320.199159][T21798] bond3 (unregistering): Released all slaves [ 320.227329][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4480'. [ 320.365473][T21819] set_capacity_and_notify: 1 callbacks suppressed [ 320.365495][T21819] loop2: detected capacity change from 0 to 512 [ 320.436819][T21819] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 320.579243][T21844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4486'. [ 320.605302][T21853] 9p: Bad value for 'rfdno' [ 320.697967][T21845] loop8: detected capacity change from 0 to 512 [ 320.713624][T21819] lo speed is unknown, defaulting to 1000 [ 320.720397][T21845] EXT4-fs: inline encryption not supported [ 320.730187][T21845] EXT4-fs: Ignoring removed i_version option [ 320.763635][T21845] EXT4-fs (loop8): 1 orphan inode deleted [ 320.826714][T21845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.863814][T20418] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 320.874272][T20418] FAT-fs (loop2): Filesystem has been set read-only [ 320.881220][T20418] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 320.982387][T21890] loop6: detected capacity change from 0 to 1024 [ 321.002233][T21890] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.008734][T21890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.015593][T21890] EXT4-fs: Ignoring removed oldalloc option [ 321.044748][T21890] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 321.078442][T21890] System zones: 0-1, 3-36 [ 321.108257][T21890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.205619][T21911] loop7: detected capacity change from 0 to 128 [ 321.226193][T21911] vfat: Unknown parameter 'non' [ 321.288235][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.316763][T20289] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.336192][ T6743] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.443347][ T6743] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.459839][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4510'. [ 321.468939][T21939] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4510'. [ 321.498659][T21939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4510'. [ 321.507611][T21939] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4510'. [ 321.524168][ T6743] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.596218][ T6743] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.624027][T21963] netlink: 'syz.6.4517': attribute type 1 has an invalid length. [ 321.646552][T21965] loop7: detected capacity change from 0 to 1024 [ 321.663933][T21965] ext4: Unknown parameter 'euid>00000000000000000000' [ 321.728735][T21963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.747766][T21973] macvlan2: entered promiscuous mode [ 321.753288][T21973] macvlan2: entered allmulticast mode [ 321.775156][T21973] bond1: entered allmulticast mode [ 321.780480][T21973] bond1: entered promiscuous mode [ 321.795447][T21965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21965 comm=syz.7.4516 [ 321.810605][T21973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 321.886780][T21973] team0: Port device macvlan2 added [ 321.922016][T21963] bond1: (slave ip6gretap1): making interface the new active one [ 321.929950][T21963] ip6gretap1: entered promiscuous mode [ 321.936177][T21963] ip6gretap1: entered allmulticast mode [ 321.950275][T21963] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 321.968823][T21932] lo speed is unknown, defaulting to 1000 [ 322.055734][T21995] lo speed is unknown, defaulting to 1000 [ 322.072353][ T6743] bridge_slave_1: left allmulticast mode [ 322.078160][ T6743] bridge_slave_1: left promiscuous mode [ 322.084289][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.111377][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 322.111396][ T29] audit: type=1400 audit(2000000312.315:24493): avc: denied { getopt } for pid=22009 comm="syz.3.4527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 322.145404][ T6743] bridge_slave_0: left allmulticast mode [ 322.151121][ T6743] bridge_slave_0: left promiscuous mode [ 322.156856][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.164410][ T29] audit: type=1400 audit(2000000312.326:24494): avc: denied { watch watch_reads } for pid=22020 comm="syz.3.4531" path="/554/file1" dev="tmpfs" ino=2877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.359040][ T6743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.371571][ T6743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.397492][ T6743] bond0 (unregistering): Released all slaves [ 322.419541][T22058] loop6: detected capacity change from 0 to 512 [ 322.420266][T22049] macvlan1: entered promiscuous mode [ 322.426372][T22058] EXT4-fs: Ignoring removed i_version option [ 322.440059][T22049] macvlan1: left promiscuous mode [ 322.446578][T22058] EXT4-fs (loop6): 1 truncate cleaned up [ 322.455140][T22058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.477121][ T29] audit: type=1400 audit(2000000312.693:24495): avc: denied { append } for pid=22057 comm="syz.6.4541" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.478494][T22058] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4541: bg 0: block 7: invalid block bitmap [ 322.539927][ T29] audit: type=1400 audit(2000000312.767:24496): avc: denied { ioctl } for pid=22057 comm="syz.6.4541" path="socket:[64821]" dev="sockfs" ino=64821 ioctlcmd=0x89fb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 322.565725][ T6743] hsr_slave_0: left promiscuous mode [ 322.572901][ T6743] hsr_slave_1: left promiscuous mode [ 322.578859][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.586558][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.606526][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.614245][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.626353][ T6743] veth1_macvtap: left promiscuous mode [ 322.638466][ T6743] veth0_macvtap: left promiscuous mode [ 322.649903][ T6743] veth1_vlan: left promiscuous mode [ 322.655693][ T6743] veth0_vlan: left promiscuous mode [ 322.768520][T22073] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4553'. [ 322.778169][ T6743] team0 (unregistering): Port device team_slave_1 removed [ 322.796230][ T6743] team0 (unregistering): Port device team_slave_0 removed [ 322.826210][ T29] audit: type=1400 audit(2000000313.050:24497): avc: denied { bind } for pid=22075 comm="syz.3.4546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 322.878896][T20289] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /53/bus: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 322.911798][T20289] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 322.923883][ T29] audit: type=1400 audit(2000000313.155:24498): avc: denied { remove_name } for pid=20289 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.947752][ T29] audit: type=1400 audit(2000000313.155:24499): avc: denied { rmdir } for pid=20289 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 322.970937][ T29] audit: type=1400 audit(2000000313.155:24500): avc: denied { unlink } for pid=20289 comm="syz-executor" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 323.001455][T20289] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 323.003779][T21932] chnl_net:caif_netlink_parms(): no params data found [ 323.085930][T21932] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.093247][T21932] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.101319][T21932] bridge_slave_0: entered allmulticast mode [ 323.108433][T21932] bridge_slave_0: entered promiscuous mode [ 323.129421][T21932] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.136974][T21932] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.157525][T21932] bridge_slave_1: entered allmulticast mode [ 323.171223][T21932] bridge_slave_1: entered promiscuous mode [ 323.216421][T21932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.246541][T21932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.308044][T22061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.344498][ T6743] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.380762][T21932] team0: Port device team_slave_0 added [ 323.393945][T21932] team0: Port device team_slave_1 added [ 323.411187][ T6743] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.440863][T21932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.447906][T21932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.474643][T21932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.492089][T21932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.499418][T21932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.525984][T21932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.618941][ T6743] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.631248][ T29] audit: type=1400 audit(2000000313.911:24501): avc: denied { mounton } for pid=22115 comm="syz.7.4557" path="/21/file0" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 323.688339][ T29] audit: type=1326 audit(2000000313.963:24502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.7.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922f43aeb9 code=0x7ffc0000 [ 323.728395][T21932] hsr_slave_0: entered promiscuous mode [ 323.734842][T21932] hsr_slave_1: entered promiscuous mode [ 323.754684][T21932] debugfs: 'hsr0' already exists in 'hsr' [ 323.760451][T21932] Cannot create hsr debugfs directory [ 323.779288][ T6743] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.934414][ T6743] bridge_slave_1: left allmulticast mode [ 323.940152][ T6743] bridge_slave_1: left promiscuous mode [ 323.946298][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.976055][ T6743] bridge_slave_0: left allmulticast mode [ 323.982282][ T6743] bridge_slave_0: left promiscuous mode [ 323.988304][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.052603][ T6743] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 324.061851][ T6743] ip6gretap1 (unregistering): left allmulticast mode [ 324.160534][ T6743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.171607][ T6743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.181800][ T6743] bond0 (unregistering): Released all slaves [ 324.189764][ T6743] bond1 (unregistering): left allmulticast mode [ 324.196287][ T6743] bond1 (unregistering): left promiscuous mode [ 324.206852][ T6743] team0: Port device macvlan2 removed [ 324.215346][ T6743] bond1 (unregistering): Released all slaves [ 324.236893][T22113] lo speed is unknown, defaulting to 1000 [ 324.281988][T22150] loop8: detected capacity change from 0 to 512 [ 324.312664][ T6743] hsr_slave_0: left promiscuous mode [ 324.319987][ T6743] hsr_slave_1: left promiscuous mode [ 324.326130][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.333713][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.342301][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.349957][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.367724][T22166] __nla_validate_parse: 1 callbacks suppressed [ 324.367746][T22166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4558'. [ 324.394625][T22150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.420036][ T6743] veth1_macvtap: left promiscuous mode [ 324.425979][ T6743] veth0_macvtap: left promiscuous mode [ 324.431931][ T6743] veth1_vlan: left promiscuous mode [ 324.437368][ T6743] veth0_vlan: left promiscuous mode [ 324.438895][T22150] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.472803][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.539789][ T6743] team0 (unregistering): Port device team_slave_1 removed [ 324.550085][ T6743] team0 (unregistering): Port device team_slave_0 removed [ 324.591204][T22166] syz_tun (unregistering): left allmulticast mode [ 324.599606][ T9] IPVS: starting estimator thread 0... [ 324.608685][T22183] xt_socket: unknown flags 0x50 [ 324.717487][T22184] IPVS: using max 2352 ests per chain, 117600 per kthread [ 324.726042][T22113] chnl_net:caif_netlink_parms(): no params data found [ 324.790607][T22113] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.798229][T22113] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.806579][T22113] bridge_slave_0: entered allmulticast mode [ 324.813331][T22113] bridge_slave_0: entered promiscuous mode [ 324.830168][T22113] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.837473][T22113] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.845247][T22113] bridge_slave_1: entered allmulticast mode [ 324.852298][T22113] bridge_slave_1: entered promiscuous mode [ 324.877355][T22207] loop7: detected capacity change from 0 to 512 [ 324.877662][T22113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.907685][T22207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.913549][T22113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.920944][T22207] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.989854][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.005452][ T6743] IPVS: stop unused estimator thread 0... [ 325.038211][T22113] team0: Port device team_slave_0 added [ 325.045455][T22113] team0: Port device team_slave_1 added [ 325.061544][T22113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.068818][T22113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.095128][T22113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.137750][T22113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.144783][T22113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.171629][T22113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.204015][T21932] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 325.216211][T21932] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 325.270434][T21932] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 325.290887][T22113] hsr_slave_0: entered promiscuous mode [ 325.298686][T22113] hsr_slave_1: entered promiscuous mode [ 325.312666][T22113] debugfs: 'hsr0' already exists in 'hsr' [ 325.318530][T22113] Cannot create hsr debugfs directory [ 325.324272][T21932] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 325.418735][T22268] loop8: detected capacity change from 0 to 512 [ 325.424726][T21932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.462352][T22268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.479116][T21932] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.480365][T22268] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.515945][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.523414][ T6740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.577715][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.598053][T21932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 325.608659][T21932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.626012][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.633265][ T6740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.658386][T22296] loop8: detected capacity change from 0 to 512 [ 325.673378][T22296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.696919][T22296] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.710229][T22303] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4585'. [ 325.750671][T22296] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4584: bg 0: block 217: padding at end of block bitmap is not set [ 325.770536][T21932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.933597][T22113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 325.952555][T22113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 325.965285][T22113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 325.980167][T22113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.005937][T22346] bridge_slave_1: left allmulticast mode [ 326.011943][T22346] bridge_slave_1: left promiscuous mode [ 326.017733][T22346] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.027319][T22346] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 326.092781][T21932] veth0_vlan: entered promiscuous mode [ 326.111961][T21932] veth1_vlan: entered promiscuous mode [ 326.121418][T22113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.129013][T22363] tipc: Enabling of bearer rejected, failed to enable media [ 326.152150][T22113] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.160469][T22363] netlink: 'syz.3.4591': attribute type 1 has an invalid length. [ 326.176336][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.183736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.194629][T21932] veth0_macvtap: entered promiscuous mode [ 326.223346][T21932] veth1_macvtap: entered promiscuous mode [ 326.229900][T22375] loop7: detected capacity change from 0 to 512 [ 326.233808][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.243977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.266594][T22375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.276440][T21932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.294534][T22375] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.310100][T21932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.329463][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.352149][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.368251][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.387663][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.409621][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.508448][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.511081][T22113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.538453][T22405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.547320][T22405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.667068][T22113] veth0_vlan: entered promiscuous mode [ 326.675924][T22113] veth1_vlan: entered promiscuous mode [ 326.701170][T22113] veth0_macvtap: entered promiscuous mode [ 326.715592][T22113] veth1_macvtap: entered promiscuous mode [ 326.740197][T22113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.760156][T22113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.783044][ T6740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.801857][ T6740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.843743][ T6740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.850728][T22439] loop9: detected capacity change from 0 to 512 [ 326.877402][ T6740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.896937][T22439] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.913400][T22439] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.974841][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.035639][T22466] loop8: detected capacity change from 0 to 1024 [ 327.050743][T22466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.095784][T22466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 327.141044][T22466] System zones: 0-1, 3-36 [ 327.159378][T22466] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.208440][T22466] EXT4-fs: Ignoring removed orlov option [ 327.210867][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 327.210884][ T29] audit: type=1400 audit(2000000317.659:24600): avc: denied { remount } for pid=22465 comm="syz.8.4610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 327.214417][T22466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.249455][T22484] loop0: detected capacity change from 0 to 2048 [ 327.256484][T22466] EXT4-fs (loop8): can't enable nombcache during remount [ 327.349102][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.389786][T12083] Alternate GPT is invalid, using primary GPT. [ 327.396391][T12083] loop0: p1 p2 p3 [ 327.400417][T12083] loop0: partition table partially beyond EOD, truncated [ 327.469384][T22484] Alternate GPT is invalid, using primary GPT. [ 327.476062][T22484] loop0: p1 p2 p3 [ 327.480043][T22484] loop0: partition table partially beyond EOD, truncated [ 327.488487][T22512] loop9: detected capacity change from 0 to 2048 [ 327.513877][ T29] audit: type=1400 audit(2000000317.974:24601): avc: denied { create } for pid=22517 comm="syz.8.4619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 327.565056][T22521] loop7: detected capacity change from 0 to 1024 [ 327.576128][T22512] GPT:first_usable_lbas don't match. [ 327.581629][T22512] GPT:34 != 290 [ 327.585272][T22512] GPT: Use GNU Parted to correct GPT errors. [ 327.591828][T22512] loop9: p1 p2 p3 [ 327.625945][T22521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.647020][ T29] audit: type=1400 audit(2000000317.984:24602): avc: denied { execute } for pid=22517 comm="syz.8.4619" path="/selinux/mls" dev="selinuxfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 327.670856][ T29] audit: type=1400 audit(2000000318.110:24603): avc: denied { read write } for pid=22498 comm="syz.9.4617" name="loop9p1" dev="devtmpfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.695984][ T29] audit: type=1400 audit(2000000318.110:24604): avc: denied { open } for pid=22498 comm="syz.9.4617" path="/dev/loop9p1" dev="devtmpfs" ino=2308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 327.769076][T22521] EXT4-fs (loop7): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 327.861168][T22521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.922037][T22541] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4626'. [ 327.931646][T22541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4626'. [ 327.966213][ T29] audit: type=1400 audit(2000000318.457:24605): avc: denied { create } for pid=22546 comm="syz.3.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 328.015031][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.051500][T22556] netlink: 'syz.0.4629': attribute type 1 has an invalid length. [ 328.059427][ T29] audit: type=1400 audit(2000000318.509:24606): avc: denied { sys_admin } for pid=22546 comm="syz.3.4628" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 328.081335][ T29] audit: type=1400 audit(2000000318.540:24607): avc: denied { setopt } for pid=22546 comm="syz.3.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 328.103418][T22560] bridge0: port 3(ip6gretap1) entered blocking state [ 328.110528][T22560] bridge0: port 3(ip6gretap1) entered disabled state [ 328.125221][T22560] ip6gretap1: entered allmulticast mode [ 328.133406][T22562] netlink: 'syz.9.4630': attribute type 58 has an invalid length. [ 328.141220][T22560] ip6gretap1: entered promiscuous mode [ 328.182640][T22562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22562 comm=syz.9.4630 [ 328.225348][T22562] netlink: 'syz.9.4630': attribute type 1 has an invalid length. [ 328.260981][ T29] audit: type=1400 audit(2000000318.771:24608): avc: denied { execute } for pid=22557 comm="syz.9.4630" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=66824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 328.300292][T22586] pimreg3: entered allmulticast mode [ 328.321635][T22586] netlink: 'syz.3.4637': attribute type 4 has an invalid length. [ 328.322464][ T29] audit: type=1400 audit(2000000318.771:24609): avc: denied { accept } for pid=22583 comm="syz.0.4636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 328.391330][T22594] loop7: detected capacity change from 0 to 512 [ 328.427753][T22594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.450712][T22594] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.476742][T22607] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4642'. [ 328.501061][T22611] netlink: 'syz.3.4643': attribute type 4 has an invalid length. [ 328.535665][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.567044][T22617] syzkaller0: entered promiscuous mode [ 328.572722][T22617] syzkaller0: entered allmulticast mode [ 328.611472][T22624] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4648'. [ 328.666412][T22638] loop9: detected capacity change from 0 to 128 [ 328.716259][T22638] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 328.775503][T22642] bond1: option fail_over_mac: invalid value (166) [ 328.794069][T22642] bond1 (unregistering): Released all slaves [ 328.978109][T22675] xt_socket: unknown flags 0x50 [ 329.043758][T22677] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4656'. [ 329.053678][T22677] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4656'. [ 329.143648][ T6742] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 329.165040][ T6742] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 329.173847][ T6742] bridge0: port 3(netdevsim1) entered disabled state [ 329.233721][T22671] lo speed is unknown, defaulting to 1000 [ 329.245526][T22695] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.273568][T22695] bridge_slave_0 (unregistering): left allmulticast mode [ 329.281210][T22695] bridge_slave_0 (unregistering): left promiscuous mode [ 329.288335][T22695] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.394368][ T6742] bridge_slave_0: left allmulticast mode [ 329.400849][ T6742] bridge_slave_0: left promiscuous mode [ 329.406689][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.436280][ T6742] batman_adv: batadv0: Removing interface: ip6gretap1 [ 329.538737][ T6742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.568141][ T6742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.580261][ T6742] bond0 (unregistering): Released all slaves [ 329.588451][ T6742] bond1 (unregistering): Released all slaves [ 329.598665][ T6742] bond2 (unregistering): Released all slaves [ 329.611887][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4664'. [ 329.622301][T22723] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4664'. [ 329.674275][T22671] chnl_net:caif_netlink_parms(): no params data found [ 329.771166][ T6742] hsr_slave_0: left promiscuous mode [ 329.788089][ T6742] hsr_slave_1: left promiscuous mode [ 329.832630][ T6742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.848920][ T6742] pimreg3 (unregistering): left allmulticast mode [ 329.965411][T22764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22764 comm=syz.8.4672 [ 330.030483][T22764] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4672'. [ 330.160060][T22768] lo speed is unknown, defaulting to 1000 [ 330.160381][T22671] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.173439][T22671] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.200480][T22671] bridge_slave_0: entered allmulticast mode [ 330.210772][T22671] bridge_slave_0: entered promiscuous mode [ 330.218284][T22671] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.226532][T22671] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.258971][T22671] bridge_slave_1: entered allmulticast mode [ 330.270862][T22671] bridge_slave_1: entered promiscuous mode [ 330.395790][T22671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.429389][T22671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.510455][T22671] team0: Port device team_slave_0 added [ 330.517170][T22671] team0: Port device team_slave_1 added [ 330.517577][ T6742] IPVS: stop unused estimator thread 0... [ 330.534656][T22671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.541888][T22671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.569084][T22671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.599464][T22671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.606508][T22671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.633609][T22671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.687141][T22671] hsr_slave_0: entered promiscuous mode [ 330.705121][T22671] hsr_slave_1: entered promiscuous mode [ 330.718635][T22671] debugfs: 'hsr0' already exists in 'hsr' [ 330.724629][T22671] Cannot create hsr debugfs directory [ 330.883212][T22844] loop7: detected capacity change from 0 to 512 [ 330.900568][T22844] EXT4-fs: Ignoring removed oldalloc option [ 330.928397][T22844] EXT4-fs (loop7): 1 truncate cleaned up [ 330.934982][T22844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.953195][T22846] bridge1: entered promiscuous mode [ 331.005759][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.019497][T22863] loop8: detected capacity change from 0 to 512 [ 331.037104][T22862] tipc: Started in network mode [ 331.042201][T22862] tipc: Node identity f6315e3ee878, cluster identity 4711 [ 331.049802][T22862] tipc: Enabled bearer , priority 0 [ 331.080035][T22863] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.089789][T22873] syzkaller0: entered promiscuous mode [ 331.093598][T22863] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.098546][T22873] syzkaller0: entered allmulticast mode [ 331.129857][T22874] loop0: detected capacity change from 0 to 512 [ 331.175619][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.222097][T22874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.222968][T22862] tipc: Resetting bearer [ 331.248265][T22874] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.283372][T22887] syz_tun: entered allmulticast mode [ 331.290070][T22671] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.304923][T22862] netlink: 'syz.9.4690': attribute type 1 has an invalid length. [ 331.313678][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.323570][T22671] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.345444][T22671] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.356703][T22858] tipc: Resetting bearer [ 331.364976][T22858] tipc: Disabling bearer [ 331.400291][T22902] loop0: detected capacity change from 0 to 1024 [ 331.411601][T22671] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.427409][T22902] EXT4-fs: Ignoring removed orlov option [ 331.429007][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4698'. [ 331.472655][T22902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.518587][T22918] loop9: detected capacity change from 0 to 1024 [ 331.542016][T22918] EXT4-fs: Ignoring removed orlov option [ 331.577872][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.625516][T22918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.670992][T10176] IPVS: starting estimator thread 0... [ 331.700996][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.765629][T22943] IPVS: using max 2352 ests per chain, 117600 per kthread [ 331.776547][T22671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.865831][T22671] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.890734][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.898096][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.918002][T22955] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4703'. [ 331.938128][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.945250][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.945638][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4703'. [ 331.993001][T22962] loop9: detected capacity change from 0 to 512 [ 332.025138][T22671] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.053020][T22962] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.068988][T22962] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.148607][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.149109][T22671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.201176][T22985] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4709'. [ 332.244261][T22985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4709'. [ 332.338240][T22671] veth0_vlan: entered promiscuous mode [ 332.348850][T22671] veth1_vlan: entered promiscuous mode [ 332.371583][T22671] veth0_macvtap: entered promiscuous mode [ 332.388236][T22671] veth1_macvtap: entered promiscuous mode [ 332.402988][T22671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.451615][T22671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.482379][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.503174][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.522514][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.534289][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.609607][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 332.609626][ T29] audit: type=1400 audit(2000000323.338:24758): avc: denied { bind } for pid=23030 comm="syz.0.4714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 332.636679][ T29] audit: type=1400 audit(2000000323.338:24759): avc: denied { name_bind } for pid=23030 comm="syz.0.4714" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 332.659843][ T29] audit: type=1400 audit(2000000323.338:24760): avc: denied { node_bind } for pid=23030 comm="syz.0.4714" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 332.747199][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4716'. [ 332.757744][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4716'. [ 332.785286][T23056] loop3: detected capacity change from 0 to 512 [ 332.810108][T23056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.825078][T23056] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.067927][ T29] audit: type=1400 audit(2000000323.810:24761): avc: denied { mount } for pid=23074 comm="syz.8.4719" name="/" dev="ramfs" ino=69647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 333.110775][T23067] lo speed is unknown, defaulting to 1000 [ 333.181972][ T29] audit: type=1400 audit(2000000323.936:24762): avc: denied { mounton } for pid=23074 comm="syz.8.4719" path="/file0" dev="ramfs" ino=69673 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 333.252895][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.284291][ T29] audit: type=1400 audit(2000000324.031:24763): avc: denied { getopt } for pid=23081 comm="syz.9.4721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 333.304502][ T29] audit: type=1326 audit(2000000324.031:24764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23081 comm="syz.9.4721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f26a5aeb9 code=0x0 [ 333.389337][ T29] audit: type=1400 audit(2000000324.146:24765): avc: denied { bind } for pid=23092 comm="syz.9.4723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.409920][ T29] audit: type=1400 audit(2000000324.157:24766): avc: denied { listen } for pid=23092 comm="syz.9.4723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 333.429978][ T29] audit: type=1326 audit(2000000324.157:24767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23092 comm="syz.9.4723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f26a5aeb9 code=0x7ffc0000 [ 333.845186][T23157] loop8: detected capacity change from 0 to 512 [ 333.871957][T23157] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.889657][T23157] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.913718][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.974789][ T6743] Bluetooth: hci0: Frame reassembly failed (-84) [ 334.489852][T23256] __nla_validate_parse: 5 callbacks suppressed [ 334.489871][T23256] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4738'. [ 334.518482][T23256] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 334.540974][T23256] batman_adv: batadv0: Adding interface: ip6gretap1 [ 334.547820][T23256] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.594067][T23256] batman_adv: batadv0: Interface activated: ip6gretap1 [ 334.600437][T23266] loop3: detected capacity change from 0 to 512 [ 334.656436][T23266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.676689][T23262] loop7: detected capacity change from 0 to 128 [ 334.681053][T23266] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.693911][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.703532][T23262] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 334.714519][T23262] EXT4-fs (loop7): group descriptors corrupted! [ 334.757175][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.765587][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.774740][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.782962][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.792071][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.800484][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.810771][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.006400][T23291] netlink: 'syz.7.4743': attribute type 1 has an invalid length. [ 335.014850][T23291] netlink: 'syz.7.4743': attribute type 2 has an invalid length. [ 335.046947][T23297] veth0_to_bond: entered allmulticast mode [ 335.155349][T23300] EXT4-fs: Ignoring removed orlov option [ 335.173784][T23300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.452907][ T52] Bluetooth: hci2: Frame reassembly failed (-84) [ 335.652450][T23315] ext4: Unknown parameter 'obj_type' [ 335.674621][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.697982][T23315] vhci_hcd vhci_hcd.0: invalid port number 97 [ 335.704222][T23315] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 335.781525][T23326] set_capacity_and_notify: 2 callbacks suppressed [ 335.781542][T23326] loop7: detected capacity change from 0 to 512 [ 335.808782][T23326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.821854][T23326] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.860381][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.879188][T23331] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4758'. [ 335.899630][ T7161] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 335.900148][T23312] Bluetooth: hci0: command 0x1003 tx timeout [ 335.912290][T23177] FAULT_INJECTION: forcing a failure. [ 335.912290][T23177] name failslab, interval 1, probability 0, space 0, times 0 [ 335.925238][T23177] CPU: 0 UID: 0 PID: 23177 Comm: syz.8.4732 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.925275][T23177] Tainted: [W]=WARN [ 335.925282][T23177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.925295][T23177] Call Trace: [ 335.925304][T23177] [ 335.925314][T23177] __dump_stack+0x1d/0x30 [ 335.925395][T23177] dump_stack_lvl+0x95/0xd0 [ 335.925421][T23177] dump_stack+0x15/0x1b [ 335.925494][T23177] should_fail_ex+0x263/0x280 [ 335.925524][T23177] should_failslab+0x8c/0xb0 [ 335.925548][T23177] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 335.925593][T23177] ? __alloc_skb+0x2f0/0x4b0 [ 335.925677][T23177] __alloc_skb+0x2f0/0x4b0 [ 335.925783][T23177] ? __alloc_skb+0x219/0x4b0 [ 335.925825][T23177] hci_sock_dev_event+0xd0/0x2f0 [ 335.925856][T23177] hci_unregister_dev+0x244/0x2b0 [ 335.926008][T23177] hci_uart_tty_close+0x115/0x170 [ 335.926070][T23177] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 335.926091][T23177] tty_ldisc_close+0x74/0xa0 [ 335.926212][T23177] tty_set_ldisc+0x1b9/0x380 [ 335.926241][T23177] tiocsetd+0x51/0x60 [ 335.926273][T23177] tty_ioctl+0xa78/0xb80 [ 335.926301][T23177] ? __pfx_tty_ioctl+0x10/0x10 [ 335.926373][T23177] __se_sys_ioctl+0xce/0x140 [ 335.926469][T23177] __x64_sys_ioctl+0x43/0x50 [ 335.926506][T23177] x64_sys_call+0x14b0/0x3000 [ 335.926592][T23177] do_syscall_64+0xc0/0x2a0 [ 335.926622][T23177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.926720][T23177] RIP: 0033:0x7face3f5aeb9 [ 335.926741][T23177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.926760][T23177] RSP: 002b:00007face29b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.926782][T23177] RAX: ffffffffffffffda RBX: 00007face41d5fa0 RCX: 00007face3f5aeb9 [ 335.926866][T23177] RDX: 00002000000005c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 335.926884][T23177] RBP: 00007face29b7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.926900][T23177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.926917][T23177] R13: 00007face41d6038 R14: 00007face41d5fa0 R15: 00007ffc6c9fc638 [ 335.926950][T23177] [ 336.152458][ T7161] Bluetooth: hci1: command 0x1003 tx timeout [ 336.158732][ T4032] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 336.190289][T23331] loop7: detected capacity change from 0 to 128 [ 336.200437][T23331] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 336.211137][T23331] EXT4-fs (loop7): group descriptors corrupted! [ 336.232780][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.264455][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.272080][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.279544][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.287107][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.295053][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.302598][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.310120][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.317615][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.325211][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.332720][T10178] hid-generic 0103:0004:0000.0003: unknown main item tag 0x0 [ 336.343947][T10178] hid-generic 0103:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 336.376715][T23342] fido_id[23342]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 336.523090][T23354] loop7: detected capacity change from 0 to 512 [ 336.547582][T23354] ext4: Unknown parameter '€' [ 336.583528][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4764'. [ 336.661814][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.698588][T23372] loop0: detected capacity change from 0 to 512 [ 336.741869][T23372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.789038][T23372] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.881234][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.100997][T23403] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4776'. [ 337.397328][T23373] lo speed is unknown, defaulting to 1000 [ 337.433590][ T4032] Bluetooth: hci2: command 0x1003 tx timeout [ 337.439961][T23196] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 337.463008][T23418] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 337.510774][T23422] loop9: detected capacity change from 0 to 512 [ 337.584820][T23422] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.614932][T23422] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.618830][T23433] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4786'. [ 337.685795][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.699821][T23434] loop7: detected capacity change from 0 to 128 [ 337.721977][T23434] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 337.733073][T23434] EXT4-fs (loop7): group descriptors corrupted! [ 337.800506][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 337.800524][ T29] audit: type=1400 audit(2000000328.787:24840): avc: denied { bind } for pid=23444 comm="syz.3.4791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 337.918035][T23451] loop7: detected capacity change from 0 to 1024 [ 337.930577][T23451] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.4792: bad orphan inode 134217728 [ 337.949008][T23451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.965712][ T29] audit: type=1400 audit(2000000328.955:24841): avc: denied { write } for pid=23447 comm="syz.7.4792" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.001486][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.188310][T23470] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4796'. [ 338.204764][T23470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4796'. [ 338.407137][ T29] audit: type=1400 audit(2000000329.427:24842): avc: denied { create } for pid=23489 comm="syz.8.4804" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.437270][ T29] audit: type=1400 audit(2000000329.448:24843): avc: denied { unlink } for pid=18349 comm="syz-executor" name="file0" dev="tmpfs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 338.494319][ T29] audit: type=1400 audit(2000000329.511:24844): avc: denied { cpu } for pid=23495 comm="syz.8.4806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 338.735171][ T29] audit: type=1400 audit(2000000329.763:24845): avc: denied { append } for pid=23510 comm="syz.8.4811" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 338.781814][T23513] loop3: detected capacity change from 0 to 1024 [ 338.789485][T23513] EXT4-fs: Ignoring removed orlov option [ 338.812633][T23513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.818633][ T29] audit: type=1400 audit(2000000329.763:24846): avc: denied { create } for pid=23510 comm="syz.8.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 338.847076][ T29] audit: type=1400 audit(2000000329.836:24847): avc: denied { read } for pid=23510 comm="syz.8.4811" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.871454][ T29] audit: type=1400 audit(2000000329.836:24848): avc: denied { open } for pid=23510 comm="syz.8.4811" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.895970][ T29] audit: type=1400 audit(2000000329.836:24849): avc: denied { ioctl } for pid=23510 comm="syz.8.4811" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 338.933773][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.974404][T23531] netlink: 'syz.7.4817': attribute type 3 has an invalid length. [ 339.063574][T23543] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4821'. [ 339.160513][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4822'. [ 339.173571][T23552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4822'. [ 339.186004][T23555] loop7: detected capacity change from 0 to 512 [ 339.188692][T23551] siw: device registration error -23 [ 339.199994][T23555] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #11: block 530: comm syz.7.4824: lblock 4 mapped to illegal pblock 530 (length 1) [ 339.231260][T23555] EXT4-fs (loop7): 1 orphan inode deleted [ 339.238833][T23555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.339559][T23563] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4828'. [ 339.350170][T23563] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4828'. [ 339.449549][T23570] loop9: detected capacity change from 0 to 1024 [ 339.560568][T23577] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4833'. [ 339.635451][T10181] net_ratelimit: 18 callbacks suppressed [ 339.635470][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.755824][T23599] EXT4-fs: Ignoring removed bh option [ 339.761435][T23599] EXT4-fs: Ignoring removed mblk_io_submit option [ 339.784276][T23599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.833847][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.918071][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.953369][ T6747] Bluetooth: hci0: Frame reassembly failed (-84) [ 340.055833][T23629] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 340.072305][T23629] EXT4-fs (loop7): mount failed [ 340.084425][T23631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.105049][T23631] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.170950][T23638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.185598][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.185844][T23638] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.210059][T23638] FAULT_INJECTION: forcing a failure. [ 340.210059][T23638] name failslab, interval 1, probability 0, space 0, times 0 [ 340.222976][T23638] CPU: 1 UID: 0 PID: 23638 Comm: syz.8.4854 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.223014][T23638] Tainted: [W]=WARN [ 340.223023][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.223059][T23638] Call Trace: [ 340.223067][T23638] [ 340.223075][T23638] __dump_stack+0x1d/0x30 [ 340.223171][T23638] dump_stack_lvl+0x95/0xd0 [ 340.223191][T23638] dump_stack+0x15/0x1b [ 340.223205][T23638] should_fail_ex+0x263/0x280 [ 340.223227][T23638] should_failslab+0x8c/0xb0 [ 340.223246][T23638] kmem_cache_alloc_noprof+0x68/0x490 [ 340.223263][T23638] ? mb_cache_entry_create+0xf0/0x540 [ 340.223286][T23638] mb_cache_entry_create+0xf0/0x540 [ 340.223389][T23638] ext4_xattr_get+0x298/0x470 [ 340.223412][T23638] ext4_xattr_security_get+0x32/0x40 [ 340.223491][T23638] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 340.223509][T23638] __vfs_getxattr+0x2ad/0x2c0 [ 340.223525][T23638] cap_inode_need_killpriv+0x2e/0x50 [ 340.223621][T23638] security_inode_need_killpriv+0x32/0x60 [ 340.223664][T23638] file_remove_privs_flags+0x11f/0x320 [ 340.223685][T23638] ? proc_fail_nth_write+0x13b/0x160 [ 340.223704][T23638] ? inode_dio_wait+0xea/0x110 [ 340.223779][T23638] ? ext4_convert_inline_data+0x6d/0x360 [ 340.223799][T23638] file_modified+0x18/0x50 [ 340.223818][T23638] ext4_fallocate+0x18c/0x2f0 [ 340.223864][T23638] vfs_fallocate+0x3b6/0x450 [ 340.223881][T23638] __x64_sys_fallocate+0x7a/0xd0 [ 340.223897][T23638] x64_sys_call+0x1cd4/0x3000 [ 340.223915][T23638] do_syscall_64+0xc0/0x2a0 [ 340.223976][T23638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.224001][T23638] RIP: 0033:0x7face3f5aeb9 [ 340.224021][T23638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.224042][T23638] RSP: 002b:00007face29b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 340.224136][T23638] RAX: ffffffffffffffda RBX: 00007face41d5fa0 RCX: 00007face3f5aeb9 [ 340.224153][T23638] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000005 [ 340.224169][T23638] RBP: 00007face29b7090 R08: 0000000000000000 R09: 0000000000000000 [ 340.224185][T23638] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 340.224200][T23638] R13: 00007face41d6038 R14: 00007face41d5fa0 R15: 00007ffc6c9fc638 [ 340.224305][T23638] [ 340.485035][T23646] vfat: Unknown parameter '18446744073709551615' [ 340.494177][T23647] netlink: 'syz.0.4856': attribute type 4 has an invalid length. [ 340.534475][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.557787][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.624564][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.652522][T23661] set_capacity_and_notify: 6 callbacks suppressed [ 340.652543][T23661] loop9: detected capacity change from 0 to 512 [ 340.685063][T23661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.791738][T23677] loop0: detected capacity change from 0 to 512 [ 340.832166][T23681] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4865'. [ 340.843412][T23677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.863756][T10181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.870390][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4865'. [ 340.883423][T23687] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4871'. [ 340.901945][T23677] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.927700][T23677] FAULT_INJECTION: forcing a failure. [ 340.927700][T23677] name failslab, interval 1, probability 0, space 0, times 0 [ 340.941073][T23677] CPU: 1 UID: 0 PID: 23677 Comm: syz.0.4869 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.941159][T23677] Tainted: [W]=WARN [ 340.941169][T23677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.941183][T23677] Call Trace: [ 340.941193][T23677] [ 340.941203][T23677] __dump_stack+0x1d/0x30 [ 340.941265][T23677] dump_stack_lvl+0x95/0xd0 [ 340.941292][T23677] dump_stack+0x15/0x1b [ 340.941316][T23677] should_fail_ex+0x263/0x280 [ 340.941351][T23677] should_failslab+0x8c/0xb0 [ 340.941402][T23677] __kmalloc_noprof+0xb8/0x580 [ 340.941459][T23677] ? ext4_find_extent+0x16b/0x7a0 [ 340.941486][T23677] ? _raw_write_unlock+0xd/0x30 [ 340.941530][T23677] ext4_find_extent+0x16b/0x7a0 [ 340.941559][T23677] ext4_insert_range+0x31f/0x650 [ 340.941591][T23677] ext4_fallocate+0x2bc/0x2f0 [ 340.941694][T23677] vfs_fallocate+0x3b6/0x450 [ 340.941737][T23677] __x64_sys_fallocate+0x7a/0xd0 [ 340.941764][T23677] x64_sys_call+0x1cd4/0x3000 [ 340.941793][T23677] do_syscall_64+0xc0/0x2a0 [ 340.941865][T23677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.941901][T23677] RIP: 0033:0x7f1970a4aeb9 [ 340.941921][T23677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.941943][T23677] RSP: 002b:00007f196f4a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 340.941966][T23677] RAX: ffffffffffffffda RBX: 00007f1970cc5fa0 RCX: 00007f1970a4aeb9 [ 340.942055][T23677] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000005 [ 340.942071][T23677] RBP: 00007f196f4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 340.942087][T23677] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 340.942101][T23677] R13: 00007f1970cc6038 R14: 00007f1970cc5fa0 R15: 00007ffff8c77288 [ 340.942123][T23677] [ 341.151075][T23691] loop7: detected capacity change from 0 to 128 [ 341.160326][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.160801][T23691] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 341.180432][T23691] EXT4-fs (loop7): group descriptors corrupted! [ 341.456215][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.615124][T10171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.722775][T23775] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 341.811887][T23788] loop8: detected capacity change from 0 to 512 [ 341.859600][T23788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.873139][T23788] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.902071][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.920014][ T4032] Bluetooth: hci0: command 0x1003 tx timeout [ 341.926511][T23196] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 342.182043][T23835] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 342.219773][T23841] loop9: detected capacity change from 0 to 8192 [ 342.272776][ T9956] loop9: p1 < > p4 < > [ 342.285145][T23841] loop9: p1 < > p4 < > [ 342.301547][T23847] loop8: detected capacity change from 0 to 512 [ 342.331694][T23847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.338664][T23851] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4900'. [ 342.356053][T23851] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 342.368344][T23851] batman_adv: batadv0: Adding interface: ip6gretap1 [ 342.375194][T23851] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.402594][T23851] batman_adv: batadv0: Interface activated: ip6gretap1 [ 342.407471][T23847] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.470922][ T9956] udevd[9956]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 342.471790][T12083] udevd[12083]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 342.503201][T23856] loop9: detected capacity change from 0 to 128 [ 342.515070][T23856] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 342.526168][T23856] EXT4-fs (loop9): group descriptors corrupted! [ 342.571570][T12083] udevd[12083]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 342.571648][ T9956] udevd[9956]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 342.605998][T10177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.750709][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 342.750729][ T29] audit: type=1400 audit(2000000333.983:24857): avc: denied { load_policy } for pid=23861 comm="syz.9.4904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 342.750867][T23862] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 342.816341][T23862] SELinux: failed to load policy [ 342.824036][T23872] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 342.907832][T23884] loop8: detected capacity change from 0 to 512 [ 342.936202][T23886] bridge0: entered promiscuous mode [ 342.958684][T23884] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.025593][T23900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4916'. [ 343.055847][T23900] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 343.068659][T23900] batman_adv: batadv0: Adding interface: ip6gretap1 [ 343.075359][T23900] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.103009][T23900] batman_adv: batadv0: Interface activated: ip6gretap1 [ 343.142162][T23884] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4911'. [ 343.164510][T23906] loop3: detected capacity change from 0 to 128 [ 343.185052][T23906] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 343.191964][T23910] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4918'. [ 343.196789][T23906] EXT4-fs (loop3): group descriptors corrupted! [ 343.338923][T23918] netlink: 'syz.7.4922': attribute type 4 has an invalid length. [ 343.376756][T23918] netlink: 'syz.7.4922': attribute type 4 has an invalid length. [ 343.414149][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 343.444064][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.446833][T23937] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 343.471792][T23937] batman_adv: batadv0: Adding interface: ip6gretap1 [ 343.478586][T23937] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.523729][ T29] audit: type=1400 audit(2000000334.791:24858): avc: denied { bind } for pid=23942 comm="syz.3.4933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 343.550037][T23937] batman_adv: batadv0: Interface activated: ip6gretap1 [ 343.572545][T23946] loop0: detected capacity change from 0 to 512 [ 343.594413][T23937] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 343.596441][T10171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.605599][T23937] EXT4-fs (loop8): group descriptors corrupted! [ 343.633384][T23946] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.843708][T23964] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 343.863322][T23964] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #3: block 1: comm syz.0.4941: lblock 1 mapped to illegal pblock 1 (length 1) [ 343.879732][T23968] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.900022][ T29] audit: type=1400 audit(2000000335.180:24859): avc: denied { map } for pid=23967 comm="syz.3.4943" path="/43/file1/cpuset.effective_mems" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 343.911121][T23964] Quota error (device loop0): write_blk: dquota write failed [ 343.933948][T23964] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 343.945005][T23964] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.4941: Failed to acquire dquot type 0 [ 343.958266][T23964] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.4941: Freeing blocks not in datazone - block = 0, count = 4096 [ 343.977614][T23964] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.4941: Invalid inode bitmap blk 0 in block_group 0 [ 344.002939][ T37] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 344.023818][T23964] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 344.038924][T23964] EXT4-fs (loop0): 1 orphan inode deleted [ 344.052504][ T37] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 344.061584][ T37] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 344.083208][T23989] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4941: Invalid block bitmap block 0 in block_group 0 [ 344.101952][T23964] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4941: Invalid block bitmap block 0 in block_group 0 [ 344.184987][T10171] hid_parser_main: 1 callbacks suppressed [ 344.185006][T10171] hid-generic 0080:0003:0001.0004: unknown main item tag 0x0 [ 344.198766][T10171] hid-generic 0080:0003:0001.0004: unknown main item tag 0x0 [ 344.231020][T10171] hid-generic 0080:0003:0001.0004: hidraw0: HID v0.03 Device [syz0] on syz1 [ 344.262235][ T29] audit: type=1326 audit(2000000335.568:24860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24001 comm="syz.3.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afbf4aeb9 code=0x7ffc0000 [ 344.290987][ T29] audit: type=1326 audit(2000000335.568:24861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24001 comm="syz.3.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afbf4aeb9 code=0x7ffc0000 [ 344.294751][T24000] fido_id[24000]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 344.315442][ T29] audit: type=1326 audit(2000000335.568:24862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24001 comm="syz.3.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afbf4aeb9 code=0x7ffc0000 [ 344.353441][ T29] audit: type=1326 audit(2000000335.568:24863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24001 comm="syz.3.4951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afbf4aeb9 code=0x7ffc0000 [ 344.357060][T24005] Cannot find add_set index 0 as target [ 344.409971][T23999] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.551540][T24023] __nla_validate_parse: 2 callbacks suppressed [ 344.551561][T24023] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4957'. [ 344.568360][T24023] hsr_slave_0: left promiscuous mode [ 344.574236][T24023] hsr_slave_1: left promiscuous mode [ 344.587372][T10171] net_ratelimit: 2 callbacks suppressed [ 344.587430][T10171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.634044][T10171] IPVS: starting estimator thread 0... [ 344.668716][T24031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52240 sclass=netlink_route_socket pid=24031 comm=syz.9.4960 [ 344.720315][T24032] IPVS: using max 2304 ests per chain, 115200 per kthread [ 344.830282][T24056] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 344.840769][T24056] EXT4-fs (loop0): group descriptors corrupted! [ 344.876473][T24064] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.945125][T24073] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.4973: inode has both inline data and extents flags [ 344.983189][T24073] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4973: couldn't read orphan inode 15 (err -117) [ 344.998634][T24064] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.061309][T24064] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.121484][T10171] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.180570][T24064] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.233777][T24113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4984'. [ 345.288200][ T6747] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.301167][T24120] bridge1: entered promiscuous mode [ 345.306677][T24120] bridge1: entered allmulticast mode [ 345.319158][T24120] team0: Port device bridge1 added [ 345.327656][ T6747] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.349586][ T4032] Bluetooth: hci0: command 0x1003 tx timeout [ 345.355802][T23196] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 345.374374][T23935] FAULT_INJECTION: forcing a failure. [ 345.374374][T23935] name failslab, interval 1, probability 0, space 0, times 0 [ 345.387778][T23935] CPU: 1 UID: 0 PID: 23935 Comm: syz.7.4930 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.387818][T23935] Tainted: [W]=WARN [ 345.387828][T23935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.387850][T23935] Call Trace: [ 345.387859][T23935] [ 345.387870][T23935] __dump_stack+0x1d/0x30 [ 345.387930][T23935] dump_stack_lvl+0x95/0xd0 [ 345.387957][T23935] dump_stack+0x15/0x1b [ 345.388003][T23935] should_fail_ex+0x263/0x280 [ 345.388117][T23935] should_failslab+0x8c/0xb0 [ 345.388145][T23935] __kmalloc_noprof+0xb8/0x580 [ 345.388174][T23935] ? kobject_get_path+0x92/0x1c0 [ 345.388220][T23935] kobject_get_path+0x92/0x1c0 [ 345.388322][T23935] kobject_uevent_env+0x1da/0x570 [ 345.388350][T23935] kobject_uevent+0x1d/0x30 [ 345.388376][T23935] device_del+0x70f/0x790 [ 345.388408][T23935] rfkill_unregister+0x80/0x170 [ 345.388480][T23935] hci_unregister_dev+0x26c/0x2b0 [ 345.388516][T23935] hci_uart_tty_close+0x115/0x170 [ 345.388539][T23935] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 345.388559][T23935] tty_ldisc_close+0x74/0xa0 [ 345.388637][T23935] tty_set_ldisc+0x1b9/0x380 [ 345.388667][T23935] tiocsetd+0x51/0x60 [ 345.388698][T23935] tty_ioctl+0xa78/0xb80 [ 345.388726][T23935] ? __pfx_tty_ioctl+0x10/0x10 [ 345.388817][T23935] __se_sys_ioctl+0xce/0x140 [ 345.388865][T23935] __x64_sys_ioctl+0x43/0x50 [ 345.388943][T23935] x64_sys_call+0x14b0/0x3000 [ 345.388971][T23935] do_syscall_64+0xc0/0x2a0 [ 345.389029][T23935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.389054][T23935] RIP: 0033:0x7f922f43aeb9 [ 345.389075][T23935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.389096][T23935] RSP: 002b:00007f922de97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 345.389124][T23935] RAX: ffffffffffffffda RBX: 00007f922f6b5fa0 RCX: 00007f922f43aeb9 [ 345.389196][T23935] RDX: 00002000000005c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 345.389214][T23935] RBP: 00007f922de97090 R08: 0000000000000000 R09: 0000000000000000 [ 345.389230][T23935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.389265][T23935] R13: 00007f922f6b6038 R14: 00007f922f6b5fa0 R15: 00007ffc4bc0b738 [ 345.389354][T23935] [ 345.389554][ T6747] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.623745][T24150] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 345.627099][T10171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.657053][T24120] bridge0: port 4(team0) entered blocking state [ 345.663530][T24120] bridge0: port 4(team0) entered disabled state [ 345.670313][T24120] team0: entered allmulticast mode [ 345.675803][T24120] team_slave_0: entered allmulticast mode [ 345.681751][T24120] team_slave_1: entered allmulticast mode [ 345.689711][T24120] team0: entered promiscuous mode [ 345.694995][T24120] team_slave_0: entered promiscuous mode [ 345.701167][T24120] team_slave_1: entered promiscuous mode [ 345.710322][T24120] bridge0: port 4(team0) entered blocking state [ 345.717050][T24120] bridge0: port 4(team0) entered forwarding state [ 345.729337][ T6747] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.739422][T24152] set_capacity_and_notify: 8 callbacks suppressed [ 345.739454][T24152] loop8: detected capacity change from 0 to 2048 [ 345.881969][T24176] FAULT_INJECTION: forcing a failure. [ 345.881969][T24176] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 345.895952][T24176] CPU: 0 UID: 0 PID: 24176 Comm: syz.0.4997 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.896078][T24176] Tainted: [W]=WARN [ 345.896166][T24176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.896180][T24176] Call Trace: [ 345.896188][T24176] [ 345.896198][T24176] __dump_stack+0x1d/0x30 [ 345.896229][T24176] dump_stack_lvl+0x95/0xd0 [ 345.896256][T24176] dump_stack+0x15/0x1b [ 345.896327][T24176] should_fail_ex+0x263/0x280 [ 345.896366][T24176] should_fail_alloc_page+0xf2/0x100 [ 345.896398][T24176] __alloc_frozen_pages_noprof+0x108/0x350 [ 345.896475][T24176] alloc_pages_mpol+0xb3/0x260 [ 345.896549][T24176] ? anon_pipe_write+0x81/0xb30 [ 345.896599][T24176] alloc_pages_noprof+0x8f/0x130 [ 345.896785][T24176] anon_pipe_write+0x69f/0xb30 [ 345.896870][T24176] ? anon_pipe_write+0x81/0xb30 [ 345.896905][T24176] ? __pfx_anon_pipe_write+0x10/0x10 [ 345.896951][T24176] vfs_write+0x5a6/0x9f0 [ 345.896974][T24176] ksys_write+0xdc/0x1a0 [ 345.897055][T24176] __x64_sys_write+0x40/0x50 [ 345.897081][T24176] x64_sys_call+0x2847/0x3000 [ 345.897183][T24176] do_syscall_64+0xc0/0x2a0 [ 345.897222][T24176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.897251][T24176] RIP: 0033:0x7f1970a0b78e [ 345.897324][T24176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 345.897395][T24176] RSP: 002b:00007f196f4a6ce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.897422][T24176] RAX: ffffffffffffffda RBX: 00007f196f4a76c0 RCX: 00007f1970a0b78e [ 345.897440][T24176] RDX: 0000000000000029 RSI: 00007f196f4a6e90 RDI: 0000000000000002 [ 345.897457][T24176] RBP: 00007f196f4a6e90 R08: 0000000000000000 R09: 0000000000000000 [ 345.897473][T24176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 345.897553][T24176] R13: 00007f1970c94640 R14: 00007f1970c8b4a0 R15: 0000000000000001 [ 345.897578][T24176] [ 346.130843][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5000'. [ 346.259506][T24210] loop7: detected capacity change from 0 to 512 [ 346.303600][T24223] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 346.341023][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.341570][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.391097][T24233] loop0: detected capacity change from 0 to 1024 [ 346.445474][T24210] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.503806][T24233] tls_set_device_offload_rx: netdev not found [ 346.532462][T24250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5015'. [ 346.647344][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.687595][T24257] loop0: detected capacity change from 0 to 2048 [ 346.711075][T24257] FAT-fs (loop0): FAT read failed (blocknr 1056) [ 347.138961][T24291] loop7: detected capacity change from 0 to 512 [ 347.157585][T24291] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.310378][T24315] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5035'. [ 347.376708][T24315] loop8: detected capacity change from 0 to 128 [ 347.383851][T24315] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 347.394641][T24315] EXT4-fs (loop8): group descriptors corrupted! [ 347.482401][T24324] loop9: detected capacity change from 0 to 512 [ 347.494929][T24324] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.559710][ T5082] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.570728][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.638723][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.706414][T24339] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 347.717589][T24345] netlink: 'syz.9.5047': attribute type 11 has an invalid length. [ 347.734450][T24347] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5048'. [ 347.802287][T24348] loop8: detected capacity change from 0 to 128 [ 347.868810][T24348] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 347.880246][T24348] EXT4-fs (loop8): group descriptors corrupted! [ 347.922015][T10178] IPVS: starting estimator thread 0... [ 348.006715][T24367] IPVS: using max 2400 ests per chain, 120000 per kthread [ 348.050344][T24373] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 348.188334][T24396] veth1_to_bond: entered allmulticast mode [ 348.317485][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 348.317506][ T29] audit: type=1326 audit(2000000339.820:24924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.348376][ T29] audit: type=1326 audit(2000000339.820:24925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.372587][ T29] audit: type=1326 audit(2000000339.820:24926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.396810][ T29] audit: type=1326 audit(2000000339.820:24927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.421179][ T29] audit: type=1326 audit(2000000339.820:24928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.445537][ T29] audit: type=1326 audit(2000000339.820:24929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.469563][ T29] audit: type=1326 audit(2000000339.820:24930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.494026][ T29] audit: type=1326 audit(2000000339.820:24931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.518768][ T29] audit: type=1326 audit(2000000339.820:24932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.542992][ T29] audit: type=1326 audit(2000000339.820:24933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24414 comm="syz.0.5068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1970a4aeb9 code=0x7ffc0000 [ 348.602400][T24421] loop0: detected capacity change from 0 to 512 [ 348.639180][T24421] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.702207][ T4032] Bluetooth: hci0: command 0x1003 tx timeout [ 348.702743][T23196] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 348.715106][T24267] FAULT_INJECTION: forcing a failure. [ 348.715106][T24267] name failslab, interval 1, probability 0, space 0, times 0 [ 348.728047][T24267] CPU: 1 UID: 0 PID: 24267 Comm: syz.3.5019 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.728145][T24267] Tainted: [W]=WARN [ 348.728161][T24267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.728174][T24267] Call Trace: [ 348.728190][T24267] [ 348.728200][T24267] __dump_stack+0x1d/0x30 [ 348.728337][T24267] dump_stack_lvl+0x95/0xd0 [ 348.728363][T24267] dump_stack+0x15/0x1b [ 348.728451][T24267] should_fail_ex+0x263/0x280 [ 348.728488][T24267] should_failslab+0x8c/0xb0 [ 348.728515][T24267] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 348.728544][T24267] ? __alloc_skb+0x2f0/0x4b0 [ 348.728626][T24267] __alloc_skb+0x2f0/0x4b0 [ 348.728670][T24267] ? __alloc_skb+0x219/0x4b0 [ 348.728704][T24267] alloc_uevent_skb+0x5c/0x120 [ 348.728734][T24267] kobject_uevent_net_broadcast+0x23c/0x410 [ 348.728840][T24267] kobject_uevent_env+0x43d/0x570 [ 348.728871][T24267] kobject_uevent+0x1d/0x30 [ 348.728897][T24267] device_del+0x70f/0x790 [ 348.728931][T24267] rfkill_unregister+0x80/0x170 [ 348.729031][T24267] hci_unregister_dev+0x26c/0x2b0 [ 348.729060][T24267] hci_uart_tty_close+0x115/0x170 [ 348.729104][T24267] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 348.729129][T24267] tty_ldisc_close+0x74/0xa0 [ 348.729169][T24267] tty_set_ldisc+0x1b9/0x380 [ 348.729199][T24267] tiocsetd+0x51/0x60 [ 348.729231][T24267] tty_ioctl+0xa78/0xb80 [ 348.729322][T24267] ? __pfx_tty_ioctl+0x10/0x10 [ 348.729347][T24267] __se_sys_ioctl+0xce/0x140 [ 348.729400][T24267] __x64_sys_ioctl+0x43/0x50 [ 348.729438][T24267] x64_sys_call+0x14b0/0x3000 [ 348.729545][T24267] do_syscall_64+0xc0/0x2a0 [ 348.729575][T24267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.729597][T24267] RIP: 0033:0x7f7afbf4aeb9 [ 348.729616][T24267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.729651][T24267] RSP: 002b:00007f7afa9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.729674][T24267] RAX: ffffffffffffffda RBX: 00007f7afc1c5fa0 RCX: 00007f7afbf4aeb9 [ 348.729688][T24267] RDX: 00002000000005c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 348.729702][T24267] RBP: 00007f7afa9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 348.729790][T24267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.729806][T24267] R13: 00007f7afc1c6038 R14: 00007f7afc1c5fa0 R15: 00007ffce4358198 [ 348.729854][T24267] [ 348.978252][T24395] veth1_to_bond: left allmulticast mode [ 348.978489][T10177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 348.999834][T24436] loop8: detected capacity change from 0 to 512 [ 349.018459][T24436] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.173923][T24450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5080'. [ 349.598883][T24458] EXT4-fs: Ignoring removed nobh option [ 349.607213][T24458] EXT4-fs (loop3): orphan cleanup on readonly fs [ 349.614984][T24458] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.5084: EA inode hash validation failed [ 349.629183][T24458] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 349.642931][T24458] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.5084: corrupted inode contents [ 349.647526][T10181] net_ratelimit: 2 callbacks suppressed [ 349.647543][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.656075][T24458] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.5084: mark_inode_dirty error [ 349.681602][T24458] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.5084: corrupted inode contents [ 349.694791][T24458] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.5084: mark_inode_dirty error [ 349.708459][T24458] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.5084: mark inode dirty (error -117) [ 349.722031][T24458] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 349.731791][T24458] EXT4-fs (loop3): 1 orphan inode deleted [ 349.740824][T24457] netlink: 'syz.3.5084': attribute type 13 has an invalid length. [ 349.749358][T24458] netlink: 'syz.3.5084': attribute type 13 has an invalid length. [ 349.760947][T24458] gretap0: refused to change device tx_queue_len [ 349.762472][T24463] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.768498][T24458] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 349.796891][T24457] gretap0: refused to change device tx_queue_len [ 349.804145][T24457] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 350.620445][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.217468][ T5082] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.227271][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.228300][ T5082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.452088][T24421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.461970][T24463] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5085'. [ 351.533761][T24477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.542307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.610399][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.828281][T10181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.840069][T10177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.902847][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.954415][T24506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5100'. [ 351.968176][T24506] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 351.980566][T24506] batman_adv: batadv0: Adding interface: ip6gretap2 [ 351.987961][T24506] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.016376][T24506] batman_adv: batadv0: Interface activated: ip6gretap2 [ 352.072346][T24506] set_capacity_and_notify: 2 callbacks suppressed [ 352.072637][T24506] loop0: detected capacity change from 0 to 128 [ 352.090954][T24506] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 352.102183][T24506] EXT4-fs (loop0): group descriptors corrupted! [ 352.104741][T24509] loop7: detected capacity change from 0 to 512 [ 352.148330][T24511] loop0: detected capacity change from 0 to 512 [ 352.155139][T24511] msdos: Bad value for 'fmask' [ 352.162622][T24511] No such timeout policy "syz0" [ 352.162968][T24509] EXT4-fs mount: 35 callbacks suppressed [ 352.162984][T24509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.189801][T24509] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.241241][T24520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.299695][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.351365][T24533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5111'. [ 352.398671][T24536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5112'. [ 352.407966][T24536] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5112'. [ 352.538268][T24557] loop7: detected capacity change from 0 to 512 [ 352.571164][T24557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.593693][T24557] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.627725][T24557] netlink: 'syz.7.5122': attribute type 1 has an invalid length. [ 352.640183][T24563] bond1: Removing last arp target with arp_interval on [ 352.656695][T24563] bond1: entered promiscuous mode [ 352.661809][T24563] bond1: entered allmulticast mode [ 352.667529][T24563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.722094][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5120'. [ 352.746372][T24576] loop9: detected capacity change from 0 to 1024 [ 352.768766][T24576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.800398][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.800463][T24576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5126'. [ 352.862473][T24581] loop0: detected capacity change from 0 to 512 [ 352.885586][T24581] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5129: iget: bad i_size value: 38620345925642 [ 352.919220][T24581] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5129: couldn't read orphan inode 15 (err -117) [ 352.941002][T24581] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.999897][ T37] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 353.019493][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 353.032383][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 353.032383][ T37] [ 353.042658][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 353.049602][ T37] EXT4-fs (loop0): Free/Dirty block details [ 353.055997][ T37] EXT4-fs (loop0): free_blocks=0 [ 353.061220][ T37] EXT4-fs (loop0): dirty_blocks=1 [ 353.066406][ T37] EXT4-fs (loop0): Block reservation details [ 353.072612][ T37] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 353.091361][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 353.116512][T24597] lo speed is unknown, defaulting to 1000 [ 353.138232][T24601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5138'. [ 353.148955][T24601] netlink: 'syz.0.5138': attribute type 1 has an invalid length. [ 353.170723][T24601] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.186270][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 353.186288][ T29] audit: type=1400 audit(2000000344.932:25053): avc: denied { write } for pid=24602 comm="syz.8.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 353.195576][T24607] loop3: detected capacity change from 0 to 512 [ 353.228771][T24601] bond2: (slave veth3): Enslaving as an active interface with a down link [ 353.249214][T24601] bond2: (slave dummy0): making interface the new active one [ 353.258813][T24601] dummy0: entered promiscuous mode [ 353.264966][T24607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.270918][T24601] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 353.278339][T24607] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.295788][T24613] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5141'. [ 353.306793][ T29] audit: type=1400 audit(2000000345.048:25054): avc: denied { listen } for pid=24596 comm="syz.7.5137" lport=51699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 353.355981][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.367303][T24615] bond2 (unregistering): (slave veth3): Releasing active interface [ 353.377547][T24615] bond2 (unregistering): (slave dummy0): Releasing active interface [ 353.396689][T24615] bond2 (unregistering): Released all slaves [ 353.456475][T24625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5146'. [ 353.509058][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.595126][T24633] can: request_module (can-proto-0) failed. [ 353.655741][T10181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.667445][T10177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.752168][ T29] audit: type=1400 audit(2000000345.531:25055): avc: denied { map } for pid=24644 comm="syz.9.5154" path="socket:[72973]" dev="sockfs" ino=72973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 353.781811][T24645] loop9: detected capacity change from 0 to 512 [ 353.789705][T24645] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 353.799884][T24645] EXT4-fs (loop9): 1 truncate cleaned up [ 353.816416][T24645] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.830057][T24645] EXT4-fs warning (device loop9): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 353.852725][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.877900][ T6747] Bluetooth: hci0: Frame reassembly failed (-84) [ 353.887475][T24631] loop0: detected capacity change from 0 to 1024 [ 353.986394][T24656] loop8: detected capacity change from 0 to 512 [ 354.004064][T24631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 354.025150][T24656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.025278][T24656] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.066448][T18349] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.076854][T24631] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.139885][T24660] delete_channel: no stack [ 354.207909][T24236] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 354.256647][T24677] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 354.267817][T24677] EXT4-fs (loop3): group descriptors corrupted! [ 354.275903][T10177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.344019][T24684] netlink: 'syz.3.5168': attribute type 6 has an invalid length. [ 354.355373][T24684] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.372346][T24684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.386100][T24684] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 354.410258][T22671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.512480][T24694] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.520365][T24694] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.557889][T24694] veth0_to_bond: left allmulticast mode [ 354.573927][T24694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.584602][T10181] net_ratelimit: 6 callbacks suppressed [ 354.584619][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.610681][T24694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.653110][T24694] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 354.663590][ T6747] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.673538][ T6747] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.682724][ T6747] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.692125][ T6747] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.764567][ T29] audit: type=1400 audit(2000000346.591:25056): avc: denied { map } for pid=24693 comm="syz.3.5170" path="socket:[73984]" dev="sockfs" ino=73984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 354.798609][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.875363][T10181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.096070][ T29] audit: type=1400 audit(2000000346.948:25057): avc: denied { name_bind } for pid=24714 comm="syz.3.5178" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 355.123402][T24715] syzkaller0: entered promiscuous mode [ 355.129012][T24715] syzkaller0: entered allmulticast mode [ 355.562520][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.686087][T24729] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 355.695547][ T29] audit: type=1400 audit(2000000347.578:25058): avc: denied { mount } for pid=24728 comm="syz.7.5184" name="/" dev="loop7" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 355.734824][ T29] audit: type=1400 audit(2000000347.599:25059): avc: denied { unmount } for pid=21240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 355.789057][T23196] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 355.793726][ T4032] Bluetooth: hci0: command 0x1003 tx timeout [ 355.799090][T24739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.844879][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.032343][T24760] EXT4-fs error (device loop7): __ext4_iget:5426: inode #11: block 1: comm syz.7.5195: invalid block [ 356.043950][T24760] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.5195: couldn't read orphan inode 11 (err -117) [ 356.057120][T24760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.083580][T21240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.118872][T24769] random: crng reseeded on system resumption [ 356.121239][ T29] audit: type=1400 audit(2000000348.008:25060): avc: denied { append } for pid=24767 comm="syz.7.5197" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 356.364056][ T29] audit: type=1400 audit(2000000348.271:25061): avc: denied { read } for pid=24781 comm="syz.9.5202" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 356.390491][ T29] audit: type=1400 audit(2000000348.271:25062): avc: denied { open } for pid=24781 comm="syz.9.5202" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 356.416968][T22113] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 356.520342][ T5082] Process accounting resumed [ 356.543112][T24782] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.569567][T10177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.580326][T24782] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.593255][T24782] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #2: comm syz.9.5202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 356.662585][T21932] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.704298][ T5084] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.713995][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.715631][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.807967][T24812] FAULT_INJECTION: forcing a failure. [ 356.807967][T24812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.821446][T24812] CPU: 1 UID: 0 PID: 24812 Comm: syz.9.5213 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.821486][T24812] Tainted: [W]=WARN [ 356.821495][T24812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.821508][T24812] Call Trace: [ 356.821517][T24812] [ 356.821528][T24812] __dump_stack+0x1d/0x30 [ 356.821623][T24812] dump_stack_lvl+0x95/0xd0 [ 356.821648][T24812] dump_stack+0x15/0x1b [ 356.821671][T24812] should_fail_ex+0x263/0x280 [ 356.821759][T24812] should_fail+0xb/0x20 [ 356.821809][T24812] should_fail_usercopy+0x1a/0x20 [ 356.821852][T24812] copy_fpstate_to_sigframe+0x636/0x7d0 [ 356.821939][T24812] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 356.821967][T24812] ? x86_task_fpu+0x36/0x60 [ 356.822083][T24812] get_sigframe+0x34c/0x470 [ 356.822123][T24812] x64_setup_rt_frame+0xa7/0x4e0 [ 356.822152][T24812] arch_do_signal_or_restart+0x24b/0x450 [ 356.822185][T24812] exit_to_user_mode_loop+0x6a/0x6f0 [ 356.822274][T24812] do_syscall_64+0x1d3/0x2a0 [ 356.822309][T24812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.822362][T24812] RIP: 0033:0x7f8f26a1b78e [ 356.822383][T24812] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.822405][T24812] RSP: 002b:00007f8f254b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 356.822431][T24812] RAX: 0000000000000001 RBX: 00007f8f254b76c0 RCX: 00007f8f26a1b78e [ 356.822481][T24812] RDX: 0000000000000001 RSI: 00007f8f254b7090 RDI: 0000000000000003 [ 356.822497][T24812] RBP: 00007f8f254b7090 R08: 0000000000000000 R09: 0000000000000000 [ 356.822521][T24812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.822608][T24812] R13: 00007f8f26cd6038 R14: 00007f8f26cd5fa0 R15: 00007ffe3b5bad28 [ 356.822629][T24812] [ 356.886853][T24794] __nla_validate_parse: 8 callbacks suppressed [ 356.886870][T24794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5207'. [ 357.034343][T24827] ================================================================== [ 357.036731][T24826] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5216'. [ 357.042656][T24827] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 357.042706][T24827] [ 357.042714][T24827] write to 0xffff888104428100 of 8 bytes by task 24819 on cpu 1: [ 357.069394][T24827] mas_wmb_replace+0x20d/0x1610 [ 357.074287][T24827] mas_wr_store_entry+0x16b6/0x2e70 [ 357.079613][T24827] mas_store_prealloc+0x72e/0xa60 [ 357.085006][T24827] vma_complete+0x3f7/0x820 [ 357.089826][T24827] __split_vma+0x59b/0x660 [ 357.094437][T24827] vma_modify+0xb30/0xd30 [ 357.098774][T24827] vma_modify_flags+0x182/0x210 [ 357.103817][T24827] mprotect_fixup+0x30e/0x5e0 [ 357.108590][T24827] do_mprotect_pkey+0x67b/0x920 [ 357.113632][T24827] __x64_sys_mprotect+0x48/0x60 [ 357.118490][T24827] x64_sys_call+0x2c3b/0x3000 [ 357.123178][T24827] do_syscall_64+0xc0/0x2a0 [ 357.127698][T24827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.133944][T24827] [ 357.136269][T24827] read to 0xffff888104428100 of 8 bytes by task 24827 on cpu 0: [ 357.144076][T24827] mas_state_walk+0x485/0x650 [ 357.148772][T24827] mas_walk+0x60/0x150 [ 357.152937][T24827] lock_vma_under_rcu+0xc9/0x210 [ 357.158245][T24827] do_user_addr_fault+0x232/0x1050 [ 357.163457][T24827] exc_page_fault+0x62/0xa0 [ 357.168044][T24827] asm_exc_page_fault+0x26/0x30 [ 357.173011][T24827] [ 357.175336][T24827] value changed: 0xffff88810d21ca81 -> 0xffff888104428100 [ 357.182792][T24827] [ 357.185116][T24827] Reported by Kernel Concurrency Sanitizer on: [ 357.191408][T24827] CPU: 0 UID: 0 PID: 24827 Comm: syz.8.5215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 357.203227][T24827] Tainted: [W]=WARN [ 357.207204][T24827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.217625][T24827] ================================================================== [ 357.232998][T24801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.318337][T24833] set_capacity_and_notify: 7 callbacks suppressed [ 357.318358][T24833] loop7: detected capacity change from 0 to 128 [ 357.411026][T24833] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 357.422145][T24833] EXT4-fs (loop7): group descriptors corrupted! [ 357.548388][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.694510][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.534692][T10177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.543223][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.534765][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.526007][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.971459][T10181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.428705][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.516159][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.191439][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.200449][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.213360][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.497913][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.801167][T10181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.497560][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.324030][ T5084] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.488249][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.479009][T10181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.848979][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.859650][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.458224][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.460246][T10178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.469818][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration