last executing test programs: 7m15.982357219s ago: executing program 32 (id=472): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xc0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0xac, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0xffffffffffffffff, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x58, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40081}, 0x2400c800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000070601004700000008000640000000ff08000600000000040900020073797a30000000000810064080000001050001000700000008000640000000050500010007000000d82ac5c8c9a1bae3119b229c95fc89f45c62ef3a113776d768b02856b7bdad7b863d73f17818f516e7940d06e58e1913d704c54a7c5f115f97c4af3ad47f2f769dc95427f6031d2dfd09e529b583156b6c316c0c1015a36ce8b4fe5e36bbb107443e825aa509e49a7cecc97fb4ea9024cbc71e6ddae155b50ae764b5658500a5872496039d61dd4a372eb9a9"], 0x58}, 0x1, 0x0, 0x0, 0x805}, 0x4) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x2d, 0x20040040) dup2(r4, r5) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x3, 0x7ffffffe, 0x100100, &(0x7f0000000440)="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"}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") lsetxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x0) 6m46.788576666s ago: executing program 33 (id=693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback, 0x210}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e61, 0x80, @mcast2, 0x81}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x8}}], 0x2, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)={'vlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e00010a000000000000000007"], 0x14}}, 0x4000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003e80)=ANY=[], 0x4064}, 0x1, 0x0, 0x0, 0x2a71a10b24dbe23f}, 0x2000c800) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x1, @remote, 0x6d71}}, 0x7, 0xabae, 0x9, 0xd, 0x24, 0x79af50cb, 0xf}, &(0x7f0000000280)=0x9c) socket$nl_route(0x10, 0x3, 0x0) 6m41.093626131s ago: executing program 34 (id=728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @dev={0xfe, 0x80, '\x00', 0x25}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @dev={0xfe, 0x80, '\x00', 0x25}, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x0, 0x0, 0x0, 0x100, 0x100000, 0x140192}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) (async) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0xb4, 0x6, 0x201, 0x7fffffff, 0x800, 0x5, 0x1, 0x7}, &(0x7f0000001200)=0x20) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5c0000001000010400000000fcfbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00300000421004002800128008000100767469001c000280080006000300000008000400ac1e010108000500ffffffff1400030069705f76746930000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000380)={&(0x7f0000000300)=""/121, 0x79, 0x0, &(0x7f0000000480)=""/215, 0xd7}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pB \x00'}, 0x20) socket(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) fallocate(r9, 0x0, 0x0, 0x400001) (async) fallocate(r9, 0x0, 0x0, 0x400001) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x82, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000008000020000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0xb0, &(0x7f00000000c0)=""/176, 0x40f00, 0x41, '\x00', r3, @fallback=0x16, r4, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x30c, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r6, r7, r8, r10], &(0x7f0000000800)=[{0x0, 0x4, 0x4, 0x3}], 0x10, 0x6a8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000008000020000000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0xb0, &(0x7f00000000c0)=""/176, 0x40f00, 0x41, '\x00', r3, @fallback=0x16, r4, 0x8, &(0x7f0000000280)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x30c, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r6, r7, r8, r10], &(0x7f0000000800)=[{0x0, 0x4, 0x4, 0x3}], 0x10, 0x6a8}, 0x94) r11 = socket$inet(0x2, 0xc, 0x1) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f00000001c0)="962b07a3f9c8f1", 0x7}], 0x2}, 0x42890) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 6m27.949519107s ago: executing program 0 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000000308010200200000000000000700000205000300060000001400048008000740000000000800064000000007fcca0e6c20033cf911fa366c5465550873c73e79f61ff53fb513c7749eaced626589a0b83ca81370b176e23f67c90fe678fb633c932b234ba573f23f9397ff748d78a26f7cd55f09565ec20fc9445303d4b8e7408c705ada0e8cf818c9464e12bb01bec685319d9f5f4c8a918d83598566ae666b030087ded99942f309dc6d79441dd7e89c361ac9cf1bff0e8a5e8b9b4b183a2f20ab1aae532ee2b81974d22af0a5e8a531e34a03fd5962de4e7a8c311547c9b5"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0x5}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m27.543167202s ago: executing program 0 (id=826): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x9, 0x80000) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r2, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) open(&(0x7f0000000200)='./bus\x00', 0x14507c, 0x1) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0xffffffffffffffda) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000000000000000000f2bc03c200000000fe8000000000000000000000bb000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400"/180], 0xfc}}, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000040)=0x1c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x270, 0x270, 0xffffffff, 0x118, 0x3b8, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x4, ':+', 0x5}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@mcast1, @icmp_id=0x67, @port=0x4e22}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffffff, 0xffffff00, 0x0, 0xff000000], [0xff000000, 0xff000000, 0x0, 0xff000000], 'wg2\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@local, @ipv4=@local, @ipv6=@mcast2, @ipv4=@rand_addr=0x64010101}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x14, @ipv4=@local, @ipv4=@empty, @gre_key=0x28f, @port=0x4e20}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, '\x00', 0x41}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0x0, 0xffffff00, 0xffffff00], 'vlan1\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x84, 0x7, 0x1, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x1, 0xa9f2, 0x9, 0x894, 0x400, 0x4, 0xffffffff, 0x78, 0x78}, {0x3}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4=@remote, @gre_key=0x2bd, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}, @ipv4=@local, @icmp_id=0x68, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6m26.685606014s ago: executing program 0 (id=830): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b52, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8800) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x3, {0x0, 0xff, 0x4}}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f38437", 0x7}], 0x1}, 0x40015) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r10, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x42) 6m25.572030132s ago: executing program 0 (id=833): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x404c000) syz_pidfd_open(r0, 0x0) r2 = syz_io_uring_setup(0x7b29, &(0x7f00000000c0)={0x0, 0xe, 0x0, 0x3, 0x84}, &(0x7f0000000180), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r1], 0x3ffffcdf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401}) 6m24.962965356s ago: executing program 0 (id=837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x6c7de670}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40) 6m24.669281394s ago: executing program 0 (id=839): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xd, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="af0e3ca0a44bd9985e4c54c8f273e18e454119ac64866bc23e99d63d70a46925595605b6f1351082d7f0311d05f3766c9741c5723cf80e0aca9d633a9ce7fe79f4cf00502b8cb999e665abfbb2e285d21b6a0238eb57b2c65261cdbe8039b1f8047eee5c7e69e1abfa55cfe7697878d20cdfe7c91bdc93aea306ce8983be3eb8d1101658a0837f8b98c508a032a0af139842a9b7707d5eb945ff241af0029967f8a26f7f9b666d04b17bf85601b5aa9c1131529fb38de5423ab09ca8", @ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="ec317317ab40502a8fe1cb9bae452a177f7fcf65515d848e02475fd718ca1a482077af68f96689af90a6216b926d1c47be7f6193b1450e06b4cc7c61a834f68b91121e181638435c90e3b518a00ad429a83cedc57d03aa7a6f32b4c0654a1bba2a5c0f8b57578305f3c48e67121f1703c38e2d65d87e5c4f275142acaf1675e0a659733f8831338757f66f64ef6bd12fddcb6e38efa75b93c33498850fc0685c8d5b1017e826389c61ed92c70ed350fc970ccbea95cf3056286e005e92e61f4127329dd0cf8f6d78f28a989bcac605f645cf1dcedfbc2edd7c31dc4b8920b013c6e6ac7d980b13fab59833fac52b63c73d49531d", @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000340)={{0x40, 0x3}, 'port1\x00', 0x0, 0x3, 0x9, 0x10000, 0x2, 0xfffffffb, 0x1bc00, 0x0, 0x2, 0x7}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x1, 0x0, 0x10, 0x40224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x16802, 0x32, 0x43a1bd56, 0x7, 0x100009, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="844100001900010028bd7000fbdbdf251d0109007c00128077000c00beb3ed23f795116a510c579236a7c5003eb5731ed0eee7449dfe8eab4725df5bb757ee9c5b1a156bd5900eb207314af579fd16da5b7c9e98d39f07e677023a90f97f2655f2234f573c05b98cd4f6eb47f2750d44901061c567ed468c1bb3c2125e3545e32477d8238b658e5f3369a8e0e3b7e900f4400680f0409431"], 0x4184}, 0x1, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x81, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x10beb0, 0x1002, 0x20da, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaa0000089078ac14140f0000000000000000000000000000000000b7aa21e2705d70bf103848f02f0a4f684aadeb45cdeb544a0aa2b1b6547392fff19d77ea5d79"], 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") 6m24.668859044s ago: executing program 35 (id=839): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0xd, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="af0e3ca0a44bd9985e4c54c8f273e18e454119ac64866bc23e99d63d70a46925595605b6f1351082d7f0311d05f3766c9741c5723cf80e0aca9d633a9ce7fe79f4cf00502b8cb999e665abfbb2e285d21b6a0238eb57b2c65261cdbe8039b1f8047eee5c7e69e1abfa55cfe7697878d20cdfe7c91bdc93aea306ce8983be3eb8d1101658a0837f8b98c508a032a0af139842a9b7707d5eb945ff241af0029967f8a26f7f9b666d04b17bf85601b5aa9c1131529fb38de5423ab09ca8", @ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="ec317317ab40502a8fe1cb9bae452a177f7fcf65515d848e02475fd718ca1a482077af68f96689af90a6216b926d1c47be7f6193b1450e06b4cc7c61a834f68b91121e181638435c90e3b518a00ad429a83cedc57d03aa7a6f32b4c0654a1bba2a5c0f8b57578305f3c48e67121f1703c38e2d65d87e5c4f275142acaf1675e0a659733f8831338757f66f64ef6bd12fddcb6e38efa75b93c33498850fc0685c8d5b1017e826389c61ed92c70ed350fc970ccbea95cf3056286e005e92e61f4127329dd0cf8f6d78f28a989bcac605f645cf1dcedfbc2edd7c31dc4b8920b013c6e6ac7d980b13fab59833fac52b63c73d49531d", @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000340)={{0x40, 0x3}, 'port1\x00', 0x0, 0x3, 0x9, 0x10000, 0x2, 0xfffffffb, 0x1bc00, 0x0, 0x2, 0x7}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x1, 0x0, 0x10, 0x40224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x1}, 0x16802, 0x32, 0x43a1bd56, 0x7, 0x100009, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x40004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="844100001900010028bd7000fbdbdf251d0109007c00128077000c00beb3ed23f795116a510c579236a7c5003eb5731ed0eee7449dfe8eab4725df5bb757ee9c5b1a156bd5900eb207314af579fd16da5b7c9e98d39f07e677023a90f97f2655f2234f573c05b98cd4f6eb47f2750d44901061c567ed468c1bb3c2125e3545e32477d8238b658e5f3369a8e0e3b7e900f4400680f0409431"], 0x4184}, 0x1, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x81, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x10beb0, 0x1002, 0x20da, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaa0000089078ac14140f0000000000000000000000000000000000b7aa21e2705d70bf103848f02f0a4f684aadeb45cdeb544a0aa2b1b6547392fff19d77ea5d79"], 0x0) sendmsg(r8, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") 6m22.847862265s ago: executing program 6 (id=850): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000540), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)={[{0x2d, 'freezer'}]}, 0x9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x2b, 0x2, 0x9, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 6m22.735799602s ago: executing program 6 (id=861): prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x4041) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x8005, 0x91, 0x9, 0x0}, &(0x7f00000000c0)=0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x1ff, 0x1, 0x61, 0x7}, {0x2, 0x5, 0x6, 0x6}, {0xffff, 0x5, 0x4, 0x8040}]}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x8}, 0x8) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 6m22.561188936s ago: executing program 6 (id=855): socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2400, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r7, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_pts(r8, 0x40601) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7f, @empty, 0xd34}}, [0x9, 0x7, 0x9, 0x81, 0x1080000000000000, 0x3, 0xfffffffffffffff7, 0x3, 0x4, 0x5, 0x9, 0x0, 0x3ff, 0x3ff, 0x5]}, &(0x7f0000000000)=0x100) 6m20.581203524s ago: executing program 6 (id=858): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x404c000) syz_pidfd_open(r0, 0x0) r2 = syz_io_uring_setup(0x7b29, &(0x7f00000000c0)={0x0, 0xe, 0x0, 0x3, 0x84}, &(0x7f0000000180), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r1], 0x3ffffcdf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401}) 6m19.652282661s ago: executing program 6 (id=867): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x104806, 0x0, 0x10000, 0x2, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000100)) dup2(r0, r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) clock_settime(0x0, &(0x7f0000000040)={r1, r2+10000000}) 6m19.035555572s ago: executing program 6 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f00000005c0)="b44c806309624431ed3373010001000000bf7e47d5fe008c63", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff6}, 0x50) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) (rerun: 64) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x9, 0x10000, 0x2, 0xb9d2, 0x4}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@setneightbl={0x18, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7}, [@NDTA_PARMS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040010}, 0x4844) 6m18.967128808s ago: executing program 36 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f00000005c0)="b44c806309624431ed3373010001000000bf7e47d5fe008c63", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffff6}, 0x50) (async, rerun: 64) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) (rerun: 64) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x9, 0x10000, 0x2, 0xb9d2, 0x4}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@setneightbl={0x18, 0x43, 0x1, 0x70bd2b, 0x25dfdbfd, {0x7}, [@NDTA_PARMS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040010}, 0x4844) 6m18.541515969s ago: executing program 4 (id=877): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 6m18.523309116s ago: executing program 4 (id=878): msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/77) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000001c0)=""/77) (async) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) (async) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 6m17.451317172s ago: executing program 4 (id=891): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000000a000000140001000000000000080000000000000000000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x8000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ptrace$setregs(0xd, r3, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 32) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 32) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={0x0}) (async) unshare(0x64000700) (async) sync() (async) r4 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) (async) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x1, 0x0, r5, 0x0, 0xee01, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x7538, 0x17, 0xdf0f, 0x7, 0x742, 0x8, 0x3ff, r3, r3}) (async) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) syz_emit_ethernet(0x142b, &(0x7f0000001dc0)={@link_local, @empty, @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x4, 0x1}}, {@mpls_uc={0x8847, {[{0x7}, {0xe669}, {0x80}, {0x7}], @ipv6=@tipc_packet={0xe, 0x6, "f567b5", 0x13dd, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {[@fragment={0x36d5997ab6d839cd, 0x0, 0xb, 0x0, 0x0, 0x1, 0x64}, @hopopts={0x1d, 0x7, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x28, {0x2, 0x8, 0xf9, 0xff81, [0x8001, 0x5, 0x73e00719, 0x2119]}}]}, @fragment={0x32, 0x0, 0x3, 0x1, 0x0, 0xf, 0x64}, @hopopts={0x2b, 0xb, '\x00', [@ra={0x5, 0x2, 0x2fb}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x10, {0x2, 0x2, 0x9, 0x0, [0x9eb1]}}, @ra={0x5, 0x2, 0x2}, @pad1, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @mcast2}]}, @hopopts={0x87, 0x10, '\x00', [@generic={0xe, 0x5f, "fa336b555bdba077a0d6efeb011b5f01d7b1a46d650ae2d8730894d8c521c5da30026affb9facfcf25f0f1f7741a614d07fe13655cf6c8ceadd5ef8391ad010a517132ce8374dffb8397f35b2b5af3fa98042d52bb987abda7dcd3e06b5c8d"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @hopopts={0x11, 0x12, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x92, 0x5, [0xffffffffffffffff, 0x3]}}, @enc_lim={0x4, 0x1, 0x96}, @calipso={0x7, 0x50, {0x2, 0x12, 0x0, 0x59, [0x7, 0x7fffffff, 0x2, 0xd, 0x200, 0x8001, 0x3, 0x2, 0x5]}}, @ra={0x5, 0x2, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x10, {0x3, 0x2, 0x97, 0x48, [0x96a1]}}]}, @dstopts={0x3b, 0x230, '\x00', [@ra={0x5, 0x2, 0xd419}, @generic={0x21, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x7, [0x800, 0xc, 0x7, 0xa2d, 0x4]}}, @generic={0x1, 0x65, "3326375493a6d61fb686c88374e84d55643c069a469409ae7f4f72d2528ac7e643e86d0b5e615b884d35950a014dbf7fd496f2e6520d93811294506f38f9bbfb40160595eac6b6351985b752fa81883505571ba440b8ea9afb18015dc5de324315c7d5a424"}, @enc_lim={0x4, 0x1, 0x7c}, @generic={0x0, 0xb5, "f3b53d170beb5723a0b9dddcc6e2e18e4e4387261be9bf8509116c6951c27c40d9a678b0ebfe64454d628a94ad82a1aacbec3594280c9feee58a5d044538876712c940967f683a76e7e6bf7e6efe897c93368bacd9f2e394efc14744385204e5bb5530a11d199dbdf2baed210d7b78848fc5f9eb0e8a8ca04d45b08f1a4853c96d7c27e90bb8c29d7fa72c654a83ae0c7e8b12bed6278c27e9a90387b645c0e8748d9700f40aad3aed8b47cd5821f4c7a29c87516b"}]}, @routing={0x2b, 0x6, 0x1, 0x14, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x24}, @loopback]}, @hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x4}]}], @payload_conn={{{0x1d, 0x0, 0x1, 0x1, 0x1, 0x6, 0x2, 0x2, 0x2, 0x0, 0x3, 0x5, 0x2, 0x0, 0x8, 0x891c, 0x1, 0x4e21, 0x4e23}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) 6m17.035444896s ago: executing program 4 (id=892): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x5, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3cf19f47c01e1ea38d7a2dfd00"/23, @ANYRES32=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x48042, 0x1) 6m16.711103068s ago: executing program 4 (id=895): r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 6m16.445258413s ago: executing program 4 (id=900): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r1 = syz_io_uring_setup(0x80000bdc, &(0x7f0000000640)={0x0, 0x78b8, 0x4000, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0x5}], 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rt_sigsuspend(&(0x7f00000001c0), 0x8) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m16.418027198s ago: executing program 37 (id=900): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r1 = syz_io_uring_setup(0x80000bdc, &(0x7f0000000640)={0x0, 0x78b8, 0x4000, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0x5}], 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rt_sigsuspend(&(0x7f00000001c0), 0x8) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m8.590857719s ago: executing program 7 (id=975): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000080), 0x1, 0x566, &(0x7f0000000400)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r1, 0xb) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) shmctl$SHM_UNLOCK(r1, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x64, 0x0, 0x2, 0xffffffff}]}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r3 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0806000186dd0610fefffffffffffffffe8000000000000000000000000000aaffffffffffff00"/66], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) io_setup(0x3ff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e23, @empty}}) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 6m8.420644004s ago: executing program 7 (id=976): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="6903ded758cba31acc13a75d8b7565995f51f50a07676b2608ecd9cd8084dd717b807a0459e0a67750836682710178a55ab8ac3b5635ccbe4cd4c40c11435345aaef8621dcfa4b365dcb237a2147a71d09bc1aac750448ca952e14947efa981394fd9c8cf96d", 0x66, 0x40, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xf, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe2(&(0x7f0000000140)={0x0, 0x0}, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) (async) accept4(r2, 0x0, 0x0, 0x0) (async, rerun: 32) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000001000ffff2f3d7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000005000128009000100766c616e00000000400002800600010003000000340003800c00010000000000010000000c000100f0ff0700c3f2ffff0c00040000000020400000000c000100000000000500000008000500", @ANYRES32=r4], 0x78}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d73603"], 0x44}}, 0x2000800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', r2, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 6m8.267295622s ago: executing program 7 (id=978): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x404c000) syz_pidfd_open(r0, 0x0) r2 = syz_io_uring_setup(0x7b29, &(0x7f00000000c0)={0x0, 0xe, 0x0, 0x3, 0x84}, &(0x7f0000000180), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r1, r1], 0x3ffffcdf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401}) 6m8.081252773s ago: executing program 7 (id=981): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0xfffffffc}, 0x10}, 0x94) 6m7.979514052s ago: executing program 7 (id=983): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 6m7.870758099s ago: executing program 38 (id=983): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 4m24.67480908s ago: executing program 9 (id=1964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 4m24.553038604s ago: executing program 9 (id=1966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@deltaction={0x74, 0x31, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r11, &(0x7f0000019680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r11, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) 4m24.322424156s ago: executing program 9 (id=1970): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) gettid() process_vm_writev(r0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/152, 0x98}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x6, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getrlimit(0xd, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000b07000/0x2000)=nil, 0x2000, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x7, 0x0, &(0x7f00000000c0)="5fd63edbfd8a4a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 4m22.46529317s ago: executing program 9 (id=1976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004500002c00000000002f9078000000580000000010000800000086dd080088be81000004100000000100000000000000080022eb000000002000000002000000000000638d721d5400000000000800655800000000000000"], 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r5 = syz_open_pts(r4, 0x20800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r1}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000240)=0x0) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0x84, r7, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x20008000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@block_validity}, {@oldalloc}]}, 0x3, 0x553, &(0x7f0000001080)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f002) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) 4m22.227490871s ago: executing program 9 (id=1978): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) (rerun: 32) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) (async) madvise(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0xa) (async, rerun: 64) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async, rerun: 64) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x44041) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4m21.765343514s ago: executing program 9 (id=1986): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x12000, 0x1) getdents(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700200025bd700000000000e000000100000000000000000000000000000000ff000000ffffffff000000000000000000000000ff010000000000000000000000000001ffffffff0000000000000000000000004e210000000000000a00001c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000008000000000000000001ff010010396951000000000000000001000000004e2100000a00a0203b000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000062fc0000000000000000000000000000ffffffffffffffff0100000000000000000000000000000000000000000000000000000000800000004000000000000002000000000000000000000000000000080000000000000000000000ffffffff0200000200000000f9ffffff380000000900000000000000"], 0x128}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x1600, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 4m21.759660643s ago: executing program 39 (id=1986): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x12000, 0x1) getdents(r2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280100001700200025bd700000000000e000000100000000000000000000000000000000ff000000ffffffff000000000000000000000000ff010000000000000000000000000001ffffffff0000000000000000000000004e210000000000000a00001c00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000008000000000000000001ff010010396951000000000000000001000000004e2100000a00a0203b000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000062fc0000000000000000000000000000ffffffffffffffff0100000000000000000000000000000000000000000000000000000000800000004000000000000002000000000000000000000000000000080000000000000000000000ffffffff0200000200000000f9ffffff380000000900000000000000"], 0x128}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x1600, 0x0, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 6.02898606s ago: executing program 8 (id=4280): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffbbbbbb86dd6000000000283afffe800000000000000000000000000024fe8000000000000000000000000000aa8900907800000000ff010000000000000000df2338be2d73000000000001fc0000000000000900"/100], 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x40002, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRESDEC, @ANYBLOB="8c683a20f657343b49d6ed37535dcc3f8359b0e7f941619494b10d260b5cb95ad976eb2247ef7dc323d32291fae3fefbc769d39514781af8087f877b5c8b2c03370c", @ANYRES32=r1, @ANYRESOCT=r0, @ANYRES16=r0], 0x8, 0x30b, &(0x7f00000010c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000002c0)) unshare(0x62040200) mremap(&(0x7f0000460000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f00004a6000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x800009}, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}], [], 0x6b}}) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r6, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x40000, &(0x7f0000000a80)={[{@usrquota}, {@grpquota}, {@nr_inodes}], [{@euid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xff\xff\xff\xff\xff\xff'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x62, 0x72, 0x36, 0x31, 0x36, 0x62, 0x61], 0x2d, [0x66, 0x34, 0x30, 0x31], 0x2d, [0x7b, 0x35, 0x38, 0x64], 0x2d, [0x66, 0x34, 0x35, 0x66], 0x2d, [0x64, 0x32, 0x61, 0x62, 0x32, 0x34, 0x36, 0x34]}}}, {@uid_eq}, {@fowner_lt={'fowner<', r5}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x2e}}, {@euid_lt={'euid<', r6}}, {@appraise_type}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x242, 0x0) 4.441845152s ago: executing program 8 (id=4294): socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x818) r0 = socket$unix(0x1, 0x1, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, &(0x7f0000000140)='./file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x2, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)='\\ S', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800009}, 0x50) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 4.157593287s ago: executing program 8 (id=4302): perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='setgroups\x00') readv(r1, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000040601010000000000000000001c0000050001000700000049c40821b5ad89b4edb8259b0aeff04900009ac600921d50db992b2a335a4984a3dd7a77314d436549044166684610e5e52e194f09c4d932425f087edbb0ed62779730be8b90f9c3048ad6c33e1cd2eb9967d4a253026e"], 0x1c}}, 0x0) 4.03728673s ago: executing program 8 (id=4303): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x200, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x81) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x5) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100)={{r3, r4/1000+60000}, {0x77359400}}, 0x100) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x3c, r10, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008890}, 0xc084) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000070900010073797a31000000002400048020000180070001006374000014000280080001400000001008000240000000140900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x4001}, 0x1c) 3.889354857s ago: executing program 8 (id=4309): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x100, 0x4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x80, 0x7, 0x1, 0x80000001, {{0xc, 0x4, 0x2, 0x2e, 0x30, 0x67, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x2a}, {[@ssrr={0x89, 0xf, 0xe0, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x82, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x7, 0x8000, 0x20, r0, 0x3, '\x00', r1, r2, 0x3, 0x8001, 0x3, 0xc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x7, 0x4, 0x8000004, 0x0, r3}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) time(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0xa, 0x100000, 0x0, 0x0, 0x3000000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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") r6 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x11, 0x5000, 0x0, 0x3) sendmsg$inet_sctp(r6, &(0x7f0000000340)={&(0x7f0000000080)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="75656ae187f67e21e551a996b31f3562944c1868cab3dcab674401c0575523b12d410e4f90c92fa08cde6b4d9f7747edc6c8f5adb83a83c4e8829fce427d2aa6b3639a50c3f301efd7ee44fe9fe9ed8c6b4358e2b7747b8c35e6305ef14f0044ca2e88958c309a7194d8ed9733eeaf25bc31069d0209a41ad0ea60365ea6a5a2520f3e52d3ada17d92f08b54fc6435cce93d76ff433f543fdb23bdd50df25d", 0x9f}, {&(0x7f0000000180)="107fc8bf861fbfb61dca1cdcfcf12d25ba49079220755c55280085f27174d88631b4082ccbae99bbf9eee8b863e11866416594023e8614aa4217a45961057909a829ea8a3f014f82ab46b4b4229e50dc0a1cec41b4f8538aa753f307859aaa186f3d629f43eef3801a", 0x69}, {&(0x7f0000000100)="28ee650246c57d58c9b403d087afeef640e854fc323fa8c45c8d97c213e56515027e4b", 0x23}], 0x3, 0x0, 0x0, 0x800}, 0x10) 3.492277068s ago: executing program 1 (id=4314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x4000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, 0x0, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420880}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x400c0c4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x2b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x54}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xe}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4f}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xf, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) 3.365642859s ago: executing program 1 (id=4315): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@fwd={0xe}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x4, 0x2}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @enum64={0x2, 0x3, 0x0, 0x13, 0x1, 0xd, [{0xe, 0x4, 0x4}, {0xe, 0x4, 0x4}, {0x2, 0x8, 0x5}]}]}, {0x0, [0x61]}}, &(0x7f0000000a40)=""/4096, 0x7f, 0x1000, 0x0, 0xfffff966}, 0x28) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x1f9, 0x3, 0x1}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000600)={r1, 0xb49, 0x30, 0xf13, 0x3}, &(0x7f0000000640)=0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r0}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") socket$inet6(0x10, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f0000000140)={[{@nodots}, {@fat=@tz_utc}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@check_normal}]}, 0x0, 0x1e8, &(0x7f0000000280)="$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") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000001000), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e26, 0x100000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000006c0)=' ', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x10, 0x9, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)='\f', 0x1}], 0x1}}], 0x2, 0x200400c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000200018010000202070250000000000202020c31af8ff410000cdbfa100000000000007010000f8ff0300000000000085000000060000950000000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.799173791s ago: executing program 8 (id=4324): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) shutdown(0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x2, 0x3, 0xff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x9, 0x30000000002}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r4, 0x2, 0x70bd2b, 0x5, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004880}, 0x8000) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f00000000c0)={0x1}) shutdown(r3, 0x1) sendmsg$rds(r3, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0xfffffffe, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f00003bf000/0x3000)=nil, 0x3000, 0x100000a) madvise(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x15) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) getresgid(&(0x7f0000000180), 0x0, 0x0) 2.418782856s ago: executing program 1 (id=4327): socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)=0x818) r0 = socket$unix(0x1, 0x1, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000201, 0x0, &(0x7f0000000140)='./file0\x00') socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x2, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)='\\ S', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800009}, 0x50) r1 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x1, 0x2007, @fd, 0xffffffffffffff7f, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 2.361110543s ago: executing program 1 (id=4328): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xee, 0x6, 0xb, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7fc, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, 0x0) writev(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = creat(&(0x7f0000000000)='./file0\x00', 0x3) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup2(r7, r7) 1.345493013s ago: executing program 2 (id=4333): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x44}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x120, 0x880, 0x0, 0x0) 1.316833657s ago: executing program 2 (id=4335): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x9, 0x80000) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0x100, 0x8000, 0x0, "7a58beca3900001e00000000000000000200"}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r6, 0x5) r7 = accept(r6, 0x0, 0x0) shutdown(r6, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)=0x0) sendmsg$nl_xfrm(r7, &(0x7f0000001200)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f00000014c0)=@getpolicy={0x50, 0x15, 0x200, 0x70bd28, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in=@empty, 0x4e22, 0xe, 0x4e23, 0xb109, 0x2, 0x20, 0x80, 0x3c}, 0x6e6bb2, 0x2}}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) capget(&(0x7f0000000500)={0x20071026, r8}, &(0x7f0000000540)={0x101, 0x0, 0x5, 0xcce, 0x4, 0x7}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r6, &(0x7f00000007c0)="2540efd700005cbda8ba18304cb09e6b74a99b186a2b000000000000000000000000d9f929e7bf53dd2d11b7e23500000000", 0x32, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOl0hpYypQVGivD9JGQOc+6h93aG5Nym7dad148LOUvL6RUJxpQERES2RUYkKK6AcwzacVRavZCLg98+/n/r7r0b6UxmckapqfTspZRSanj03ZNncWfY+oBsjjzY+pr6svn35r9bP2cf5S2Vt1SxVFG6mit9ruhzpqEW8lZBU2raNHTLUPmiZZQb+VIjnzNLi4tVpRcXhhKLZcOylF6sqoJRVZWSqpSrKvRQzxeVpmlqKCHoJrsyM6OnD1k87/Nk8JuUy2k9JCLxPZnsSl8mBAAA+qq9/w+K8rP/Xz23URm8vTbs9P/rUa/+//Knxt/a1f/HRMSz/3cf37P/1+v9f1h67f/3dkRny5H6f5wMo9E9pwLNsJ4sp/WE8/9re3l/dcwO6P8BAAAAAAAAAAAAAAAAAAAAAPgTbNdqyVqtlnSP7k89FxOR1t/bhETk6vHPGH7qdP0Hul9/nALND+6Fh0XMV0vZpWzj6AzYEBFTDBmTpPyw7wdHPXY/eaTqRuS9uezULy9lQ3YmnZO8XT8uyYi019dqU9czk+OqYXd9RBKt9SlJyl/e9SnP+qhcON9Sr0lSPsxLSUxZsOfRrH8+rtS1m5m2+rg9DgAAAACA00BTOzz375rWKd+o39lft78+EGrur8c89+dh+S/c37UDAAAAAHBWWNWnBd00jfI+QVy6j2kEkR7GtAfhgww+QOCusNcq970MPk+jt8B98F2pmHPS96clcICnpUMQlMNUjdZXo466Cvdlo05jZHqi51WI+Hkp/3nz9rt/98aVtViXlR4+CO1/A0Sct38BAAAAOEWaTb97ZqK/EwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Aw6ju+36/caAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJPiVwAAAP//FZkC4A==") semctl$SETALL(0x0, 0x0, 0x9, 0x0) 1.15339139s ago: executing program 5 (id=4336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0x4000004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, 0x0, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420880}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x400c0c4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x2b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x54}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xe}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4f}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xf, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) 1.107206019s ago: executing program 5 (id=4337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r1, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x24000040) r2 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a2478", 0x5}], 0x1}}], 0x1, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "1f"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f00000000c0)=""/55, 0x37) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) lseek(r6, 0x3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) ioctl$EVIOCGKEY(r8, 0x80404518, &(0x7f0000000040)=""/42) close_range(r7, 0xffffffffffffffff, 0x0) 1.046306646s ago: executing program 5 (id=4338): socket$nl_netfilter(0x10, 0x3, 0xc) 933.305571ms ago: executing program 5 (id=4339): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bd, &(0x7f0000000a00)="$eJzs3M9vVNUeAPDvnU4L5cdrH4/3niBKFY0osaUFlYULMZq40MTEDS5rWxAp1LTVCCFaXeDSkLg3Lk38C1zpxqgrE7a4NyTEsAE1JmPuzL3TaecH0zLtWObzSWbmnHtv55wv95yZc+5hbgA9ayR9SiJ2RcT1iBiqZFceMFJ5uXPr8tTvty5PJVEqvfFbUj7u9q3LU/mh+d/tzDNLK7fXWrh46dzk7OzMfJYfWzz/7tjCxUtPnz0/eWbmzMyFiRMnjh8bf+7ZiWeaV76//TjTOt3e/+HcgX2vvHn1talTV9/68eskj39FHO+3/6atjTTY1pcnHu9UKf8Qu8vPg+XnpJhvLXSvQrQlbZDFrCtdj6Hoi+rJi6F4+ZOuVg7YUKVSqbSt6d7h7IhMkr3WbgO2sKTt3tyv38N9JfuiTyKWptI5cO18vhfcPFmZAKVx38kelT3F6uy1vzq/7bx0tnVq6Y8v0kcsX4cY2KDiAADi25OV13zstzz+KxRrj3shWxsajoh/R8SeiPhPROyNiP9GxP8i4v8R8UDN3zRa91lt9SJJ/fizcGNdgbXp5pGI57O1rZXjv+raxXBflttdjr8/OX12duZoRPwrIg5H/7Y0P96ijO9euvZZlqwb143UjP/SR1p+PhbM6nGjuOoC3fTk4uS9xp27+XHE/mKj+JPqSkB6HvdFxP6D6yvj7FNfHWi27+7xt1BcX31qlb6MeKJy/pdiVfy5pPX65Nj2mJ05Opa3ino//Xzl9Wbl31P8HZCe/x0N2381/uGkdr12Ye1lXPnl06Zzyjbb/4p+k7b/gWRlV/pgcnFxfjxiIHm1nB8of2Kl26P+uInl49P4Dx9q3P/3xPK/xIMRkTbihyLi4Yg4mNX9kYh4NCIOtYj/hxcfe2f98W+sNP7pu5//t5+snv+miXxtu25X37nvvynvyU/ZcIv4k2hw/o+XU4ezLe18/rWs6fy9tGYAAADYegoRsSuSwmg1XSiMjlb+v/ze2FGYnVtYPHJ67r0L05XfCAxHfyG/0jVUvR4aS+PZtD6/PjqxKn8su278ed9gOT86NTc73e3gocftbNL/U7/2dbt2wIbrwDoasEWtt/+XSqWPOlwVYJP5/ofepf9D72rQ/wdX5ZvfIwDY0ooNMjUT+7+WfycM3G+ajf+vbXI9gM1n/g+9S/+H3qX/Q0/KfglfjLZ+Lb9BifTzp+kxfRHRrYo1SZRK2+vvcrAZiYEOvuGu1XdJGFrb+0RhjYUmtW1s+xru0VCXiG43gDUm/sxutrkJZaVdaX6weW9qP9HtTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDO+DsAAP//wc7YrA==") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1820b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "2c09000000e45246", "3df53dd0912222be8a6eae6b3b0b6560", "0e884b1d", "44b7e0945c434f73"}, 0x28) (async) syz_genetlink_get_family_id$fou(&(0x7f00000011c0), r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) ftruncate(r1, 0x80079a0) (async) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2500000000000000000000000000000000ff010000000000000000000000000001000400004e210001000000002e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d632000000e0000002000000000000000000000000020000000000000000000000000000000000000000000000090000000000000001000000ffffffff00000000000000003f0000000000000043050000000000000400000000000000ffffffffffffff7fffffffffffffffff07000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r5, @ANYBLOB="15000000"], 0x15c}, 0x1, 0x0, 0x0, 0x890}, 0x2014) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in=@private, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@mcast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e21, 0x0, 0x4e22, 0x2, 0x2, 0xa0, 0x0, 0x84, 0x0, r8}, {0x6, 0x7, 0x10000, 0xe, 0x8, 0x9, 0x1, 0x80000000000002}, {0x1, 0xff, 0x7, 0x5b}, 0x6, 0x6e6bb7, 0x1, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x3504, 0x1, 0x3, 0x0, 0xf, 0x1, 0xffffffd8}}, 0xe8) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) 853.131652ms ago: executing program 3 (id=4341): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = syz_clone(0x40000000, &(0x7f0000000100)="9a36905185769eb27434c2edea547956068c41b0b82dcaf72fe162fe47dff2c26e9f47601490f864baa584cf34523caade339347abaec3848332545dd6cd9e7f10d5034fcb59042bbb6229a8683e210b020fd448fc6147e70e758f1f764b50d25ea9ecf311e9863778659d82d791568dc393c360bf6eb310f7123dd787fd3311ee22ed8496b7ca024f2a8e806ed7333127c9f9e65184fe3568e04fc50a852ccdead553c794af452ddb3bd4c63fff6fb25afed7bf46de7edfc5c00019694c0397af351a892e7387cfd2f3983339ed4978b12b3f190daaf5bc", 0xd8, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="5fe9cdc76688800fb9240fd6cea0753774cfc60f3c5e8decc4d73738acc6751e2c3cdfe26b5875e5c6b8c2a1e7b1974c7a9dc781b6140713114023fb6dd77262fa92bdb338ed921f50b58e52a9a81922e429e5843c4aea94f3d0d84394bb511aa7bf673fdbf07e053b6eea9e2ab92ccb4af970c318eb4e4d8a81854dc94adba27d0810e8d59d24e466a4d0cb30007ce81c95973d2d8f87dedd5263780f0fdeb9bfd4d1c71c") (async) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote}, &(0x7f0000000380)=0x10) sendmsg$nl_generic(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)={0x46c, 0x41, 0x300, 0x70bd27, 0x25dfdbfe, {0x9}, [@nested={0xb1, 0x126, 0x0, 0x1, [@typed={0x8, 0x32, 0x0, 0x0, @u32=0xdd}, @nested={0x4, 0x5d}, @nested={0x4, 0x12c}, @typed={0x14, 0xc3, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0xc4}, @nested={0x4, 0x5a}, @generic="04549d618a65f23007969e9b8b02b3917e4a8570ee098bdc9bea1c0005f6ff41a6852a16c5840f9a143c367b2c01ed8c98440819daa67fb3a85456b5fcdde33ebb73a17daa6a3a50ad682cedbf57918aed609a94636516363535e51f0dfc484be24990a196afcca6dc747264d9e461bb2f4e6f7dfa", @nested={0x4, 0x4b}, @typed={0x8, 0xd, 0x0, 0x0, @uid=r1}]}, @typed={0x8, 0x134, 0x0, 0x0, @pid=r2}, @nested={0x122, 0x91, 0x0, 0x1, [@generic="6b94e21f21f5f6610ae0797e51dd46ffa9de7da91e71358d10b90890a947bb0dfba1d23f72b551f9a2753471da6f5242b20031a48348ad4f6a5b7aafdc011f5f4b453e3560314eb28221e30f2913603bdad510f63459f4b42aa965e3fb15e5ababa543f3b136ce7a111e4ede64618f1ea1c64bee86583a9c4ee3fbaa034b49dc2bb63abf76674e716e8e8e0bbfdf77abe2714455828f3a1d1e40630086108b7e150187f59d02405a662e7cbcf6019f50783d36d769def31acd74348737be44c58d7bffac1f68c3c8736a828331fe946a9bb322de9f0ff724ff3e7f9e90675c8a3fdc2966941ed19ac35fe2dfe7647489009c2fcf3ef2e35bdc", @typed={0xf, 0xe2, 0x0, 0x0, @str='(\xcc]\xe5{\\*&:+\x00'}, @nested={0x4, 0x88}, @nested={0x4, 0x10b}, @generic="a8", @typed={0x4, 0x8c}, @typed={0x8, 0xb4, 0x0, 0x0, @fd=r3}]}, @generic="b5a9069a1178967a97bb45e613a8ec5a22a4a361fed0fbc523adcd37b97b14a3fbc46d984d74dbec5548a4dbd6414081263ef9cdc023949d836f903a30daade5c3e954d8f10795114019acd90ffadc65f08cbd10dcaf0629faaea016a0e0439261c317a0b01d0360c664e10aab790ab7fd21f97f4a7ea3c6331fc20b64fb72a07a304d1b9477d1fc7a1c", @typed={0xd7, 0x46, 0x0, 0x0, @binary="ea30229f173578172ee35d22f03401fef000561eddea5ba1f9f93fab9896fe1dc7c9f466f43a18466868c0aa37a2f2052f8f54f6c1e6037ef1074b2c465dc09b6738281196fcaee80fd39aa5c5781d8fec213576298b6224bd2c6ad11a5d69e753598921b059f3f82e509d50d6979472ebabbc7b1213eeacf12433fc641396b24bd5ed4c0d3f8889dc5d3492f6e513ff02a0486b5a1da115f6c380fce3cce493b2104d8796565df82550ab399f35a795348ad1dc634465d93f91e1d8ceff84974a89c277e827ea2d48bbca521bdbb2a3faf4b0"}, @generic="ed96ad0df3cb6658c2d72db3537839081676dd98a461bcc3f849c25ae029a55f72268bbbcc3096ffc7997c5d7dd7aabf9979c7a81d61ee09c29901933203ec4cb51b1b66b5c17cfe9c1fbfe1a55ec5247c2b3d3f0332b13fa668035d193a56c506f82807c1e1ce2f962473c85ca96260d1eeb0a1d05d5cca37761bf4f2d9779e725c8eccd4ea18aa9c1481a6115890196f543db74cd5e55139c87670abe6b93bd078576c3ea140613d9cd74d8f880dda88d3538f70f3effd090871ebe570a363ae51e6939fb58893f6a58b22bb7d0382af4ae4fb363e1efbdeca44", @typed={0x8, 0xda, 0x0, 0x0, @u32=0x2}, @nested={0x22, 0x5c, 0x0, 0x1, [@generic="11e244085dfbcfd7886b5f6db31aacae681ea17d8aa3b87928d7", @nested={0x4, 0xab}]}, @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x40df}]}, 0x46c}, 0x1, 0x0, 0x0, 0x40001}, 0x80) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r1, &(0x7f00000008c0)='./file0\x00') (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r5, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000088}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x9c, r6, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ad0b26ee6ac0555956bd7717fb028449d17738bf9c97cac7"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x9c}}, 0x40040) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x9, &(0x7f0000000c80)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000d00)='syzkaller\x00', 0x3, 0xca, &(0x7f0000000d40)=""/202, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e40)={0x0, 0x5, 0x3, 0xc0ef}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e80)=[0x1, 0x1], &(0x7f0000000ec0)=[{0x1, 0x2, 0xc, 0x9}, {0x1, 0x3, 0x5, 0xc}, {0x2, 0x2, 0xc, 0x8}, {0x1, 0x2, 0x10}], 0x10, 0x8508}, 0x94) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000fc0)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001040)={r8, r9}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)=r8}, 0x20) (async) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000001280)={0x0, @multicast1, @private}, &(0x7f00000012c0)=0xc) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001300), 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000001540)={&(0x7f0000001380)=""/241, 0xf1, 0x0, &(0x7f0000001480)=""/192, 0xc0}}, 0x10) (async) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x17, &(0x7f0000001140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffff3}, @generic={0x2, 0x7, 0xe, 0x7, 0xa}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0xd, 0x8, 0x0, 0xc, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000001200)='GPL\x00', 0x5, 0x0, &(0x7f0000001240), 0x41000, 0x0, '\x00', r11, @fallback=0x6, r12, 0x8, &(0x7f0000001340)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r13, r8, 0x2, &(0x7f0000001600)=[0xffffffffffffffff, r9, r14, r9, r9, r9, 0xffffffffffffffff], &(0x7f0000001640)=[{0x1, 0x3, 0x2, 0x4}, {0x5, 0x2, 0x10, 0x3}], 0x10, 0xfffffffe}, 0x94) futex_waitv(&(0x7f0000002840)=[{0xfffffffffffffff8, &(0x7f0000001740)=0x2, 0x82}, {0x7e8, &(0x7f0000001780), 0x2}, {0xe, &(0x7f00000017c0)=0x10000, 0x82}, {0x7, &(0x7f0000001800)=0x3, 0x2}, {0x3f, &(0x7f0000001840)=0xfffffffffffffffc, 0x2}, {0xfffffffffffffff9, &(0x7f0000001880), 0x2}, {0x37, &(0x7f00000018c0)=0x5, 0x82}, {0xfffffffffffffff9, &(0x7f0000001900)=0xf6, 0x2}, {0x9, &(0x7f0000001940)=0x7fffffff, 0x82}, {0xa7, &(0x7f0000001980)=0x5, 0x82}, {0x7, &(0x7f00000019c0), 0x2}, {0x9f, &(0x7f0000001a00)=0x2}, {0x8000000000000001, &(0x7f0000001a40)=0x8}, {0x2, &(0x7f0000001a80), 0x80}, {0x1, &(0x7f0000001ac0)=0x9, 0x80}, {0x7fffffffffffffff, &(0x7f0000001b00)=0x3, 0x82}, {0x8, &(0x7f0000001b40)=0x7, 0x2}, {0xfb0000000, &(0x7f0000001b80)=0x7ff, 0x462d9a1d71b29668}, {0xffffffffffffff42, &(0x7f0000001bc0)=0x1, 0x82}, {0x3, &(0x7f0000001c00)=0x3, 0x2}, {0x7, &(0x7f0000001c40)=0x2, 0x2}, {0x7, &(0x7f0000001c80)=0x1, 0x2}, {0x101, &(0x7f0000001cc0)=0x2, 0x2}, {0x0, &(0x7f0000001d00)=0xfffffffffffffff8, 0x82}, {0x10a0, &(0x7f0000001d40)=0x9f8b, 0x2}, {0x7, &(0x7f0000001d80)=0xfffffffffffffff7, 0x2}, {0x1ff, &(0x7f0000001dc0)=0xfff, 0x2}, {0x101, &(0x7f0000001e00)=0x7f, 0x2}, {0x9, &(0x7f0000001e40)=0x4, 0x82}, {0x3ff, &(0x7f0000001e80), 0x82}, {0x8, &(0x7f0000001ec0)=0x5, 0x2}, {0x1b5a, &(0x7f0000001f00)=0x1e45, 0x2}, {0xdc69, &(0x7f0000001f40)=0x101, 0x2}, {0x7fff, &(0x7f0000001f80)=0x2, 0x2}, {0x7ff, &(0x7f0000001fc0)=0x7, 0x2}, {0x1ff, &(0x7f0000002000)=0x80, 0x2}, {0x9, &(0x7f0000002040)=0x7, 0x80}, {0x0, &(0x7f0000002080)=0x2, 0x2}, {0x100000000, &(0x7f00000020c0)=0x3, 0x82}, {0x7, &(0x7f0000002100), 0x2}, {0x4, &(0x7f0000002140), 0x2}, {0x6, &(0x7f0000002180)=0x526, 0x82}, {0xfff, &(0x7f00000021c0)=0x1ff, 0x82}, {0x2, &(0x7f0000002200)=0xd, 0x2}, {0x1e65, &(0x7f0000002240)=0x251, 0x82}, {0xfffffffffffffff8, &(0x7f0000002280)=0x4, 0x2}, {0x3dbc1a1d, &(0x7f00000022c0)=0x1000, 0x82}, {0x2, &(0x7f0000002300)=0x6f36d06b, 0x82}, {0x5fd, &(0x7f0000002340)=0xf9b, 0x2}, {0x74, &(0x7f0000002380)=0x4, 0x82}, {0x6bbc, &(0x7f00000023c0)=0x7f, 0x2}, {0x40, &(0x7f0000002400)=0x7, 0x82}, {0x4, &(0x7f0000002440)=0xf, 0x82}, {0xff, &(0x7f0000002480)=0x7f, 0x82}, {0x1, &(0x7f00000024c0)=0x4, 0x2}, {0x8, &(0x7f0000002500)=0x5, 0x82}, {0x1, &(0x7f0000002540)=0x5, 0x2}, {0x9, &(0x7f0000002580)=0x2, 0x82}, {0xffffffff8a2e31cb, &(0x7f00000025c0)=0x100, 0x2}, {0x80, &(0x7f0000002600)=0x2}, {0x8, &(0x7f0000002640)=0x2b7c, 0x2}, {0xa, &(0x7f0000002680)=0x8, 0x82}, {0x2, &(0x7f00000026c0)=0x6, 0x82}, {0x3, &(0x7f0000002700)=0x400, 0x2}, {0xfffffffffffffff7, &(0x7f0000002740)=0x3, 0x82}, {0x8, &(0x7f0000002780)=0x3, 0x2}, {0x7, &(0x7f00000027c0)=0x2, 0x2}, {0x3fa, &(0x7f0000002800)=0xfffffffffffffe01, 0x82}], 0x44, 0x0, &(0x7f0000002ec0)={0x77359400}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000002f00)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xfa, "c059faaba0e41b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r10, 0xc0709411, &(0x7f0000003f00)={{r15, 0x7, 0x800, 0x5, 0x4, 0x36, 0x0, 0x3ff, 0x8, 0x43, 0xff, 0x2, 0x6, 0x3ff, 0xeccc}, 0x18, [0x0, 0x0, 0x0]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r16 = perf_event_open$cgroup(&(0x7f0000003fc0)={0x0, 0x80, 0x1, 0x3, 0x8, 0x0, 0x0, 0x80000001, 0x20, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0xddde, 0x8}, 0x0, 0x100000001, 0x7, 0x2, 0x5, 0x10, 0x1, 0x0, 0x1, 0x0, 0x6}, r14, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r16, 0x40042408, r14) (async) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000004040)=0x1, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004200)={r14, 0x20, &(0x7f00000041c0)={&(0x7f0000004080)=""/126, 0x7e, 0x0, &(0x7f0000004100)=""/150, 0x96}}, 0x10) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) 536.161581ms ago: executing program 3 (id=4342): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(0x0, r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) msgsnd(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 476.512818ms ago: executing program 3 (id=4343): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x6, 0x0, 0x0, 0x7fff0000}]}) (async) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0xee00, 0x8cffffff00000000) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4000, 0x8ead8e42c9ace8d0) 365.385993ms ago: executing program 1 (id=4344): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pim6reg\x00', 0x0}) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x1, 0x668000) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) (async) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x4}, @TCA_FQ_CE_THRESHOLD={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0xc, 0xc89f, 0xfff75ef7, 0x1, 0x8001, 0x3}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x19, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xb4, &(0x7f0000000400)=""/180, 0x41100, 0x10, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xc, 0x101, 0x80}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000580)=[r4], &(0x7f00000005c0)=[{0x0, 0x5, 0x10, 0x8}, {0x2, 0x3, 0x8}, {0x2, 0x5, 0x7, 0xc}, {0x3, 0x2, 0x9, 0x5}], 0x10, 0x2}, 0x94) 358.234341ms ago: executing program 5 (id=4345): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x44}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x120, 0x880, 0x0, 0x0) 356.17747ms ago: executing program 2 (id=4346): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f00000003c0)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x1a) setsockopt$sock_attach_bpf(r1, 0x1, 0x53, &(0x7f00000007c0), 0x4) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000480)={0xa85e, 0x3, 0x0, 0xe15, 0x9, 0x9, 0xa0, 0x7, r5}, 0x20) r6 = gettid() r7 = open(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x30b101, 0x120) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)=0x104) timer_create(0x1, &(0x7f0000000800)={0x0, 0xe, 0x4, @tid=r6}, &(0x7f00000006c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) timer_getoverrun(r8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000000000)={0x7, 0x9, 0x3, 0x3ff}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r4, 0xd25ce000) open(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103500, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@init_itable}, {@quota}]}, 0x1, 0x431, &(0x7f0000000d80)="$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") r9 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r9, &(0x7f0000000280)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) 341.650407ms ago: executing program 3 (id=4347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000004) r2 = syz_genetlink_get_family_id$nl80211(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, 0x0, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x420880}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x400c0c4) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x2b}}}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x54}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0xe}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x3}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x4f}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x404c000}, 0x20000000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0xf, 0x0, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f97c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000004}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x4008050) 322.775973ms ago: executing program 1 (id=4348): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r3 = creat(0x0, 0x0) lseek(r3, 0x3ff, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f0000000040)) (async) pwritev2(r5, 0x0, 0x0, 0x1600, 0x0, 0x3) 193.039454ms ago: executing program 2 (id=4349): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x8) 192.674823ms ago: executing program 5 (id=4350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x84, 0x0, 0x2, 0x503, 0x0, 0x0, {0x7}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}]}]}, 0x84}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x3818746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@sysvgroups}, {@orlov}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$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") r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xcfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x40003}, 0x13a0a, 0x3, 0x0, 0x0, 0xfff, 0x3, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x48400, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@cgroup=r6, r6, 0x2f, 0x0, 0x0, @void, @value=r6}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback=r6, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$kcm(0x2d, 0x2, 0x0) vmsplice(r8, &(0x7f0000001800)=[{&(0x7f0000000240)='=', 0x1}], 0x1, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000540)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) splice(r7, 0x0, r9, 0x0, 0x4ffe0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={&(0x7f0000000180)="b4789139b686b5db71e2a2dbeab0595e53bc411aaba7e3400aa4ec11fde1fc9950aec2c66e116cb1cbfc04a4c067955888261169b5a0c4e31119e6fd94d03bc0465f0b79e3608163bd7315e649c5c88b550da20f9f5138705711f05ece16ba9593f7240d3e3ead32ad725f20752f2e48dd223d441bd6fa7a39a8bedc3b277e3d704f97005da9bb5fd815d3158849f36e74", &(0x7f0000000380)=""/70, &(0x7f0000001340)="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", &(0x7f0000000000)="1060c51880288fbc16c36d1160d364db5fe2d2", 0x3, r5, 0x4}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@fallback=r2, r0, 0x13, 0x4, r1, @void, @value=r5}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a01040000000000000000010000010900030073797a31000000000900010073797a310000000038000000050a0101000000005b4002b5dc2e0800024055cc8c620900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xac}}, 0x10015) 192.345654ms ago: executing program 3 (id=4351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000002400)="80100280008fa1c7d800210ee7d5", 0xe, 0x4044853, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) (async) sendto$packet(r7, &(0x7f0000002400)="80100280008fa1c7d800210ee7d5", 0xe, 0x4044853, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r12 = socket$inet_udplite(0x2, 0x2, 0x88) r13 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r13, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r14 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r14, &(0x7f0000000000)={0x2, 0x5e24, @empty}, 0x10) getsockopt$inet_mptcp_buf(r14, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 156.959735ms ago: executing program 2 (id=4352): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}, @TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x1, 0x5, 0x6, 0x6, 0x1}, {0x0, 0x0, 0x21, 0x9, 0x400, 0xea}, 0x8, 0x8, 0x14de}}]}}]}, 0x70}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 39.836279ms ago: executing program 3 (id=4353): socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nl80211(0x0, r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x4, 0x8a6}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) msgsnd(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=4354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="010000004f5805000000ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000040000005ae8ea3fac624dab"], 0x48}, 0x1, 0x0, 0x0, 0xd8}, 0x4004044) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000001880)=[{&(0x7f0000000480)=""/108, 0x6c}], 0x1, 0x6, 0x800ff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x5bd7, 0x2}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r5, 0x2) sendmsg$nl_route(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="0000001c980001000c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000c}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x9, r6}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r6, &(0x7f0000000000)="24d948ef9bc4a1856d3aa69fcca68a62a07c7493877237f7dae5428eee7ef68fd8f28738ffff0800de223c82ca60baa4de3e2f8f08da65fa003b73cb", &(0x7f00000002c0)=""/187}, 0x20) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f000009ddc0), 0x20100) write$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x1}, 0x0, 0x20, 0x0, 0x3, 0x1001, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) setresgid(0xee00, 0xee01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@minixdf}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@grpjquota}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") sendmsg$xdp(r3, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x2c, 0x1, r2, 0x2d}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000c00)="fb6866e44bc302b04b79acec87dc75bbc8e8d10d6c9605f7c689645d6d81b1190ed000a21393656604ef4d519068319e419c8289ee8085bca0bde3e7b196f8a21a57b716cac5e8bed57dba7c6f5ed2390a09be7d269299193892341aeff47aac35dd8a70712b94e8941fcfcd5babac410ecf728ced7c13b5d338fd9d44b67905f9cd00d0c26ffa2d31e0b0cdb61fdad96167dd0c3c1b17a4d126a55329926140c67b055588c30bea324d26431fc0b346105597dd639c7a06e164aab9d7490b465a9bde2bee23254f60c56b99e2c6b96ab26ca24ea65d89", 0xd7}], 0x1, 0x0, 0x0, 0x4}, 0x4000804) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f000009de00)={{0x3, 0x80}, {0x0, 0x2}, 0xbde, 0x5, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="720ac4ff0000000071105a000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000b80)={0x4, 0x1, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000a00)=""/60, 0x3c}, {&(0x7f0000000a40)=""/138, 0x8a}], &(0x7f0000000b40)=[0x5, 0x4, 0x7]}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000200001002abd7000f9dbdf250a8010000000000112000100140001000000000000000000000000000000000108000f00ffff5cf49af27710ffff140002000000000000000000000000000000000005"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): 0000000000000246 R12: 0000000000000001 [ 455.344074][T18298] R13: 00007fbf91f96038 R14: 00007fbf91f95fa0 R15: 00007ffc061c9588 [ 455.344102][T18298] [ 455.396611][ T28] audit: type=1400 audit(2000000548.015:11283): avc: denied { create } for pid=18309 comm="syz.2.3625" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 455.473083][T18310] netlink: 'syz.2.3625': attribute type 4 has an invalid length. [ 455.640627][T18310] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3625'. [ 455.657114][ T28] audit: type=1400 audit(2000000548.015:11284): avc: denied { rename } for pid=18309 comm="syz.2.3625" name="file0" dev="tmpfs" ino=2826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 455.694490][T18310] .`: renamed from bond0 [ 456.020613][T18318] xt_CT: No such helper "snmp_trap" [ 456.087016][T18322] loop5: detected capacity change from 0 to 1764 [ 456.160799][ T28] audit: type=1400 audit(2000000548.125:11285): avc: denied { mounton } for pid=18309 comm="syz.2.3625" path="/527/file7" dev="tmpfs" ino=2826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 456.280550][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3629'. [ 456.391929][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'. [ 456.461865][T18340] netlink: 'syz.3.3634': attribute type 16 has an invalid length. [ 456.476586][T18325] loop8: detected capacity change from 0 to 512 [ 456.532451][T18340] netlink: 'syz.3.3634': attribute type 17 has an invalid length. [ 456.585715][T18325] vfat: Unknown parameter 'ÿÿ ' [ 456.949862][T18340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 457.059553][T18351] loop5: detected capacity change from 0 to 128 [ 457.330440][T18325] loop8: detected capacity change from 0 to 512 [ 457.662801][T18369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'. [ 457.821195][T18366] xt_CT: No such helper "snmp_trap" [ 457.950167][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3644'. [ 457.988995][ T28] audit: type=1400 audit(2000000550.655:11286): avc: denied { lock } for pid=18377 comm="syz.1.3645" path="socket:[58078]" dev="sockfs" ino=58078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 458.413328][T18393] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3651'. [ 458.578049][T18399] loop5: detected capacity change from 0 to 512 [ 458.597033][T18399] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.624622][T18399] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 458.635702][T18399] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 458.644856][T18399] System zones: 0-2, 18-18, 34-34 [ 458.718467][T18399] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3652: bad orphan inode 15 [ 458.728605][T18399] loop5: lost filesystem error report for type 5 error -117 [ 458.728821][T18399] ext4_test_bit(bit=14, block=18) = 1 [ 458.741563][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 458.741603][ C0] EXT4-fs (loop5): initial error at time 2000000551: ext4_orphan_get:1417 [ 458.741629][ C0] EXT4-fs (loop5): last error at time 2000000551: ext4_orphan_get:1417 [ 458.767808][T18399] is_bad_inode(inode)=0 [ 458.772128][T18399] NEXT_ORPHAN(inode)=2264924160 [ 458.777143][T18399] max_ino=32 [ 458.780902][T18399] i_nlink=0 [ 458.784545][T18399] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.3652: corrupted inode contents [ 458.839169][T18399] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.839439][T18399] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #15: comm syz.5.3652: mark_inode_dirty error [ 458.885437][T18399] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.886236][T18399] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.3652: corrupted inode contents [ 458.908411][T18399] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.908686][T18399] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.3652: mark_inode_dirty error [ 458.931662][T18399] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.932284][T18399] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.3652: mark inode dirty (error -117) [ 458.955433][T18399] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 458.955683][T18399] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 458.975477][T18399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.215356][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3654'. [ 459.240782][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3655'. [ 459.302196][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3658'. [ 459.449567][ T28] audit: type=1400 audit(2000000808.092:11287): avc: denied { getopt } for pid=18418 comm="syz.1.3660" lport=53128 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 459.525902][ T28] audit: type=1400 audit(2000000808.172:11288): avc: denied { read } for pid=18418 comm="syz.1.3660" path="socket:[57186]" dev="sockfs" ino=57186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 459.622023][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.808297][T18432] xt_CT: No such helper "snmp_trap" [ 459.868396][T18437] loop8: detected capacity change from 0 to 128 [ 460.687617][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3667'. [ 460.806539][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3671'. [ 460.891162][T18464] xt_hashlimit: size too large, truncated to 1048576 [ 461.249430][T18481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.328039][ T28] audit: type=1400 audit(2000000809.982:11289): avc: denied { relabelto } for pid=18482 comm="syz.2.3677" name="538" dev="tmpfs" ino=2879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 461.474327][ T28] audit: type=1400 audit(2000000809.982:11290): avc: denied { associate } for pid=18482 comm="syz.2.3677" name="538" dev="tmpfs" ino=2879 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 461.657070][T18473] loop8: detected capacity change from 0 to 2048 [ 462.196175][T18473] Alternate GPT is invalid, using primary GPT. [ 462.229519][ T28] audit: type=1400 audit(2000000810.882:11291): avc: denied { remove_name } for pid=7882 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 462.278472][T18473] loop8: p2 p3 p7 [ 462.366166][ T28] audit: type=1400 audit(2000000810.882:11292): avc: denied { rmdir } for pid=7882 comm="syz-executor" name="538" dev="tmpfs" ino=2879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 463.663170][T18491] Set syz1 is full, maxelem 65536 reached [ 463.816778][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3681'. [ 463.986576][ T28] audit: type=1400 audit(2000000812.642:11293): avc: denied { bind } for pid=18511 comm="syz.3.3685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 463.986629][T18509] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 464.013283][T18509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 464.022909][T18509] vhci_hcd vhci_hcd.0: Device attached [ 464.032039][T18510] vhci_hcd: connection closed [ 464.040563][ T6722] vhci_hcd vhci_hcd.8: stop threads [ 464.053561][ T6722] vhci_hcd vhci_hcd.8: release socket [ 464.059275][ T6722] vhci_hcd vhci_hcd.8: disconnect device [ 464.128914][T18521] 9p: Bad value for 'rfdno' [ 464.156459][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 464.615181][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3693'. [ 464.624334][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3693'. [ 464.636341][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3693'. [ 464.665337][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3692'. [ 464.727080][ T5781] kernel read not supported for file /vcs (pid: 5781 comm: kworker/0:6) [ 464.744325][ T28] audit: type=1326 audit(2000000813.402:11294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18538 comm="syz.8.3694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40af3bc799 code=0x0 [ 464.968718][T18553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18553 comm=syz.2.3697 [ 465.323506][T18535] Set syz1 is full, maxelem 65536 reached [ 465.422863][T18568] 9p: Bad value for 'wfdno' [ 465.651037][ T28] audit: type=1400 audit(2000000814.302:11295): avc: granted { setsecparam } for pid=18576 comm="syz.1.3703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 465.834238][T18591] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3706'. [ 465.916374][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 465.974716][T18597] lo speed is unknown, defaulting to 1000 [ 465.988627][T18597] ip6_vti0 speed is unknown, defaulting to 1000 [ 466.068866][T18602] loop8: detected capacity change from 0 to 512 [ 466.130469][T18602] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.146198][T18602] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.408174][ T28] audit: type=1400 audit(2000000815.062:11296): avc: denied { accept } for pid=18615 comm="syz.3.3713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.456585][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3710'. [ 466.485327][T18619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3714'. [ 466.527872][T18601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.553063][T18565] Set syz1 is full, maxelem 65536 reached [ 466.694905][ T28] audit: type=1326 audit(2000000815.342:11297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 466.730651][ T28] audit: type=1326 audit(2000000815.342:11298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 466.818401][ T28] audit: type=1326 audit(2000000815.342:11299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 466.888216][ T28] audit: type=1326 audit(2000000815.342:11300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 466.937003][T18637] xt_hashlimit: size too large, truncated to 1048576 [ 467.054548][ T28] audit: type=1326 audit(2000000815.342:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 467.169661][ T28] audit: type=1326 audit(2000000815.352:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 467.760759][ T28] audit: type=1326 audit(2000000815.352:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 467.855627][ T28] audit: type=1326 audit(2000000815.352:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 467.938195][ T28] audit: type=1326 audit(2000000815.352:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18629 comm="syz.3.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 468.079869][T18644] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 469.220745][T18659] netlink: 'syz.5.3725': attribute type 3 has an invalid length. [ 469.359554][T18659] netlink: 'syz.5.3725': attribute type 1 has an invalid length. [ 469.367476][T18659] __nla_validate_parse: 3 callbacks suppressed [ 469.367495][T18659] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.3725'. [ 469.572892][T18671] xt_hashlimit: size too large, truncated to 1048576 [ 469.865375][ T1033] kernel read not supported for file [fscontext] (pid: 1033 comm: kworker/0:2) [ 469.874876][T18677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3733'. [ 470.198673][T18683] netlink: 'syz.3.3734': attribute type 3 has an invalid length. [ 470.245643][T18683] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3734'. [ 471.135156][T18720] loop8: detected capacity change from 0 to 256 [ 471.211416][T18720] FAT-fs (loop8): Directory bread(block 64) failed [ 471.218027][T18720] FAT-fs (loop8): Directory bread(block 65) failed [ 471.224608][T18720] FAT-fs (loop8): Directory bread(block 66) failed [ 471.231161][T18720] FAT-fs (loop8): Directory bread(block 67) failed [ 471.237777][T18720] FAT-fs (loop8): Directory bread(block 68) failed [ 471.244342][T18720] FAT-fs (loop8): Directory bread(block 69) failed [ 471.250955][T18720] FAT-fs (loop8): Directory bread(block 70) failed [ 471.257482][T18720] FAT-fs (loop8): Directory bread(block 71) failed [ 471.264061][T18720] FAT-fs (loop8): Directory bread(block 72) failed [ 471.270624][T18720] FAT-fs (loop8): Directory bread(block 73) failed [ 471.389329][T18723] xt_CT: No such helper "snmp_trap" [ 471.514448][T18741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 479.719473][T18775] loop5: detected capacity change from 0 to 128 [ 479.792965][T18768] loop8: detected capacity change from 0 to 512 [ 479.899419][T18768] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.901183][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3765'. [ 479.929846][T18768] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.348115][T18767] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 480.609261][ T7530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.657723][T18798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3770'. [ 480.825015][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.825015][ T6722] loop5: rw=1, sector=137, nr_sectors = 8 limit=128 [ 480.848284][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.848284][ T6722] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 480.869198][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.869198][ T6722] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 480.894278][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.894278][ T6722] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 480.908056][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.908056][ T6722] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 480.921903][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.921903][ T6722] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 480.935611][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.935611][ T6722] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 480.968421][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.968421][ T6722] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 480.985215][ T6722] kworker/u8:17: attempt to access beyond end of device [ 480.985215][ T6722] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 481.007971][ T6722] kworker/u8:17: attempt to access beyond end of device [ 481.007971][ T6722] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 481.139985][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3774'. [ 481.163272][T18810] loop5: detected capacity change from 0 to 8192 [ 481.178322][T18812] hsr_slave_0: left promiscuous mode [ 481.218090][T18810] msdos: Unknown parameter 'noLots' [ 481.225627][T18812] hsr_slave_1: left promiscuous mode [ 481.442551][T18830] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3779'. [ 481.464041][T18830] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 481.504144][T18803] Set syz1 is full, maxelem 65536 reached [ 481.542947][T18832] netlink: 'syz.8.3779': attribute type 4 has an invalid length. [ 481.558827][T18832] netlink: 'syz.8.3779': attribute type 4 has an invalid length. [ 482.742263][ T1033] IPVS: starting estimator thread 0... [ 482.848232][T18856] IPVS: using max 2304 ests per chain, 115200 per kthread [ 482.933985][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3786'. [ 483.211424][T18865] program syz.8.3787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.570890][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3790'. [ 483.631843][T18890] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3790'. [ 483.704637][T18893] loop8: detected capacity change from 0 to 128 [ 483.746991][T18893] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 483.815136][T18893] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.090446][T18893] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.3795: No space for directory leaf checksum. Please run e2fsck -D. [ 484.107338][T18893] EXT4-fs error (device loop8): htree_dirblock_to_tree:1051: inode #2: comm syz.8.3795: Directory block failed checksum [ 484.122710][T18893] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.3795: No space for directory leaf checksum. Please run e2fsck -D. [ 484.139546][T18893] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.3795: checksumming directory block 0 [ 484.295877][T18898] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.3795: No space for directory leaf checksum. Please run e2fsck -D. [ 484.526777][T18898] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.3795: checksumming directory block 0 [ 484.683776][ T7530] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.745453][T18903] loop5: detected capacity change from 0 to 128 [ 484.763206][T18905] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3798'. [ 484.804484][T18905] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 484.874017][T18905] netlink: 'syz.2.3798': attribute type 4 has an invalid length. [ 484.886837][T18905] netlink: 'syz.2.3798': attribute type 4 has an invalid length. [ 484.897542][ T3411] lo speed is unknown, defaulting to 1000 [ 484.904656][ T3411] syz0: Port: 1 Link ACTIVE [ 484.915434][ T3411] lo speed is unknown, defaulting to 1000 [ 484.932762][ T3411] syz0: Port: 1 Link DOWN [ 484.937618][T18912] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3797'. [ 485.133484][T18922] lo speed is unknown, defaulting to 1000 [ 485.162255][T18922] ip6_vti0 speed is unknown, defaulting to 1000 [ 485.183200][T18926] netlink: 'syz.8.3804': attribute type 32 has an invalid length. [ 485.328541][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3804'. [ 485.414828][T18926] bond2: option coupled_control: invalid value (77) [ 485.443980][T18926] bond2 (unregistering): Released all slaves [ 485.761697][T18932] netlink: 'syz.8.3806': attribute type 4 has an invalid length. [ 485.941981][T18933] SET target dimension over the limit! [ 486.152769][T18940] loop5: detected capacity change from 0 to 128 [ 486.165701][T18935] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3807'. [ 486.933678][T18939] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3807'. [ 487.065057][T18947] ip6gre1: entered allmulticast mode [ 487.106001][T18945] loop8: detected capacity change from 0 to 512 [ 487.114234][T18945] EXT4-fs: Ignoring removed bh option [ 487.121683][T18945] EXT4-fs: Ignoring removed mblk_io_submit option [ 487.132885][T18945] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 487.144731][T18945] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 487.154714][T18945] EXT4-fs (loop8): orphan cleanup on readonly fs [ 487.162911][T18945] __quota_error: 84 callbacks suppressed [ 487.162928][T18945] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 4 [ 487.181417][T18945] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 487.192510][T18945] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3810: Failed to acquire dquot type 1 [ 487.205110][T18945] loop8: lost filesystem error report for type 5 error -5 [ 487.208150][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 487.221744][ C1] EXT4-fs (loop8): last error at time 2000000835: ext4_acquire_dquot:7001 [ 487.232370][T18945] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3810: Invalid block bitmap block 0 in block_group 0 [ 487.247288][T18945] loop8: lost filesystem error report for type 5 error -117 [ 487.252413][T18945] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3810: Invalid block bitmap block 0 in block_group 0 [ 487.276473][T18945] loop8: lost filesystem error report for type 5 error -117 [ 487.276663][T18945] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3810: Invalid block bitmap block 0 in block_group 0 [ 487.300778][T18945] loop8: lost filesystem error report for type 5 error -117 [ 487.301024][T18945] Quota error (device loop8): write_blk: dquota write failed [ 487.315789][T18945] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 487.325771][T18945] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3810: Failed to acquire dquot type 1 [ 487.338839][T18945] loop8: lost filesystem error report for type 5 error -28 [ 487.339312][T18945] Quota error (device loop8): write_blk: dquota write failed [ 487.355402][T18945] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 487.367349][T18945] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3810: Failed to acquire dquot type 1 [ 487.379777][T18945] loop8: lost filesystem error report for type 5 error -28 [ 487.380118][T18945] EXT4-fs (loop8): 1 orphan inode deleted [ 487.395870][T18945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.597631][ T28] audit: type=1400 audit(2000000836.252:11390): avc: denied { watch_reads } for pid=18944 comm="syz.8.3810" path="/550/bus" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.643900][ T7530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.842067][T18955] loop8: detected capacity change from 0 to 512 [ 487.874511][T18955] EXT4-fs: Ignoring removed nobh option [ 487.910127][T18955] EXT4-fs (loop8): 1 orphan inode deleted [ 487.920944][T18955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.137541][T18959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3814'. [ 488.220499][ T7530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.527629][T18962] usb usb9: usbfs: process 18962 (syz.5.3816) did not claim interface 1 before use [ 489.025039][ T28] audit: type=1326 audit(2000000837.682:11391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 489.106115][ T28] audit: type=1326 audit(2000000837.682:11392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 489.169634][ T28] audit: type=1326 audit(2000000837.696:11393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18977 comm="syz.3.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x7ffc0000 [ 489.306662][T18986] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 489.354482][T18990] loop5: detected capacity change from 0 to 512 [ 489.425739][T18992] tipc: Started in network mode [ 489.441614][T18992] tipc: Node identity 4, cluster identity 4711 [ 489.466243][T18992] tipc: Node number set to 4 [ 489.496074][T18992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 489.974154][T19016] loop8: detected capacity change from 0 to 512 [ 490.171772][T19016] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.209738][T19016] ext4 filesystem being mounted at /558/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 490.319176][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'. [ 490.408204][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3835'. [ 490.441454][T19016] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3833'. [ 490.460356][T19027] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3835'. [ 490.506650][ T7530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.728508][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3839'. [ 490.815062][T19041] sctp: [Deprecated]: syz.3.3840 (pid 19041) Use of int in max_burst socket option. [ 490.815062][T19041] Use struct sctp_assoc_value instead [ 491.164646][T19054] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 491.364651][T19061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3846'. [ 491.509965][T19079] siw: device registration error -23 [ 491.662755][T19092] loop8: detected capacity change from 0 to 1024 [ 491.667665][T19093] bridge9: entered promiscuous mode [ 491.682099][T19093] bridge9: entered allmulticast mode [ 491.702056][T19092] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 491.705152][T19093] team0: Port device bridge9 added [ 491.725039][T19092] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 491.760939][T19091] bridge10: entered promiscuous mode [ 491.766281][T19091] bridge10: entered allmulticast mode [ 491.783350][T19091] team0: Port device bridge10 added [ 492.453766][T19119] lo speed is unknown, defaulting to 1000 [ 492.473880][T19119] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.485429][T19127] futex_wake_op: syz.3.3866 tries to shift op by 32; fix this program [ 492.575485][T19141] veth1_virt_wifi: mtu less than device minimum [ 492.730889][T19159] netlink: 'syz.3.3876': attribute type 3 has an invalid length. [ 492.929410][T19176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.940680][T19176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.013304][T19176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.023768][T19176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.085319][T19176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.100593][T19176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.135524][T19165] lo speed is unknown, defaulting to 1000 [ 493.150529][T19165] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.161714][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 493.161726][ T28] audit: type=1326 audit(2000000841.826:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.214927][ T28] audit: type=1326 audit(2000000841.826:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.261299][T19176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.272114][ T28] audit: type=1326 audit(2000000841.826:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.316011][T19176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.337575][ T28] audit: type=1326 audit(2000000841.826:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.396624][ T28] audit: type=1326 audit(2000000841.826:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.421755][T19199] lo speed is unknown, defaulting to 1000 [ 493.422005][T19199] ip6_vti0 speed is unknown, defaulting to 1000 [ 493.446099][ T58] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.455392][ T28] audit: type=1326 audit(2000000841.826:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.480873][ T28] audit: type=1326 audit(2000000841.826:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.510393][ T28] audit: type=1326 audit(2000000841.826:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.534182][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.545613][ T28] audit: type=1326 audit(2000000841.826:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.571379][ T28] audit: type=1326 audit(2000000841.826:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19190 comm="syz.2.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd134c799 code=0x7ffc0000 [ 493.618249][ T58] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.626775][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.658285][ T58] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.675292][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.684175][ T58] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.692576][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.733064][T19165] chnl_net:caif_netlink_parms(): no params data found [ 493.800799][T19165] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.808069][T19165] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.815592][T19165] bridge_slave_0: entered allmulticast mode [ 493.822513][T19165] bridge_slave_0: entered promiscuous mode [ 493.841356][T19165] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.848840][T19165] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.862249][T19165] bridge_slave_1: entered allmulticast mode [ 493.869626][T19165] bridge_slave_1: entered promiscuous mode [ 493.900085][T19165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.944360][T19165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.987181][T19165] team0: Port device team_slave_0 added [ 494.068366][ T5781] SELinux: failure in sel_netif_sid_slow(), invalid network interface (116) [ 494.077320][ T5781] SELinux: failure in sel_netif_sid_slow(), invalid network interface (115) [ 494.153801][ T6722] bond2 (unregistering): (slave gretap1): Releasing active interface [ 494.162943][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (116) [ 494.541095][T19259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3898'. [ 494.750990][ T6722] team0: Port device bridge9 removed [ 494.791337][ T6722] team0: Port device bridge10 removed [ 494.830667][ T6722] bond0 (unregistering): Released all slaves [ 494.838245][ T6722] bond1 (unregistering): Released all slaves [ 494.847046][ T6722] bond2 (unregistering): Released all slaves [ 494.855508][ T6722] bond3 (unregistering): Released all slaves [ 494.865370][T19165] team0: Port device team_slave_1 added [ 494.890811][T19165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.897911][T19165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.924462][T19165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.936566][ T6722] tipc: Left network mode [ 494.946764][T19165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.960694][T19165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.987393][T19165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.026959][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3899'. [ 495.087763][T19272] loop8: detected capacity change from 0 to 128 [ 495.102019][T19272] EXT4-fs: Ignoring removed nobh option [ 495.110301][T19266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3899'. [ 495.128903][T19272] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 495.131218][T19266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3899'. [ 495.160554][T19277] SELinux: syz.3.3903 (19277) set checkreqprot to 1. This is no longer supported. [ 495.170215][T19272] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.270140][T19165] hsr_slave_0: entered promiscuous mode [ 495.278038][T19165] hsr_slave_1: entered promiscuous mode [ 495.337015][ T7530] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 495.514094][T19306] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3907'. [ 495.524097][T19306] netlink: 'syz.5.3907': attribute type 1 has an invalid length. [ 495.536132][T19308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3908'. [ 495.596944][T19313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.627081][T19316] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3910'. [ 495.698686][ T6722] IPVS: stop unused estimator thread 0... [ 495.835064][T19338] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3914'. [ 495.856110][T19334] loop5: detected capacity change from 0 to 512 [ 495.877151][T19165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 495.914277][T19334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.943916][T19334] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 495.956656][T19165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 495.983852][T19165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 496.011761][T19165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 496.080718][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.129005][T19165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.163533][T19365] loop5: detected capacity change from 0 to 128 [ 496.183096][T19165] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.215754][T19365] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 496.250556][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.257648][ T6717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.302023][T19372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'. [ 496.314078][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.321194][ T6717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.330968][T19365] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.411183][T19165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.423863][T19381] loop8: detected capacity change from 0 to 164 [ 496.448206][T19165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.467309][T12424] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.595365][T19398] loop8: detected capacity change from 0 to 512 [ 496.612710][T19398] EXT4-fs: Ignoring removed i_version option [ 496.621558][T19398] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 496.676277][T19398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 496.709013][T19398] System zones: 1-12 [ 496.713548][T19398] EXT4-fs (loop8): orphan cleanup on readonly fs [ 496.781054][T19405] loop5: detected capacity change from 0 to 128 [ 496.798595][T19405] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.3921'. [ 496.808182][T19405] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.3921'. [ 496.848258][T19405] vhci_hcd vhci_hcd.4: invalid port number 254 [ 496.854505][T19405] vhci_hcd vhci_hcd.4: default hub control req: 4411 v0306 i00fe l0 [ 496.892665][T19398] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3923: invalid indirect mapped block 12 (level 1) [ 496.964997][T19165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.040616][T19398] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 497.040906][T19398] EXT4-fs (loop8): Remounting filesystem read-only [ 497.050111][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 497.050129][ C0] EXT4-fs (loop8): initial error at time 2000000845: ext4_free_branches:1023: inode 11 [ 497.050181][ C0] EXT4-fs (loop8): last error at time 2000000845: ext4_free_branches:1023: inode 11 [ 497.341973][T19398] EXT4-fs (loop8): 1 truncate cleaned up [ 497.357613][T19398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 497.391543][ T7530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 497.516338][T19165] veth0_vlan: entered promiscuous mode [ 497.540883][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3926'. [ 497.573034][T19165] veth1_vlan: entered promiscuous mode [ 497.580889][T19421] xt_hashlimit: size too large, truncated to 1048576 [ 497.613261][T19165] veth0_macvtap: entered promiscuous mode [ 497.659774][T19165] veth1_macvtap: entered promiscuous mode [ 497.692542][T19165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.704228][T19165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.830590][ T6722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.854426][ T6722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.869811][ T6722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.888445][ T6722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.004276][T19434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3929'. [ 498.200631][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 498.200645][ T28] audit: type=1400 audit(2000000846.866:11559): avc: denied { create } for pid=19441 comm="syz.1.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.242645][ T28] audit: type=1400 audit(2000000846.906:11560): avc: denied { read write } for pid=19406 comm="syz.3.3925" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 498.243837][T19407] syz.3.3925 (19407) used obsolete PPPIOCDETACH ioctl [ 498.302333][T19446] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 498.315896][ T28] audit: type=1400 audit(2000000846.906:11561): avc: denied { open } for pid=19406 comm="syz.3.3925" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 498.368382][ T28] audit: type=1400 audit(2000000846.906:11562): avc: denied { ioctl } for pid=19406 comm="syz.3.3925" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 498.432722][ T28] audit: type=1400 audit(2000000846.936:11563): avc: denied { execmem } for pid=19441 comm="syz.1.3933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 498.478160][ T28] audit: type=1400 audit(2000000847.066:11564): avc: denied { create } for pid=19444 comm="syz.5.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 498.520822][ T28] audit: type=1400 audit(2000000847.086:11565): avc: denied { shutdown } for pid=19449 comm="syz.8.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.581682][ T28] audit: type=1400 audit(2000000847.086:11566): avc: denied { getopt } for pid=19449 comm="syz.8.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.625620][T19453] loop5: detected capacity change from 0 to 512 [ 498.628241][ T28] audit: type=1400 audit(2000000847.086:11567): avc: denied { connect } for pid=19449 comm="syz.8.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 498.682117][ T28] audit: type=1400 audit(2000000847.086:11568): avc: denied { name_connect } for pid=19449 comm="syz.8.3936" dest=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 498.942103][T19459] loop5: detected capacity change from 0 to 128 [ 499.138313][T19466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3940'. [ 499.233087][T19474] loop5: detected capacity change from 0 to 128 [ 499.256326][T19476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=19476 comm=syz.3.3944 [ 499.350241][T19481] netlink: 'syz.3.3946': attribute type 1 has an invalid length. [ 499.453360][T19493] tipc: Started in network mode [ 499.471058][T19493] tipc: Node identity 4, cluster identity 4711 [ 499.485009][T19493] tipc: Node number set to 4 [ 500.078979][ T5781] IPVS: starting estimator thread 0... [ 500.208779][T19514] IPVS: using max 2352 ests per chain, 117600 per kthread [ 500.418878][T19518] loop8: detected capacity change from 0 to 512 [ 500.494041][T19518] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 500.685164][T19518] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.3957: corrupted xattr entries [ 500.723429][T19518] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 500.723640][T19518] EXT4-fs (loop8): Remounting filesystem read-only [ 500.732822][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 500.732840][ C0] EXT4-fs (loop8): initial error at time 2000000849: xattr_find_entry:337: inode 15 [ 500.732861][ C0] EXT4-fs (loop8): last error at time 2000000849: xattr_find_entry:337: inode 15 [ 500.860374][T19518] EXT4-fs (loop8): 1 truncate cleaned up [ 500.878707][T19518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.911743][T19536] xt_ecn: cannot match TCP bits for non-tcp packets [ 501.983448][T19529] xt_CT: No such helper "snmp_trap" [ 502.018236][T19536] __nla_validate_parse: 7 callbacks suppressed [ 502.018255][T19536] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3960'. [ 502.079543][T19536] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3960'. [ 502.215695][ T7530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.259902][T19550] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3963'. [ 502.349942][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 502.361057][T19556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3964'. [ 502.877865][T19560] loop8: detected capacity change from 0 to 512 [ 502.994383][T19560] EXT4-fs: Ignoring removed oldalloc option [ 503.053317][T19560] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 503.150168][T19560] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 503.184387][T19560] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.3966: bad orphan inode 4 [ 503.231216][T19563] netlink: 'syz.1.3967': attribute type 5 has an invalid length. [ 503.240639][T19560] loop8: lost filesystem error report for type 5 error -117 [ 503.240901][T19560] EXT4-fs (loop8): 1 orphan inode deleted [ 503.248316][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 503.248342][ C1] EXT4-fs (loop8): initial error at time 2000000851: ext4_orphan_get:1417 [ 503.248414][ C1] EXT4-fs (loop8): last error at time 2000000851: ext4_orphan_get:1417 [ 503.427516][T19560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.463659][T19572] xt_hashlimit: size too large, truncated to 1048576 [ 503.494476][T19560] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.940906][T19576] random: crng reseeded on system resumption [ 503.946970][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 503.946982][ T28] audit: type=1400 audit(2000000852.606:11640): avc: denied { write } for pid=19575 comm="syz.5.3971" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 504.004433][T19560] loop8: detected capacity change from 0 to 512 [ 504.021614][T19577] lo speed is unknown, defaulting to 1000 [ 504.043843][T19560] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 504.059111][T19560] EXT4-fs (loop8): orphan cleanup on readonly fs [ 504.060754][ T28] audit: type=1400 audit(2000000852.606:11641): avc: denied { open } for pid=19575 comm="syz.5.3971" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 504.067552][T19580] FAULT_INJECTION: forcing a failure. [ 504.067552][T19580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.105910][T19577] ip6_vti0 speed is unknown, defaulting to 1000 [ 504.118838][T19560] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 504.137483][ T28] audit: type=1400 audit(2000000852.766:11642): avc: denied { ioctl } for pid=19575 comm="syz.5.3971" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 504.161125][T19580] CPU: 1 UID: 0 PID: 19580 Comm: syz.3.3972 Tainted: G W syzkaller #0 PREEMPT(full) [ 504.161225][T19580] Tainted: [W]=WARN [ 504.161284][T19580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.161340][T19580] Call Trace: [ 504.161361][T19580] [ 504.161390][T19580] __dump_stack+0x1d/0x30 [ 504.161470][T19580] dump_stack_lvl+0x95/0xd0 [ 504.161603][T19580] dump_stack+0x15/0x1b [ 504.161672][T19580] should_fail_ex+0x263/0x280 [ 504.161763][T19580] should_fail+0xb/0x20 [ 504.161824][T19580] should_fail_usercopy+0x1a/0x20 [ 504.161927][T19580] _copy_from_user+0x1c/0xb0 [ 504.162111][T19580] ___sys_sendmsg+0xc1/0x1e0 [ 504.162257][T19580] __x64_sys_sendmsg+0xd4/0x160 [ 504.162365][T19580] x64_sys_call+0x194c/0x3020 [ 504.162506][T19580] do_syscall_64+0x12c/0x370 [ 504.162552][T19580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.162607][T19580] RIP: 0033:0x7fa322f6c799 [ 504.162623][T19580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.162642][T19580] RSP: 002b:00007fa3219c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.162698][T19580] RAX: ffffffffffffffda RBX: 00007fa3231e5fa0 RCX: 00007fa322f6c799 [ 504.162760][T19580] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 504.162803][T19580] RBP: 00007fa3219c7090 R08: 0000000000000000 R09: 0000000000000000 [ 504.162890][T19580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.162932][T19580] R13: 00007fa3231e6038 R14: 00007fa3231e5fa0 R15: 00007fff83806b88 [ 504.163003][T19580] [ 504.305793][T19560] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 504.345550][T19560] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.3966: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 504.367038][T19560] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 504.368141][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 504.383734][ C1] EXT4-fs (loop8): last error at time 2000000853: ext4_ext_check_inode:521: inode 13 [ 504.422110][T19560] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3966: couldn't read orphan inode 13 (err -117) [ 504.455160][T19560] loop8: lost filesystem error report for type 5 error -117 [ 504.462231][T19560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 504.483055][T19560] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.486001][T19582] lo speed is unknown, defaulting to 1000 [ 504.531300][T19582] ip6_vti0 speed is unknown, defaulting to 1000 [ 504.606723][ T28] audit: type=1400 audit(2000000853.266:11643): avc: denied { mount } for pid=19581 comm="syz.1.3973" name="/" dev="ramfs" ino=62998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 504.653272][T19591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3976'. [ 504.713387][T19589] loop5: detected capacity change from 0 to 8192 [ 504.729735][ T28] audit: type=1400 audit(2000000853.396:11644): avc: denied { mounton } for pid=19581 comm="syz.1.3973" path="/" dev="ramfs" ino=62998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 504.729893][T19586] 9p: Bad value for 'rfdno' [ 504.761231][ T28] audit: type=1400 audit(2000000853.426:11645): avc: denied { getopt } for pid=19593 comm="syz.8.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 504.799446][T19589] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 504.807103][T19589] FAT-fs (loop5): Filesystem has been set read-only [ 504.884895][ T28] audit: type=1400 audit(2000000853.516:11646): avc: denied { write } for pid=19588 comm="syz.5.3975" name="softnet_stat" dev="proc" ino=4026533002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 505.051122][ T28] audit: type=1400 audit(2000000853.716:11647): avc: denied { create } for pid=19596 comm="syz.3.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 505.542052][T19606] loop8: detected capacity change from 0 to 512 [ 505.542304][T19606] msdos: Unknown parameter 'dotlaxed' [ 505.619385][T19607] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3980'. [ 506.500771][T19618] FAULT_INJECTION: forcing a failure. [ 506.500771][T19618] name failslab, interval 1, probability 0, space 0, times 0 [ 506.500800][T19618] CPU: 0 UID: 0 PID: 19618 Comm: syz.3.3984 Tainted: G W syzkaller #0 PREEMPT(full) [ 506.500832][T19618] Tainted: [W]=WARN [ 506.500868][T19618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.500881][T19618] Call Trace: [ 506.500888][T19618] [ 506.500897][T19618] __dump_stack+0x1d/0x30 [ 506.500967][T19618] dump_stack_lvl+0x95/0xd0 [ 506.500989][T19618] dump_stack+0x15/0x1b [ 506.501027][T19618] should_fail_ex+0x263/0x280 [ 506.501125][T19618] should_failslab+0x8c/0xb0 [ 506.501145][T19618] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 506.501168][T19618] ? __alloc_skb+0x2d6/0x690 [ 506.501232][T19618] __alloc_skb+0x2d6/0x690 [ 506.501261][T19618] ? __alloc_skb+0x200/0x690 [ 506.501288][T19618] netlink_alloc_large_skb+0xbf/0xf0 [ 506.501313][T19618] netlink_sendmsg+0x40c/0x6f0 [ 506.501476][T19618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.501512][T19618] ____sys_sendmsg+0x5af/0x600 [ 506.501611][T19618] ___sys_sendmsg+0x195/0x1e0 [ 506.501660][T19618] __x64_sys_sendmsg+0xd4/0x160 [ 506.501702][T19618] x64_sys_call+0x194c/0x3020 [ 506.501777][T19618] do_syscall_64+0x12c/0x370 [ 506.501798][T19618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.501819][T19618] RIP: 0033:0x7fa322f6c799 [ 506.501833][T19618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.501867][T19618] RSP: 002b:00007fa3219c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.501949][T19618] RAX: ffffffffffffffda RBX: 00007fa3231e5fa0 RCX: 00007fa322f6c799 [ 506.501961][T19618] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 506.502049][T19618] RBP: 00007fa3219c7090 R08: 0000000000000000 R09: 0000000000000000 [ 506.502060][T19618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.502073][T19618] R13: 00007fa3231e6038 R14: 00007fa3231e5fa0 R15: 00007fff83806b88 [ 506.502101][T19618] [ 506.777606][T19625] lo speed is unknown, defaulting to 1000 [ 506.777940][T19625] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.118598][T19634] lo speed is unknown, defaulting to 1000 [ 507.118937][T19634] ip6_vti0 speed is unknown, defaulting to 1000 [ 507.706284][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'. [ 507.728194][ T28] audit: type=1400 audit(2000000856.306:11648): avc: denied { read } for pid=19636 comm="syz.5.3991" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 507.788372][ T28] audit: type=1400 audit(2000000856.306:11649): avc: denied { open } for pid=19636 comm="syz.5.3991" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 508.028585][T19664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3997'. [ 508.090622][T19647] lo speed is unknown, defaulting to 1000 [ 508.096677][T19647] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.109141][T19672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3997'. [ 508.148171][T19672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3997'. [ 508.166831][T19667] loop5: detected capacity change from 0 to 8192 [ 508.303585][T19647] chnl_net:caif_netlink_parms(): no params data found [ 508.384239][T19691] loop5: detected capacity change from 0 to 512 [ 508.440831][T19691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 508.679887][T19691] EXT4-fs (loop5): 1 truncate cleaned up [ 508.695075][T19691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.885436][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.032719][ T6840] .` (unregistering): Released all slaves [ 509.034546][ T6840] bond1 (unregistering): Released all slaves [ 509.043730][ T6840] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 509.044243][ T6840] bond2 (unregistering): Released all slaves [ 509.047211][ T6840] bond3 (unregistering): (slave veth5): Releasing active interface [ 509.047680][ T6840] bond3 (unregistering): Released all slaves [ 509.066890][T19647] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.066976][T19647] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.067110][T19647] bridge_slave_0: entered allmulticast mode [ 509.067758][T19647] bridge_slave_0: entered promiscuous mode [ 509.070090][T19647] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.070143][T19647] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.070283][T19647] bridge_slave_1: entered allmulticast mode [ 509.070884][T19647] bridge_slave_1: entered promiscuous mode [ 509.084357][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 509.084371][ T28] audit: type=1400 audit(2000000857.746:11665): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.085012][ T28] audit: type=1400 audit(2000000857.746:11666): avc: denied { search } for pid=3040 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.085036][ T28] audit: type=1400 audit(2000000857.746:11667): avc: denied { search } for pid=3040 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.085059][ T28] audit: type=1400 audit(2000000857.746:11668): avc: denied { read } for pid=3040 comm="dhcpcd" name="n59" dev="tmpfs" ino=20873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 509.085152][ T28] audit: type=1400 audit(2000000857.746:11669): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=20873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 509.085183][ T28] audit: type=1400 audit(2000000857.746:11670): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n59" dev="tmpfs" ino=20873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 509.121753][ T6840] tipc: Left network mode [ 509.135244][T19647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.136573][T19647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.171633][T19647] team0: Port device team_slave_0 added [ 509.183121][T19647] team0: Port device team_slave_1 added [ 509.236232][ T28] audit: type=1400 audit(2000000857.896:11671): avc: denied { read open } for pid=19714 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.236271][ T28] audit: type=1400 audit(2000000857.896:11672): avc: denied { getattr } for pid=19714 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.236485][T19647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.236500][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.236535][T19647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.237203][T19647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.237217][T19647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.237387][T19647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.300445][T19719] loop5: detected capacity change from 0 to 128 [ 509.312669][T19647] hsr_slave_0: entered promiscuous mode [ 509.313142][T19647] hsr_slave_1: entered promiscuous mode [ 509.313495][T19647] debugfs: 'hsr0' already exists in 'hsr' [ 509.313509][T19647] Cannot create hsr debugfs directory [ 509.325500][ T6840] hsr_slave_0: left promiscuous mode [ 509.327669][ T6840] hsr_slave_1: left promiscuous mode [ 509.433958][T19703] FAULT_INJECTION: forcing a failure. [ 509.433958][T19703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.808436][T19703] CPU: 0 UID: 0 PID: 19703 Comm: syz.8.4005 Tainted: G W syzkaller #0 PREEMPT(full) [ 509.808595][T19703] Tainted: [W]=WARN [ 509.808601][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.808696][T19703] Call Trace: [ 509.808704][T19703] [ 509.808714][T19703] __dump_stack+0x1d/0x30 [ 509.808744][T19703] dump_stack_lvl+0x95/0xd0 [ 509.808775][T19703] dump_stack+0x15/0x1b [ 509.808809][T19703] should_fail_ex+0x263/0x280 [ 509.808861][T19703] should_fail+0xb/0x20 [ 509.808896][T19703] should_fail_usercopy+0x1a/0x20 [ 509.808943][T19703] _copy_to_user+0x20/0xa0 [ 509.808980][T19703] simple_read_from_buffer+0xb5/0x130 [ 509.809011][T19703] proc_fail_nth_read+0x10e/0x150 [ 509.809089][T19703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 509.809123][T19703] vfs_read+0x1ab/0x7f0 [ 509.809164][T19703] ? __rcu_read_unlock+0x4e/0x70 [ 509.809251][T19703] ? __fget_files+0x184/0x1c0 [ 509.809282][T19703] ? mutex_lock+0x57/0x90 [ 509.809321][T19703] ksys_read+0xdc/0x1a0 [ 509.809361][T19703] __x64_sys_read+0x40/0x50 [ 509.809493][T19703] x64_sys_call+0x2886/0x3020 [ 509.809558][T19703] do_syscall_64+0x12c/0x370 [ 509.809586][T19703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.809615][T19703] RIP: 0033:0x7f40af37cfce [ 509.809679][T19703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.809751][T19703] RSP: 002b:00007f40ade16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 509.809777][T19703] RAX: ffffffffffffffda RBX: 00007f40ade176c0 RCX: 00007f40af37cfce [ 509.809814][T19703] RDX: 000000000000000f RSI: 00007f40ade170a0 RDI: 0000000000000005 [ 509.809886][T19703] RBP: 00007f40ade17090 R08: 0000000000000000 R09: 0000000000000000 [ 509.809899][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.809912][T19703] R13: 00007f40af636038 R14: 00007f40af635fa0 R15: 00007ffc5170b3b8 [ 509.809933][T19703] [ 509.814269][ T28] audit: type=1400 audit(2000000858.476:11673): avc: denied { add_name } for pid=19713 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 509.814437][ T28] audit: type=1400 audit(2000000858.476:11674): avc: denied { create } for pid=19713 comm="dhcpcd-run-hook" name="resolv.conf.eth6.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 510.082150][T19737] netlink: 'syz.5.4012': attribute type 10 has an invalid length. [ 510.083792][T19737] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 510.087060][T19737] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4012'. [ 510.095440][ T6840] IPVS: stop unused estimator thread 0... [ 510.095887][T19737] loop5: detected capacity change from 0 to 256 [ 510.096367][T19737] vfat: Bad value for 'tz' [ 510.291763][T19749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4014'. [ 510.367390][T19647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 510.369904][T19647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 510.372751][T19647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 510.375438][T19647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 510.590373][T19750] loop8: detected capacity change from 0 to 128 [ 510.665235][T19647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.690032][T19647] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.696292][ T6722] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.696421][ T6722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.700866][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.700901][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.731120][T19772] loop5: detected capacity change from 0 to 128 [ 510.731387][T19772] EXT4-fs: Ignoring removed nobh option [ 510.764041][T19647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 510.764066][T19647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.776417][T19772] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.776618][T19772] ext4 filesystem being mounted at /380/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.871070][T12424] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.948508][T19647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.155412][T19647] veth0_vlan: entered promiscuous mode [ 511.157490][T19647] veth1_vlan: entered promiscuous mode [ 511.196604][T19647] veth0_macvtap: entered promiscuous mode [ 511.206218][T19647] veth1_macvtap: entered promiscuous mode [ 511.241244][T19647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.257986][T19647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.278294][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.278571][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.278649][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.278689][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.521352][T19845] loop2: detected capacity change from 0 to 1024 [ 511.521713][T19845] EXT4-fs: Ignoring removed orlov option [ 511.602309][T19845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.922075][T19854] hub 9-0:1.0: USB hub found [ 511.922125][T19854] hub 9-0:1.0: 8 ports detected [ 512.329915][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.431766][T19879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.440370][T19879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.472086][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4035'. [ 512.539693][T19886] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4035'. [ 512.559685][T19886] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4035'. [ 512.887829][T19905] ALSA: seq fatal error: cannot create timer (-22) [ 512.941596][T19908] loop5: detected capacity change from 0 to 2048 [ 513.033944][T19908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.148495][T19908] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 513.183852][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4046'. [ 513.195894][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4046'. [ 513.219987][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.234403][T19919] kernel profiling enabled (shift: 16) [ 513.357471][T19918] bridge5: entered promiscuous mode [ 513.382301][T19918] bridge5: entered allmulticast mode [ 513.393614][T19926] IPv6: sit1: Disabled Multicast RS [ 513.412091][T19919] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.127644][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 514.127660][ T28] audit: type=1400 audit(2000000862.786:11714): avc: denied { listen } for pid=19966 comm="syz.3.4059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 514.154124][ T28] audit: type=1400 audit(2000000862.816:11715): avc: denied { ioctl } for pid=19966 comm="syz.3.4059" path="socket:[64359]" dev="sockfs" ino=64359 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 514.260039][ T28] audit: type=1400 audit(2000000862.926:11716): avc: denied { write } for pid=19973 comm="syz.3.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 514.294710][ T28] audit: type=1400 audit(2000000862.926:11717): avc: denied { nlmsg_write } for pid=19973 comm="syz.3.4061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 514.386450][ T28] audit: type=1400 audit(2000000863.046:11718): avc: denied { read } for pid=19977 comm="syz.3.4063" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 514.410233][ T28] audit: type=1400 audit(2000000863.046:11719): avc: denied { open } for pid=19977 comm="syz.3.4063" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 514.511848][ T28] audit: type=1400 audit(2000000863.176:11720): avc: denied { shutdown } for pid=19989 comm="syz.3.4068" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 514.567606][T19993] xt_hashlimit: size too large, truncated to 1048576 [ 514.693270][ T28] audit: type=1400 audit(2000000863.356:11721): avc: denied { write } for pid=19996 comm="syz.5.4070" path="socket:[64430]" dev="sockfs" ino=64430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.719732][ T28] audit: type=1400 audit(2000000863.386:11722): avc: denied { setopt } for pid=19996 comm="syz.5.4070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.741966][T19999] loop5: detected capacity change from 0 to 512 [ 514.759118][T19999] EXT4-fs: Ignoring removed orlov option [ 514.785140][T20001] Invalid argument reading file caps for ./file0 [ 514.787561][ T28] audit: type=1400 audit(2000000863.446:11723): avc: denied { execute_no_trans } for pid=20000 comm="syz.1.4071" path="/32/file0" dev="tmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 514.803579][T20001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4071'. [ 514.819895][T19999] EXT4-fs: Ignoring removed i_version option [ 514.859855][T19999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 514.866590][T19999] EXT4-fs (loop5): unable to read superblock [ 514.876957][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.886143][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.897736][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.911102][T20006] loop8: detected capacity change from 0 to 512 [ 514.918367][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.930094][T19997] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 514.944327][T20001] netlink: 'syz.1.4071': attribute type 10 has an invalid length. [ 514.992239][T20001] team0: Port device dummy0 added [ 515.024688][T20005] netlink: 'syz.1.4071': attribute type 10 has an invalid length. [ 515.069939][T20005] team0: Port device dummy0 removed [ 515.082810][T20027] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4078'. [ 515.095148][T20005] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 515.107828][T20027] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4078'. [ 515.122494][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4078'. [ 515.133139][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4078'. [ 515.144024][T20027] netlink: 'syz.5.4078': attribute type 12 has an invalid length. [ 515.408821][T20053] xt_hashlimit: size too large, truncated to 1048576 [ 515.415640][T20053] xt_hashlimit: max too large, truncated to 1048576 [ 515.533949][T20059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4091'. [ 515.551741][T20059] bond1: entered promiscuous mode [ 515.557012][T20059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.592277][T20059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.600658][T20059] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 515.613076][T20059] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 515.673267][T20064] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.810277][ T3583] Bluetooth: hci0: command 0x1003 tx timeout [ 515.816393][ T5055] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 515.918572][T20082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4100'. [ 516.027533][T20089] netlink: 'syz.2.4102': attribute type 4 has an invalid length. [ 516.188355][T20100] loop8: detected capacity change from 0 to 1024 [ 516.227953][T20098] loop5: detected capacity change from 0 to 1024 [ 516.236443][T20098] EXT4-fs: Ignoring removed i_version option [ 516.243977][T20098] EXT4-fs: Ignoring removed bh option [ 516.252473][T20098] EXT4-fs: inline encryption not supported [ 516.262872][T20100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.288234][T20098] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 516.357047][T20100] SELinux: syz.8.4107 (20100) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 516.378910][T20098] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.4106: lblock 2 mapped to illegal pblock 2 (length 1) [ 516.409976][T20098] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 516.410133][T20098] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.4106: lblock 0 mapped to illegal pblock 48 (length 1) [ 516.419231][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 516.419250][ C1] EXT4-fs (loop5): initial error at time 2000000865: ext4_map_blocks:776: inode 3: block 2 [ 516.419288][ C1] EXT4-fs (loop5): last error at time 2000000865: ext4_map_blocks:776: inode 3: block 2 [ 516.537302][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4109'. [ 516.591126][T20098] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 516.592402][T20098] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.4106: Failed to acquire dquot type 0 [ 516.659291][T20098] loop5: lost filesystem error report for type 5 error -117 [ 516.664940][T20098] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 516.672659][T20112] x_tables: duplicate underflow at hook 2 [ 516.718246][T20098] loop5: lost filesystem error report for type 5 error -117 [ 516.718762][T20098] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.4106: mark_inode_dirty error [ 516.747950][T20098] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 516.749550][T20098] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 516.772105][T20098] EXT4-fs (loop5): 1 orphan inode deleted [ 516.780103][T20098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.794317][ T6722] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 516.824752][ T6722] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 0 [ 516.825252][T20098] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.4106: Invalid inode table block 1 in block_group 0 [ 516.852188][T20098] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 516.911580][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.961289][ T6722] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 516.989368][ T6722] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 516.989558][ T6722] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 0 [ 517.010960][ T6722] loop5: lost filesystem error report for type 5 error -117 [ 517.011097][T12424] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 517.031573][T12424] loop5: lost filesystem error report for type 5 error -117 [ 517.031669][T12424] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 517.087155][T12424] loop5: lost filesystem error report for type 5 error -117 [ 517.087273][T12424] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 517.106244][T12424] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 517.151074][T20123] loop2: detected capacity change from 0 to 512 [ 517.186667][T20123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 517.200690][T20123] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.4114: orphan file block 0: bad magic [ 517.213536][T20123] loop2: lost filesystem error report for type 5 error -117 [ 517.217015][T20123] EXT4-fs (loop2): Remounting filesystem read-only [ 517.224338][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 517.224353][ C1] EXT4-fs (loop2): initial error at time 2000000865: ext4_init_orphan_info:618 [ 517.224394][ C1] EXT4-fs (loop2): last error at time 2000000865: ext4_init_orphan_info:618 [ 517.261951][T20123] EXT4-fs (loop2): mount failed [ 517.297633][T20133] FAULT_INJECTION: forcing a failure. [ 517.297633][T20133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.315877][T20133] CPU: 0 UID: 0 PID: 20133 Comm: syz.1.4117 Tainted: G W syzkaller #0 PREEMPT(full) [ 517.315966][T20133] Tainted: [W]=WARN [ 517.315976][T20133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.316000][T20133] Call Trace: [ 517.316008][T20133] [ 517.316018][T20133] __dump_stack+0x1d/0x30 [ 517.316052][T20133] dump_stack_lvl+0x95/0xd0 [ 517.316083][T20133] dump_stack+0x15/0x1b [ 517.316113][T20133] should_fail_ex+0x263/0x280 [ 517.316174][T20133] should_fail+0xb/0x20 [ 517.316200][T20133] should_fail_usercopy+0x1a/0x20 [ 517.316252][T20133] _copy_to_user+0x20/0xa0 [ 517.316289][T20133] simple_read_from_buffer+0xb5/0x130 [ 517.316320][T20133] proc_fail_nth_read+0x10e/0x150 [ 517.316361][T20133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 517.316420][T20133] vfs_read+0x1ab/0x7f0 [ 517.316538][T20133] ? __rcu_read_unlock+0x4e/0x70 [ 517.316564][T20133] ? __fget_files+0x184/0x1c0 [ 517.316596][T20133] ? mutex_lock+0x57/0x90 [ 517.316639][T20133] ksys_read+0xdc/0x1a0 [ 517.316673][T20133] __x64_sys_read+0x40/0x50 [ 517.316785][T20133] x64_sys_call+0x2886/0x3020 [ 517.316887][T20133] do_syscall_64+0x12c/0x370 [ 517.316924][T20133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.316951][T20133] RIP: 0033:0x7f22d268cfce [ 517.316969][T20133] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 517.317004][T20133] RSP: 002b:00007f22d1126fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 517.317022][T20133] RAX: ffffffffffffffda RBX: 00007f22d11276c0 RCX: 00007f22d268cfce [ 517.317038][T20133] RDX: 000000000000000f RSI: 00007f22d11270a0 RDI: 0000000000000004 [ 517.317053][T20133] RBP: 00007f22d1127090 R08: 0000000000000000 R09: 0000000000000000 [ 517.317069][T20133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.317084][T20133] R13: 00007f22d2946038 R14: 00007f22d2945fa0 R15: 00007ffe6afd7af8 [ 517.317105][T20133] [ 517.705026][T20151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.782890][T20151] netlink: 'syz.3.4122': attribute type 1 has an invalid length. [ 517.852304][T20151] 8021q: adding VLAN 0 to HW filter on device bond1 [ 518.192016][T20179] loop5: detected capacity change from 0 to 512 [ 518.265913][T20184] __nla_validate_parse: 4 callbacks suppressed [ 518.265930][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 518.314142][T20190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 518.388033][T20197] bridge0: entered promiscuous mode [ 518.404683][T20199] loop2: detected capacity change from 0 to 2048 [ 518.521844][T20197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56848 sclass=netlink_route_socket pid=20197 comm=syz.1.4133 [ 518.541348][T20202] loop2: detected capacity change from 0 to 512 [ 518.560544][T20202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 518.580936][T20202] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.4135: corrupted xattr entries [ 518.598256][T20202] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 518.598416][T20202] EXT4-fs (loop2): Remounting filesystem read-only [ 518.614344][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 518.614368][ C0] EXT4-fs (loop2): initial error at time 2000000867: xattr_find_entry:337: inode 15 [ 518.614401][ C0] EXT4-fs (loop2): last error at time 2000000867: xattr_find_entry:337: inode 15 [ 518.668236][T20202] EXT4-fs (loop2): 1 truncate cleaned up [ 518.683180][T20202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.307555][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 519.327718][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 519.341930][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4137'. [ 519.407630][T20208] xt_CT: No such helper "snmp_trap" [ 519.500588][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.611346][ T28] kauditd_printk_skb: 134 callbacks suppressed [ 519.611364][ T28] audit: type=1400 audit(2000000868.276:11854): avc: denied { read } for pid=20217 comm="syz.5.4139" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 519.971906][T20228] loop5: detected capacity change from 0 to 128 [ 520.040785][T20228] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.109056][T20228] ext4 filesystem being mounted at /407/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 520.140848][ T28] audit: type=1400 audit(2000000868.806:11855): avc: denied { append open } for pid=20227 comm="syz.5.4141" path="/407/mnt/blkio.bfq.time" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 520.181839][ T28] audit: type=1400 audit(2000000868.806:11856): avc: denied { read write } for pid=20227 comm="syz.5.4141" path="/407/mnt/bus" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 520.206374][ T28] audit: type=1400 audit(2000000868.806:11857): avc: denied { setattr } for pid=20227 comm="syz.5.4141" name="bus" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 520.255861][T12424] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 520.452463][T20248] loop5: detected capacity change from 0 to 128 [ 520.771524][T20251] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.839576][ T28] audit: type=1400 audit(2000000869.506:11858): avc: denied { watch watch_reads } for pid=20250 comm="syz.3.4149" path="/300/file1" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 520.957307][ T28] audit: type=1400 audit(2000000869.526:11859): avc: denied { create } for pid=20250 comm="syz.3.4149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 521.026265][ T28] audit: type=1400 audit(2000000869.686:11860): avc: denied { mac_admin } for pid=20253 comm="syz.2.4150" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 521.049852][ T28] audit: type=1400 audit(2000000869.686:11861): avc: denied { relabelto } for pid=20253 comm="syz.2.4150" name="25" dev="tmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 521.078814][ T28] audit: type=1400 audit(2000000869.686:11862): avc: denied { associate } for pid=20253 comm="syz.2.4150" name="25" dev="tmpfs" ino=143 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 521.108410][ T28] audit: type=1400 audit(2000000869.706:11863): avc: denied { add_name } for pid=20253 comm="syz.2.4150" name="cpuacct.usage_all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 521.235161][T20262] loop5: detected capacity change from 0 to 512 [ 521.266581][T20262] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 521.307092][T20262] EXT4-fs (loop5): 1 truncate cleaned up [ 521.324603][T20262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.380264][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.499787][ T7530] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.526448][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'. [ 521.836371][T20284] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.445288][T20309] lo speed is unknown, defaulting to 1000 [ 522.472921][T20309] lo speed is unknown, defaulting to 1000 [ 522.480027][T20309] lo speed is unknown, defaulting to 1000 [ 522.486610][T20309] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 522.498031][T20309] lo speed is unknown, defaulting to 1000 [ 522.505364][T20309] lo speed is unknown, defaulting to 1000 [ 522.512880][T20309] lo speed is unknown, defaulting to 1000 [ 522.520530][T20309] lo speed is unknown, defaulting to 1000 [ 522.526639][T20309] lo speed is unknown, defaulting to 1000 [ 522.533974][T20309] lo speed is unknown, defaulting to 1000 [ 522.541300][T20309] lo speed is unknown, defaulting to 1000 [ 522.710297][T20284] chnl_net:caif_netlink_parms(): no params data found [ 522.774181][T20334] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 522.779156][T20284] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.789049][T20284] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.796219][T20284] bridge_slave_0: entered allmulticast mode [ 522.803374][T20284] bridge_slave_0: entered promiscuous mode [ 522.810355][T20284] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.817633][T20284] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.825106][T20284] bridge_slave_1: entered allmulticast mode [ 522.831857][T20284] bridge_slave_1: entered promiscuous mode [ 522.851007][T20284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.862768][T20284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.883764][T20284] team0: Port device team_slave_0 added [ 522.890616][T20284] team0: Port device team_slave_1 added [ 522.907159][T20284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.914208][T20284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.940239][T20284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.951772][T20284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.958795][T20284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.984808][T20284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.062218][T20284] hsr_slave_0: entered promiscuous mode [ 523.090119][T20284] hsr_slave_1: entered promiscuous mode [ 523.096192][T20284] debugfs: 'hsr0' already exists in 'hsr' [ 523.141182][T20284] Cannot create hsr debugfs directory [ 523.277395][T20349] loop5: detected capacity change from 0 to 512 [ 523.328620][T20349] EXT4-fs: Ignoring removed oldalloc option [ 523.349793][T20349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 523.427841][T20349] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #11: comm syz.5.4175: corrupted in-inode xattr: invalid ea_ino [ 523.449991][T20349] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 523.454141][T20349] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4175: couldn't read orphan inode 11 (err -117) [ 523.463700][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 523.463780][ C1] EXT4-fs (loop5): initial error at time 2000000872: ext4_iget_extra_inode:5025: inode 11 [ 523.464054][ C1] EXT4-fs (loop5): last error at time 2000000872: ext4_iget_extra_inode:5025: inode 11 [ 523.567847][T20355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=20355 comm=syz.1.4178 [ 523.605973][T20349] loop5: lost filesystem error report for type 5 error -117 [ 523.618414][T20355] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=20355 comm=syz.1.4178 [ 523.639481][T20349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.724102][T20369] loop2: detected capacity change from 0 to 512 [ 523.734154][T20284] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 523.742401][T20369] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 523.760376][T20369] EXT4-fs (loop2): 1 truncate cleaned up [ 523.767226][T20369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.770469][T20284] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 523.796655][T20368] Cannot find del_set index 4 as target [ 523.803037][T20374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4183'. [ 523.816907][T20371] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4183'. [ 523.817908][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.852676][T20284] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 523.886752][T20284] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 523.912002][T20379] loop2: detected capacity change from 0 to 512 [ 523.923844][T20379] EXT4-fs: Ignoring removed oldalloc option [ 523.996909][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.016051][T20379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4184: invalid indirect mapped block 4294967295 (level 1) [ 524.030095][T20379] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 524.030308][T20379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4184: invalid indirect mapped block 4294967295 (level 1) [ 524.039527][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 524.039545][ C0] EXT4-fs (loop2): initial error at time 2000000872: ext4_free_branches:1023: inode 11 [ 524.039607][ C0] EXT4-fs (loop2): last error at time 2000000872: ext4_free_branches:1023: inode 11 [ 524.087255][T20379] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 524.135220][T20379] EXT4-fs (loop2): 2 truncates cleaned up [ 524.168685][T20379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.195530][T20284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.203606][T20402] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4185'. [ 524.217519][T20403] loop5: detected capacity change from 0 to 512 [ 524.226480][T20379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.233599][T20284] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.249593][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.256690][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.276336][T20378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4184'. [ 524.299234][T20284] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 524.310190][T20284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.324570][ T220] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.331681][ T220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.431824][T20284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.431994][T20417] loop2: detected capacity change from 0 to 1024 [ 524.482606][T20417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.625131][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.674427][T20284] veth0_vlan: entered promiscuous mode [ 524.699441][T20284] veth1_vlan: entered promiscuous mode [ 524.720235][T20284] veth0_macvtap: entered promiscuous mode [ 524.730119][T20284] veth1_macvtap: entered promiscuous mode [ 524.811673][T20284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.832942][T20284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.862240][ T309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.897347][ T309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.915011][ T309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.926019][ T309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.500679][T20462] x_tables: duplicate entry at hook 1 [ 525.949509][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 525.949528][ T28] audit: type=1400 audit(2000000874.606:11881): avc: denied { create } for pid=20473 comm="syz.3.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 526.009577][ T28] audit: type=1400 audit(2000000874.656:11882): avc: denied { unmount } for pid=20473 comm="syz.3.4205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 526.045250][ T28] audit: type=1400 audit(2000000874.706:11883): avc: denied { ioctl } for pid=20476 comm="syz.3.4206" path="socket:[65347]" dev="sockfs" ino=65347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 526.074187][T20477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4206'. [ 526.109999][ T28] audit: type=1400 audit(2000000874.756:11884): avc: denied { mounton } for pid=20476 comm="syz.3.4206" path="/proc/968/task" dev="proc" ino=65353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 526.148237][ T28] audit: type=1400 audit(2000000874.806:11885): avc: denied { associate } for pid=20480 comm="syz.3.4206" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 526.193687][T20430] loop5: detected capacity change from 0 to 1024 [ 526.221692][T20430] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 526.233960][T20430] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 526.247071][T20430] EXT4-fs (loop5): invalid journal inode [ 526.255111][T20484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 526.274293][T20430] EXT4-fs (loop5): can't get journal size [ 526.297173][T20484] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 526.322797][T20486] FAULT_INJECTION: forcing a failure. [ 526.322797][T20486] name failslab, interval 1, probability 0, space 0, times 0 [ 526.332598][T20489] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4211'. [ 526.337776][T20430] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 17104912: comm syz.5.4194: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 526.361269][T20486] CPU: 0 UID: 0 PID: 20486 Comm: syz.1.4210 Tainted: G W syzkaller #0 PREEMPT(full) [ 526.361305][T20486] Tainted: [W]=WARN [ 526.361312][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.361368][T20486] Call Trace: [ 526.361454][T20486] [ 526.361462][T20486] __dump_stack+0x1d/0x30 [ 526.361488][T20486] dump_stack_lvl+0x95/0xd0 [ 526.361513][T20486] dump_stack+0x15/0x1b [ 526.361546][T20486] should_fail_ex+0x263/0x280 [ 526.361576][T20486] should_failslab+0x8c/0xb0 [ 526.361602][T20486] __kmalloc_noprof+0xb8/0x4e0 [ 526.361717][T20486] ? io_cache_alloc_new+0x2a/0xb0 [ 526.361749][T20486] io_cache_alloc_new+0x2a/0xb0 [ 526.361870][T20486] io_uring_cmd_prep+0x227/0x2a0 [ 526.361895][T20486] io_submit_sqes+0x75a/0x1270 [ 526.361929][T20486] __se_sys_io_uring_enter+0x1c9/0xf50 [ 526.362019][T20486] ? __fget_files+0x184/0x1c0 [ 526.362041][T20486] ? mutex_unlock+0x4e/0x90 [ 526.362073][T20486] ? fput+0x8f/0xc0 [ 526.362102][T20486] __x64_sys_io_uring_enter+0x78/0x90 [ 526.362151][T20486] x64_sys_call+0x1e16/0x3020 [ 526.362176][T20486] do_syscall_64+0x12c/0x370 [ 526.362197][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.362295][T20486] RIP: 0033:0x7f22d26cc799 [ 526.362309][T20486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.362325][T20486] RSP: 002b:00007f22d1127028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 526.362346][T20486] RAX: ffffffffffffffda RBX: 00007f22d2945fa0 RCX: 00007f22d26cc799 [ 526.362427][T20486] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000007 [ 526.362441][T20486] RBP: 00007f22d1127090 R08: 0000000000000000 R09: 0000000000000000 [ 526.362454][T20486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.362471][T20486] R13: 00007f22d2946038 R14: 00007f22d2945fa0 R15: 00007ffe6afd7af8 [ 526.362488][T20486] [ 526.367014][T20430] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 526.606295][T20430] EXT4-fs (loop5): failed to initialize system zone (-117) [ 526.616032][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 526.616105][ C0] EXT4-fs (loop5): initial error at time 2000000875: ext4_map_blocks:776: inode 3: block 17104912 [ 526.616331][ C0] EXT4-fs (loop5): last error at time 2000000875: ext4_map_blocks:776: inode 3: block 17104912 [ 526.682907][T20430] EXT4-fs (loop5): mount failed [ 526.718744][ T28] audit: type=1400 audit(2000000875.386:11886): avc: denied { setopt } for pid=20490 comm="syz.3.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.780989][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4214'. [ 527.042415][T20502] loop8: detected capacity change from 0 to 128 [ 527.280679][ T28] audit: type=1400 audit(2000000875.946:11887): avc: denied { create } for pid=20510 comm="syz.2.4217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 527.366956][T20511] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.375902][T20518] netlink: 'syz.2.4217': attribute type 16 has an invalid length. [ 527.380047][T20511] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.501946][T20524] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 527.515989][ T28] audit: type=1400 audit(2000000876.176:11888): avc: denied { ioctl } for pid=20526 comm="syz.1.4222" path="socket:[66736]" dev="sockfs" ino=66736 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 527.543554][ T28] audit: type=1400 audit(2000000876.206:11889): avc: denied { relabelto } for pid=20523 comm="syz.5.4221" name="422" dev="tmpfs" ino=2279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 527.569644][ T28] audit: type=1400 audit(2000000876.206:11890): avc: denied { associate } for pid=20523 comm="syz.5.4221" name="422" dev="tmpfs" ino=2279 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 527.860800][T20541] loop8: detected capacity change from 0 to 512 [ 527.885317][T20541] EXT4-fs: Ignoring removed nobh option [ 527.919222][T20541] EXT4-fs: Ignoring removed orlov option [ 527.987056][T20541] EXT4-fs error (device loop8): __ext4_iget:5378: inode #11: block 1: comm syz.8.4227: invalid block [ 528.000348][T20541] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 528.002600][T20541] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4227: couldn't read orphan inode 11 (err -117) [ 528.012722][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 528.012989][ C0] EXT4-fs (loop8): initial error at time 2000000876: __ext4_iget:5378: inode 11: block 1 [ 528.013571][ C0] EXT4-fs (loop8): last error at time 2000000876: __ext4_iget:5378: inode 11: block 1 [ 528.014952][T20543] loop2: detected capacity change from 0 to 1024 [ 528.027227][T20541] loop8: lost filesystem error report for type 5 error -117 [ 528.130445][T20541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.439674][T20543] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 528.511318][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4234'. [ 528.553707][T20543] System zones: 0-1, 3-36 [ 528.591543][T20284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.634746][T20543] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4228: bad orphan inode 134217728 [ 528.651583][T20543] loop2: lost filesystem error report for type 5 error -117 [ 528.658386][T20581] ip6_vti0: Caught tx_queue_len zero misconfig [ 528.837193][T20543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.202861][T20589] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.293681][T20589] lo speed is unknown, defaulting to 1000 [ 529.364024][T20587] loop8: detected capacity change from 0 to 128 [ 529.493399][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.670253][T20610] loop2: detected capacity change from 0 to 512 [ 529.826718][T20637] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4257'. [ 530.024196][T20649] FAULT_INJECTION: forcing a failure. [ 530.024196][T20649] name failslab, interval 1, probability 0, space 0, times 0 [ 530.036869][T20649] CPU: 1 UID: 0 PID: 20649 Comm: syz.1.4262 Tainted: G W syzkaller #0 PREEMPT(full) [ 530.036967][T20649] Tainted: [W]=WARN [ 530.036976][T20649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.036993][T20649] Call Trace: [ 530.037001][T20649] [ 530.037010][T20649] __dump_stack+0x1d/0x30 [ 530.037043][T20649] dump_stack_lvl+0x95/0xd0 [ 530.037202][T20649] dump_stack+0x15/0x1b [ 530.037228][T20649] should_fail_ex+0x263/0x280 [ 530.037258][T20649] should_failslab+0x8c/0xb0 [ 530.037287][T20649] kmem_cache_alloc_noprof+0x66/0x400 [ 530.037336][T20649] ? skb_clone+0x151/0x1f0 [ 530.037370][T20649] skb_clone+0x151/0x1f0 [ 530.037407][T20649] packet_rcv+0x3c4/0xab0 [ 530.037490][T20649] ? __pfx_packet_rcv+0x10/0x10 [ 530.037517][T20649] deliver_skb+0xee/0x160 [ 530.037547][T20649] __netif_receive_skb_core+0x13b7/0x1980 [ 530.037643][T20649] netif_receive_skb+0x80/0x530 [ 530.037773][T20649] ? tun_rx_batched+0xd1/0x440 [ 530.037798][T20649] tun_rx_batched+0x106/0x440 [ 530.037824][T20649] ? eth_type_trans+0x215/0x3d0 [ 530.037866][T20649] tun_get_user+0x2011/0x27c0 [ 530.037959][T20649] ? ref_tracker_alloc+0x1eb/0x2f0 [ 530.038024][T20649] tun_chr_write_iter+0x15e/0x210 [ 530.038051][T20649] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 530.038076][T20649] vfs_write+0x5a6/0x9f0 [ 530.038277][T20649] ksys_write+0xdc/0x1a0 [ 530.038309][T20649] __x64_sys_write+0x40/0x50 [ 530.038327][T20649] x64_sys_call+0x27e1/0x3020 [ 530.038426][T20649] do_syscall_64+0x12c/0x370 [ 530.038453][T20649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.038476][T20649] RIP: 0033:0x7f22d268cfce [ 530.038522][T20649] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.038551][T20649] RSP: 002b:00007f22d1126fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.038570][T20649] RAX: ffffffffffffffda RBX: 00007f22d11276c0 RCX: 00007f22d268cfce [ 530.038587][T20649] RDX: 000000000000003e RSI: 0000200000000000 RDI: 00000000000000c8 [ 530.038603][T20649] RBP: 00007f22d1127090 R08: 0000000000000000 R09: 0000000000000000 [ 530.038619][T20649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.038632][T20649] R13: 00007f22d2946038 R14: 00007f22d2945fa0 R15: 00007ffe6afd7af8 [ 530.038661][T20649] [ 530.052302][T20630] loop2: detected capacity change from 0 to 1024 [ 530.320911][T20630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 530.331283][T20630] System zones: 0-1, 3-36 [ 530.352539][T20630] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.4254: bad orphan inode 134217728 [ 530.376747][T20630] loop2: lost filesystem error report for type 5 error -117 [ 530.381121][T20630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.413952][T20659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'. [ 530.503293][T20650] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.530502][T20659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4264'. [ 530.539630][T20659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4264'. [ 530.584026][T20650] lo speed is unknown, defaulting to 1000 [ 530.597963][T20664] loop8: detected capacity change from 0 to 1024 [ 530.609412][T20664] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 530.674403][T20668] 9p: p9: multiple sources not supported [ 530.775735][T20679] ip6gre1: entered promiscuous mode [ 530.781247][T20679] ip6gre1: entered allmulticast mode [ 530.831680][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.892695][T20689] loop2: detected capacity change from 0 to 512 [ 530.934444][T20689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.965061][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 530.965078][ T28] audit: type=1400 audit(2000000879.626:11937): avc: denied { append } for pid=20688 comm="syz.2.4273" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 531.039537][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.061771][T20699] loop5: detected capacity change from 0 to 4096 [ 531.107931][T20699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.122390][T20705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4279'. [ 531.138067][T20708] loop8: detected capacity change from 0 to 128 [ 531.139165][T20699] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4276'. [ 531.179212][ T6722] bridge_slave_1: left allmulticast mode [ 531.184900][ T6722] bridge_slave_1: left promiscuous mode [ 531.210205][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.234359][ T28] audit: type=1326 audit(2000000879.886:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20697 comm="syz.5.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d1c799 code=0x7ffc0000 [ 531.263474][T20715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 531.276797][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4281'. [ 531.280355][T20715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4278'. [ 531.286025][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4281'. [ 531.302634][ T28] audit: type=1326 audit(2000000879.886:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20697 comm="syz.5.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fbf91d1c799 code=0x7ffc0000 [ 531.342454][ T6722] bridge_slave_0: left allmulticast mode [ 531.351799][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.362155][ T6722] bridge_slave_0: left promiscuous mode [ 531.367911][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.391541][ T28] audit: type=1400 audit(2000000879.886:11940): avc: denied { mounton } for pid=20697 comm="syz.5.4276" path="/432/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 531.416930][ T28] audit: type=1326 audit(2000000879.886:11941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20697 comm="syz.5.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf91d1c799 code=0x7ffc0000 [ 531.446567][ T28] audit: type=1326 audit(2000000880.106:11942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.3.4283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa322f6c799 code=0x0 [ 531.678986][T20708] 9p: Bad value for 'rfdno' [ 531.869811][ T6722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.879301][ T6722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.888508][ T6722] bond0 (unregistering): Released all slaves [ 531.896884][ T6722] bond1 (unregistering): (slave vcan0): Releasing backup interface [ 531.904985][ T6722] vcan0: left promiscuous mode [ 531.910084][ T6722] bond1 (unregistering): Released all slaves [ 531.927949][T20713] ip6_vti0 speed is unknown, defaulting to 1000 [ 531.971985][ T6722] tipc: Left network mode [ 532.007410][T20713] lo speed is unknown, defaulting to 1000 [ 532.044958][T20740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 532.079715][T20740] EXT4-fs (loop2): 1 truncate cleaned up [ 532.092964][T20740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.119612][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.164532][ T6722] team0 (unregistering): Port device team_slave_1 removed [ 532.180189][ T6722] team0 (unregistering): Port device team_slave_0 removed [ 532.252507][T20742] ip6_vti0 speed is unknown, defaulting to 1000 [ 532.263855][ T28] audit: type=1400 audit(2000000880.926:11943): avc: denied { create } for pid=20751 comm="syz.2.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 532.263883][ T28] audit: type=1400 audit(2000000880.926:11944): avc: denied { write } for pid=20751 comm="syz.2.4291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 532.298238][ T28] audit: type=1400 audit(2000000880.956:11945): avc: denied { connect } for pid=20741 comm="syz.5.4289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 532.344313][T20742] lo speed is unknown, defaulting to 1000 [ 532.400638][ T28] audit: type=1326 audit(2000000881.066:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20737 comm="syz.1.4287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d26cc799 code=0x7ffc0000 [ 532.464585][T20759] 9p: Bad value for 'source' [ 532.573193][T20765] set_capacity_and_notify: 2 callbacks suppressed [ 532.573251][T20765] loop5: detected capacity change from 0 to 128 [ 532.603099][T20765] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 532.613115][T20765] FAT-fs (loop5): Filesystem has been set read-only [ 532.620159][T20765] bio_check_eod: 18 callbacks suppressed [ 532.620221][T20765] syz.5.4293: attempt to access beyond end of device [ 532.620221][T20765] loop5: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 532.641215][T20765] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 532.649362][T20765] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 532.657404][T20765] syz.5.4293: attempt to access beyond end of device [ 532.657404][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 532.708232][T20765] syz.5.4293: attempt to access beyond end of device [ 532.708232][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 532.730460][ T6722] IPVS: stop unused estimator thread 0... [ 532.764511][T20765] syz.5.4293: attempt to access beyond end of device [ 532.764511][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 532.819593][T20765] syz.5.4293: attempt to access beyond end of device [ 532.819593][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 532.864011][T20765] syz.5.4293: attempt to access beyond end of device [ 532.864011][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 532.894637][T20765] syz.5.4293: attempt to access beyond end of device [ 532.894637][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 532.944185][T20765] syz.5.4293: attempt to access beyond end of device [ 532.944185][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 532.984034][T20765] syz.5.4293: attempt to access beyond end of device [ 532.984034][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 533.016189][T20765] syz.5.4293: attempt to access beyond end of device [ 533.016189][T20765] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 533.369128][T20816] loop8: detected capacity change from 0 to 512 [ 533.428620][T20816] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 533.437032][T20816] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4309: invalid indirect mapped block 2683928664 (level 1) [ 533.451002][T20816] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 533.451214][T20816] EXT4-fs (loop8): Remounting filesystem read-only [ 533.460352][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 533.460373][ C1] EXT4-fs (loop8): initial error at time 2000000882: ext4_free_branches:1023: inode 13 [ 533.460416][ C1] EXT4-fs (loop8): last error at time 2000000882: ext4_free_branches:1023: inode 13 [ 533.492807][T20816] EXT4-fs (loop8): 1 truncate cleaned up [ 533.498855][T20816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.571371][T20818] ip6gre1: entered allmulticast mode [ 534.363147][T20284] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.421110][T20857] xt_hashlimit: size too large, truncated to 1048576 [ 534.647220][T20850] deleting an unspecified loop device is not supported. [ 534.671521][T20869] loop2: detected capacity change from 0 to 8192 [ 534.689064][T20869] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 534.724673][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.750393][T20867] FAT-fs (loop2): Filesystem has been set read-only [ 534.771079][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.848234][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.867260][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.908132][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.917060][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.925934][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.934911][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 534.943769][T20867] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 535.460954][T20879] loop5: detected capacity change from 0 to 8192 [ 536.180770][T20912] loop5: detected capacity change from 0 to 512 [ 536.209826][T20892] loop2: detected capacity change from 0 to 128 [ 536.231483][T20912] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 536.327868][T20915] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.358948][T20912] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4339: bg 0: block 255: padding at end of block bitmap is not set [ 536.393522][T20912] loop5: lost filesystem error report for type 5 error -117 [ 536.393744][T20912] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 536.401249][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 536.401275][ C0] EXT4-fs (loop5): initial error at time 2000000885: ext4_validate_block_bitmap:441 [ 536.401297][ C0] EXT4-fs (loop5): last error at time 2000000885: ext4_validate_block_bitmap:441 [ 536.469624][T20915] lo speed is unknown, defaulting to 1000 [ 536.536120][T20912] loop5: lost filesystem error report for type 5 error -117 [ 536.536346][T20912] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4339: invalid indirect mapped block 1 (level 1) [ 536.602936][T20912] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 536.603283][T20912] EXT4-fs (loop5): 1 truncate cleaned up [ 536.654752][T20912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.670823][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 536.670854][ T28] audit: type=1400 audit(2000000885.326:11965): avc: denied { unlink } for pid=19165 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 536.729156][T20925] ip6tnl0: Caught tx_queue_len zero misconfig [ 536.789213][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.853079][ T28] audit: type=1326 audit(2000000885.516:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d26cc799 code=0x7ffc0000 [ 536.945820][ T28] audit: type=1326 audit(2000000885.516:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d26cc799 code=0x7ffc0000 [ 536.972077][T20952] syzkaller0: entered promiscuous mode [ 536.977590][T20952] syzkaller0: entered allmulticast mode [ 537.032804][ T28] audit: type=1326 audit(2000000885.516:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d26cc799 code=0x7ffc0000 [ 537.075348][T20962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20962 comm=syz.8.4324 [ 537.095462][ T28] audit: type=1326 audit(2000000885.516:11969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22d26cc799 code=0x7ffc0000 [ 537.159673][ T3411] ================================================================== [ 537.167786][ T3411] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 537.174922][ T3411] [ 537.177248][ T3411] read-write to 0xffff888237c2a8a4 of 4 bytes by task 3402 on cpu 0: [ 537.185310][ T3411] wq_worker_running+0x95/0x120 [ 537.190190][ T3411] synchronize_rcu_expedited+0x5f8/0x770 [ 537.195832][ T3411] synchronize_rcu+0x35/0x2e0 [ 537.200519][ T3411] try_check_zero+0x182/0x260 [ 537.205211][ T3411] process_srcu+0xd5/0xdc0 [ 537.209648][ T3411] process_scheduled_works+0x4de/0x9e0 [ 537.215115][ T3411] worker_thread+0x581/0x770 [ 537.219709][ T3411] kthread+0x22a/0x280 [ 537.223778][ T3411] ret_from_fork+0x150/0x360 [ 537.228380][ T3411] ret_from_fork_asm+0x1a/0x30 [ 537.233151][ T3411] [ 537.235503][ T3411] read to 0xffff888237c2a8a4 of 4 bytes by task 3411 on cpu 1: [ 537.243046][ T3411] kick_pool+0x49/0x2d0 [ 537.247217][ T3411] __queue_work+0x896/0xaf0 [ 537.251744][ T3411] queue_work_on+0xa9/0x140 [ 537.256281][ T3411] process_srcu+0xa56/0xdc0 [ 537.260788][ T3411] process_scheduled_works+0x4de/0x9e0 [ 537.266257][ T3411] worker_thread+0x581/0x770 [ 537.270860][ T3411] kthread+0x22a/0x280 [ 537.274924][ T3411] ret_from_fork+0x150/0x360 [ 537.279521][ T3411] ret_from_fork_asm+0x1a/0x30 [ 537.284327][ T3411] [ 537.286668][ T3411] value changed: 0x00000000 -> 0x00000001 [ 537.292376][ T3411] [ 537.294710][ T3411] Reported by Kernel Concurrency Sanitizer on: [ 537.300859][ T3411] CPU: 1 UID: 0 PID: 3411 Comm: kworker/1:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 537.311792][ T3411] Tainted: [W]=WARN [ 537.315590][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.325642][ T3411] Workqueue: rcu_gp process_srcu [ 537.330610][ T3411] ================================================================== [ 537.339344][ T28] audit: type=1326 audit(2000000885.516:11970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22d268cfce code=0x7ffc0000 [ 537.363034][ T28] audit: type=1326 audit(2000000885.516:11971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f22d26cda97 code=0x7ffc0000 [ 537.366736][T20957] loop5: detected capacity change from 0 to 512 [ 537.386831][ T28] audit: type=1326 audit(2000000885.516:11972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22d26cc799 code=0x7ffc0000 [ 537.386890][ T28] audit: type=1326 audit(2000000885.516:11973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f22d26cda97 code=0x7ffc0000 [ 537.386922][ T28] audit: type=1326 audit(2000000885.516:11974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20939 comm="syz.1.4348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22d268cfce code=0x7ffc0000 [ 537.493304][T20964] loop2: detected capacity change from 0 to 512 [ 537.511261][T20957] EXT4-fs: Ignoring removed nobh option [ 537.518084][T20957] EXT4-fs: Ignoring removed orlov option [ 537.521707][T20964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.591132][T20964] EXT4-fs (loop2): orphan cleanup on readonly fs [ 537.592696][T20957] EXT4-fs error (device loop5): __ext4_iget:5378: inode #11: block 1: comm syz.5.4350: invalid block [ 537.599176][T20964] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 537.611268][T20957] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 537.623839][T20964] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 537.624018][T20964] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.4354: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 537.624150][T20964] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 537.624362][T20964] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.4354: couldn't read orphan inode 13 (err -117) [ 537.624395][T20964] loop2: lost filesystem error report for type 5 error -117 [ 537.629555][T20964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.696984][T20957] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.4350: couldn't read orphan inode 11 (err -117) [ 537.699338][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 537.699534][ C0] EXT4-fs (loop5): initial error at time 2000000886: __ext4_iget:5378: inode 11: block 1 [ 537.699819][ C0] EXT4-fs (loop5): last error at time 2000000886: __ext4_iget:5378: inode 11: block 1 [ 537.715378][T20964] __nla_validate_parse: 67 callbacks suppressed [ 537.715426][T20964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4354'. [ 537.720786][T20957] loop5: lost filesystem error report for type 5 error -117 [ 537.765659][T20957] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.821400][T19647] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.919434][T12424] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.