last executing test programs: 4m14.942584169s ago: executing program 32 (id=52): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) getrandom(0x0, 0x0, 0x3) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x56, "d4351ae90e84f3566653d73507918a2cb082543eaadab309d297d400907051ee2f6093b1e6c0b1a3ff4fdba37cf4a67807d5b8a5279b961064286ad52645611fcdf2baecf6958723145e4ae0cf04aa92b74fa30ed68f"}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20040004) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r2], 0x94}, 0x1, 0x2, 0x0, 0x2}, 0x4001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x251c, &(0x7f0000004d00)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x24e6, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xfffc, 0x9, 0x1000, [{0x19, 0xe, "6285535def35eea99897e50c22a4258bc7edc9ed7c30e64df2ddfde2ac2e1e3e9d475a01574463d7114d3543b1303c7f829d143723101350d9ac3120ad10c9a7ca7ad39c9f1c49687623bfbda4c6fd4a8ba1290f7768ae1c9e2d5ad945d1ef74bef6626e7e4a858ccdcd18b50167ae0d"}, {0x19, 0x1b, "092d8a802f034cbb0c2a9136228a734083a47cc199967bba5adc8996cd82a5af4013c553732d52014c60eedca3ce3f655afc08f2e73b0c213641dfe4feca87eff63214177d3c8487c88ff214077f727adb70bc5b6b859c751c110c66841efc0dbef6410bdeff68e193b29592c49c25217039ca72050f36aabde5af637cb01fd909fe8291d9ae64044af74d0cdd7a06fe1c88f63a800c499084b77f0594709f519db47d78ef6305ad55daf4d7c197b5e7b3a8560892f9f8744dfca47f7384d530856e5a9215bf3c1b599f472cd067bec2614322cb9eb856e785bf"}, {0x5, 0x1f, "e70e864b1b0991938d007e8da5e7c3d28df0e190a83b1ebb78a5a32275326410082d408d247432903648650919810f0c507463a52749c282cea5596c35024892c5a98c210f3337ef9f293afadaf412e133cee1153ba399b186ccd90b41244eb4c4845193c510e408ee5b021ca25cc0c508cb13c775a71fcd1e2b1d313ed7712353cb6b6841d9b01b5ea0c1aeba0a55d4c689c650b847e2773251746ed52fb758827acc90b3c5981d0d75093feae10cd0021ac1f6902b34d829a47631876cc5c94ef6eb820a620d8770c64e9af451a6382b25e48e1f93222db5ba0afae088ca21e4e5ef289c46757d4e3b70610a2776fdeb6c8128ae7c5a18"}, {0x2, 0x1d, "97625f807806c809832d58e845f4ad435478a180a56c583dadb61f54ee477a2218a91f7fcddf7254693cfa15edfd24cd76c7e8197a75d1d5a56f10b8e57a413c92235c292095c6d55a8b29991f2c08d51f92fb3ccd4cdfb4fa35392bca6309525cc1fdd1fb3bee8175892544c23c79bf6ed34191526949c67893158d28962f2037caf2924b42cbc2632bf7af623fbbb218f5c8d08c04febc930af7e7378e315fb995e78cdc397d0b492ed8202e173d159511548a6cb4ccbfe6cf5fed5a070972d0020216323e3314b2fd671cb87db1f9e7a0390b525708a7d82a987d2dd2b9f05f642e6c31c38e8875b6df"}, {0x1f, 0x15, "3a5bae57f438d3f13362fe9eed1129017ffc6efd5bd61381a50f377bab262aeab4ea55bbf912129908e5d7edd9644d95f22c1ff895d05eeb0391132cafdf2f09cb52768860d86bc9b7389e956082f9fdfc3643ab90350ef1fe0f57e5b6e1fffff3667ff4be4d1cbce04bcae8734b92cd06a08288e85570478735b7b8704bcd25e9b1de61a4770d3cee2fc867376eded07601811f76de7b57aedb7b9641183f2d873e5638738b8d4432"}, {0x4, 0x200, "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"}, {0x1f, 0x200, "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"}, {0x19, 0x2, "654d8ee4dcd2dcc87b75a99525d85d55d0e21a"}, {0x22, 0x19, "9379a14c7304df2a9306799ae3e47bea513f6074a32f40ad6b9550b3614390c02a543e345e45877d108feba27befdbd1ebdcab3493f85276fb08300fa687cf3e2f4116acf34043701a6365ffe203ad957f38f14ec8db3086a95fe69aa73cf8b6b37f457d53f753a31a536c0c59d2a250ba8b89e4e0a80ab72d500c2e7962c73a71774ca7b5ab69235c1cee5d9ad535c256689e2f28b8a8553e9876548fdfb2668732321d451a7e96a6f328b436b4feb6e8a27830c31ab85cab4218c2c3f057854df6cbb43ea9d8e6df"}, {0x18, 0x2, "b7307bbe2a00e082f3a5696ae79d7b48"}]}}}}}}, 0x0) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) 3m36.686640483s ago: executing program 33 (id=423): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000040)={0x6, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 3m18.286246999s ago: executing program 34 (id=576): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b8, &(0x7f0000000900)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000080)) 2m0.531923944s ago: executing program 35 (id=1144): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$eJzs3LtvHMUfAPDvrl+/X54GAiQhAkOEsHjYsRMgBQ0IJIogQFAEqIztRFGcGMVGwlGUGIRCg4QiQQ2USPwFdDQIqJCQqKBHQRGkSUAUh/ZuNzmvffEj5zsn9/lIZ8/c7N7M7Ozszs74HEDHGsh+JBFbIuLXiNheiy7cYKD26+rlM+N/Xz4znkSl8tqfETEfceXymfFi02K/zXlkMI1IP0zyTBaamTt9fGxqavJUHh+ePfHO8Mzc6SeOnRg7Onl08uTowYMH9o88/dTok02pZ1avK7vPTu/Z9eIbF14aP3zh7R++zsq7JU+vr8ea9C5+ayCr+F+VqnLaw/H/m8puo9laF06621gQVqUrIrLm6sn6f6VSOVeXtj1e+GCZ3Tevc/GAdZTdm/qWeD+/L85XGkpumArcCpJodwmA9iju99nzb/Fq4fCj7S49W3sAyup9NX/VUrojzbfpKT3fNtNARBye/+fz7BXNmIcAAFjGx+OfHYrHlxr/pXFPLfBH9mNbvobSHxF3RMSdEXFXROyIiLsjqtveGxE7V5Jp3QJBeWlo8fgnvVjapKmrC9n475l8bWvh+K8Y/UV/Vx7bWq1/T3Lk2NTkvvyYDEZPXxYfuUEe3z7/8yeN0urHf9kry78YC+bluNhdmqCbGJsdqw5Km+DS+xG7u+PfSqVSqn9y7UAnEbErInav7qO3FYFjj361p9FGy9d/0cdd14QzofJlxCO19p+PUv0LyeL1yd6t19cnh/8XU5P7houzYrEffzr/SqP8V17/9ZG1/6aF53+e8sVcHuh/q369diYarFxuaZjH+d8+avhMs9bzvzd5vXo9KpZd3xubnT01EtGbHKrGF7w/en3fIl5sn9V/cG9EZHlU61/smVavcZG3/30RsSdfL7s/Ih7Iy/5gRDwUEXsb1j7i++cap22E9p+oa/8kyuf/zrO130X7z6060HX8u28a5b+y9j9QDQ3m71Svf8tYaQHXfuQAAADg1pFWZ26SdOhaOE2Hhmp/2LsjNqVT0zOzjx2ZfvfkRG2Gpz960mKma3vdfOhIMp9/Yi0+ms8VF+n783njT7uiGh8an56aaHPdodNtbtD/M793tbt0wLpbah1tdIkvtAG3n3L/TxdGz73cysIALeX72tC5lun/aavKAbSe+z90rqX6/7lS3FoA3J7c/6Fz6f/QufR/6Fyl/t8Vv7SrJEALreHr/AIbJvDq0Gr26otm5h7pBjkI5UDx70nqklb+/yBuGOi7+RK+eZPFSKNVB7PNFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAm+S8AAP//i1LmAQ==") chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x595, 0x4aa6, 0xd9, 0x6cf}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_buf(r2, 0x29, 0xcc, &(0x7f0000000040)="1ac1b1515c444e167e000000", 0xc) connect$inet6(r2, &(0x7f0000001940)={0xa, 0xfffe, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) 1m55.40531221s ago: executing program 36 (id=1181): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000580), 0xff, 0x44b, &(0x7f0000000dc0)="$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") socket$netlink(0x10, 0x3, 0x8) socket$kcm(0x29, 0x5, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 1m52.77324313s ago: executing program 37 (id=1199): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x6, 0x6, 0x9}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_read_part_table(0x5e4, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10480, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$ITER_CREATE(0xb, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 1m41.943577612s ago: executing program 0 (id=1200): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x0, 0x7fffffbf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) (async) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sendmsg$can_raw(r2, 0x0, 0xd1628f4366deaab4) (async) sendmsg$can_raw(r2, 0x0, 0xd1628f4366deaab4) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}, 0x100) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2e6842, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2e6842, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="9bfe8319012f136e9a9807853ba697528c35c3b2d89967bff74030299457401ec3eed25d1075d63910306d0479537926", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) setresuid(0x0, 0xee01, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e1d, @loopback}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) listen(r5, 0x9) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r6, &(0x7f0000000040)='x', 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="61123000000000006113340000000000bf10000000000000160003000ee600f03d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee60070670200001f000000160300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd543", @ANYRES32=r4, @ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES8=r6], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) close(r6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x7ff, 0xc4, &(0x7f0000000300)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000009, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) (async) shmget(0x3, 0x3000, 0x200, &(0x7f0000ffc000/0x3000)=nil) 1m41.783490985s ago: executing program 0 (id=1264): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x8}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000d40)={{0x2, 0xfffe, @empty}, {0x1, @remote}, 0xc, {0x440, 0x4e20, @multicast1}}) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) (fail_nth: 1) 1m41.518854869s ago: executing program 0 (id=1267): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet(0x2, 0x3, 0x9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(r3, 0x0, &(0x7f0000000140), 0x400) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x2, 0x0, 0x3}}, 0x26) setrlimit(0xb, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e1e, @empty}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x2, 0x0, 0x3, {0xa, 0x4e20, 0x4, @mcast1, 0x4}}}, 0x32) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioperm(0x200, 0x7ff, 0x2) syz_clone3(&(0x7f0000001100)={0x100081100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f00000001c0)={0x0, 0x0}) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prctl$PR_SET_IO_FLUSHER(0x50, 0x0) fcntl$lock(r8, 0x7, 0x0) splice(r1, &(0x7f0000000080)=0x3, r7, &(0x7f0000000100)=0x8000000000000001, 0x3, 0x1) 1m41.341348681s ago: executing program 0 (id=1269): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) syz_read_part_table(0x105e, &(0x7f0000001080)="$eJzsz7FRwzAYx9G/JR+2j2MQtmADKkoqChjDM7ABLdtkhWyRSjlHzgpJiveK73Q/naRTuK8yZ0kO78lLD1PWfWvN9PvUWk3yV3tqpebzuy5J6WFuydCXS8ZtZLiGyz1vX/O4HWyn5yTHn/K6v7uNj/8b/hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtY5AAD//xu7Dyk=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1m40.459307125s ago: executing program 0 (id=1277): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000001380)={[{@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000001440)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xa41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x400, 0xe}, 0x204, 0xffffffffffffffff, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4607100709040000000000000003003e00f9ffffffd60100000000000040000000000000008b00000000000000080000000600380001"], 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1m37.689717486s ago: executing program 1 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2001, 0x56}}}}, [@NL80211_ATTR_TX_RATES={0x18, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000065}, 0x4008000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r2, &(0x7f0000000a80), 0x12) 1m37.478628669s ago: executing program 1 (id=1297): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x6}, 0x828, 0x3ff, 0x0, 0x3, 0x2, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) socket$kcm(0x11, 0x5, 0x300) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x2000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1m37.372484951s ago: executing program 1 (id=1300): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 1m36.948220427s ago: executing program 0 (id=1306): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="0000000040000000280012800b00010065727370616e000018000280040012000600100000000000060013"], 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 1m36.910927738s ago: executing program 38 (id=1306): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=r3, @ANYBLOB="0000000040000000280012800b00010065727370616e000018000280040012000600100000000000060013"], 0x48}, 0x1, 0x0, 0x0, 0x8054}, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 1m36.504828534s ago: executing program 1 (id=1309): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1m35.921713113s ago: executing program 1 (id=1314): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004800), 0x0, 0x0, &(0x7f0000004a00)={0x77359400}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x40814) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r1, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x0) 1m35.751633915s ago: executing program 1 (id=1320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x1, 0xb}, {0x7, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x57b, 0x7, 0x2, 0x816, 0xfffffff8, 0x400101}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg(r2, &(0x7f0000000980)={&(0x7f0000000280)=@nfc={0x27, r4, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="40ccf09ad7b6ed5f3ad5ba9d477aa858de163828878881852006ceb7018de12207cd3338265272ca55ef4a7c1126e4a7320a4e24563497dd8fc9659d66462d8a665baf521e68aa87144ec5de817ec461157db38e71aec1f5c93613802194de8b09df8afbd007d8a21542a78311d754a350df0c6f8481139f0829e1ad9ff0f2f473237d8c8cd0dfde009e42c43d", 0x8d}, {&(0x7f0000000440)="998925285c9c2f12d5a88f817f7c69c54eb72bc94373cc0ce70b0e230d401845698de1c9a9b7b7f86ea6ba86631d2afc18e2574112374329a4da0b44abd525d335e51d757d465fc2ac03f177b485bae989cbb08837d25e8229f78bc8dc595881df5117273b0994062612fd7766824b04db773f3a1a2b9527f1fb37e725452892a1280e7dd3fa12a8ae52ff45afb3746a52cb6de7c73adf5766768030736f664efd79cf7e1c221373551c16a5fa6ab99aaa13b34ddcdedf6be4e97e3542ce20a918a376c1c75d84db1092605ae0fa3010d0d392dcbf4b36e3dfcdabaf", 0xdc}, {&(0x7f0000000640)="83355f463bec08bf93b54366f8bb0d3a6a8207e1c0d4ecd0b3ddd99db6d03324eb1839fd6d32c946fd9800c9367c98f9ff1116185d7a600bc14c650584c872c5ebc49d4dd71e92178ba580deb6092311c226780f00a8cafda733d024cdb07b3e722dfb733c95e8faad7265600c91423b1b478602f18389a18acaeab773a662e7291098dcc48a27cb6ad192325b06eb4e392a7781557694", 0x97}], 0x3, &(0x7f0000000740)=[{0x98, 0x111, 0xf, "c2467a1471aa56fe720c6f372f27d14ca311f48845725454dbe417fe9a49a02e464645e0046a85e9a67743f07ca6318209c7cfa3ae5563da4d43d933a472ea92da8504c8d7a81b11ee5b6075093e4e77b4bcbfb0ca30a7d488530f2709fc1a6441d156e9ae85ac3d48e79e5069976d8d5ed3158200c0771f9fb46c75d12c38f56cc9607c437604"}, {0xf0, 0x0, 0x6, "515a4c5edf4ab440fa0f7cc5a4890c3c55d5f85fe62619a7fececa4e991ddef7352dce4d04ef8e5ec662a233e89481bb6905d0147dc4bea370b195aa87ff0d74c6fa4bb52a9e85cc1ed4a56dae5f8db39c7632596b36ef102836e03c621f375633b276dfb5409b1e31b8c70c412b0c2e8da64e665f27e61cb742097726b164caebea5520b6562b2346425555a4a518ab65bdf77abc26d90ec46ee2ae2281738dc9703d6ccd47de4127579507a4e23a1710ede2a026bbe525511e5172df8c162802770000bece603a80fd88838711498a5c6b11b00fdf5b49f2a5da94"}, {0xa8, 0x88, 0x7, "e41820e8b48fa1d1283298a5bae2d83a5e80281f0816d4d7ae49fb78b9d21da7d62dbd8953785bb762edacb8bf45e551cae20fa264d5421f35a3a30f4cebb12b342e118a85269e8aeb713446bffcc8c8496984f3bc80516f47df6eca4ef7e28e88eb9218b9c953715ffa14eba6367fcb30ebbeca29bf9974e9dc38de34a9b4fcecd42d1381b24fe2d9325496bf63ace15731d60ce9f5"}], 0x230}, 0x24000000) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m35.693390176s ago: executing program 39 (id=1320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x1, 0xb}, {0x7, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x57b, 0x7, 0x2, 0x816, 0xfffffff8, 0x400101}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg(r2, &(0x7f0000000980)={&(0x7f0000000280)=@nfc={0x27, r4, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="40ccf09ad7b6ed5f3ad5ba9d477aa858de163828878881852006ceb7018de12207cd3338265272ca55ef4a7c1126e4a7320a4e24563497dd8fc9659d66462d8a665baf521e68aa87144ec5de817ec461157db38e71aec1f5c93613802194de8b09df8afbd007d8a21542a78311d754a350df0c6f8481139f0829e1ad9ff0f2f473237d8c8cd0dfde009e42c43d", 0x8d}, {&(0x7f0000000440)="998925285c9c2f12d5a88f817f7c69c54eb72bc94373cc0ce70b0e230d401845698de1c9a9b7b7f86ea6ba86631d2afc18e2574112374329a4da0b44abd525d335e51d757d465fc2ac03f177b485bae989cbb08837d25e8229f78bc8dc595881df5117273b0994062612fd7766824b04db773f3a1a2b9527f1fb37e725452892a1280e7dd3fa12a8ae52ff45afb3746a52cb6de7c73adf5766768030736f664efd79cf7e1c221373551c16a5fa6ab99aaa13b34ddcdedf6be4e97e3542ce20a918a376c1c75d84db1092605ae0fa3010d0d392dcbf4b36e3dfcdabaf", 0xdc}, {&(0x7f0000000640)="83355f463bec08bf93b54366f8bb0d3a6a8207e1c0d4ecd0b3ddd99db6d03324eb1839fd6d32c946fd9800c9367c98f9ff1116185d7a600bc14c650584c872c5ebc49d4dd71e92178ba580deb6092311c226780f00a8cafda733d024cdb07b3e722dfb733c95e8faad7265600c91423b1b478602f18389a18acaeab773a662e7291098dcc48a27cb6ad192325b06eb4e392a7781557694", 0x97}], 0x3, &(0x7f0000000740)=[{0x98, 0x111, 0xf, "c2467a1471aa56fe720c6f372f27d14ca311f48845725454dbe417fe9a49a02e464645e0046a85e9a67743f07ca6318209c7cfa3ae5563da4d43d933a472ea92da8504c8d7a81b11ee5b6075093e4e77b4bcbfb0ca30a7d488530f2709fc1a6441d156e9ae85ac3d48e79e5069976d8d5ed3158200c0771f9fb46c75d12c38f56cc9607c437604"}, {0xf0, 0x0, 0x6, "515a4c5edf4ab440fa0f7cc5a4890c3c55d5f85fe62619a7fececa4e991ddef7352dce4d04ef8e5ec662a233e89481bb6905d0147dc4bea370b195aa87ff0d74c6fa4bb52a9e85cc1ed4a56dae5f8db39c7632596b36ef102836e03c621f375633b276dfb5409b1e31b8c70c412b0c2e8da64e665f27e61cb742097726b164caebea5520b6562b2346425555a4a518ab65bdf77abc26d90ec46ee2ae2281738dc9703d6ccd47de4127579507a4e23a1710ede2a026bbe525511e5172df8c162802770000bece603a80fd88838711498a5c6b11b00fdf5b49f2a5da94"}, {0xa8, 0x88, 0x7, "e41820e8b48fa1d1283298a5bae2d83a5e80281f0816d4d7ae49fb78b9d21da7d62dbd8953785bb762edacb8bf45e551cae20fa264d5421f35a3a30f4cebb12b342e118a85269e8aeb713446bffcc8c8496984f3bc80516f47df6eca4ef7e28e88eb9218b9c953715ffa14eba6367fcb30ebbeca29bf9974e9dc38de34a9b4fcecd42d1381b24fe2d9325496bf63ace15731d60ce9f5"}], 0x230}, 0x24000000) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1m30.422402775s ago: executing program 9 (id=1341): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) r2 = msgget$private(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x2, 0x9, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) quotactl_fd$Q_GETINFO(r3, 0xffffffff80000502, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(0x0, 0x8d, 0x1, 0x0, 0x0, 0x1) msgsnd(r2, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r4, 0x400, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3dbc}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, {0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x31}, 0x2}, r1, 0x73}}, 0x48) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) open(0x0, 0x42203, 0x13d) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0xfffe, 0x10000, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) close(r5) 1m30.192462089s ago: executing program 9 (id=1343): r0 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xa41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0xe}, 0x204, 0x0, 0x101, 0x0, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x7, 0x8, @vifc_lcl_ifindex=r4, @rand_addr=0x64010101}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYRES32, @ANYRES32, @ANYRES32], 0xfe, 0x2f2, &(0x7f0000000dc0)="$eJzs3UFrE1sUwPHTpK9JU9rkwePBe6BedKOb0MaVKw3SghhQaiPqQpjaiYaMSZkJlYiYbMSNCz9HcelOUL9AN+LGvbsiCG666khnJpOZJm3Spkla+/9BmTtz7unczG3LmYG53bz39mmpYKULWlUicSURkYZsiaR2Wp4xbxtx2hMS1JBLU7++nblz/8HNbC43v6jUQnbpckYpNXPu47MX785/rk7dfT/zISYbqYebPzPfNyY2/tvcXnpStFTRUuVKVWlquVKpasuGrlaKVimt1G1D1yxdFcuWbobiBaOyulpTWnllOrFq6paltHJNlfSaqlZU1awp7bFWLKt0Oq2mE3K6jffQJ7++uKhl9wzbY4HZxwkw2emgaWYbnYP59SGMCQAAHDP71/9urb9X/R/1Wwep///tXv+LBOv/uHcS6v8j0Ajtdan/d4kNYkAYONPMagnv9zeM+h8AAAAAAAAAAAAAAAAAAAAAgJNgy7aTtm0nd7beIWc/JiJxEbGj7v6Ih4kBCc6/Hfjy59/bDyXF5OrIBowjFXhxLy5ivF7Lr+XdrRvPFqQoRuudP9vnthdu5OZnlSMln4y6l19fy0ed98Wc/KZUp/yzf8+5+Sqc/5ck/POLLhlJyj+dz5/pmD8hFy8E8tOSlC+PpCKGrDifo5X/ck6p67dyu/InnX4AAAAAAPwJ0srXdv/uxJ0OcWmPu/n+/fXszu10PdJ6RND2fGDX/fW4/N/LEpUAAAAAAKBvVu15STMM3TxEIyYifaQffcO2RUY9jOYzDf9Icx3iw33D5pqtdZH+BnZNRMJHxvYeWKyt8wEvwqh/EvS4PwUqFHKfTHW9mD+CM9i9YffQZ9z7DxzDvBrbfaQP/28RAAAAgMFqFf0HSPr6aoAjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9LGuvOlpPbBm/7ZQM7BPeuB00aF/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAY+R0AAP//cEsCGg==") pwritev2(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)="e3a99424e342579bdf829ae6d26687d89bb874b8cb5470edca8dce4c8052a4e2668d081772c34e93d24b29e01e09d9c544493b00402937c374ff8203fdfd5834fc822e93da3b002ce1a209c543b96a0fc7037540794a7f99946414020cb51b87a52331bb6831af5543a2cba15d24422e8575b0f00292eef514808c36b3a1296ba6de987c8acbbb81317f7bec3daafaf5d1a675538fa6e7d93b33102f98ecb6ce788c1d58", 0xa4}, {&(0x7f0000000480)="09fd4a91d53c82029871a9b62f517da6473732739330ada68018e6ae0eeb11aa89bf186bdea3591b953784b032856b", 0x2f}, {&(0x7f00000004c0)="5581ff2eee813847ce6865b991d913ab6b6de8cc9e3d5cfa874b0c09dfaeb2c23a1e602afd802e34a5849613fe4dfc4a22157cde200f6caf96f40ae31635ad554c4828de771f3d33866fd68ea7c41aeec4cc1dc9114341c31e8bedd12c9b3d53552b5f9bc6216591420b7028fbbbe2499d1c03cf1975eab637d41c4d652afedfbb7e9e732e820fa2263202a2acbbe11daece97a31c19046a86debafab0aa763b39bb19f1e58034f52b6bcd2c3deb601530", 0xb1}], 0x3, 0x3, 0xfffff33b, 0x18) r5 = perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC=0x0, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2", @ANYRESDEC=r5, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000ac0)="$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") r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x1000, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0xfd, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}}) 1m29.841608124s ago: executing program 9 (id=1345): unshare(0x42060000) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) 1m29.540270108s ago: executing program 9 (id=1347): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1}, 0x6e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1m29.188540814s ago: executing program 9 (id=1349): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1e, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x2d, 0x8, 0x2, 0x3d}, {0x4}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {}, {0x0, 0xe, 0xf8}, {0x6, 0x0, 0x1}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd2b, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_MARK={0x8, 0x10, 0xc}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000800)="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", 0x0}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001000010025bdff00ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) r6 = socket(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a010102"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) 1m28.465933485s ago: executing program 9 (id=1352): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x5}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8000, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10040880}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) rmdir(0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1m28.451464995s ago: executing program 40 (id=1352): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x5}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8000, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10040880}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) rmdir(0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1m18.510240284s ago: executing program 6 (id=1426): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf51, 0x81, 0xffff, 0x9cff, 0x15}) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0xff2e) lseek(r0, 0x6e, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0xfffffffe, 0xfffffff6, 0x0, 0x5, "0062007d8200edffffffffff2140f7ffffff00"}) r1 = syz_open_pts(r0, 0x20200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) write$P9_RSTAT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="42009cfcbf0c2e32f0650039f60600000040010000000000000000000000000008000000000006000000010000000000000000000400753332000400753332000000"], 0x42) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x18c, 0x65, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xfff1, 0xb}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x158, 0x2, [@TCA_U32_SEL={0x154, 0x5, {0x1, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2, [{0x7, 0x7, 0x1, 0x9}, {0xfff7fffc, 0x7f, 0x10001, 0x7}, {0x1, 0x9, 0x6b40, 0x51f4}, {0x3, 0x1, 0x7, 0x4940}, {0x0, 0x100, 0x12cd, 0xfdc9}, {0x7, 0x3, 0x6, 0x2}, {0xffffffc0, 0x6, 0x0, 0x7d}, {0x1, 0x0, 0xd, 0xfdba}, {0x3e, 0x2, 0x3, 0x5f}, {0x210000, 0x5b98, 0x6, 0x2}, {0x5, 0x400, 0x7, 0x9}, {0x1, 0x10000, 0x8, 0x7}, {0x0, 0x7f, 0xfffffffd}, {0x2, 0x6, 0x100, 0x3}, {0x7, 0x0, 0x9, 0x2}, {0x8, 0x3, 0x8001, 0x3}, {0x2, 0x6, 0x5, 0x401}, {0x2, 0x0, 0x0, 0xf}, {0x4, 0x400, 0x3, 0x5}, {0x2, 0x7, 0x45, 0x6}]}}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x200008b4}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000300)={0x7, 0x2, 0x4}) r3 = socket$kcm(0x10, 0x2, 0x0) utime(0x0, 0xfffffffffffffffc) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b80)="d8000000150081044e81f782db44b9040a87080211000000040000a118000200e000000800000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab44dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d1688683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bbfe5a09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000884) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007bff7f0000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, r4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/uevent_helper', 0x149083, 0x83) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000005c0)=r5) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xb7) 1m17.41229104s ago: executing program 6 (id=1440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x200, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x9210, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r1, 0x4, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9d, 0x0, 0x0, 0x10, 0x100000}, 0x94) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) fdatasync(r2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@private, @private}, &(0x7f0000000140)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x400003) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000500)=0x0) close(0x3) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0x1}]) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xff, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8401d, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x10c0ea, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r5, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x7, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x23, 0x2, 0x1) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) 1m17.069624355s ago: executing program 6 (id=1441): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) eventfd2(0x0, 0x0) close(0x3) r1 = socket$inet(0x2, 0x801, 0x0) getpid() bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000080", @ANYRES16=r2, @ANYBLOB="000829bd7000fddbdf2509000000080004000400000008000300020000000c00068008000300e000000108000400ff0f0000"], 0x38}, 0x1, 0x0, 0x0, 0x8850}, 0x24000044) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000000)) 1m16.996568546s ago: executing program 6 (id=1442): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x1, &(0x7f0000000180)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x105e, &(0x7f0000001080)="$eJzsz7FRwzAYx9G/JR+2j2MQtmADKkoqChjDM7ABLdtkhWyRSjlHzgpJiveK73Q/naRTuK8yZ0kO78lLD1PWfWvN9PvUWk3yV3tqpebzuy5J6WFuydCXS8ZtZLiGyz1vX/O4HWyn5yTHn/K6v7uNj/8b/hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHtY5AAD//xu7Dyk=") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 1m16.579694372s ago: executing program 6 (id=1445): unshare(0x42060000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) 1m16.193559228s ago: executing program 6 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x1e4062, &(0x7f00000002c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x40460c4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000401f, 0x484a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8, 0x8}, 0x10c0e8, 0x0, 0xfffffff9, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) read$char_usb(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 1m16.193336988s ago: executing program 41 (id=1449): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x1e4062, &(0x7f00000002c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(0xffffffffffffffff, 0x0, 0x40460c4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000401f, 0x484a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8, 0x8}, 0x10c0e8, 0x0, 0xfffffff9, 0x9, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) read$char_usb(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) 17.400563999s ago: executing program 4 (id=1974): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000280)={[], [{@fsname={'fsname', 0x3d, 'subj_user'}}, {@fowner_eq}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '\xae\x9e\xdd+'}}, {@subj_type={'subj_type', 0x3d, 'grpquota'}}, {@flag='nomand'}]}, 0x1, 0xbd0, &(0x7f0000001440)="$eJzs3M1vFOcZAPBnxutvF5uqKgVVqqWKtmrVxWBEJU7Qc9VWag854thrZHn5iO0oscXBkHuSQxRxQEr4EyLlHi6cIuVADgn5C1AUFKHkAhw2mv0wG693MWZ3Jza/n/R63nfe8T7P42F33pF2COCVNZ39SCOORsSFJGKyvj+NiKFqbyRis3bck0fX5rOWRKXyv++TSCLi8aNr843XSurb8fpgJCLu/TOJX7/TGnd1fWN5rlwurdTHJ9YuXT2xur7x96VLcxdLF0uXT8/+4/TsmdnZLtb64OrrN3//5b//dOP2uzP/+fDQ50mci4n6XHMd3TId01t/k2aFiJjrdrCcDNTraa4zKeSYEAAAHaVNa7jfxmQMxLPF22Tc/SrX5AAAAICuqAxEVAAAAIADLnH/DwAAAAdc43sAjx9dm2+0fL+R0F8Pz0fEVK3+xvPNtZlCbFa3IzEYEWM/JNH8WGtS+7WXNp1F+vSLUtaiR88hd7J5PSJ+t9P5T6r1T1Wf4m6tP42ImS7En9423k/1n+tC/LzrB+DVdOd87ULWev1Lt9Y/scP1r7DDtWsv8r7+NdZ/T1rWf8/qH2iz/vvvLmMce/rXe+3mmtd/r733zUIWP9u+VFEv4OH1iGOFnepPtupP2tR/YZcxxucf3Go3l9Wf1dto/a6/cjvieHU111p/Q9Lp/yc6sbhULs3Ufu7w+utnOsdvPv9Zy+I37gX6ITv/Y7G38391lzGmjnx3tN3c8+tPvx1K/l/tDdX3vD23trZyMmIo+Vfr/lOdc2kc03iNrP6//LHz+3+n+rPPhM363yH713O9vs3GN7bFHD9+6pO9199bWf0Lezz/7+8yxkef3Xqj3Vze9QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwP6QRMRFJWtzqp2mxGDEeEb+JsbR8ZXXtb4tX3ry8kM1FTMVgurhULs1ExGRtnGTjk9X+s/GpbePZiDgcER9MjlbHxfkr5YW8iwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLeERMRJIWIyKNiB8n07RYzDsrAAAAoOum8k4AAAAA6LkXuP+/O9jLRAAAAICeabn/L/xsNNLPXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiQDv/hzv0kIjbPjlZbZqg+N5hrZkCvpbs7bKzXeQD9N5B3AkBuCk39SqVSyTEVoM/c4wPJc+ZH2s4Mv3As9xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+9efj965n0TE5tnRassM1ecGtx176ebHR/qeINAzad4JALkZ6DSZPHcHsI8V2s5YGcBBt/0eH3j11Fb2Tys1rfMjbX9z+KWjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB/TFRbkhYjIq3207RYjPhVREzFYLK4VC7NRMShiPh6cnA4G5/MO2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6bnV9Y3muXC6tHMzO0EEvUOeX2hmNvsUarb+Z2xwz3H6qQyfnDyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHKxur6xPFcul1ZW884EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNvq+sbyXLlcWul+562Jeoj20Yf7VicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPn4KQAA//+j8QiI") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="635a0b420034060000000000000000000000000000000000ff010000000000000000000000000001000004f8ff4f7302000000ebffffffffffffff000000000a00004e2200004e240000000000000002000000010000000400000001"], 0x5c) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe67e}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 16.421896754s ago: executing program 4 (id=1988): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x26e, &(0x7f0000000780)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB="00c3c5ea56ad3f6ffb015600", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x26204, 0x0) fsopen(&(0x7f00000003c0)='sysfs\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x9, 0x5, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.245439136s ago: executing program 4 (id=1990): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) fdatasync(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x1, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0xc08, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x4ce, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r6, 0x0) unshare(0x22020400) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) 13.795566664s ago: executing program 4 (id=2001): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) syz_open_dev$usbfs(&(0x7f0000000200), 0x5, 0x600000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000010900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x40) close(0x3) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") unshare(0x2c020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r1, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x1, 0x0, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b4002"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x1, &(0x7f0000000100)={0x0}) ptrace$setregs(0xf, r4, 0x52a, &(0x7f0000000280)="266f04a07c1d4c748f100aa2") r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="838625921907f4a5df3699f8b40eb45a94857d5a02c8335e91acc57df74ca446341b29138e6033baff625e9af39e5361aea9ff20329caad7839d534d858d6191df1bc384a06a65"], 0x56) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000240)={'nr0\x00', @ifru_ivalue=0x3ff}) 13.346980331s ago: executing program 4 (id=2007): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000280000010000ac141416e000000129a130112b9212", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x141c42, 0x0) 13.027874625s ago: executing program 4 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x11, 0x9, 0xfffffffd, 0x5, 0x8, 0x0, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x45, [0x0, 0x2]}}) 13.012152365s ago: executing program 42 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x11, 0x9, 0xfffffffd, 0x5, 0x8, 0x0, 0x3, 0xf8, 0x0, 0x1, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x45, [0x0, 0x2]}}) 4.528570452s ago: executing program 7 (id=2070): sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x10000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @multicast1}, 0x8) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x4008888) r2 = getuid() ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpgid(0x0) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r8) sendmsg$netlink(r5, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000ac0)={0x10, 0x30, 0x10, 0x70bd26, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r6, r8}}}], 0x20, 0x8800}, 0x20000010) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000002c0)=0x0) mount$nfs(&(0x7f00000001c0)='-\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2080000, &(0x7f0000000300)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/}.\xa9'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@euid_lt={'euid<', r2}}, {@fowner_gt={'fowner>', r3}}, {@euid_lt={'euid<', r4}}, {@fowner_lt={'fowner<', r8}}, {@euid_eq={'euid', 0x3d, r9}}]}) 4.404825244s ago: executing program 3 (id=2012): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x80078b, &(0x7f0000000700)={[{@nodioread_nolock}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_err_abort}, {@minixdf}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000001640)=""/201, 0xc9}], 0x1, 0x9f2, 0x2b7) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r2 = socket(0x10, 0x3, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r3 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000140)=0x9, 0x4) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000040)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x33, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061110800000000004600feff000000009500000000008000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_NEWSET={0x32c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x4}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x40}]}}}, {0x264, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x254, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x240, 0xa, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "dc5b4e88921d7bb40007ab0acbdb80887732de15d4fe776cddd85f4623e4e0c3bdd27bd1606ecf9580608893ef114d106a02a7b49b986a8e8cf7ae203d1a4e381f9e"}, @NFTA_MATCH_INFO={0x12, 0x3, "c724636c142b64cc5b8f1811fc30"}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xe0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xa8, 0x3, "4a955aa49aaf2a95cc699dd5dc463e7b986d5a81b40153f17174fbd3bdf4221af457b5f4efd1800c583a7a2fdbdf2c317231c29a20a9f1e703a63d71e3ed8cea1be2f59b768e19a9e244a91282b84c48bb9f888f7a4ba74dd5e451106fc3befbdf1de5be1a44dd7a5a0b3dfba0c2537880b1f51a5b2c846bbe648386ee4dce188612d1baeece5fcc011189a124b386d8fad2d38060202677bd73e0a5b926fb30482af817"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'sctp\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dccp\x00'}]}}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x808}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x3b4}}, 0x20050800) 4.273540006s ago: executing program 7 (id=2071): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0xf13102) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x23, 0x0, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440), 0x9}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8, 0xfffe}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100f0ff00004300028005000100060000000c0003010000800000"], 0xc0}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000180), 0x22000) ppoll(&(0x7f00000001c0)=[{r2, 0x8}], 0x1, &(0x7f0000000240), 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x207) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000c73db5fcf7cb97ee4000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 3.549620857s ago: executing program 8 (id=2074): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x30, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff2000280000010000ac141416e000000129a130112b92121f9ae0dd972fa1", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x141c42, 0x0) 3.525428447s ago: executing program 3 (id=2075): r0 = syz_io_uring_setup(0x3e3, &(0x7f0000000080)={0x0, 0xe138, 0x0, 0x1200001, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x50, 0x33) io_uring_enter(r0, 0x35b3, 0x22c8, 0x46, 0x0, 0x0) io_uring_enter(r0, 0x24b7, 0xcb15, 0x21, 0x0, 0x0) io_uring_enter(r0, 0x1, 0xfffffffd, 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f636f6d70726573739cdf4bbd3c08fe226865636b3d7374726963742c6d6f64653d30783030303030303030303030303030306f64653d3078303030303030303030303030306137632c757466382c757466e74632eba896382ebc4ae78d89"], 0x0, 0x569, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, r3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000004c0)={0x1, 0x9, "55ce71", 0x3, 0xd3}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x240, 0x2b8, 0xb0000010, 0x240, 0x5c8f0200, 0x310, 0x3a8, 0x3a8, 0x310, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x240, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x8, 0x103, 0x0, 0x2, 0x20000a, 0x80001, 0x7fffffff, 0x5, 0x78, 0xe0}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4bba542500e92eab2e507d4e04c0a92ef98f938b8a3de27236e73a674522"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000000)='ip6gretap0\x00') 3.492613938s ago: executing program 8 (id=2076): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090100000003e71600000006003e00180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c320000000000003c030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000106e8106000000000000000000002000", @ANYRES64, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003002908000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 3.146539453s ago: executing program 7 (id=2079): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003bc0)='ns/mnt\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000005100)={0x100083, 0x72, 0x100000, {r0}}, 0x20) 3.002001045s ago: executing program 8 (id=2081): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000180), 0x5}, 0x4580, 0x1000000, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000280)={[], [{@fsname={'fsname', 0x3d, 'subj_user'}}, {@fowner_eq}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '\xae\x9e\xdd+'}}, {@subj_type={'subj_type', 0x3d, 'grpquota'}}, {@flag='nomand'}]}, 0x1, 0xbd0, &(0x7f0000001440)="$eJzs3M1vFOcZAPBnxutvF5uqKgVVqqWKtmrVxWBEJU7Qc9VWag854thrZHn5iO0oscXBkHuSQxRxQEr4EyLlHi6cIuVADgn5C1AUFKHkAhw2mv0wG693MWZ3Jza/n/R63nfe8T7P42F33pF2COCVNZ39SCOORsSFJGKyvj+NiKFqbyRis3bck0fX5rOWRKXyv++TSCLi8aNr843XSurb8fpgJCLu/TOJX7/TGnd1fWN5rlwurdTHJ9YuXT2xur7x96VLcxdLF0uXT8/+4/TsmdnZLtb64OrrN3//5b//dOP2uzP/+fDQ50mci4n6XHMd3TId01t/k2aFiJjrdrCcDNTraa4zKeSYEAAAHaVNa7jfxmQMxLPF22Tc/SrX5AAAAICuqAxEVAAAAIADLnH/DwAAAAdc43sAjx9dm2+0fL+R0F8Pz0fEVK3+xvPNtZlCbFa3IzEYEWM/JNH8WGtS+7WXNp1F+vSLUtaiR88hd7J5PSJ+t9P5T6r1T1Wf4m6tP42ImS7En9423k/1n+tC/LzrB+DVdOd87ULWev1Lt9Y/scP1r7DDtWsv8r7+NdZ/T1rWf8/qH2iz/vvvLmMce/rXe+3mmtd/r733zUIWP9u+VFEv4OH1iGOFnepPtupP2tR/YZcxxucf3Go3l9Wf1dto/a6/cjvieHU111p/Q9Lp/yc6sbhULs3Ufu7w+utnOsdvPv9Zy+I37gX6ITv/Y7G38391lzGmjnx3tN3c8+tPvx1K/l/tDdX3vD23trZyMmIo+Vfr/lOdc2kc03iNrP6//LHz+3+n+rPPhM363yH713O9vs3GN7bFHD9+6pO9199bWf0Lezz/7+8yxkef3Xqj3Vze9QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwP6QRMRFJWtzqp2mxGDEeEb+JsbR8ZXXtb4tX3ry8kM1FTMVgurhULs1ExGRtnGTjk9X+s/GpbePZiDgcER9MjlbHxfkr5YW8iwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLeERMRJIWIyKNiB8n07RYzDsrAAAAoOum8k4AAAAA6LkXuP+/O9jLRAAAAICeabn/L/xsNNLPXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiQDv/hzv0kIjbPjlZbZqg+N5hrZkCvpbs7bKzXeQD9N5B3AkBuCk39SqVSyTEVoM/c4wPJc+ZH2s4Mv3As9xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+9efj965n0TE5tnRassM1ecGtx176ebHR/qeINAzad4JALkZ6DSZPHcHsI8V2s5YGcBBt/0eH3j11Fb2Tys1rfMjbX9z+KWjAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB/TFRbkhYjIq3207RYjPhVREzFYLK4VC7NRMShiPh6cnA4G5/MO2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6bnV9Y3muXC6tHMzO0EEvUOeX2hmNvsUarb+Z2xwz3H6qQyfnDyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHKxur6xPFcul1ZW884EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNvq+sbyXLlcWul+562Jeoj20Yf7VicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPn4KQAA//+j8QiI") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="635a0b420034060000000000000000000000000000000000ff010000000000000000000000000001000004f8ff4f7302000000ebffffffffffffff000000000a00004e2200004e240000000000000002000000010000000400000001"], 0x5c) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe67e}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.754989009s ago: executing program 5 (id=2082): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.519355462s ago: executing program 3 (id=2084): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0xa88, 0x8406, 0x0, 0x0, 0x8000003f, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) epoll_create(0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x50c91c04, 0x7df, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_config_ext={0x3}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x31305, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x844, 0x32, 0x43a1bd76, 0x7, 0xa, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) 2.404439394s ago: executing program 5 (id=2085): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x80078b, &(0x7f0000000700)={[{@nodioread_nolock}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_err_abort}, {@minixdf}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$eJzs289rHFUcAPDvTH60tT8Sa/3RWjVahKCYNGnVHrwoCh4qCnqox5hsS+i2kSaKLcWmIvUiSEHP4lHwL/AmgqgnwatePEmhaC+tniIzO9NuttnUmE0mZj8fmOx7M2933jdvfrx5bzeArjWU/UkidkTELxEx0MguLjDUeLlx7fzkX9fOTyaxsPD6H0le7vq185Nl0fJ924vMcBqRfpgUO1ls9uy5kxP1eu1MkR+dO/X26OzZc0+9e2riRO1E7fT4kSOHD409+8z40x2JM4vr+r73Z/bvffnNy69MHrv81g9fZfXdUWxvjqNThrLA/1zItW57vNM7q9jOpnTSW2FFWJGeiMiaqy8//weiJ2413kC89EGllQPWVHZv2tJ+8/wCsIklUXUNgGqUN/rs+bdc1qnrsSFcfb7xAJTFfaNYGlt6Iy3K9LU833bSUEQcm//782yJNRqHAABo9vHkZ0f7m/odt/ofadyXv/6W/02KOZTBiLg7InZHxD0RsSci7o3Iy94fEQ+ssj6393/SK6v8yGVl/b/nirmtxf2/svcXgz1Fbmcef19yfLpeOxgRuyJiOPq2ZPmxZfbxzYs/f9JuW3P/L1uy/Zd9waIeV3pbBuimJuYm8k5pB1y9GLGvd6n4k5szAVnb742IfSv76F1lYvqJL/e3K3Tn+JfRgXmmhS+y8Oaz+OejJf5S0jw/OX3b/OTo1qjXDo6WR8Xtfvzp0mvt9r+q+Dvgaq3x2tT+rUUGk+b52tmV7+PSrx+1fab5j8d/2p+8kc8z9xfr3puYmzszFtGfHM3zi9aP33pvmS/LZ8f/8IGlz//dxXuy+B+MiOwgfigiHo6IR4q6PxoRj0XEgWXi//6F9tvK+COtqP0vRkwtef27efy3tP/KEz0nv/u63f7/XfsfzlPDxZr8+ncHS1Unu1y0VnA1/zsAAAD4v0jz78An6cjNdJqOjDS+w78n7krrM7NzTx6feef0VOO78oPRl5YjXQPFeGh9ul4bS+aLT2yMj44XY8XleOmhYtz4055teX5kcqY+VXHs0O22tzn/M7/3VF07YI1tW3LteP+6VwSoQOs8ero4e+HVcDGAzcrvtaF73eH8T9erHsD6c/+H7rXU+X+hJW8uADYn93/oXs5/6FLpt1XXAKiQ+z90pdX8rn8NE1s3RjWqSWzURskTEWUi3RD1kVijRNVXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74JwAA///SqekQ") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000001640)=""/201, 0xc9}], 0x1, 0x9f2, 0x2b7) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r2 = socket(0x10, 0x3, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r3 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000140)=0x9, 0x4) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000040)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x33, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061110800000000004600feff000000009500000000008000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_NEWSET={0x32c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x4}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x40}]}}}, {0x264, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x254, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x240, 0xa, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "dc5b4e88921d7bb40007ab0acbdb80887732de15d4fe776cddd85f4623e4e0c3bdd27bd1606ecf9580608893ef114d106a02a7b49b986a8e8cf7ae203d1a4e381f9e"}, @NFTA_MATCH_INFO={0x12, 0x3, "c724636c142b64cc5b8f1811fc30"}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xe0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xa8, 0x3, "4a955aa49aaf2a95cc699dd5dc463e7b986d5a81b40153f17174fbd3bdf4221af457b5f4efd1800c583a7a2fdbdf2c317231c29a20a9f1e703a63d71e3ed8cea1be2f59b768e19a9e244a91282b84c48bb9f888f7a4ba74dd5e451106fc3befbdf1de5be1a44dd7a5a0b3dfba0c2537880b1f51a5b2c846bbe648386ee4dce188612d1baeece5fcc011189a124b386d8fad2d38060202677bd73e0a5b926fb30482af817"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'sctp\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dccp\x00'}]}}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x808}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x3b4}}, 0x20050800) 2.213004227s ago: executing program 7 (id=2086): socket(0x22, 0x6, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_script(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x9b, 0x7, 0x1000}) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="3c00000010000108fdffffff0000f00000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c0001800800080002000000"], 0x3c}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r3 = socket$key(0xf, 0x3, 0x2) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x40, 0x0, 0x0, 0x0, 0x20, 0x45000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8}, 0x102802, 0xffffffffffffffff, 0x1, 0x0, 0xffc, 0x7, 0x7fff, 0x0, 0x1ff, 0x0, 0xffffffffffffffff}, r4, 0xffaffffffffffffc, 0xffffffffffffffff, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4c044) sendmsg(r3, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0xffffffaa, @private1, 0x3000}, 0x80, 0x0}, 0x20008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) 1.889281722s ago: executing program 3 (id=2087): perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x10, 0x4, 0x0, 0x0, 0xad1, 0x20200, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x260, 0x559, 0x4f25, 0x8, 0x7, 0x9, 0x0, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x10c80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000500)='rxrpc\x00', &(0x7f0000000540)='#! ') fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) r2 = semget(0x0, 0x3, 0x4) semctl$GETALL(r2, 0x0, 0xd, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x20000040) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = fcntl$dupfd(r0, 0x0, r4) write$binfmt_script(r5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r6, 0xc0185879, &(0x7f00000004c0)={0x0, 0x6, 0x400000, 0x2, 0xff, 0x0, 0x2401}) write$snapshot(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 1.693500375s ago: executing program 2 (id=2088): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x9, 0x5, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) 1.615024706s ago: executing program 2 (id=2089): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xfffffffe}, 0x9b) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, 0x0) 1.569408677s ago: executing program 8 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x33, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x1000000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mq_unlink(&(0x7f0000000000)='eth0\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000740)=[{0x0, 0x0, [0x0, 0xa, 0x23b, 0x7, 0xff, 0x4, 0xba, 0x9, 0x1503, 0x5019, 0xffff, 0xa, 0x4, 0x2, 0x5, 0x4]}, {0x2, 0x0, [0x4, 0x0, 0x8, 0x6, 0x5, 0x401, 0x447, 0x4, 0x191cfbcc, 0x40, 0xd, 0x3, 0x100, 0x1000, 0x0, 0xffff]}], r3, 0x1, 0x1, 0x90}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a", @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) clock_gettime(0x3, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000042000000080000000800ea02b4f60000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.543210588s ago: executing program 5 (id=2091): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x2004c054) 1.419178489s ago: executing program 2 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000700)={0x0, 0x0}) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0xd9, 0xf2, 0x3, 0x8, 0x0, 0x9, 0x84d0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000600), 0xd}, 0x311050, 0x45e, 0x5ceb, 0x8, 0x7fffffffffffffff, 0x80000001, 0x800, 0x0, 0x1, 0x0, 0x7}, r4, 0x10, r5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000060a010400000000000000000a0000010900010073797a310000000058000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000220000180080001006475700014000280080002400000001308000140000000100900020073797a3200000000140000001100010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e1050000006558000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7], 0x70}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvfrom(r9, &(0x7f0000000540)=""/150, 0x96, 0x40000002, 0x0, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e27, @empty}, 0xffff, 0x0, 0x1}}, 0x26) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 1.34875849s ago: executing program 5 (id=2093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 1.199931753s ago: executing program 5 (id=2094): r0 = syz_io_uring_setup(0x3e3, &(0x7f0000000080)={0x0, 0xe138, 0x0, 0x1200001, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x50, 0x33) io_uring_enter(r0, 0x35b3, 0x22c8, 0x46, 0x0, 0x0) io_uring_enter(r0, 0x24b7, 0xcb15, 0x21, 0x0, 0x0) io_uring_enter(r0, 0x1, 0xfffffffd, 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f636f6d70726573739cdf4bbd3c08fe226865636b3d7374726963742c6d6f64653d30783030303030303030303030303030306f64653d3078303030303030303030303030306137632c757466382c757466e74632eba896382ebc4ae78d89"], 0x0, 0x569, &(0x7f0000000200)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x0, 0xffffffffffffffff, r3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x271b, 0x0, &(0x7f0000000040)) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x800448f0, &(0x7f00000004c0)={0x1, 0x9, "55ce71", 0x3, 0xd3}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x240, 0x2b8, 0xb0000010, 0x240, 0x5c8f0200, 0x310, 0x3a8, 0x3a8, 0x310, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x200, 0x240, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'dvmrp0\x00', {0x8, 0x103, 0x0, 0x2, 0x20000a, 0x80001, 0x7fffffff, 0x5, 0x78, 0xe0}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4bba542500e92eab2e507d4e04c0a92ef98f938b8a3de27236e73a674522"}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000000)='ip6gretap0\x00') 989.686576ms ago: executing program 8 (id=2095): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 971.248496ms ago: executing program 7 (id=2096): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003bc0)='ns/mnt\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000005100)={0x100083, 0x72, 0x100000, {r0}}, 0x20) 943.082816ms ago: executing program 2 (id=2097): futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 769.239049ms ago: executing program 7 (id=2098): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x4, 0xffff06bd, 0x0, 0xf, 0x1a, 0xef, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa7f, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91bb, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x200, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x2, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x4, 0x8, 0x10, 0x7, 0x3, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x2, 0x10000002, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0xc2cf, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x12, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x10, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x942, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0xfffffffe, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x406, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x4, 0x73, 0x3, 0x19, 0x4, 0x1, 0xb, 0x1, 0x8, 0x400, 0x81, 0x80000004, 0x9, 0x9, 0x3, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x50001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x1, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x5, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x2, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x0, 0x7, 0x6, 0x709, 0x2, 0x40000049, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x7, 0x10, 0xfffffffd, 0x4, 0x0, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8000005, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x200009, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x20000, 0x2, 0x10001, 0x1, 0x4, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x4, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0xe, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x2, 0xffffffff, 0x2, 0x7d, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0xb5, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x28000a4, 0x1ff, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0x4, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x6, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x8, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x9, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x8, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1003, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x20, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x4, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0x10c9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0xffffffff, 0xe60, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x1, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0x5, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x1, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804810, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYRESDEC], 0xf9, 0x121d, &(0x7f0000002000)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc9) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) socket$unix(0x1, 0x3, 0x0) 495.907473ms ago: executing program 3 (id=2099): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000001380)={[{@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000001440)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000400)='./file0\x00') perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049ea) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4607100709040000000000000003003e00f9ffffffd60100000000000040000000000000008b00000000000000080000000600380001"], 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(0x0, 0x0, 0x0) 382.593154ms ago: executing program 8 (id=2100): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000180), 0x5}, 0x4580, 0x1000000, 0x800000, 0x8, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000280)={[], [{@fsname={'fsname', 0x3d, 'subj_user'}}, {@fowner_eq}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '\xae\x9e\xdd+'}}, {@subj_type={'subj_type', 0x3d, 'grpquota'}}, {@flag='nomand'}]}, 0x1, 0xbd0, &(0x7f0000001440)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8ffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x4c142, 0x104) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="635a0b420034060000000000000000000000000000000000ff010000000000000000000000000001000004f8ff4f7302000000ebffffffffffffff000000000a00004e2200004e240000000000000002000000010000000400000001"], 0x5c) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe67e}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x2}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x4}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 268.811876ms ago: executing program 5 (id=2101): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x80078b, &(0x7f0000000700)={[{@nodioread_nolock}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_err_abort}, {@minixdf}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0xe4d}}]}, 0x0, 0x471, &(0x7f0000000bc0)="$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") ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001740)=[{&(0x7f0000001640)=""/201, 0xc9}], 0x1, 0x9f2, 0x2b7) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) r2 = socket(0x10, 0x3, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) r3 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fefffffc}, 0x0, 0x0, 0x0, 0x3, 0xffb, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000140)=0x9, 0x4) ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f0000000040)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}}) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x33, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061110800000000004600feff000000009500000000008000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x4}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0xde) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_NEWSET={0x32c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @range={{0xa}, @val={0x4}}}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_EXPRESSIONS={0x2f4, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x40}]}}}, {0x264, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x254, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0x240, 0xa, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'ipcomp\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "dc5b4e88921d7bb40007ab0acbdb80887732de15d4fe776cddd85f4623e4e0c3bdd27bd1606ecf9580608893ef114d106a02a7b49b986a8e8cf7ae203d1a4e381f9e"}, @NFTA_MATCH_INFO={0x12, 0x3, "c724636c142b64cc5b8f1811fc30"}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xe0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'string\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0xa8, 0x3, "4a955aa49aaf2a95cc699dd5dc463e7b986d5a81b40153f17174fbd3bdf4221af457b5f4efd1800c583a7a2fdbdf2c317231c29a20a9f1e703a63d71e3ed8cea1be2f59b768e19a9e244a91282b84c48bb9f888f7a4ba74dd5e451106fc3befbdf1de5be1a44dd7a5a0b3dfba0c2537880b1f51a5b2c846bbe648386ee4dce188612d1baeece5fcc011189a124b386d8fad2d38060202677bd73e0a5b926fb30482af817"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'sctp\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'dccp\x00'}]}}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x808}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x3b4}}, 0x20050800) 9.57644ms ago: executing program 2 (id=2102): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x5, @mcast1, 0xc0000000}]}, &(0x7f0000000080)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x20}}, 0x14) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0xdb, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x30706a3f4b9f39f2}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r4 = syz_io_uring_setup(0x3f, &(0x7f00000014c0)={0x0, 0x2a9c6, 0x2, 0x9, 0x19e}, &(0x7f0000001540), &(0x7f0000001580), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') pread64(r5, &(0x7f0000001280)=""/200, 0xc8, 0x17a7) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf25170000006400068014000300322d73352e3a000000000000004363844c00040067636d2861657329000000000000000000000000000000000000000000000000240000009ea2d328893918672a5ca222a6ae067cc0f4457113a830013ed48b0fad61b1143aa3a6f6"], 0x78}, 0x1, 0x0, 0x0, 0x806}, 0x0) socket$netlink(0x10, 0x3, 0x0) 6.92264ms ago: executing program 3 (id=2103): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x2004c054) 0s ago: executing program 2 (id=2104): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @void}, 0x10) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x7d4165c9) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x7d4165c9) listen(r3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) listen(r6, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x4041}, 0x0) kernel console output (not intermixed with test programs): 251.919036][T11357] netlink_unicast+0x5a7/0x680 [ 251.919066][T11357] netlink_sendmsg+0x5be/0x6f0 [ 251.919204][T11357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.919270][T11357] ____sys_sendmsg+0x532/0x580 [ 251.919299][T11357] ___sys_sendmsg+0x195/0x1e0 [ 251.919336][T11357] __x64_sys_sendmsg+0xd4/0x160 [ 251.919397][T11357] x64_sys_call+0x194c/0x3020 [ 251.919426][T11357] do_syscall_64+0x136/0x3c0 [ 251.919550][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.919572][T11357] RIP: 0033:0x7f9b523ace59 [ 251.919591][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.919612][T11357] RSP: 002b:00007f9b50e07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.919642][T11357] RAX: ffffffffffffffda RBX: 00007f9b52625fa0 RCX: 00007f9b523ace59 [ 251.919657][T11357] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 251.919741][T11357] RBP: 00007f9b50e07090 R08: 0000000000000000 R09: 0000000000000000 [ 251.919756][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.919770][T11357] R13: 00007f9b52626038 R14: 00007f9b52625fa0 R15: 00007ffe249216a8 [ 251.919792][T11357] [ 251.982494][T11363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=11363 comm=syz.4.1681 [ 252.207244][T11369] syzkaller0: entered promiscuous mode [ 252.215634][T11369] syzkaller0: entered allmulticast mode [ 252.224325][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1683'. [ 252.233208][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1683'. [ 252.254716][ T3730] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.263549][ T3730] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.275215][T11374] 9p: Bad value for 'rfdno' [ 252.289544][ T3730] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.299692][ T3730] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.313358][T11345] EXT4-fs: Ignoring removed nobh option [ 252.337027][T11345] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.368464][T11345] EXT4-fs (loop5): 1 truncate cleaned up [ 252.379067][T11345] EXT4-fs mount: 11 callbacks suppressed [ 252.379084][T11345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.400226][T11372] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1683'. [ 252.471154][T11372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.515583][T11372] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.530801][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.551565][T11372] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 252.588483][T11392] FAULT_INJECTION: forcing a failure. [ 252.588483][T11392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.599560][T11398] EXT4-fs: Ignoring removed oldalloc option [ 252.619381][ T7627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.620655][T11396] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1689'. [ 252.638375][T11392] CPU: 1 UID: 0 PID: 11392 Comm: syz.2.1688 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 252.638408][T11392] Tainted: [W]=WARN [ 252.638416][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.638428][T11392] Call Trace: [ 252.638436][T11392] [ 252.638446][T11392] __dump_stack+0x1d/0x30 [ 252.638470][T11392] dump_stack_lvl+0x95/0xd0 [ 252.638579][T11392] dump_stack+0x15/0x1b [ 252.638598][T11392] should_fail_ex+0x25e/0x270 [ 252.638622][T11392] should_fail+0xb/0x20 [ 252.638736][T11392] should_fail_usercopy+0x1a/0x20 [ 252.638763][T11392] _copy_from_user+0x1c/0xb0 [ 252.638781][T11392] __sys_sendto+0x1b5/0x470 [ 252.638894][T11392] __x64_sys_sendto+0x76/0x90 [ 252.638919][T11392] x64_sys_call+0x2d35/0x3020 [ 252.638942][T11392] do_syscall_64+0x136/0x3c0 [ 252.638971][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.639090][T11392] RIP: 0033:0x7f7d82d2ce59 [ 252.639104][T11392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.639189][T11392] RSP: 002b:00007f7d81787028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 252.639210][T11392] RAX: ffffffffffffffda RBX: 00007f7d82fa5fa0 RCX: 00007f7d82d2ce59 [ 252.639226][T11392] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 252.639241][T11392] RBP: 00007f7d81787090 R08: 000020000005ffe4 R09: 000000000000001c [ 252.639256][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.639275][T11392] R13: 00007f7d82fa6038 R14: 00007f7d82fa5fa0 R15: 00007ffd87f23828 [ 252.639295][T11392] [ 252.683725][T11398] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.1691: corrupted in-inode xattr: invalid ea_ino [ 252.821418][T11398] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1691: couldn't read orphan inode 15 (err -117) [ 252.823211][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 252.839760][ C1] EXT4-fs (loop7): initial error at time 1782478406: ext4_iget_extra_inode:5180: inode 15 [ 252.849722][ C1] EXT4-fs (loop7): last error at time 1782478406: ext4_iget_extra_inode:5180: inode 15 [ 252.869213][T11398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.897118][T11398] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1691: invalid indirect mapped block 234881024 (level 0) [ 252.897658][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 252.897672][ T28] audit: type=1400 audit(1782478406.906:3262): avc: denied { write } for pid=11397 comm="syz.7.1691" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.940932][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.022835][T11412] 9p: Bad value for 'rfdno' [ 253.045020][T11414] set_capacity_and_notify: 6 callbacks suppressed [ 253.045033][T11414] loop8: detected capacity change from 0 to 1024 [ 253.076159][T11414] EXT4-fs: Ignoring removed orlov option [ 253.088563][T11414] EXT4-fs: inline encryption not supported [ 253.113003][T11414] ext4: Unknown parameter 'fsname' [ 253.247071][T11425] batman_adv: batadv0: Adding interface: dummy0 [ 253.253542][T11425] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.280222][T11425] batman_adv: batadv0: Interface activated: dummy0 [ 253.325103][T11414] batadv0: mtu less than device minimum [ 253.334935][T11414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.349426][T11414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.364108][T11414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.378856][T11414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.393088][T11414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.406945][T11432] loop4: detected capacity change from 0 to 512 [ 253.408336][T11414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.428088][T11414] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 253.429548][T11432] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 253.480908][T11419] syzkaller0: entered promiscuous mode [ 253.486442][T11419] syzkaller0: entered allmulticast mode [ 253.514004][T11432] EXT4-fs (loop4): 1 truncate cleaned up [ 253.521853][T11432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.538602][T11437] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1706'. [ 253.553397][ T28] audit: type=1400 audit(1782478407.536:3263): avc: denied { write } for pid=11431 comm="syz.4.1703" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.585838][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1706'. [ 253.585900][ T28] audit: type=1400 audit(1782478407.596:3264): avc: denied { write } for pid=11431 comm="syz.4.1703" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.618161][ T28] audit: type=1400 audit(1782478407.636:3265): avc: denied { write } for pid=11431 comm="syz.4.1703" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.640196][ T28] audit: type=1400 audit(1782478407.636:3266): avc: denied { write } for pid=11431 comm="syz.4.1703" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.692876][T11442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.706925][T11440] loop5: detected capacity change from 0 to 512 [ 253.711471][T11442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.723789][T11440] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 253.736159][T11440] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1705: bad orphan inode 131083 [ 253.746515][T11440] fserror_report: 1 callbacks suppressed [ 253.746528][T11440] loop5: lost filesystem error report for type 5 error -117 [ 253.753131][T11440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.779770][T11445] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 253.786308][T11445] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 253.793867][T11445] vhci_hcd vhci_hcd.0: Device attached [ 253.801244][ T8686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.809844][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.819544][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.869786][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.920990][T11453] 9p: Bad value for 'rfdno' [ 253.975867][T11461] random: crng reseeded on system resumption [ 254.026000][ T3376] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 254.077506][ T28] audit: type=1400 audit(1782478408.076:3267): avc: denied { watch watch_reads } for pid=11459 comm="syz.4.1715" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 254.100059][T11461] netlink: 'syz.2.1714': attribute type 6 has an invalid length. [ 254.237856][T11470] netlink: 'syz.8.1717': attribute type 21 has an invalid length. [ 254.245845][T11470] netlink: 'syz.8.1717': attribute type 7 has an invalid length. [ 254.512523][T11476] loop8: detected capacity change from 0 to 256 [ 254.598062][T11481] syzkaller0: entered promiscuous mode [ 254.603573][T11481] syzkaller0: entered allmulticast mode [ 254.822617][T11502] loop2: detected capacity change from 0 to 256 [ 254.838445][T11502] FAULT_INJECTION: forcing a failure. [ 254.838445][T11502] name failslab, interval 1, probability 0, space 0, times 0 [ 254.851132][T11502] CPU: 0 UID: 0 PID: 11502 Comm: syz.2.1731 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 254.851153][T11502] Tainted: [W]=WARN [ 254.851157][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.851165][T11502] Call Trace: [ 254.851170][T11502] [ 254.851176][T11502] __dump_stack+0x1d/0x30 [ 254.851239][T11502] dump_stack_lvl+0x95/0xd0 [ 254.851251][T11502] dump_stack+0x15/0x1b [ 254.851262][T11502] should_fail_ex+0x25e/0x270 [ 254.851278][T11502] ? snd_seq_fifo_new+0x31/0x110 [ 254.851326][T11502] should_failslab+0x8c/0xb0 [ 254.851339][T11502] __kmalloc_cache_noprof+0x7b/0x3d0 [ 254.851352][T11502] ? snd_seq_fifo_new+0x31/0x110 [ 254.851364][T11502] snd_seq_fifo_new+0x31/0x110 [ 254.851403][T11502] snd_seq_open+0x163/0x320 [ 254.851420][T11502] ? __pfx_snd_seq_open+0x10/0x10 [ 254.851458][T11502] snd_open+0x23b/0x290 [ 254.851484][T11502] chrdev_open+0x2eb/0x3a0 [ 254.851497][T11502] do_dentry_open+0x49f/0xa60 [ 254.851512][T11502] ? __pfx_chrdev_open+0x10/0x10 [ 254.851560][T11502] vfs_open+0x37/0x1e0 [ 254.851574][T11502] path_openat+0x1b39/0x2000 [ 254.851653][T11502] do_file_open+0x16c/0x290 [ 254.851675][T11502] do_sys_openat2+0xa0/0x130 [ 254.851691][T11502] __x64_sys_openat+0xf2/0x120 [ 254.851738][T11502] x64_sys_call+0x1e39/0x3020 [ 254.851752][T11502] do_syscall_64+0x136/0x3c0 [ 254.851770][T11502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.851783][T11502] RIP: 0033:0x7f7d82d2ce59 [ 254.851831][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.851916][T11502] RSP: 002b:00007f7d81787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.851928][T11502] RAX: ffffffffffffffda RBX: 00007f7d82fa5fa0 RCX: 00007f7d82d2ce59 [ 254.851936][T11502] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 254.851944][T11502] RBP: 00007f7d81787090 R08: 0000000000000000 R09: 0000000000000000 [ 254.851952][T11502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.851959][T11502] R13: 00007f7d82fa6038 R14: 00007f7d82fa5fa0 R15: 00007ffd87f23828 [ 254.852026][T11502] [ 255.085729][ T28] audit: type=1326 audit(1782478409.096:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.1732" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d82d2ce59 code=0x7ffc0000 [ 255.117435][T11506] loop2: detected capacity change from 0 to 128 [ 255.136652][T11506] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.148274][T11508] loop8: detected capacity change from 0 to 8192 [ 255.154182][ T28] audit: type=1326 audit(1782478409.096:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.1732" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d82d2ce59 code=0x7ffc0000 [ 255.163813][T11506] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 255.180932][T11508] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.181276][ T28] audit: type=1326 audit(1782478409.126:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.1732" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7d82d2ce59 code=0x7ffc0000 [ 255.181306][ T28] audit: type=1326 audit(1782478409.126:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11503 comm="syz.2.1732" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d82d2ce59 code=0x7ffc0000 [ 255.468643][T11516] random: crng reseeded on system resumption [ 255.483795][T11516] loop8: detected capacity change from 0 to 256 [ 255.559089][T11524] loop4: detected capacity change from 0 to 512 [ 255.567889][T11524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 255.578561][T11524] EXT4-fs (loop4): 1 truncate cleaned up [ 255.584801][T11524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.775887][T11530] loop8: detected capacity change from 0 to 1764 [ 255.785778][T11530] iso9660: Bad value for 'sbsector' [ 256.781457][T11446] vhci_hcd: connection reset by peer [ 256.796077][ T77] vhci_hcd vhci_hcd.7: stop threads [ 256.804396][ T77] vhci_hcd vhci_hcd.7: release socket [ 256.817719][ T77] vhci_hcd vhci_hcd.7: disconnect device [ 256.851581][ T8686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.890440][T11541] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 256.927644][T11541] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.956249][T11541] ext2 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.033639][ T8686] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.047823][T11553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1745'. [ 257.315121][T11552] random: crng reseeded on system resumption [ 257.353706][T11564] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1754'. [ 257.419787][T11569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 257.428545][T11569] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 257.435437][T11572] 9p: Bad value for 'wfdno' [ 257.459929][T11575] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 257.478013][T11569] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 257.486082][T11569] EXT4-fs (loop7): orphan cleanup on readonly fs [ 257.492511][T11569] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.1756: Freeing blocks not in datazone - block = 0, count = 4096 [ 257.509808][T11569] loop7: lost filesystem error report for type 5 error -117 [ 257.510456][T11569] EXT4-fs (loop7): 1 orphan inode deleted [ 257.519565][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 257.519598][ C0] EXT4-fs (loop7): initial error at time 1782478411: ext4_free_blocks:6718 [ 257.519629][ C0] EXT4-fs (loop7): last error at time 1782478411: ext4_free_blocks:6718 [ 257.549635][T11569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.635659][T11580] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1757: invalid indirect mapped block 256 (level 2) [ 257.648988][T11580] fserror_report: 1 callbacks suppressed [ 257.649017][T11580] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 257.654921][T11580] EXT4-fs (loop8): 2 truncates cleaned up [ 257.669966][T11580] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.837771][T11585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.855155][T11585] EXT4-fs (loop2): 1 truncate cleaned up [ 257.871907][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.881420][T11585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.052434][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.096285][T11589] set_capacity_and_notify: 6 callbacks suppressed [ 258.096308][T11589] loop7: detected capacity change from 0 to 512 [ 258.114547][T11589] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 258.139042][T11589] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.1763: bad orphan inode 131083 [ 258.149434][T11589] loop7: lost filesystem error report for type 5 error -117 [ 258.186859][T11589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.235849][T11590] loop4: detected capacity change from 0 to 4096 [ 258.244033][T11590] ext4: Unknown parameter 'fsname' [ 258.254967][T11590] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 258.254967][T11590] program syz.4.1762 not setting count and/or reply_len properly [ 258.300308][ T7627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.359284][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.485805][T11592] random: crng reseeded on system resumption [ 258.562671][T11592] loop2: detected capacity change from 0 to 256 [ 258.832795][T11622] FAULT_INJECTION: forcing a failure. [ 258.832795][T11622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.889728][T11622] CPU: 0 UID: 0 PID: 11622 Comm: syz.4.1773 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 258.889763][T11622] Tainted: [W]=WARN [ 258.889771][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.889946][T11622] Call Trace: [ 258.889952][T11622] [ 258.890036][T11622] __dump_stack+0x1d/0x30 [ 258.890057][T11622] dump_stack_lvl+0x95/0xd0 [ 258.890074][T11622] dump_stack+0x15/0x1b [ 258.890090][T11622] should_fail_ex+0x25e/0x270 [ 258.890111][T11622] should_fail+0xb/0x20 [ 258.890208][T11622] should_fail_usercopy+0x1a/0x20 [ 258.890276][T11622] _copy_from_user+0x1c/0xb0 [ 258.890293][T11622] kstrtouint_from_user+0x69/0xf0 [ 258.890490][T11622] ? 0xffffffff81000000 [ 258.890506][T11622] ? avc_policy_seqno+0x15/0x30 [ 258.890524][T11622] proc_fail_nth_write+0x50/0x160 [ 258.890542][T11622] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 258.890627][T11622] vfs_write+0x252/0x990 [ 258.890647][T11622] ? __fget_files+0x184/0x1c0 [ 258.890670][T11622] ? mutex_lock+0x57/0x90 [ 258.890796][T11622] ksys_write+0xdc/0x1a0 [ 258.890813][T11622] __x64_sys_write+0x40/0x50 [ 258.890828][T11622] x64_sys_call+0x27e1/0x3020 [ 258.890847][T11622] do_syscall_64+0x136/0x3c0 [ 258.890874][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.890977][T11622] RIP: 0033:0x7fdeb9c8d68e [ 258.890991][T11622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.891006][T11622] RSP: 002b:00007fdeb8726fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.891027][T11622] RAX: ffffffffffffffda RBX: 00007fdeb87276c0 RCX: 00007fdeb9c8d68e [ 258.891043][T11622] RDX: 0000000000000001 RSI: 00007fdeb87270a0 RDI: 0000000000000004 [ 258.891058][T11622] RBP: 00007fdeb8727090 R08: 0000000000000000 R09: 0000000000000000 [ 258.891126][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.891141][T11622] R13: 00007fdeb9f46038 R14: 00007fdeb9f45fa0 R15: 00007ffd58367828 [ 258.891168][T11622] [ 259.245716][ T3376] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 259.573658][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 259.573673][ T28] audit: type=1400 audit(1782478413.466:3341): avc: denied { sqpoll } for pid=11629 comm="syz.5.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 259.847964][T11640] random: crng reseeded on system resumption [ 259.863279][T11640] loop2: detected capacity change from 0 to 256 [ 260.104585][T11657] syzkaller0: entered promiscuous mode [ 260.110081][T11657] syzkaller0: entered allmulticast mode [ 260.144597][ T28] audit: type=1400 audit(1782478414.136:3342): avc: denied { ioctl } for pid=11659 comm="syz.7.1784" path="socket:[32023]" dev="sockfs" ino=32023 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 260.357325][T11666] loop4: detected capacity change from 0 to 4096 [ 260.364010][T11666] ext4: Unknown parameter 'fsname' [ 260.515666][T11666] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 260.515666][T11666] program syz.4.1783 not setting count and/or reply_len properly [ 260.574426][T11668] loop2: detected capacity change from 0 to 164 [ 260.586724][T11670] loop8: detected capacity change from 0 to 1024 [ 260.603915][T11668] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 260.632602][T11670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=11670 comm=syz.8.1788 [ 260.792674][T11674] 9p: Bad value for 'rfdno' [ 260.890357][T11677] xt_hashlimit: max too large, truncated to 1048576 [ 261.082701][T11676] loop7: detected capacity change from 0 to 8192 [ 261.488175][T11690] syz.7.1790 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 261.566793][ T28] audit: type=1326 audit(1782478415.576:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec54ce59 code=0x7ffc0000 [ 261.592660][ T28] audit: type=1326 audit(1782478415.576:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec54ce59 code=0x7ffc0000 [ 261.618349][ T28] audit: type=1326 audit(1782478415.576:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec54ce59 code=0x7ffc0000 [ 261.620832][T11682] random: crng reseeded on system resumption [ 261.675257][T11682] loop4: detected capacity change from 0 to 256 [ 261.708414][ T28] audit: type=1326 audit(1782478415.576:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec54ce59 code=0x7ffc0000 [ 261.779488][ T28] audit: type=1326 audit(1782478415.576:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ec54ce59 code=0x7ffc0000 [ 261.821620][T11706] loop5: detected capacity change from 0 to 1024 [ 261.832940][ T28] audit: type=1326 audit(1782478415.576:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f41ec50d68e code=0x7ffc0000 [ 261.915624][ T28] audit: type=1326 audit(1782478415.576:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f41ec54e157 code=0x7ffc0000 [ 261.949547][ T28] audit: type=1326 audit(1782478415.576:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11695 comm="syz.5.1795" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41ec54ce59 code=0x7ffc0000 [ 262.031909][T11725] FAULT_INJECTION: forcing a failure. [ 262.031909][T11725] name failslab, interval 1, probability 0, space 0, times 0 [ 262.060766][T11725] CPU: 0 UID: 0 PID: 11725 Comm: syz.5.1804 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 262.060800][T11725] Tainted: [W]=WARN [ 262.060881][T11725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.060892][T11725] Call Trace: [ 262.060972][T11725] [ 262.060981][T11725] __dump_stack+0x1d/0x30 [ 262.061012][T11725] dump_stack_lvl+0x95/0xd0 [ 262.061101][T11725] dump_stack+0x15/0x1b [ 262.061122][T11725] should_fail_ex+0x25e/0x270 [ 262.061228][T11725] ? sctp_datamsg_from_user+0x54/0x940 [ 262.061253][T11725] should_failslab+0x8c/0xb0 [ 262.061272][T11725] __kmalloc_cache_noprof+0x7b/0x3d0 [ 262.061292][T11725] ? sctp_datamsg_from_user+0x54/0x940 [ 262.061364][T11725] sctp_datamsg_from_user+0x54/0x940 [ 262.061388][T11725] ? __sk_mem_raise_allocated+0x1cc/0x960 [ 262.061496][T11725] ? __sk_mem_schedule+0x80/0xc0 [ 262.061524][T11725] sctp_sendmsg_to_asoc+0xa04/0xed0 [ 262.061554][T11725] ? sctp_sendmsg_check_sflags+0x142/0x1e0 [ 262.061626][T11725] sctp_sendmsg+0x1350/0x1d00 [ 262.061709][T11725] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 262.061794][T11725] ? __pfx_sctp_sendmsg+0x10/0x10 [ 262.061885][T11725] ? __pfx_inet_sendmsg+0x10/0x10 [ 262.061907][T11725] inet_sendmsg+0xc5/0xd0 [ 262.061959][T11725] __sys_sendto+0x3be/0x470 [ 262.062064][T11725] __x64_sys_sendto+0x76/0x90 [ 262.062084][T11725] x64_sys_call+0x2d35/0x3020 [ 262.062165][T11725] do_syscall_64+0x136/0x3c0 [ 262.062195][T11725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.062215][T11725] RIP: 0033:0x7f41ec54ce59 [ 262.062229][T11725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.062244][T11725] RSP: 002b:00007f41eaf7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.062275][T11725] RAX: ffffffffffffffda RBX: 00007f41ec7c6090 RCX: 00007f41ec54ce59 [ 262.062291][T11725] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 262.062306][T11725] RBP: 00007f41eaf7e090 R08: 0000200000000380 R09: 0000000000000010 [ 262.062321][T11725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.062358][T11725] R13: 00007f41ec7c6128 R14: 00007f41ec7c6090 R15: 00007ffcaed7ab38 [ 262.062376][T11725] [ 262.347136][T11728] EXT4-fs: Ignoring removed bh option [ 262.401265][T11728] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 262.405427][T11726] random: crng reseeded on system resumption [ 262.430673][T11728] EXT4-fs (loop2): 1 truncate cleaned up [ 262.436782][T11728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.489207][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.537178][T11741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 262.565631][T11741] System zones: 1-3, 19-19, 35-36 [ 262.571420][T11741] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 262.592509][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1812'. [ 262.602214][T11741] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 262.665101][T11745] EXT4-fs: Ignoring removed orlov option [ 262.670872][T11745] EXT4-fs: inline encryption not supported [ 262.676760][T11745] ext4: Unknown parameter 'fsname' [ 262.712144][ T8732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.740651][T11748] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 262.749475][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 262.818437][T11745] batman_adv: batadv0: Adding interface: dummy0 [ 262.824714][T11745] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.849913][T11745] batman_adv: batadv0: Interface activated: dummy0 [ 262.861507][T11745] net_ratelimit: 12 callbacks suppressed [ 262.861521][T11745] batadv0: mtu less than device minimum [ 262.873291][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.884266][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.899600][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.907074][T11762] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1820'. [ 262.913258][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.930166][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.940956][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.951998][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.957939][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1820'. [ 262.962776][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 262.982047][T11745] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 263.038368][T11761] vlan2: left allmulticast mode [ 263.046561][T11761] bond1: left allmulticast mode [ 263.053087][T11761] geneve2: left allmulticast mode [ 263.068333][ T77] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.078621][ T77] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.099587][ T77] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.126740][ T77] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.151364][T11776] FAULT_INJECTION: forcing a failure. [ 263.151364][T11776] name failslab, interval 1, probability 0, space 0, times 0 [ 263.165205][T11776] CPU: 1 UID: 0 PID: 11776 Comm: syz.5.1825 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 263.165239][T11776] Tainted: [W]=WARN [ 263.165250][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.165264][T11776] Call Trace: [ 263.165270][T11776] [ 263.165278][T11776] __dump_stack+0x1d/0x30 [ 263.165299][T11776] dump_stack_lvl+0x95/0xd0 [ 263.165317][T11776] dump_stack+0x15/0x1b [ 263.165394][T11776] should_fail_ex+0x25e/0x270 [ 263.165420][T11776] should_failslab+0x8c/0xb0 [ 263.165442][T11776] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 263.165464][T11776] ? alloc_empty_file+0x70/0x1e0 [ 263.165520][T11776] ? alloc_empty_file+0x70/0x1e0 [ 263.165542][T11776] alloc_empty_file+0x70/0x1e0 [ 263.165566][T11776] path_openat+0x54/0x2000 [ 263.165600][T11776] ? folio_mark_accessed+0x12e/0x3a0 [ 263.165708][T11776] ? folio_add_lru+0x178/0x250 [ 263.165728][T11776] ? folio_add_lru_vma+0x49/0x70 [ 263.165747][T11776] ? map_anon_folio_pte_nopf+0x221/0x3d0 [ 263.165787][T11776] ? __css_rstat_updated+0xbb/0x280 [ 263.165849][T11776] do_file_open+0x16c/0x290 [ 263.165885][T11776] do_sys_openat2+0xa0/0x130 [ 263.165985][T11776] __x64_sys_openat+0xf2/0x120 [ 263.166025][T11776] x64_sys_call+0x1e39/0x3020 [ 263.166045][T11776] do_syscall_64+0x136/0x3c0 [ 263.166071][T11776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.166143][T11776] RIP: 0033:0x7f41ec50d68e [ 263.166205][T11776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.166221][T11776] RSP: 002b:00007f41eaf9cea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.166239][T11776] RAX: ffffffffffffffda RBX: 00007f41eaf9f6c0 RCX: 00007f41ec50d68e [ 263.166251][T11776] RDX: 0000000000000002 RSI: 00007f41ec5e220a RDI: ffffffffffffff9c [ 263.166263][T11776] RBP: 00007f41eaf9f090 R08: 0000000000000000 R09: 0000000000000000 [ 263.166324][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003f [ 263.166336][T11776] R13: 00002000000000c0 R14: 0000000000000005 R15: 00007ffcaed7ab38 [ 263.166352][T11776] [ 263.387483][T11769] random: crng reseeded on system resumption [ 263.439295][T11772] set_capacity_and_notify: 5 callbacks suppressed [ 263.439314][T11772] loop7: detected capacity change from 0 to 256 [ 263.512306][T11780] loop2: detected capacity change from 0 to 512 [ 263.519156][T11780] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.547894][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.558132][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.566841][T11780] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #17: comm syz.2.1827: corrupted in-inode xattr: e_name out of bounds [ 263.580876][T11780] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 263.581227][T11780] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1827: couldn't read orphan inode 17 (err -117) [ 263.595698][T11792] loop7: detected capacity change from 0 to 128 [ 263.596049][T11792] EXT4-fs: Ignoring removed nobh option [ 263.602979][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 263.603017][ C0] EXT4-fs (loop2): initial error at time 1782478417: ext4_iget_extra_inode:5180: inode 17 [ 263.603109][ C0] EXT4-fs (loop2): last error at time 1782478417: ext4_iget_extra_inode:5180: inode 17 [ 263.668864][T11780] loop2: lost filesystem error report for type 5 error -117 [ 263.689635][T11780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.721898][T11792] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.734390][T11792] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.746135][T11792] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1830'. [ 263.755148][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1830'. [ 263.764092][T11792] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1830'. [ 263.773057][T11792] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1830'. [ 263.841748][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.118715][T11808] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1835'. [ 264.519660][T11815] loop2: detected capacity change from 0 to 512 [ 264.548050][T11817] loop4: detected capacity change from 0 to 256 [ 264.554531][T11815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 264.617278][T11817] FAT-fs (loop4): Directory bread(block 64) failed [ 264.641490][T11817] FAT-fs (loop4): Directory bread(block 65) failed [ 264.652004][T11819] loop5: detected capacity change from 0 to 512 [ 264.659819][T11817] FAT-fs (loop4): Directory bread(block 66) failed [ 264.680813][T11819] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 264.701676][T11817] FAT-fs (loop4): Directory bread(block 67) failed [ 264.719387][T11815] EXT4-fs (loop2): 1 truncate cleaned up [ 264.729079][T11815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.744958][T11817] FAT-fs (loop4): Directory bread(block 68) failed [ 264.752237][T11819] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1839: invalid indirect mapped block 4294967295 (level 0) [ 264.769047][T11817] FAT-fs (loop4): Directory bread(block 69) failed [ 264.786808][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 264.786822][ T28] audit: type=1400 audit(1782478418.796:3368): avc: denied { write } for pid=11814 comm="syz.2.1837" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.818425][T11817] FAT-fs (loop4): Directory bread(block 70) failed [ 264.831059][T11819] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 264.831207][T11819] EXT4-fs (loop5): Remounting filesystem read-only [ 264.840395][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 264.840411][ C1] EXT4-fs (loop5): initial error at time 1782478418: ext4_free_branches:1023: inode 16 [ 264.840449][ C1] EXT4-fs (loop5): last error at time 1782478418: ext4_free_branches:1023: inode 16 [ 264.894564][T11817] FAT-fs (loop4): Directory bread(block 71) failed [ 264.927971][T11817] FAT-fs (loop4): Directory bread(block 72) failed [ 264.937341][ T28] audit: type=1400 audit(1782478418.846:3369): avc: denied { write } for pid=11814 comm="syz.2.1837" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.972082][T11817] FAT-fs (loop4): Directory bread(block 73) failed [ 265.019789][ T28] audit: type=1400 audit(1782478418.846:3370): avc: denied { write } for pid=11814 comm="syz.2.1837" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.068913][T11822] syz.4.1838: attempt to access beyond end of device [ 265.068913][T11822] loop4: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 265.086601][T11819] EXT4-fs (loop5): 1 orphan inode deleted [ 265.107752][T11819] EXT4-fs (loop5): 1 truncate cleaned up [ 265.118262][T11819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.204711][T11822] syz.4.1838: attempt to access beyond end of device [ 265.204711][T11822] loop4: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 265.305652][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.327737][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.338347][T11822] syz.4.1838: attempt to access beyond end of device [ 265.338347][T11822] loop4: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 265.391927][T11822] syz.4.1838: attempt to access beyond end of device [ 265.391927][T11822] loop4: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 265.432078][T11822] syz.4.1838: attempt to access beyond end of device [ 265.432078][T11822] loop4: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 265.445518][T11822] syz.4.1838: attempt to access beyond end of device [ 265.445518][T11822] loop4: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 265.458872][T11822] syz.4.1838: attempt to access beyond end of device [ 265.458872][T11822] loop4: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 265.472215][T11822] syz.4.1838: attempt to access beyond end of device [ 265.472215][T11822] loop4: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 265.485663][T11822] syz.4.1838: attempt to access beyond end of device [ 265.485663][T11822] loop4: rw=1, sector=2408, nr_sectors = 32 limit=256 [ 265.499015][T11822] syz.4.1838: attempt to access beyond end of device [ 265.499015][T11822] loop4: rw=1, sector=2472, nr_sectors = 32 limit=256 [ 265.630837][T11830] loop4: detected capacity change from 0 to 1024 [ 265.649726][ T9913] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.774913][T11839] loop4: detected capacity change from 0 to 512 [ 265.891660][T11832] random: crng reseeded on system resumption [ 265.899277][T11839] EXT4-fs: Ignoring removed oldalloc option [ 265.908998][T11835] loop5: detected capacity change from 0 to 256 [ 265.917070][T11839] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1846: corrupted in-inode xattr: invalid ea_ino [ 265.932912][T11839] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 265.942338][T11839] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1846: couldn't read orphan inode 15 (err -117) [ 265.951511][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 265.951533][ C0] EXT4-fs (loop4): initial error at time 1782478419: ext4_iget_extra_inode:5180: inode 15 [ 265.951565][ C0] EXT4-fs (loop4): last error at time 1782478419: ext4_iget_extra_inode:5180: inode 15 [ 266.005391][T11839] loop4: lost filesystem error report for type 5 error -117 [ 266.006966][T11839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.097381][T11839] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1846: invalid indirect mapped block 234881024 (level 0) [ 266.112834][ T28] audit: type=1400 audit(1782478420.106:3371): avc: denied { write } for pid=11838 comm="syz.4.1846" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.179191][T11845] loop5: detected capacity change from 0 to 512 [ 266.190941][T11845] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 266.216311][T11845] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 266.229641][T11845] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 266.230105][ T28] audit: type=1400 audit(1782478420.236:3372): avc: denied { mount } for pid=11844 comm="syz.5.1847" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 266.264751][T11845] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 266.272901][T11845] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 266.300059][ T28] audit: type=1400 audit(1782478420.306:3373): avc: denied { unmount } for pid=3818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 266.323957][ T8686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.369736][T11847] syzkaller0: entered promiscuous mode [ 266.377523][T11847] syzkaller0: entered allmulticast mode [ 266.461388][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1853'. [ 266.510027][T11860] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 266.520980][T11859] EXT4-fs: Ignoring removed nobh option [ 266.569677][T11859] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.595903][T11859] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 266.638390][T11860] EXT4-fs (loop7): 1 truncate cleaned up [ 266.644456][T11860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.718108][T11870] 9pnet_fd: Insufficient options for proto=fd [ 266.968112][T11868] random: crng reseeded on system resumption [ 267.042690][T11855] syz.7.1852 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 267.056855][T11855] CPU: 1 UID: 0 PID: 11855 Comm: syz.7.1852 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 267.056883][T11855] Tainted: [W]=WARN [ 267.056890][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.056904][T11855] Call Trace: [ 267.056913][T11855] [ 267.056922][T11855] __dump_stack+0x1d/0x30 [ 267.057024][T11855] dump_stack_lvl+0x95/0xd0 [ 267.057053][T11855] dump_stack+0x15/0x1b [ 267.057074][T11855] dump_header+0x80/0x240 [ 267.057094][T11855] oom_kill_process+0x295/0x350 [ 267.057119][T11855] out_of_memory+0x981/0xbc0 [ 267.057251][T11855] try_charge_memcg+0x621/0xa00 [ 267.057285][T11855] __memcg_kmem_charge_page+0x199/0x3a0 [ 267.057315][T11855] __alloc_frozen_pages_noprof+0x18a/0x350 [ 267.057419][T11855] alloc_pages_mpol+0xa9/0x1d0 [ 267.057444][T11855] alloc_pages_noprof+0x8f/0x140 [ 267.057468][T11855] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 267.057598][T11855] __kvmalloc_node_noprof+0x3a0/0x590 [ 267.057625][T11855] ? futex_hash_allocate+0x192/0x920 [ 267.057647][T11855] ? futex_hash_allocate+0x192/0x920 [ 267.057673][T11855] ? futex_hash_allocate+0x192/0x920 [ 267.057772][T11855] futex_hash_allocate+0x192/0x920 [ 267.057793][T11855] ? cap_task_prctl+0x13f/0x6b0 [ 267.057888][T11855] futex_hash_prctl+0xd8/0xf0 [ 267.057906][T11855] __se_sys_prctl+0x4f4/0x13b0 [ 267.057933][T11855] __x64_sys_prctl+0x67/0x80 [ 267.057993][T11855] x64_sys_call+0x2533/0x3020 [ 267.058017][T11855] do_syscall_64+0x136/0x3c0 [ 267.058146][T11855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.058232][T11855] RIP: 0033:0x7f9b523ace59 [ 267.058250][T11855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.058266][T11855] RSP: 002b:00007f9b50e07028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 267.058355][T11855] RAX: ffffffffffffffda RBX: 00007f9b52625fa0 RCX: 00007f9b523ace59 [ 267.058367][T11855] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 267.058379][T11855] RBP: 00007f9b52442e6f R08: 0000000000000000 R09: 0000000000000000 [ 267.058391][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.058403][T11855] R13: 00007f9b52626038 R14: 00007f9b52625fa0 R15: 00007ffe249216a8 [ 267.058434][T11855] [ 267.058443][T11855] memory: usage 307200kB, limit 307200kB, failcnt 238 [ 267.166608][T11851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.194976][T11855] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 267.345357][T11855] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 267.363584][T11855] Memory cgroup stats for /syz7: [ 267.363931][T11855] cache 4096 [ 267.379663][T11851] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.394938][T11855] rss 0 [ 267.394951][T11855] shmem 0 [ 267.395035][T11855] mapped_file 0 [ 267.395044][T11855] dirty 0 [ 267.395052][T11855] writeback 0 [ 267.395061][T11855] workingset_refault_anon 130 [ 267.395104][T11855] workingset_refault_file 0 [ 267.395113][T11855] swap 454656 [ 267.395121][T11855] swapcached 3371008 [ 267.395138][T11855] pgpgin 128956 [ 267.395147][T11855] pgpgout 128954 [ 267.395156][T11855] pgfault 131777 [ 267.395164][T11855] pgmajfault 88 [ 267.395202][T11855] inactive_anon 0 [ 267.395246][T11855] active_anon 0 [ 267.395255][T11855] inactive_file 0 [ 267.395264][T11855] active_file 4096 [ 267.395273][T11855] unevictable 0 [ 267.395280][T11855] hierarchical_memory_limit 314572800 [ 267.395288][T11855] hierarchical_memsw_limit 9223372036854771712 [ 267.395299][T11855] total_cache 4096 [ 267.395306][T11855] total_rss 0 [ 267.395319][T11855] total_shmem 0 [ 267.395400][T11855] total_mapped_file 0 [ 267.395409][T11855] total_dirty 0 [ 267.395417][T11855] total_writeback 0 [ 267.395426][T11855] total_workingset_refault_anon 130 [ 267.395516][T11855] total_workingset_refault_file 0 [ 267.395525][T11855] total_swap 454656 [ 267.395534][T11855] total_swapcached 3371008 [ 267.395542][T11855] total_pgpgin 128956 [ 267.395551][T11855] total_pgpgout 128954 [ 267.395560][T11855] total_pgfault 131777 [ 267.395569][T11855] total_pgmajfault 88 [ 267.395577][T11855] total_inactive_anon 0 [ 267.395607][T11855] total_active_anon 0 [ 267.395617][T11855] total_inactive_file 0 [ 267.395626][T11855] total_active_file 4096 [ 267.395636][T11855] total_unevictable 0 [ 267.395645][T11855] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1852,pid=11854,uid=0 [ 267.395855][T11855] Memory cgroup out of memory: Killed process 11854 (syz.7.1852) total-vm:96216kB, anon-rss:1232kB, file-rss:22096kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 268.238247][ T7627] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.249496][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.385235][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.439754][T11899] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 268.471226][T11903] set_capacity_and_notify: 6 callbacks suppressed [ 268.471251][T11903] loop2: detected capacity change from 0 to 1024 [ 268.490515][T11899] EXT4-fs (loop7): 1 truncate cleaned up [ 268.501582][T11899] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.555106][T11906] 9pnet_fd: Insufficient options for proto=fd [ 268.572874][ T28] audit: type=1400 audit(1782478422.576:3374): avc: denied { write } for pid=11898 comm="syz.7.1865" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.598215][ T28] audit: type=1400 audit(1782478422.606:3375): avc: denied { write } for pid=11898 comm="syz.7.1865" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.708240][T11916] loop5: detected capacity change from 0 to 128 [ 268.737342][T11916] EXT4-fs: Ignoring removed nobh option [ 268.757226][T11916] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.772506][T11916] ext4 filesystem being mounted at /386/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 268.858067][T11916] __nla_validate_parse: 4 callbacks suppressed [ 268.858083][T11916] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1873'. [ 268.873184][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1873'. [ 268.882137][T11916] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1873'. [ 268.891063][T11916] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1873'. [ 268.957597][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.976534][T11918] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 268.999051][T11918] team0: Device wg2 is of different type [ 269.035148][T11923] loop7: detected capacity change from 0 to 128 [ 269.112504][T11927] loop7: detected capacity change from 0 to 512 [ 269.182476][T11928] loop2: detected capacity change from 0 to 8192 [ 269.199356][T11931] loop8: detected capacity change from 0 to 1024 [ 269.254171][T11928] loop2: detected capacity change from 0 to 8192 [ 269.308066][ T3818] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.351610][T11941] 9pnet_fd: Insufficient options for proto=fd [ 269.387586][T11928] loop2: detected capacity change from 0 to 8192 [ 269.450889][T11948] loop5: detected capacity change from 0 to 512 [ 269.462680][T11950] loop8: detected capacity change from 0 to 256 [ 269.495384][T11948] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.528368][T11950] vfat: Unknown parameter 'check.relaxed' [ 269.582899][T11948] EXT4-fs (loop5): 1 truncate cleaned up [ 269.615046][T11948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.667514][ T28] audit: type=1400 audit(1782478423.676:3376): avc: denied { write } for pid=11947 comm="syz.5.1885" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.690647][ T28] audit: type=1400 audit(1782478423.676:3377): avc: denied { write } for pid=11947 comm="syz.5.1885" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.786024][T11946] support for the xor transformation has been removed. [ 269.999675][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.068754][T11965] EXT4-fs: Ignoring removed nobh option [ 270.078409][T11965] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.094572][T11965] ext4 filesystem being mounted at /389/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 270.191685][T11965] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1891'. [ 270.200662][T11965] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1891'. [ 270.209677][T11965] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1891'. [ 270.218614][T11965] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1891'. [ 270.251612][ T28] audit: type=1400 audit(1782478424.246:3378): avc: denied { accept } for pid=11967 comm="syz.7.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.327882][T11971] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1894'. [ 270.430810][ T28] audit: type=1400 audit(1782478424.416:3379): avc: denied { egress } for pid=39 comm="kworker/u8:2" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 270.469331][T11974] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 270.480635][ T28] audit: type=1400 audit(1782478424.416:3380): avc: denied { sendto } for pid=39 comm="kworker/u8:2" saddr=fe80::1b daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 270.586655][ T28] audit: type=1400 audit(1782478424.466:3381): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.23 dest=58060 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 270.643056][T11977] gtp0: entered allmulticast mode [ 270.807054][T11982] xt_hashlimit: max too large, truncated to 1048576 [ 271.900536][ T3818] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.931861][T11988] syzkaller0: entered promiscuous mode [ 271.941197][T11988] syzkaller0: entered allmulticast mode [ 271.950959][T12001] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 272.028118][T12001] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.256991][ T28] audit: type=1400 audit(1782478426.266:3382): avc: denied { write } for pid=11999 comm="syz.4.1902" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.545563][ T8686] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.592858][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.609665][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.621771][T12022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12022 comm=syz.2.1907 [ 273.338353][T12032] EXT4-fs: Ignoring removed nobh option [ 273.401616][T12032] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.430558][T12032] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.477507][T12034] xfrm1: entered allmulticast mode [ 273.498310][ T28] audit: type=1400 audit(1782478427.486:3383): avc: denied { accept } for pid=12033 comm="syz.8.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 273.646457][ T28] audit: type=1400 audit(1782478427.646:3384): avc: denied { listen } for pid=12036 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.758121][ T28] audit: type=1400 audit(1782478427.646:3385): avc: denied { setopt } for pid=12036 comm="syz.5.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 273.818834][T12047] set_capacity_and_notify: 14 callbacks suppressed [ 273.818851][T12047] loop4: detected capacity change from 0 to 1024 [ 273.900800][T12049] loop5: detected capacity change from 0 to 4096 [ 274.067737][T12060] loop4: detected capacity change from 0 to 256 [ 274.137587][T12060] vfat: Unknown parameter 'check.relaxed' [ 274.152788][T12049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.189134][T12064] FAULT_INJECTION: forcing a failure. [ 274.189134][T12064] name failslab, interval 1, probability 0, space 0, times 0 [ 274.205348][T12064] CPU: 1 UID: 0 PID: 12064 Comm: syz.4.1921 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 274.205429][T12064] Tainted: [W]=WARN [ 274.205435][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.205447][T12064] Call Trace: [ 274.205455][T12064] [ 274.205464][T12064] __dump_stack+0x1d/0x30 [ 274.205488][T12064] dump_stack_lvl+0x95/0xd0 [ 274.205532][T12064] dump_stack+0x15/0x1b [ 274.205548][T12064] should_fail_ex+0x25e/0x270 [ 274.205571][T12064] ? rtnl_newlink+0x5c/0x1400 [ 274.205601][T12064] should_failslab+0x8c/0xb0 [ 274.205619][T12064] __kmalloc_cache_noprof+0x7b/0x3d0 [ 274.205643][T12064] ? rtnl_newlink+0x5c/0x1400 [ 274.205661][T12064] ? __pfx_rtnl_newlink+0x10/0x10 [ 274.205745][T12064] rtnl_newlink+0x5c/0x1400 [ 274.205773][T12064] ? __siphash_unaligned+0x185/0x2d0 [ 274.205811][T12064] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 274.205917][T12064] ? __rcu_read_unlock+0x4e/0x70 [ 274.205942][T12064] ? avc_has_perm_noaudit+0xa3/0x120 [ 274.205966][T12064] ? cred_has_capability+0x224/0x2a0 [ 274.205997][T12064] ? selinux_capable+0x31/0x40 [ 274.206089][T12064] ? security_capable+0x7b/0x90 [ 274.206110][T12064] ? ns_capable+0x80/0xb0 [ 274.206146][T12064] ? __pfx_rtnl_newlink+0x10/0x10 [ 274.206162][T12064] rtnetlink_rcv_msg+0x64b/0x720 [ 274.206263][T12064] netlink_rcv_skb+0x11e/0x220 [ 274.206284][T12064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 274.206314][T12064] rtnetlink_rcv+0x1c/0x30 [ 274.206399][T12064] netlink_unicast+0x5a7/0x680 [ 274.206430][T12064] netlink_sendmsg+0x5be/0x6f0 [ 274.206450][T12064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.206491][T12064] ____sys_sendmsg+0x532/0x580 [ 274.206560][T12064] ___sys_sendmsg+0x195/0x1e0 [ 274.206607][T12064] __x64_sys_sendmsg+0xd4/0x160 [ 274.206654][T12064] x64_sys_call+0x194c/0x3020 [ 274.206768][T12064] do_syscall_64+0x136/0x3c0 [ 274.206796][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.206814][T12064] RIP: 0033:0x7fdeb9ccce59 [ 274.206868][T12064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.206886][T12064] RSP: 002b:00007fdeb8727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.206908][T12064] RAX: ffffffffffffffda RBX: 00007fdeb9f45fa0 RCX: 00007fdeb9ccce59 [ 274.206921][T12064] RDX: 00000000040008c0 RSI: 0000200000000240 RDI: 0000000000000003 [ 274.206946][T12064] RBP: 00007fdeb8727090 R08: 0000000000000000 R09: 0000000000000000 [ 274.206957][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.206968][T12064] R13: 00007fdeb9f46038 R14: 00007fdeb9f45fa0 R15: 00007ffd58367828 [ 274.206985][T12064] [ 274.212433][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.281136][T12068] loop4: detected capacity change from 0 to 164 [ 274.290722][ T28] audit: type=1400 audit(1782478428.276:3386): avc: denied { create } for pid=12067 comm="syz.4.1924" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.321164][T12068] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 274.345758][ T28] audit: type=1400 audit(1782478428.276:3387): avc: denied { map } for pid=12067 comm="syz.4.1924" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=33910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 274.602902][ T8732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.699979][T12077] loop2: detected capacity change from 0 to 512 [ 274.708795][T12077] EXT4-fs: Ignoring removed oldalloc option [ 274.739572][T12077] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.1925: Parent and EA inode have the same ino 15 [ 274.755436][T12077] loop2: lost filesystem error report for type 5 error -117 [ 274.763218][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 274.776979][ C1] EXT4-fs (loop2): initial error at time 1782478428: ext4_xattr_inode_iget:437 [ 274.785951][ C1] EXT4-fs (loop2): last error at time 1782478428: ext4_xattr_inode_iget:437 [ 274.812570][T12079] xt_hashlimit: max too large, truncated to 1048576 [ 274.922363][T12083] netlink: 'syz.7.1938': attribute type 5 has an invalid length. [ 274.946271][T12077] EXT4-fs (loop2): 1 orphan inode deleted [ 275.005947][T12077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.036189][T12085] loop8: detected capacity change from 0 to 512 [ 275.056058][T12087] loop5: detected capacity change from 0 to 1024 [ 275.177220][T12085] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 275.271664][T12085] EXT4-fs (loop8): 1 truncate cleaned up [ 275.298475][T12098] syzkaller0: entered promiscuous mode [ 275.302962][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.304503][T12098] syzkaller0: entered allmulticast mode [ 275.312855][T12085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.386118][T12104] loop2: detected capacity change from 0 to 128 [ 275.392858][T12104] EXT4-fs: Ignoring removed nobh option [ 275.399540][T12098] syzkaller0: create flow: hash 2100661066 index 1 [ 275.409932][T12104] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.422274][T12104] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.498286][T12104] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1936'. [ 275.527283][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1936'. [ 275.540553][T12104] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1936'. [ 275.577253][T12104] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1936'. [ 275.807480][ T7627] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 275.828383][ T7627] CPU: 1 UID: 0 PID: 7627 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 275.828437][ T7627] Tainted: [W]=WARN [ 275.828446][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.828460][ T7627] Call Trace: [ 275.828469][ T7627] [ 275.828478][ T7627] __dump_stack+0x1d/0x30 [ 275.828503][ T7627] dump_stack_lvl+0x95/0xd0 [ 275.828599][ T7627] dump_stack+0x15/0x1b [ 275.828626][ T7627] dump_header+0x80/0x240 [ 275.828670][ T7627] oom_kill_process+0x295/0x350 [ 275.828760][ T7627] out_of_memory+0x981/0xbc0 [ 275.828839][ T7627] try_charge_memcg+0x621/0xa00 [ 275.828874][ T7627] charge_memcg+0x6d/0x120 [ 275.828959][ T7627] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 275.829003][ T7627] swap_cache_alloc_folio+0x47b/0x5e0 [ 275.829029][ T7627] swap_cluster_readahead+0x3d2/0x460 [ 275.829094][ T7627] swapin_readahead+0xd8/0x8a0 [ 275.829122][ T7627] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 275.829223][ T7627] ? hrtimer_start_range_ns+0x108/0x120 [ 275.829246][ T7627] ? __rcu_read_unlock+0x4e/0x70 [ 275.829270][ T7627] ? swap_cache_get_folio+0x1f7/0x200 [ 275.829358][ T7627] do_swap_page+0x2a2/0x1ec0 [ 275.829381][ T7627] ? __schedule+0x799/0xd10 [ 275.829398][ T7627] ? __rcu_read_lock+0x36/0x50 [ 275.829416][ T7627] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 275.829511][ T7627] handle_mm_fault+0xb3c/0x2da0 [ 275.829567][ T7627] do_user_addr_fault+0x634/0x1060 [ 275.829595][ T7627] ? trace_page_fault_user+0x1f/0xa0 [ 275.829642][ T7627] exc_page_fault+0x62/0xa0 [ 275.829662][ T7627] asm_exc_page_fault+0x26/0x30 [ 275.829683][ T7627] RIP: 0033:0x7f180a677fd7 [ 275.829701][ T7627] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 275.829720][ T7627] RSP: 002b:00007ffc298dc230 EFLAGS: 00010202 [ 275.829762][ T7627] RAX: 0000000000000000 RBX: 000055556f7c3500 RCX: 00007f180a677fd7 [ 275.829802][ T7627] RDX: 00007ffc298dc270 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.829813][ T7627] RBP: 00007ffc298dc2dc R08: 0000000000000000 R09: 0000000000000000 [ 275.829825][ T7627] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 275.829902][ T7627] R13: 00000000000927c0 R14: 000000000004339d R15: 00007ffc298dc330 [ 275.829919][ T7627] [ 275.830042][ T7627] memory: usage 307200kB, limit 307200kB, failcnt 292 [ 276.148437][T12097] syzkaller0: delete flow: hash 2100661066 index 1 [ 276.191169][ T7627] memory+swap: usage 2768kB, limit 9007199254740988kB, failcnt 0 [ 276.224661][ T7627] kmem: usage 2036kB, limit 9007199254740988kB, failcnt 0 [ 276.257594][ T7627] Memory cgroup stats for /syz8: [ 276.257967][ T7627] cache 4096 [ 276.263139][T12110] loop4: detected capacity change from 0 to 4096 [ 276.272764][T12110] ext4: Unknown parameter 'fsname' [ 276.301022][ T8732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.310477][ T7627] rss 0 [ 276.316266][ T7627] shmem 0 [ 276.317737][T12110] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 276.317737][T12110] program syz.4.1937 not setting count and/or reply_len properly [ 276.323739][ T7627] mapped_file 0 [ 276.369086][ T7627] dirty 0 [ 276.374451][T12119] loop2: detected capacity change from 0 to 512 [ 276.381835][ T7627] writeback 0 [ 276.407653][ T7627] workingset_refault_anon 907 [ 276.412985][T12119] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 276.425361][ T7627] workingset_refault_file 0 [ 276.434676][ T7627] swap 561152 [ 276.446055][ T7627] swapcached 27070464 [ 276.456456][ T7627] pgpgin 110493 [ 276.467110][ T7627] pgpgout 110491 [ 276.478395][ T7627] pgfault 125647 [ 276.489733][ T7627] pgmajfault 141 [ 276.493310][T12123] netlink: 'syz.7.1943': attribute type 1 has an invalid length. [ 276.511732][ T7627] inactive_anon 4096 [ 276.517233][ T7627] active_anon 0 [ 276.520837][ T7627] inactive_file 0 [ 276.525802][ T7627] active_file 4096 [ 276.525814][ T7627] unevictable 0 [ 276.525822][ T7627] hierarchical_memory_limit 314572800 [ 276.525831][ T7627] hierarchical_memsw_limit 9223372036854771712 [ 276.525913][ T7627] total_cache 4096 [ 276.525922][ T7627] total_rss 0 [ 276.525930][ T7627] total_shmem 0 [ 276.525938][ T7627] total_mapped_file 0 [ 276.525947][ T7627] total_dirty 0 [ 276.525954][ T7627] total_writeback 0 [ 276.526024][ T7627] total_workingset_refault_anon 907 [ 276.526034][ T7627] total_workingset_refault_file 0 [ 276.526042][ T7627] total_swap 561152 [ 276.526051][ T7627] total_swapcached 27070464 [ 276.526060][ T7627] total_pgpgin 110493 [ 276.526068][ T7627] total_pgpgout 110491 [ 276.526076][ T7627] total_pgfault 125647 [ 276.526084][ T7627] total_pgmajfault 141 [ 276.526160][ T7627] total_inactive_anon 4096 [ 276.526167][ T7627] total_active_anon 0 [ 276.526174][ T7627] total_inactive_file 0 [ 276.526181][ T7627] total_active_file 4096 [ 276.526264][ T7627] total_unevictable 0 [ 276.526274][ T7627] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1928,pid=12081,uid=0 [ 276.526370][ T7627] Memory cgroup out of memory: Killed process 12081 (syz.8.1928) total-vm:96216kB, anon-rss:1228kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 276.538105][T12123] bond1: entered promiscuous mode [ 276.538288][T12123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 276.708700][ T7627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.752652][T12129] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1941: invalid indirect mapped block 256 (level 2) [ 276.752756][T12129] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 276.753209][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 276.753225][ C1] EXT4-fs (loop2): initial error at time 1782478430: ext4_free_branches:1023: inode 11 [ 276.753249][ C1] EXT4-fs (loop2): last error at time 1782478430: ext4_free_branches:1023: inode 11 [ 276.756285][T12129] EXT4-fs (loop2): 2 truncates cleaned up [ 276.756867][T12129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.002583][T12144] EXT4-fs: Ignoring removed orlov option [ 277.041112][T12144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.076786][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 277.076802][ T28] audit: type=1400 audit(1782478431.086:3390): avc: denied { write } for pid=12138 comm="syz.5.1948" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.108891][T12139] EXT4-fs error (device loop5): ext4_empty_dir:3085: inode #12: comm syz.5.1948: Directory block failed checksum [ 277.174251][ T28] audit: type=1400 audit(1782478431.126:3391): avc: denied { write } for pid=12138 comm="syz.5.1948" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.210575][ T28] audit: type=1400 audit(1782478431.126:3392): avc: denied { write } for pid=12138 comm="syz.5.1948" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.234173][ T28] audit: type=1400 audit(1782478431.126:3393): avc: denied { rename } for pid=12138 comm="syz.5.1948" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 277.273441][T12142] random: crng reseeded on system resumption [ 277.280083][ T28] audit: type=1400 audit(1782478431.126:3394): avc: denied { rmdir } for pid=12138 comm="syz.5.1948" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 277.443572][T12150] random: crng reseeded on system resumption [ 277.699579][T12161] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1957: corrupted in-inode xattr: invalid ea_ino [ 277.727627][T12161] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 277.734595][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 277.749084][T12161] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1957: couldn't read orphan inode 15 (err -117) [ 277.750167][ C0] EXT4-fs (loop5): initial error at time 1782478431: ext4_iget_extra_inode:5180: inode 15 [ 277.750194][ C0] EXT4-fs (loop5): last error at time 1782478431: ext4_iget_extra_inode:5180 [ 277.765241][T12161] loop5: lost filesystem error report for type 5 error -117 [ 277.771886][ C0] : inode 15 [ 277.899028][T12171] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.958754][T12171] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 277.959594][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 277.988078][T12171] rock: directory entry would overflow storage [ 278.002190][T12171] rock: sig=0x4f50, size=4, remaining=3 [ 278.009977][T12175] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.031639][ T28] audit: type=1400 audit(1782478432.036:3395): avc: denied { write } for pid=12174 comm="syz.2.1962" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 278.059123][T12171] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 278.089126][ T28] audit: type=1326 audit(1782478432.076:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12178 comm="syz.8.1964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180a6bce59 code=0x7ffc0000 [ 278.118662][ T28] audit: type=1326 audit(1782478432.076:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12178 comm="syz.8.1964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180a6bce59 code=0x7ffc0000 [ 278.145777][ T28] audit: type=1326 audit(1782478432.076:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12178 comm="syz.8.1964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180a6bce59 code=0x7ffc0000 [ 278.182151][ T28] audit: type=1326 audit(1782478432.076:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12178 comm="syz.8.1964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180a6bce59 code=0x7ffc0000 [ 278.290830][T12189] FAULT_INJECTION: forcing a failure. [ 278.290830][T12189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.305816][T12189] CPU: 1 UID: 0 PID: 12189 Comm: syz.4.1966 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 278.306002][T12189] Tainted: [W]=WARN [ 278.306010][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.306022][T12189] Call Trace: [ 278.306030][T12189] [ 278.306039][T12189] __dump_stack+0x1d/0x30 [ 278.306073][T12189] dump_stack_lvl+0x95/0xd0 [ 278.306090][T12189] dump_stack+0x15/0x1b [ 278.306105][T12189] should_fail_ex+0x25e/0x270 [ 278.306201][T12189] should_fail+0xb/0x20 [ 278.306276][T12189] should_fail_usercopy+0x1a/0x20 [ 278.306351][T12189] _copy_from_user+0x1c/0xb0 [ 278.306405][T12189] ___sys_sendmsg+0xc1/0x1e0 [ 278.306432][T12189] ? terminate_walk+0x1d5/0x200 [ 278.306470][T12189] __sys_sendmmsg+0x185/0x320 [ 278.306549][T12189] __x64_sys_sendmmsg+0x57/0x70 [ 278.306573][T12189] x64_sys_call+0x27aa/0x3020 [ 278.306596][T12189] do_syscall_64+0x136/0x3c0 [ 278.306672][T12189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.306696][T12189] RIP: 0033:0x7fdeb9ccce59 [ 278.306712][T12189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.306786][T12189] RSP: 002b:00007fdeb8727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 278.306808][T12189] RAX: ffffffffffffffda RBX: 00007fdeb9f45fa0 RCX: 00007fdeb9ccce59 [ 278.306822][T12189] RDX: 0000000000000002 RSI: 0000200000001300 RDI: 0000000000000003 [ 278.306834][T12189] RBP: 00007fdeb8727090 R08: 0000000000000000 R09: 0000000000000000 [ 278.306846][T12189] R10: 000000002401c444 R11: 0000000000000246 R12: 0000000000000001 [ 278.306858][T12189] R13: 00007fdeb9f46038 R14: 00007fdeb9f45fa0 R15: 00007ffd58367828 [ 278.306916][T12189] [ 278.499986][T12186] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 278.522482][T12186] EXT4-fs (loop2): orphan cleanup on readonly fs [ 278.669439][T12186] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 278.777479][T12186] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 278.848652][T12186] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #16: comm syz.2.1965: inode has both inline data and extents flags [ 278.862033][T12186] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 278.867929][T12186] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1965: couldn't read orphan inode 16 (err -117) [ 278.888928][T12186] loop2: lost filesystem error report for type 5 error -117 [ 279.399548][T12217] set_capacity_and_notify: 11 callbacks suppressed [ 279.399658][T12217] loop4: detected capacity change from 0 to 4096 [ 279.441033][T12217] ext4: Unknown parameter 'fsname' [ 279.547068][T12217] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 279.547068][T12217] program syz.4.1974 not setting count and/or reply_len properly [ 279.581029][T12221] loop8: detected capacity change from 0 to 164 [ 279.660866][T12223] loop5: detected capacity change from 0 to 512 [ 279.671588][T12223] EXT4-fs: Ignoring removed oldalloc option [ 279.679429][T12223] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.1978: corrupted in-inode xattr: invalid ea_ino [ 279.692939][T12223] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 279.693175][T12223] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1978: couldn't read orphan inode 15 (err -117) [ 279.714421][T12223] loop5: lost filesystem error report for type 5 error -117 [ 279.716625][T12223] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1978: invalid indirect mapped block 234881024 (level 0) [ 279.885671][T12231] loop5: detected capacity change from 0 to 256 [ 279.976200][ T4730] Bluetooth: hci0: command 0x1003 tx timeout [ 279.984706][ T3526] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.206139][T12246] loop4: detected capacity change from 0 to 128 [ 281.491776][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1994'. [ 282.476156][T12285] loop2: detected capacity change from 0 to 128 [ 282.516496][T12283] FAULT_INJECTION: forcing a failure. [ 282.516496][T12283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.530928][T12283] CPU: 1 UID: 0 PID: 12283 Comm: syz.8.1999 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 282.530961][T12283] Tainted: [W]=WARN [ 282.530973][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.531059][T12283] Call Trace: [ 282.531066][T12283] [ 282.531074][T12283] __dump_stack+0x1d/0x30 [ 282.531098][T12283] dump_stack_lvl+0x95/0xd0 [ 282.531120][T12283] dump_stack+0x15/0x1b [ 282.531139][T12283] should_fail_ex+0x25e/0x270 [ 282.531199][T12283] should_fail+0xb/0x20 [ 282.531222][T12283] should_fail_usercopy+0x1a/0x20 [ 282.531249][T12283] _copy_to_user+0x20/0xa0 [ 282.531269][T12283] simple_read_from_buffer+0xb5/0x130 [ 282.531330][T12283] proc_fail_nth_read+0x10e/0x150 [ 282.531348][T12283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.531368][T12283] vfs_read+0x18e/0x7c0 [ 282.531400][T12283] ? __rcu_read_unlock+0x4e/0x70 [ 282.531470][T12283] ? __fget_files+0x184/0x1c0 [ 282.531492][T12283] ? mutex_lock+0x57/0x90 [ 282.531511][T12283] ksys_read+0xdc/0x1a0 [ 282.531530][T12283] __x64_sys_read+0x40/0x50 [ 282.531546][T12283] x64_sys_call+0x2886/0x3020 [ 282.531567][T12283] do_syscall_64+0x136/0x3c0 [ 282.531622][T12283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.531644][T12283] RIP: 0033:0x7f180a67d68e [ 282.531658][T12283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.531740][T12283] RSP: 002b:00007f1809116fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.531762][T12283] RAX: ffffffffffffffda RBX: 00007f18091176c0 RCX: 00007f180a67d68e [ 282.531776][T12283] RDX: 000000000000000f RSI: 00007f18091170a0 RDI: 0000000000000004 [ 282.531788][T12283] RBP: 00007f1809117090 R08: 0000000000000000 R09: 0000000000000000 [ 282.531799][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.531810][T12283] R13: 00007f180a936038 R14: 00007f180a935fa0 R15: 00007ffc298dbf38 [ 282.531882][T12283] [ 282.754473][T12290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2001'. [ 282.799289][T12290] loop4: detected capacity change from 0 to 512 [ 282.821389][T12290] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 282.829724][T12290] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.2001: corrupted in-inode xattr: e_value size too large [ 282.848273][T12290] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 282.864392][T12288] loop7: detected capacity change from 0 to 4096 [ 282.887456][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 282.887535][ C0] EXT4-fs (loop4): initial error at time 1782478436: ext4_iget_extra_inode:5180: inode 15 [ 282.887725][ C0] EXT4-fs (loop4): last error at time 1782478436: ext4_iget_extra_inode:5180: inode 15 [ 282.938498][T12290] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2001: couldn't read orphan inode 15 (err -117) [ 282.938659][T12290] loop4: lost filesystem error report for type 5 error -117 [ 282.971300][T12290] EXT4-fs mount: 14 callbacks suppressed [ 282.971386][T12290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.985332][T12288] ext4: Unknown parameter 'fsname' [ 282.998681][T12288] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 282.998681][T12288] program syz.7.1998 not setting count and/or reply_len properly [ 283.123146][ T8686] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 283.128479][ T28] kauditd_printk_skb: 241 callbacks suppressed [ 283.128495][ T28] audit: type=1400 audit(1782478437.126:3640): avc: denied { write } for pid=8686 comm="syz-executor" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.138926][ T8686] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 283.324880][T12311] syzkaller1: entered allmulticast mode [ 283.435193][T12302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.490045][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.530430][T12308] random: crng reseeded on system resumption [ 283.569471][T12308] loop2: detected capacity change from 0 to 256 [ 283.578006][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.611845][T12313] loop7: detected capacity change from 0 to 4096 [ 283.623918][T12313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.678685][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.700475][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.727679][T12329] FAULT_INJECTION: forcing a failure. [ 283.727679][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.742346][T12329] CPU: 1 UID: 0 PID: 12329 Comm: syz.2.2015 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 283.742375][T12329] Tainted: [W]=WARN [ 283.742383][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.742401][T12329] Call Trace: [ 283.742409][T12329] [ 283.742419][T12329] __dump_stack+0x1d/0x30 [ 283.742441][T12329] dump_stack_lvl+0x95/0xd0 [ 283.742469][T12329] dump_stack+0x15/0x1b [ 283.742519][T12329] should_fail_ex+0x25e/0x270 [ 283.742581][T12329] should_fail+0xb/0x20 [ 283.742603][T12329] should_fail_usercopy+0x1a/0x20 [ 283.742629][T12329] _copy_from_user+0x1c/0xb0 [ 283.742648][T12329] ip_tunnel_parm_from_user+0x4c/0x260 [ 283.742759][T12329] ip_tunnel_siocdevprivate+0x45/0xe0 [ 283.742787][T12329] ipip6_tunnel_siocdevprivate+0x1da/0xe20 [ 283.742865][T12329] ? __mutex_lock+0xa9d/0xf40 [ 283.742890][T12329] ? full_name_hash+0x92/0xe0 [ 283.742939][T12329] ? strcmp+0x22/0x50 [ 283.743029][T12329] dev_ifsioc+0x8f5/0xfc0 [ 283.743094][T12329] dev_ioctl+0x78c/0x960 [ 283.743117][T12329] sock_ioctl+0x58f/0x610 [ 283.743143][T12329] ? __pfx_sock_ioctl+0x10/0x10 [ 283.743213][T12329] __se_sys_ioctl+0xce/0x140 [ 283.743232][T12329] __x64_sys_ioctl+0x43/0x50 [ 283.743261][T12329] x64_sys_call+0x1563/0x3020 [ 283.743286][T12329] do_syscall_64+0x136/0x3c0 [ 283.743313][T12329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.743336][T12329] RIP: 0033:0x7f7d82d2ce59 [ 283.743354][T12329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.743380][T12329] RSP: 002b:00007f7d81787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.743401][T12329] RAX: ffffffffffffffda RBX: 00007f7d82fa5fa0 RCX: 00007f7d82d2ce59 [ 283.743417][T12329] RDX: 0000200000000340 RSI: 00000000000089f1 RDI: 0000000000000003 [ 283.743443][T12329] RBP: 00007f7d81787090 R08: 0000000000000000 R09: 0000000000000000 [ 283.743458][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.743472][T12329] R13: 00007f7d82fa6038 R14: 00007f7d82fa5fa0 R15: 00007ffd87f23828 [ 283.743493][T12329] [ 283.975503][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.143010][T12337] syzkaller0: entered promiscuous mode [ 284.148790][T12337] syzkaller0: entered allmulticast mode [ 284.230616][ T68] bridge_slave_1: left allmulticast mode [ 284.239342][ T68] bridge_slave_1: left promiscuous mode [ 284.247648][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.248943][T12335] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 10: comm syz.2.2017: lblock 0 mapped to illegal pblock 10 (length 1) [ 284.275921][T12335] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 284.276115][T12335] EXT4-fs (loop2): Remounting filesystem read-only [ 284.285297][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 284.285320][ C1] EXT4-fs (loop2): initial error at time 1782478438: ext4_map_blocks:791: inode 11: block 10 [ 284.285353][ C1] EXT4-fs (loop2): last error at time 1782478438: ext4_map_blocks:791: inode 11: block 10 [ 284.326790][T12335] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 284.339780][ T68] bridge_slave_0: left allmulticast mode [ 284.347917][ T68] bridge_slave_0: left promiscuous mode [ 284.395879][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.438533][T12335] EXT4-fs (loop2): 1 orphan inode deleted [ 284.447016][T12335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.653765][T12351] set_capacity_and_notify: 2 callbacks suppressed [ 284.653782][T12351] loop7: detected capacity change from 0 to 4096 [ 284.674298][T12351] ext4: Unknown parameter 'fsname' [ 284.681085][T12346] random: crng reseeded on system resumption [ 284.715631][T12350] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 284.715631][T12350] program syz.7.2020 not setting count and/or reply_len properly [ 284.716510][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.747167][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.758036][T12316] bridge_slave_0: entered allmulticast mode [ 284.779175][T12316] bridge_slave_0: entered promiscuous mode [ 284.788439][ T68] tipc: Left network mode [ 284.795079][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.812747][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.822522][T12316] bridge_slave_1: entered allmulticast mode [ 284.831427][T12316] bridge_slave_1: entered promiscuous mode [ 284.846635][ T68] hsr_slave_0: left promiscuous mode [ 284.862756][ T28] audit: type=1400 audit(1782478438.856:3641): avc: denied { write } for pid=12355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.889478][T12346] loop8: detected capacity change from 0 to 256 [ 284.889446][ T68] hsr_slave_1: left promiscuous mode [ 284.902083][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.902101][ T68] net_ratelimit: 10 callbacks suppressed [ 284.902114][ T68] batadv0: mtu less than device minimum [ 284.902832][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.903558][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.904080][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.904646][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.905229][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.905858][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.906438][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.907108][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.907801][ T68] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 284.922487][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.924027][ T28] audit: type=1400 audit(1782478438.936:3642): avc: denied { write } for pid=12369 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.054049][T12374] loop5: detected capacity change from 0 to 4096 [ 285.099907][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.168772][T12374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.217275][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.244320][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.253517][ T68] batman_adv: batadv0: Interface deactivated: dummy0 [ 285.256207][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.264004][ T68] batman_adv: batadv0: Removing interface: dummy0 [ 285.278729][ T68] veth1_macvtap: left promiscuous mode [ 285.287588][ T68] veth0_macvtap: left promiscuous mode [ 285.310617][ T68] veth1_vlan: left promiscuous mode [ 285.314278][T12381] loop2: detected capacity change from 0 to 164 [ 285.317512][ T68] veth0_vlan: left promiscuous mode [ 285.354738][T12381] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 285.430514][ T68] team0 (unregistering): Port device team_slave_1 removed [ 285.447857][ T68] team0 (unregistering): Port device team_slave_0 removed [ 285.502200][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 285.558053][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.568728][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.589015][T12316] team0: Port device team_slave_0 added [ 285.595745][T12385] loop5: detected capacity change from 0 to 8192 [ 285.618497][T12316] team0: Port device team_slave_1 added [ 285.685045][T12393] xt_hashlimit: max too large, truncated to 1048576 [ 285.722677][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.729740][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.755683][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.767488][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.774525][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.877747][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.905512][T12397] 9p: Could not find request transport: fd0x0000000000000003 [ 285.933026][ T28] audit: type=1400 audit(1782478439.926:3643): avc: denied { accept } for pid=12394 comm="syz.8.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.002916][T12385] loop5: p1 p2 p3 [ 286.025353][T12385] loop5: p1 size 67111168 extends beyond EOD, truncated [ 286.047863][T12316] hsr_slave_0: entered promiscuous mode [ 286.070528][T12385] loop5: p2 size 8388608 extends beyond EOD, truncated [ 286.085803][T12316] hsr_slave_1: entered promiscuous mode [ 286.091988][T12385] loop5: p3 start 4294901760 is beyond EOD, truncated [ 286.108243][T12316] debugfs: 'hsr0' already exists in 'hsr' [ 286.116567][T12316] Cannot create hsr debugfs directory [ 286.136319][T12405] loop7: detected capacity change from 0 to 512 [ 286.159564][T12405] EXT4-fs: Ignoring removed oldalloc option [ 286.228936][T12405] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.2031: corrupted in-inode xattr: invalid ea_ino [ 286.242983][ T28] audit: type=1400 audit(1782478440.236:3644): avc: denied { write } for pid=12387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.395581][ T5159] udevd[5159]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 286.413722][T12405] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 286.413961][T12405] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2031: couldn't read orphan inode 15 (err -117) [ 286.434978][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 286.435024][ C1] EXT4-fs (loop7): initial error at time 1782478440: ext4_iget_extra_inode:5180: inode 15 [ 286.435065][ C1] EXT4-fs (loop7): last error at time 1782478440: ext4_iget_extra_inode:5180: inode 15 [ 286.466245][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 286.488007][T12413] random: crng reseeded on system resumption [ 286.490423][ T28] audit: type=1400 audit(1782478440.496:3645): avc: denied { write } for pid=12420 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.536761][T12413] loop2: detected capacity change from 0 to 256 [ 286.545127][T12405] loop7: lost filesystem error report for type 5 error -117 [ 286.547861][T12405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.580523][T12405] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2031: invalid indirect mapped block 234881024 (level 0) [ 286.591243][ T28] audit: type=1400 audit(1782478440.546:3646): avc: denied { write } for pid=12404 comm="syz.7.2031" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 286.636423][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 286.692369][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.741141][T12438] program syz.2.2037 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.751609][T12437] syzkaller1: entered allmulticast mode [ 286.758493][ T28] audit: type=1400 audit(1782478440.766:3647): avc: denied { write } for pid=12426 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.785268][ T28] audit: type=1400 audit(1782478440.776:3648): avc: denied { write } for pid=12443 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.812539][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 286.833579][ T28] audit: type=1326 audit(1782478440.846:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12445 comm="syz.2.2038" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d82d2ce59 code=0x7ffc0000 [ 286.887136][T12451] loop8: detected capacity change from 0 to 128 [ 286.897312][T12446] loop2: detected capacity change from 0 to 128 [ 286.924075][T12446] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.963567][T12446] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.983074][T12459] 9p: Could not find request transport: fd0x0000000000000003 [ 287.035385][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 287.146573][ T8732] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.232026][T12489] loop2: detected capacity change from 0 to 512 [ 287.240945][T12489] EXT4-fs: Ignoring removed oldalloc option [ 287.250857][T12489] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2044: corrupted in-inode xattr: invalid ea_ino [ 287.264903][T12489] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 287.265411][T12489] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2044: couldn't read orphan inode 15 (err -117) [ 287.274594][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 287.274621][ C1] EXT4-fs (loop2): initial error at time 1782478441: ext4_iget_extra_inode:5180: inode 15 [ 287.274667][ C1] EXT4-fs (loop2): last error at time 1782478441: ext4_iget_extra_inode:5180: inode 15 [ 287.325273][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2041'. [ 287.360282][T12493] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 287.392103][T12489] loop2: lost filesystem error report for type 5 error -117 [ 287.437041][T12489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.293568][T12489] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2044: invalid indirect mapped block 234881024 (level 0) [ 288.314916][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 288.314990][ T28] audit: type=1400 audit(1782478442.306:3792): avc: denied { write } for pid=12488 comm="syz.2.2044" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.596106][T12316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.626287][T12494] xt_hashlimit: max too large, truncated to 1048576 [ 288.672863][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 288.691984][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.731746][T12316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.849673][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 288.922427][T12316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.958509][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 288.996927][T12316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.056796][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 289.131944][ T28] audit: type=1400 audit(1782478443.086:3793): avc: denied { write } for pid=12487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.161725][T12506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.211509][ T28] audit: type=1400 audit(1782478443.116:3794): avc: denied { write } for pid=12513 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.233569][ T28] audit: type=1400 audit(1782478443.216:3795): avc: denied { write } for pid=12505 comm="syz.5.2048" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.355901][T12539] 9p: Could not find request transport: fd0x0000000000000003 [ 289.394279][ T28] audit: type=1400 audit(1782478443.396:3796): avc: denied { write } for pid=12517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.421843][T12542] bond2: option ad_user_port_key: invalid value (2311) [ 289.437243][T12542] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 289.451795][T12542] bond2 (unregistering): Released all slaves [ 289.487779][ T28] audit: type=1400 audit(1782478443.496:3797): avc: denied { write } for pid=12550 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.540817][T12316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.561667][T12551] syzkaller0: entered promiscuous mode [ 289.580406][T12551] syzkaller0: entered allmulticast mode [ 289.619518][T12316] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.633768][T12565] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 289.664515][T12565] EXT4-fs (loop7): 1 truncate cleaned up [ 289.682712][T12565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.705440][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.712531][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.738028][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.745160][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.761557][ T28] audit: type=1400 audit(1782478443.766:3798): avc: denied { write } for pid=12562 comm="syz.7.2056" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.801620][ T28] audit: type=1400 audit(1782478443.766:3799): avc: denied { write } for pid=12562 comm="syz.7.2056" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.862816][ T28] audit: type=1400 audit(1782478443.866:3800): avc: denied { write } for pid=12563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.996518][ T28] audit: type=1400 audit(1782478443.946:3801): avc: denied { write } for pid=12581 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.033477][T12554] ALSA: seq fatal error: cannot create timer (-22) [ 290.107938][T12599] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2058'. [ 290.152241][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.187677][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.228883][T12608] set_capacity_and_notify: 4 callbacks suppressed [ 290.228947][T12608] loop7: detected capacity change from 0 to 164 [ 290.239759][T12610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2061'. [ 290.258522][T12608] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 290.318246][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2061'. [ 290.407844][T12316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.451448][T12617] loop5: detected capacity change from 0 to 128 [ 290.480626][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2061'. [ 290.562606][T12628] xt_hashlimit: max too large, truncated to 1048576 [ 290.843636][T12633] loop5: detected capacity change from 0 to 256 [ 291.139535][T12316] veth0_vlan: entered promiscuous mode [ 291.147045][T12648] loop7: detected capacity change from 0 to 512 [ 291.161950][T12316] veth1_vlan: entered promiscuous mode [ 291.190059][T12648] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 291.207370][T12650] loop2: detected capacity change from 0 to 512 [ 291.252522][T12650] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.265585][T12316] veth0_macvtap: entered promiscuous mode [ 291.275392][T12316] veth1_macvtap: entered promiscuous mode [ 291.290232][T12648] EXT4-fs (loop7): 1 truncate cleaned up [ 291.293390][T12316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.316492][T12648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.458275][T12650] EXT4-fs (loop2): 1 truncate cleaned up [ 291.490432][T12650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.697485][T12316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.815112][T12665] loop8: detected capacity change from 0 to 512 [ 291.864609][ T3730] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.873378][ T3730] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.882160][ T3730] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.890998][ T3730] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.903160][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.958099][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.095519][T12665] EXT4-fs (loop8): orphan cleanup on readonly fs [ 292.117835][T12685] loop3: detected capacity change from 0 to 512 [ 292.125622][T12665] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.2068: ea_inode with extended attributes [ 292.135089][T12688] loop7: detected capacity change from 0 to 128 [ 292.163644][T12685] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 292.202571][T12688] EXT4-fs: Ignoring removed nobh option [ 292.273749][T12665] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 292.274935][T12665] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2068: error while reading EA inode 11 err=-117 [ 292.284795][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 292.284835][ C1] EXT4-fs (loop8): initial error at time 1782478446: ext4_xattr_inode_iget:441: inode 11 [ 292.284904][ C1] EXT4-fs (loop8): last error at time 1782478446: ext4_xattr_inode_iget:441: inode 11 [ 292.357394][T12665] loop8: lost filesystem error report for type 5 error -117 [ 292.359049][T12665] EXT4-fs (loop8): 1 orphan inode deleted [ 292.486140][T12688] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.502437][T12665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 292.520678][T12688] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.531327][T12705] loop3: detected capacity change from 0 to 512 [ 292.550414][T12688] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2071'. [ 292.555164][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2068'. [ 292.559408][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2071'. [ 292.577177][T12688] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2071'. [ 292.586415][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2072'. [ 292.623591][T12688] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2071'. [ 292.686106][T12705] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2012: invalid indirect mapped block 256 (level 2) [ 292.725663][T12705] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 292.725936][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2073'. [ 292.735215][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 292.735262][ C0] EXT4-fs (loop3): initial error at time 1782478446: ext4_free_branches:1023: inode 11 [ 292.735325][ C0] EXT4-fs (loop3): last error at time 1782478446: ext4_free_branches:1023: inode 11 [ 292.803595][T12705] EXT4-fs (loop3): 2 truncates cleaned up [ 292.812539][T12705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.891777][ T7627] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.962060][T12733] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2073'. [ 292.962159][T12316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.025698][T12733] macvlan2: entered promiscuous mode [ 293.054429][T12738] loop2: detected capacity change from 0 to 128 [ 293.068774][T12742] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 293.076260][T12736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28176 sclass=netlink_route_socket pid=12736 comm=syz.8.2076 [ 293.303431][T12758] xt_hashlimit: max too large, truncated to 1048576 [ 293.324951][T12757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 293.337963][ T9913] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.350032][T12757] EXT4-fs (loop2): 1 truncate cleaned up [ 293.359779][T12757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.423332][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 293.423374][ T28] audit: type=1400 audit(1782478447.386:3821): avc: denied { write } for pid=12755 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.487024][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.695351][ T28] audit: type=1400 audit(1782478447.386:3822): avc: denied { write } for pid=12755 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.732236][ T28] audit: type=1400 audit(1782478447.386:3823): avc: denied { write } for pid=12755 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.775686][ T28] audit: type=1400 audit(1782478447.386:3824): avc: denied { write } for pid=12755 comm="syz.2.2078" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.846109][T12770] ext4: Unknown parameter 'fsname' [ 293.876230][T12769] syzkaller0: entered promiscuous mode [ 293.881729][T12769] syzkaller0: entered allmulticast mode [ 293.922887][T12770] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 293.922887][T12770] program syz.8.2081 not setting count and/or reply_len properly [ 293.971175][ T28] audit: type=1400 audit(1782478447.976:3825): avc: denied { write } for pid=12752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.038324][ T28] audit: type=1400 audit(1782478448.036:3826): avc: denied { write } for pid=12783 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.084690][T12787] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 294.204043][T12798] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2085: invalid indirect mapped block 256 (level 2) [ 294.217366][T12798] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 294.220879][ T28] audit: type=1400 audit(1782478448.226:3827): avc: denied { write } for pid=12788 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.262873][T12798] EXT4-fs (loop5): 2 truncates cleaned up [ 294.269357][T12798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.382769][T12803] syz.7.2086 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 294.396970][T12803] CPU: 1 UID: 0 PID: 12803 Comm: syz.7.2086 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 294.397004][T12803] Tainted: [W]=WARN [ 294.397012][T12803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.397026][T12803] Call Trace: [ 294.397034][T12803] [ 294.397106][T12803] __dump_stack+0x1d/0x30 [ 294.397208][T12803] dump_stack_lvl+0x95/0xd0 [ 294.397255][T12803] dump_stack+0x15/0x1b [ 294.397274][T12803] dump_header+0x80/0x240 [ 294.397294][T12803] oom_kill_process+0x295/0x350 [ 294.397320][T12803] out_of_memory+0x981/0xbc0 [ 294.397411][T12803] try_charge_memcg+0x621/0xa00 [ 294.397444][T12803] ? __rcu_read_unlock+0x4e/0x70 [ 294.397475][T12803] __memcg_kmem_charge_page+0x199/0x3a0 [ 294.397563][T12803] __alloc_frozen_pages_noprof+0x18a/0x350 [ 294.397593][T12803] alloc_pages_mpol+0xa9/0x1d0 [ 294.397622][T12803] alloc_pages_noprof+0x8f/0x140 [ 294.397653][T12803] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 294.397708][T12803] __kvmalloc_node_noprof+0x3a0/0x590 [ 294.397734][T12803] ? futex_hash_allocate+0x192/0x920 [ 294.397819][T12803] ? futex_hash_allocate+0x192/0x920 [ 294.397840][T12803] ? futex_hash_allocate+0x192/0x920 [ 294.397893][T12803] futex_hash_allocate+0x192/0x920 [ 294.397916][T12803] ? cap_task_prctl+0x13f/0x6b0 [ 294.397976][T12803] futex_hash_prctl+0xd8/0xf0 [ 294.397997][T12803] __se_sys_prctl+0x4f4/0x13b0 [ 294.398033][T12803] __x64_sys_prctl+0x67/0x80 [ 294.398058][T12803] x64_sys_call+0x2533/0x3020 [ 294.398121][T12803] do_syscall_64+0x136/0x3c0 [ 294.398205][T12803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.398227][T12803] RIP: 0033:0x7f9b523ace59 [ 294.398253][T12803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.398274][T12803] RSP: 002b:00007f9b50e07028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 294.398297][T12803] RAX: ffffffffffffffda RBX: 00007f9b52625fa0 RCX: 00007f9b523ace59 [ 294.398444][T12803] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 294.398460][T12803] RBP: 00007f9b52442e6f R08: 0000000000000000 R09: 0000000000000000 [ 294.398475][T12803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.398490][T12803] R13: 00007f9b52626038 R14: 00007f9b52625fa0 R15: 00007ffe249216a8 [ 294.398510][T12803] [ 294.398519][T12803] memory: usage 307200kB, limit 307200kB, failcnt 329 [ 294.446412][ T28] audit: type=1400 audit(1782478448.446:3828): avc: denied { write } for pid=12805 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.687006][T12803] memory+swap: usage 123516kB, limit 9007199254740988kB, failcnt 0 [ 294.705517][T12803] kmem: usage 106920kB, limit 9007199254740988kB, failcnt 0 [ 294.716576][T12803] Memory cgroup stats for /syz7: [ 294.717054][T12803] cache 262144 [ 294.731790][T12803] rss 73728 [ 294.735317][T12810] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 294.739327][T12810] EXT4-fs (loop7): 1 truncate cleaned up [ 294.739817][T12810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.803504][T12803] shmem 262144 [ 294.807103][T12803] mapped_file 0 [ 294.810849][T12803] dirty 0 [ 294.814152][T12803] writeback 0 [ 294.817594][T12803] workingset_refault_anon 162 [ 294.822656][T12803] workingset_refault_file 0 [ 294.827859][T12803] swap 131072 [ 294.831368][T12803] swapcached 3637248 [ 294.835549][T12803] pgpgin 160948 [ 294.839335][T12803] pgpgout 160866 [ 294.843172][T12803] pgfault 167076 [ 294.847175][T12803] pgmajfault 117 [ 294.850963][T12803] inactive_anon 0 [ 294.855850][T12803] active_anon 335872 [ 294.860327][T12803] inactive_file 0 [ 294.883900][T12803] active_file 0 [ 294.901321][T12803] unevictable 0 [ 294.941184][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.971338][T12803] hierarchical_memory_limit 314572800 [ 294.989443][ T28] audit: type=1400 audit(1782478448.996:3829): avc: denied { read } for pid=12802 comm="syz.7.2086" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 295.038379][ T28] audit: type=1400 audit(1782478448.996:3830): avc: denied { open } for pid=12802 comm="syz.7.2086" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 295.042319][T12803] hierarchical_memsw_limit 9223372036854771712 [ 295.094403][T12803] total_cache 262144 [ 295.104582][T12803] total_rss 73728 [ 295.108837][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2092'. [ 295.126812][T12803] total_shmem 262144 [ 295.156653][T12803] total_mapped_file 0 [ 295.161166][T12803] total_dirty 0 [ 295.164965][T12803] total_writeback 0 [ 295.169143][T12803] total_workingset_refault_anon 162 [ 295.175817][T12803] total_workingset_refault_file 0 [ 295.180915][T12803] total_swap 131072 [ 295.185131][T12803] total_swapcached 3637248 [ 295.189798][T12803] total_pgpgin 160948 [ 295.194104][T12803] total_pgpgout 160866 [ 295.198271][T12803] total_pgfault 167076 [ 295.202427][T12803] total_pgmajfault 117 [ 295.207036][T12803] total_inactive_anon 0 [ 295.211512][T12803] total_active_anon 335872 [ 295.217404][T12830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 295.226479][T12803] total_inactive_file 0 [ 295.241711][T12803] total_active_file 0 [ 295.248627][T12803] total_unevictable 0 [ 295.282598][T12803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2086,pid=12802,uid=0 [ 295.314323][T12835] set_capacity_and_notify: 6 callbacks suppressed [ 295.314339][T12835] loop5: detected capacity change from 0 to 164 [ 295.320031][T12803] Memory cgroup out of memory: Killed process 12802 (syz.7.2086) total-vm:96216kB, anon-rss:1380kB, file-rss:22384kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 295.321236][T12835] iso9660: Unknown parameter 'nocompressœßK½<þ"heck' [ 295.531138][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.604993][T12848] xt_hashlimit: max too large, truncated to 1048576 [ 295.616034][T12808] loop3: detected capacity change from 0 to 256 [ 295.679629][T12852] loop7: detected capacity change from 0 to 1024 [ 295.688054][T12852] EXT4-fs: inline encryption not supported [ 295.781019][T12852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.863475][T12844] syzkaller0: entered promiscuous mode [ 295.894506][T12844] syzkaller0: entered allmulticast mode [ 296.110881][T12856] loop3: detected capacity change from 0 to 512 [ 296.126385][T12856] EXT4-fs: Ignoring removed oldalloc option [ 296.218891][T12856] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.2099: corrupted in-inode xattr: invalid ea_ino [ 296.239886][T12861] loop5: detected capacity change from 0 to 512 [ 296.255674][T12856] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 296.255861][T12856] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2099: couldn't read orphan inode 15 (err -117) [ 296.265055][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 296.265075][ C0] EXT4-fs (loop3): initial error at time 1782478450: ext4_iget_extra_inode:5180: inode 15 [ 296.265108][ C0] EXT4-fs (loop3): last error at time 1782478450: ext4_iget_extra_inode:5180: inode 15 [ 296.284454][T12861] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 296.290785][T12856] loop3: lost filesystem error report for type 5 error -117 [ 296.326402][T12856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.348623][T12862] loop8: detected capacity change from 0 to 4096 [ 296.366736][T12862] ext4: Unknown parameter 'fsname' [ 296.394370][T12856] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2099: invalid indirect mapped block 234881024 (level 0) [ 296.398477][T12862] sg_write: data in/out 406492/50 bytes for SCSI command 0x0-- guessing data in; [ 296.398477][T12862] program syz.8.2100 not setting count and/or reply_len properly [ 296.454802][T12867] loop5: detected capacity change from 0 to 512 [ 296.487435][T12316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.533007][T12872] loop2: detected capacity change from 0 to 256 [ 296.549696][T12867] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2101: invalid indirect mapped block 256 (level 2) [ 296.565650][T12316] ================================================================== [ 296.565891][T12867] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 296.573756][T12316] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 296.573785][T12316] [ 296.573792][T12316] write to 0xffffea00049b5618 of 8 bytes by task 12872 on cpu 1: [ 296.573809][T12316] delete_from_page_cache_batch+0x310/0x720 [ 296.573836][T12316] truncate_inode_pages_range+0x1f3/0x7d0 [ 296.573860][T12316] truncate_inode_pages+0x24/0x30 [ 296.573882][T12316] set_blocksize+0x1ed/0x270 [ 296.573901][T12316] sb_set_blocksize+0x93/0x170 [ 296.573919][T12316] fat_fill_super+0x83e/0x1c50 [ 296.573947][T12316] vfat_fill_super+0x24/0x30 [ 296.573968][T12316] get_tree_bdev_flags+0x291/0x300 [ 296.573987][T12316] get_tree_bdev+0x1f/0x30 [ 296.574005][T12316] vfat_get_tree+0x1c/0x30 [ 296.574024][T12316] vfs_get_tree+0x57/0x1d0 [ 296.574042][T12316] do_new_mount+0x288/0x8d0 [ 296.574062][T12316] path_mount+0x4ad/0xb90 [ 296.574080][T12316] __se_sys_mount+0x28c/0x2e0 [ 296.574101][T12316] __x64_sys_mount+0x67/0x80 [ 296.574117][T12316] x64_sys_call+0x2d61/0x3020 [ 296.574139][T12316] do_syscall_64+0x136/0x3c0 [ 296.574165][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.574183][T12316] [ 296.574189][T12316] read to 0xffffea00049b5618 of 8 bytes by task 12316 on cpu 0: [ 296.574206][T12316] folio_mapping+0xa1/0xe0 [ 296.574223][T12316] lru_add+0x8d/0x460 [ 296.574246][T12316] folio_batch_move_lru+0x2a3/0x3a0 [ 296.574264][T12316] lru_add_drain_cpu+0x66/0x210 [ 296.574282][T12316] __folio_batch_release+0x44/0xb0 [ 296.574303][T12316] mapping_try_invalidate+0x3b6/0x430 [ 296.574325][T12316] invalidate_mapping_pages+0x27/0x40 [ 296.574347][T12316] invalidate_bdev+0x58/0x70 [ 296.574363][T12316] ext4_put_super+0x614/0x7c0 [ 296.574390][T12316] generic_shutdown_super+0xee/0x220 [ 296.574417][T12316] kill_block_super+0x2a/0x70 [ 296.574434][T12316] ext4_kill_sb+0x42/0x80 [ 296.574457][T12316] deactivate_locked_super+0x75/0x1c0 [ 296.574483][T12316] deactivate_super+0x97/0xa0 [ 296.574509][T12316] cleanup_mnt+0x2c3/0x340 [ 296.574533][T12316] __cleanup_mnt+0x19/0x20 [ 296.574555][T12316] task_work_run+0x130/0x1a0 [ 296.574575][T12316] exit_to_user_mode_loop+0x1e4/0x8c0 [ 296.574601][T12316] do_syscall_64+0x23c/0x3c0 [ 296.574637][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.574656][T12316] [ 296.574661][T12316] value changed: 0xffff8881005f0528 -> 0x0000000000000000 [ 296.574674][T12316] [ 296.574679][T12316] Reported by Kernel Concurrency Sanitizer on: [ 296.574694][T12316] CPU: 0 UID: 0 PID: 12316 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 296.574726][T12316] Tainted: [W]=WARN [ 296.574734][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.574748][T12316] ================================================================== [ 296.864357][T12867] EXT4-fs (loop5): 2 truncates cleaned up [ 296.876278][T12867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.916009][ T9913] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.079362][ T3818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.739647][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 299.739662][ T28] audit: type=1400 audit(1782478453.746:3835): avc: denied { write } for pid=12875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.771495][ T28] audit: type=1400 audit(1782478453.766:3836): avc: denied { write } for pid=12886 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.022477][ T28] audit: type=1400 audit(1782478459.026:3837): avc: denied { write } for pid=12892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.048699][ T28] audit: type=1400 audit(1782478459.026:3838): avc: denied { write } for pid=12903 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.686086][ T28] audit: type=1400 audit(1782478459.696:3839): avc: denied { write } for pid=12906 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.711610][ T28] audit: type=1400 audit(1782478459.696:3840): avc: denied { write } for pid=12917 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1