last executing test programs: 3m3.069659628s ago: executing program 2 (id=1634): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8) signalfd4(r1, &(0x7f0000000280)={[0x8]}, 0x8, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001ac0)="e4f1b7726363f4b29cff2f77b2f40f49947ac5e9efe992ff7e6707c020a8e0387f773869457b4b4e06b9031885513329f1e89731db338ce831436ac5a4ed2c44f42b894470098112caf7e88d31ae8fadfa190f0ba832b34a55e26466b5c5d6b36b4ca22fada906a986d6bea3348cf65541158e2a31411820c22903c5b4361ecd9ec00c0d90563f1edd1215f07fd66d56e070731435598aa5682f6b93024d8584c0c05123c3d37b849bc6fb5db8e87e62f9f9f9da2df6a7f4b0df9f6989eb2172dbdd913329b68aefa5c2d5a47e8b44b3e3cc", 0xd2}, {&(0x7f0000001bc0)="71a3888f36a66a34ac581bd9ac3465898f0b056ef2bc4c8bd7ec9330874ccb0b5a883b9ce257c238d7fb13072b2d4dafbeaaa41c394ffca6dce11814fcc5e47ece04bdfdfc779733d1e5bb160232afc830f7c536bb6213387fe43b1001dc47193746926360537c15b9cd7c114f017511308bc3c870e81510c2ecd218548f14cb96f6880ad1297ab611bc93c7a3c7a99bc6f2d846a8b7fd0e7fb756e7322ed601aeb5d8e20f255c45f5a02bc9a0f4fca89e430a19e97c1d9640edf98074b061be0aea64aed3860e76f2275e046e680245", 0xd0}, {&(0x7f00000002c0)="21d4feaf38aa12fe55378716c7633a708fbe07e18a4101ceeb8ba5e1599156fd672e947255ede47776c6e1eddd11d3a136dc524fd0d3a1483c1831", 0x3b}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}, 0x1c, &(0x7f0000000940)=[{0x0}, {&(0x7f0000001cc0)="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", 0x100c}, {&(0x7f0000000680)="62ea650d8d8080f9e4b91e4f86a234067ac3b13a377ed995be2111eb998c4f7488d841d03098204e9212c7988f8b2665abf656f571a399415a5ea5b9fd09bca2762b79ff0dc34f9d0f69e2853e68c781a99f65a36925c74025c4c09db4e64be312ffd86d8caff937707f62e6698575aa41414f02e1be420b6d4a0f396e8df804a16347794dfae7c98f36b39268ddb323d2", 0x91}, {&(0x7f0000000580)="091fe2b380f3a5cacc29c60598855999bc63d3914800633269a46a09218bfa9536c0fbceb9ef5c4001ca6beadfd0f1b018ac245e2860ade70674e2236ea799a0f52a48a28fa32c3fdc9184a54688d7f1d4575f93d25171f253819bcb9668d5f50d67", 0x62}, {&(0x7f0000000780)="03185586d7c932d32fc534abf4fbbcd1412128c62b30623270e1ca31bb41f1d4f37e3b61d242355013cbff8b9d54c010ced39e9095461ce3a70666205dbc51dc4172762e4118d32d0b6ba1c84a607868bc1ef1accd6eb7eade410d32363dfb0b785f3b5ad882640eb0f1ca4714599a79fd347c48e75e19dde0545736df3fa5aa4b1efea6d360638a8726ec06f806329229df0e041aa8ae9a901ec024fc52d599a7c9f27f34c7e134d1010bd239894e9da1", 0xb1}, {&(0x7f0000000480)="745ede6d7e6d02f2f826ff19d08bb6dbb3b101000000000000007250f1ae8e", 0x1f}, {&(0x7f0000000840)="f40b2341e62c88184f8992ace77f645f56727db4d3eb64f95603eb045baae81c164737907a2c54150488356568da8dbc0b0d6ba29f9e7e4bde2db41c3adb8e717d58cd15bc3f8667745393a41fb620597f0c9738792e1e5941c59cc0e094e23de4faf27a73", 0x65}, {0x0}], 0x8}}], 0x3, 0x0) r5 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_io_uring_setup(0x1714, &(0x7f0000002040)={0x0, 0xfffdfef9, 0x10100, 0xfffffffd, 0xfffffffc}, &(0x7f0000000400)=0x0, &(0x7f0000000080)=0x0) bind$xdp(r2, &(0x7f0000000200)={0x2c, 0xd, 0x0, 0x3b, r2}, 0x10) dup2(r1, r1) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) socket(0x25, 0x6, 0xef) shutdown(r6, 0x1) setuid(r5) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RAUTH(r10, &(0x7f0000000040)={0x14, 0x67, 0x2, {0x20, 0x4, 0x101}}, 0x14) 3m2.79206383s ago: executing program 2 (id=1641): syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000200)) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 3m2.786652369s ago: executing program 2 (id=1643): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c11, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x33, 0x2d, 0x4e, 0x3a, 0x30, 0x2f]}}}, 0x4e}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = msgget$private(0x0, 0x0) msgrcv(r4, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x100) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, &(0x7f0000001240)}) io_uring_enter(r0, 0x3516, 0x2, 0x0, 0x0, 0x0) 3m1.760698553s ago: executing program 2 (id=1651): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x200, 0x8}) rmdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 3m1.047817149s ago: executing program 2 (id=1663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00c200405ff2c7014755b17ff485232ea330dcc83c05d3a7cc3702e824df21a96271575391cdbcaa0ac6e8d11bcd72e74408473702829e14359e4ff02cfdb223c55e413244370cc7d3aa81a1a328a77df68d541f1f68fd43c8cc34bca2a330df4d6d6bf76a7acf0b692d3a98f7b785883c2c386c01b0b2cb4601b1c685cc920e852b7f3e3516d45f4788f14296f9475bc414b366ee529e1100b7feb3fe0b810f763b2221f1cebe8d528a0d6236795fde1ba64e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 3m0.346671668s ago: executing program 2 (id=1669): socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x7, 0x7, 0x200, 0x3, 0x3, 0x4, 0xfffffff8, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x7, 0x84fe, 0x7fff, 0xfffffff8, 0x3}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf24818080000000f4ffffffffff07000f"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000440)=0x5043, 0x4) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000a40)=0x4, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=0x0, @ANYRES64=r0], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a32000000000500040000000000050005000200000005000100070000000d000300686173683a6e6574000000001c0019801800028014000240fe80000000000000000000000000002b"], 0x64}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000030060"], 0xfdef) 3m0.257730113s ago: executing program 32 (id=1669): socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x7, 0x7, 0x200, 0x3, 0x3, 0x4, 0xfffffff8, {0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x7, 0x84fe, 0x7fff, 0xfffffff8, 0x3}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf24818080000000f4ffffffffff07000f"], 0x38}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000440)=0x5043, 0x4) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000a40)=0x4, 0x4) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=0x0, @ANYRES64=r0], 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000900020073797a32000000000500040000000000050005000200000005000100070000000d000300686173683a6e6574000000001c0019801800028014000240fe80000000000000000000000000002b"], 0x64}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd0903280005003000030060"], 0xfdef) 2m27.307892842s ago: executing program 5 (id=2013): syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f0000006680)) futex_waitv(&(0x7f0000000180)=[{0x0, 0x0, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x3000c11, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x1019, &(0x7f0000001200)=""/4121, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) msgsnd(0x0, 0x0, 0x2000, 0x0) 2m27.251759102s ago: executing program 5 (id=2014): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c000440000000002df31ab30c0005400000000000000081"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x35c, 0x0) 2m26.294772257s ago: executing program 5 (id=2030): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000980)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x178, 0x11, 0xff, @local, @private1, {[@routing={0x87, 0xa, 0x1, 0x0, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @dev={0xfe, 0x80, '\x00', 0xd}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @routing={0x62, 0x2, 0x0, 0x5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x9, 0x38, 0x10, [@mcast1]}, @dstopts={0x5c}, @hopopts={0x3c}], "edac99e59c7b644049a480fdc35c6daf244fe284f5df0717f3ffe98acae00df1e96f3eedd0018278768074f81679bd72aa936258286a1517a3757fd533420dae17fee6db3adfcfff7b53f8ba888b63b08b5c0c6116515a2f87ff85e3fafe36bfcbfd499a2630e3ae2b91af23e8cfdbf50ab98b99d6c0e5e376e34ae8a7b10223c3ca60857af1bea34bb950e912fe655f2965a18b6ab993592a8c6a75411b550d6f1e1975d1f5a80fb5205579cd5d29a17d839e0542d38e96ced4beb9a03a80e133a3fa08fdf52febf93564594c92db5036049c66b78e3fde93d8491c377d237b"}}}}, 0x1ae) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m26.163358514s ago: executing program 5 (id=2033): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async, rerun: 64) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) (async, rerun: 64) utimensat(r2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000550069ed02000000fdffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00010ffe0000000000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000840) r5 = syz_usb_connect$uac1(0x6, 0xce, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x4, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x33}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x3, 0xe, 0x6, 0x8, 0x8c}, @mixer_unit={0x9, 0x24, 0x4, 0x6, 0x8, "66b628c1"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x402, 0x5, 0x1, 0x1, 0x2, 0x4}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xe, "63b712"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x3, 0x8, 0x4, 0xd9}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0x9, 0x1, 'Jj', "b4fe73"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x0, 0x8, {0x7, 0x25, 0x1, 0x0, 0xa4, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x2, 0xf9, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf8d6, 0x1a74, 0x5}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x4, 0x4, 0x5, 'j'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x4, 0x0, 0x2, {0x7, 0x25, 0x1, 0x59c82ead4d6f7b52, 0x2, 0x6}}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x74, 0xf7, 0xf0, 0x40, 0x8d}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x4, 0x1ff}]}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x15}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x437}}, {0xc3, &(0x7f0000000640)=@string={0xc3, 0x3, "ec1379db7fa0de4a1c289406ed10799e4cf71022615ca9e5f9017c1019f70210fe662f9e9a1eb0b24b91ceabc8657cb73c0f330edb13ed7755c9cc425a6553d816309132af961820cd52508697ec2b00647a4766cec09bce66a33ec7f03e5b49fc029709b9532115849dbb8ed4e08373cb462b6f40e137d071f3e3eead759afd1a2792cc8a650fe20ea1578045cb6935728465a41f8c866579e39570fea5a768c8700e1a1bef3c8f5c1613eab7a7afe6c9bd867564249fc2be0f9c4dd9840579d2"}}, {0x35, &(0x7f0000000400)=@string={0x35, 0x3, "df3a217bb2749e724dd0eb1737aaa6506bf093c4b8eb7cfd3db4e442e1e3f9e7251e1f27a6b96f6cb968ca6da8719c28295737"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x459}}, {0xea, &(0x7f0000000740)=@string={0xea, 0x3, "368feab624ee9f3967c1e84fe671703b9c99448e874f487a386c4ed43b39071db9f3cdd1bec15fde9c4e51de7c5ab92255527578cd9d14f2164d14ebee6450384999abc12d357efc82610e0efe84aaa1043b0e2f1e04c2fb52252def346874e9eb72d7d64dac1dd14540e5125ab687b5b1000b958555b8a31e1c4b03acb71b2f0b147828d52c19924e3576bc96aa03d7cf9e3d9858400c69b22122a6e303aed881772f0d2c6f60367df97b4e13e6b7353505f1e65e7ae6e08d54912f7a3760c69cab43d8073e1e8ab4ec31572d43e47ce5d4d76f9373760265d8eee0302633213f4e6f3351899529"}}, {0xcb, &(0x7f0000000840)=@string={0xcb, 0x3, "791c75216e6b9b497a1b53cecdc3b5abc64118921afad2aab287b306c6038446bf76e13d1ece28a77052196f8a09b851d1f2e6ec48a9c16ccffd219a4c80c22dc2eab70a0ce46bc92c1993cbfd5da6a4fefbcc05cb18a966f821f06a31496ce5a59f5928bbf3a35d98dcf0ffaef59cfa29e170bd1adfbbae0d6920eb9058133e68d2b46cfa0ed4348033a61e4e555adc146ab5eee54f9b2a4637a14971c9e5b08063f42a6219f08c154c81e35e908fdb0f6fc03369024ed4b0790e5eba39b90fd1e368281fe845f0a9"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x411}}, {0x21, &(0x7f0000000940)=@string={0x21, 0x3, "e3b9cc3fbe440874fe839b1b2872b3ed02a7f20cec250fd7b0126ea29aa6f2"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)={0x0, 0x6, 0x1e, {0x1e, 0x24, "b787e46dfbbab60379be9ffed0e8e2e5e62f88878a8609776ae1b77b"}}, &(0x7f0000000a80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x827}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b00)={0x40, 0x14, 0x81, "48c5e9a96408e192cecbe3297c0622bc0a1e97eef92c5d63c1d986c97dffe2a62c98ed06cc91e84b413a846cc95f0cc96874766741d2be309e0512bac9abec62b78fb7a6a9c74b371557c19645836c9a1d0d565f6d42fd56e45957df2d4f7770f06e60c7df92f6df11436c9f34d737ce8d0b415ac869c75a2ab79785b4d315d09c"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x81, 0x1, "b9"}, &(0x7f0000000c80)={0x20, 0x82, 0x3, "316dd8"}, &(0x7f0000000cc0)={0x20, 0x83, 0x2, "e728"}, &(0x7f0000000d00)={0x20, 0x84, 0x2, "539b"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "c6cc1b"}}) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000f1950000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r7, 0x20, 0x0}, 0x10) (async) ptrace(0x10, r0) (async, rerun: 32) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) (rerun: 32) 2m24.781800875s ago: executing program 5 (id=2038): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0x8000006) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) (async, rerun: 64) unshare(0x62040200) (rerun: 64) socket$l2tp6(0xa, 0x2, 0x73) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x4, 0x0, 0x0, 0x4, 0x400, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x3, @perf_config_ext={0x28a}, 0xa216, 0x6, 0x11000, 0x1, 0x9484, 0x2000, 0x401, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_lock}, {@noblock_validity}, {@nobh}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") (async) r3 = openat(0xffffffffffffff9c, 0x0, 0x440002, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async, rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) (async, rerun: 64) r4 = getpid() (async) rt_tgsigqueueinfo(r0, r0, 0xb, &(0x7f0000000180)={0x2a, 0x7, 0x5}) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/148, 0x94}], 0x2, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000"], 0x30}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async, rerun: 32) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, 0x0) (async, rerun: 32) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 2m24.643657662s ago: executing program 5 (id=2041): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000002980)=""/4084, 0xff4}], 0x1, 0x50, 0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x79) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000240)={r3, &(0x7f0000000080)='\x00', 0x48040, &(0x7f00000000c0)={@_ha_fsid={[0x7, 0x2]}, {0x1, 0x3, 0x5, 0x1}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0xe47c}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20048080) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r7, 0x6}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 2m24.642588241s ago: executing program 33 (id=2041): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000002980)=""/4084, 0xff4}], 0x1, 0x50, 0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4a21, 0xdec, @private2, 0x6}], 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x79) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000240)={r3, &(0x7f0000000080)='\x00', 0x48040, &(0x7f00000000c0)={@_ha_fsid={[0x7, 0x2]}, {0x1, 0x3, 0x5, 0x1}}, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0xe47c}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x1000, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20048080) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r7, 0x6}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 53.980409423s ago: executing program 4 (id=2837): r0 = socket$packet(0x11, 0x3, 0x300) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000021000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x103) (async) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2a, 0x2, 0x0) (async) write$selinux_user(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a64686370515f657865635f743a733020720c96b6c444ddfe0fe183f8363a166f6f7400"], 0x27) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) 53.915178321s ago: executing program 4 (id=2838): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x44, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x0, 0xa, 0x5}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8881}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 53.320414199s ago: executing program 4 (id=2845): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) unshare(0x22020600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x3, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x7, 0x1c, 0x10, 0x1, 0x1, {0x3, 0x23, 0x100007, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x6e, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106210, 0x10004, 0x20da, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x268, 0x300, 0x2a0, 0x268, 0x3b0, 0x460, 0x460, 0x3b0, 0x460, 0x9, 0x0, {[{{@ipv6={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xffffffff], [0xff, 0x0, 0xff, 0xffffffff], 'nicvf0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0xa, 0x1, 0x10}, 0x0, 0x240, 0x2a0, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x80000000, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}, [0xffffff00, 0xffffff00, 0xffffff00, 0xffffffff], 0x4e20, 0x4e23, 0x4e22, 0x4e20, 0xfffff801, 0x883, 0x4, 0x0, 0x10001}}}, {{@ipv6={@private2, @remote, [0x0, 0xffffff00], [], 'ip6gretap0\x00', 'ip6_vti0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) r5 = syz_io_uring_setup(0x5ca0, &(0x7f00000000c0)={0x0, 0x79bf, 0x1, 0x8000, 0xc00251}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) socket(0xb, 0x1, 0x2) epoll_create(0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) chown(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 53.0397604s ago: executing program 4 (id=2847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x56b, &(0x7f0000000440)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x131) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0x1bfd31aa}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.903616167s ago: executing program 4 (id=2848): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1e000, 0xe9879, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x206, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x102, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x200000ec, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) r5 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000083d9030100000000000000000002ed419a97497708c000000000000000000000000700000a"], 0x28}}, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x40, r6, 0x111, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8050) socket$nl_generic(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x1e000, 0xe9879, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x206, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x102, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x18, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x200000ec, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) (async) fcntl$setsig(r4, 0xa, 0x13) (async) fcntl$setlease(r4, 0x400, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000083d9030100000000000000000002ed419a97497708c000000000000000000000000700000a"], 0x28}}, 0x4) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001100), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000080)={0x40, r6, 0x111, 0x70bd25, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8050) (async) 52.767685134s ago: executing program 4 (id=2851): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001980)={0x0, "7208f3d6e2f4a8f0f90ef6774367eea1"}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xc004) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x34, 0xb}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x6b, 0x1}, {0x60}, {0x18}, {0x36}, {0x1b, 0x1}, {0x6c, 0x1}, {0xd}, {0x18}, {0x11}, {0x18, 0x1}, {0x30, 0x1}, {0x12}, {0x4}, {0x30}, {0xc}, {0x4}, {0x24, 0x1}, {0x24, 0x1}, {0x16}, {0x6c, 0x1}, {0x16, 0x1}, {0x6, 0x1}, {0x6}, {0x1, 0x1}, {0x1b}, {0x5}, {0x5}, {0xb, 0x1}, {0x24}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8805) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)='9G&', 0xfdef}, {0x0}], 0x2, 0xffffff01, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "b1"}]}], {0x14}}, 0x60}}, 0x0) 52.736276318s ago: executing program 34 (id=2851): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000001980)={0x0, "7208f3d6e2f4a8f0f90ef6774367eea1"}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737955d7000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xc004) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x5c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x34, 0xb}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x21, 0x24, [{0x6b, 0x1}, {0x60}, {0x18}, {0x36}, {0x1b, 0x1}, {0x6c, 0x1}, {0xd}, {0x18}, {0x11}, {0x18, 0x1}, {0x30, 0x1}, {0x12}, {0x4}, {0x30}, {0xc}, {0x4}, {0x24, 0x1}, {0x24, 0x1}, {0x16}, {0x6c, 0x1}, {0x16, 0x1}, {0x6, 0x1}, {0x6}, {0x1, 0x1}, {0x1b}, {0x5}, {0x5}, {0xb, 0x1}, {0x24}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8805) pwritev(r1, &(0x7f0000000500)=[{&(0x7f0000000040)='9G&', 0xfdef}, {0x0}], 0x2, 0xffffff01, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "b1"}]}], {0x14}}, 0x60}}, 0x0) 41.750479921s ago: executing program 6 (id=2948): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf904, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x1, 0x0, 0x1}) (async) io_uring_enter(r2, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 41.709101353s ago: executing program 6 (id=2949): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0xfff2, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) semget(0x1, 0x4, 0x4c) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xfffffffe, 0xfffffffe) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) poll(&(0x7f0000009b00)=[{r6}], 0x20, 0x72) close_range(r5, 0xffffffffffffffff, 0x0) sendto$inet(r1, 0x0, 0xfffffffffffffe9d, 0x2404077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="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", 0xff}], 0x1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f0000000500)="7dbc1345305deeab204086b7dad09a9682a1ac16f10a772496c91fca21bcfa13478ac34936a0ece71edd53215bf1d551e09ff2cf77c56c8216029f31c9c2d3f695", 0x41}, {&(0x7f00000002c0)="fb7a55cf75395816dc24df640ed32009ffee1763a3a1d8e6d242a194", 0x1c}, {&(0x7f00000005c0)="06338c531f771657755253e1c5ce1d3cce303e902b480b4f8393e924cd37903620071c2d2271e0524ee542811bbe4563fff6d16fe55a1b25867cc9139d114390a02ebef4a102c6f2663655740a36f30a071a7d254ae50685656a9376a639dd76e3b36c123a4c4c8c0534ec455be8ad8623398824c78fd5b7a44453ee75719e7ec899e3ea65013c66adf8c6b9bdee9a13b26106f6fdd74e7cec", 0x99}, {&(0x7f0000000680)="ae8b6303c572b006aa928ad67f62c32dd2b1d98ec39aede725999d9fa058df8bc97edb3b629cb4aee03563b47eb251afd4a4b8df40be6b4c44317b7f5b3f54a3468cd8b5a830ce837f81bf92d21b34eaad1f578be52600c735759c3c617580826923a0efcb8a4036e8cbaf060aba1d360f9aff8e221cffefbb671f100355fd1ccb654a8ca4bdc9f32e243ce14ef13d9434969051f318d882c570db4d4aa81eacef99e96fcc95e28d1d8189089787f51a7f5a69155cc0a956c33df265db7a9078eb7cc47fec37839b604a67", 0xcb}, {&(0x7f0000000300)="b2bfa0172332532de02adb35ebbf2e7f855a5935a61be52e26350323c9d707e0b167203e06806397", 0x28}, {&(0x7f0000000340)="8469adf424021dc927fc0af33ea19e93ee1e561413b88b07442ad5d0b23136c96a99fcdc7d778fb19adebb02337692db4c", 0x31}, {&(0x7f0000002a40)="136de061e2f1cea9299fb44f1fc86a4470c8dfc73c92ab2c57db9abf72f245fc259f8c51820b736acfa432b4c06b2801d5abb4075b8617411bff90993abfa43de280e104e7bdf48e7dc3bef3fc11e064f8663d779651da5ebebcb28291677d111b7b7a94e6ea306c499ed1117ef16e72823bd85c7188b7eb42c86ab922b73f5221403e16b70b9463c49b0a1be5335eade8fc95c83b885a582cc0644b2ea9103407706e0204f2af51d20caf9af3d29cba699cf6cffc6f4761c27f76ec7a5ec9d5e3fbb615907a3dc349089f1788ff080c58229ff6ca2034d8f049f195688c1305b68c8675630a2986ce624f450c324dd8720defdfc264abc362297623171ad64fc53f97eb8bc4037e65e0ea4ab22f03242a36da60fd1c6e4960e0232091422ba4f356b18f92b5a83ae22f759299ca08f6b30de7d9", 0x134}], 0x9}}], 0x2, 0x2000a094) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x62ef42, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r7, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) 40.797723056s ago: executing program 6 (id=2961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x2a}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x500000000000000}, 0x8000) 40.776005772s ago: executing program 6 (id=2962): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = getpid() fcntl$lock(r0, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x6000000000000, 0x800, r1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") unshare(0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@const={0xa, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0xc0}}]}, {0x0, [0x61, 0x5f, 0x61, 0x0, 0x0, 0x0, 0x2e, 0x2e, 0x1e]}}, &(0x7f00000006c0)=""/241, 0x47, 0xf1, 0x1, 0xffffff2f, 0x10000, @value=r2}, 0x28) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4212, r3, 0x0, 0x200000000001) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") timer_create(0x7, 0x0, 0x0) timer_delete(0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000047, 0x0) 40.659850733s ago: executing program 6 (id=2963): socket(0xa, 0x3, 0x87) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x20da, 0x9, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x25}, {@loopback, 0x4e23, 0x1, 0x4, 0x12d5c, 0x12d5c}}, 0x44) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1586dd6003136c00188700fc0200000000000000000000000000fdff020000000000000000000000000001"], 0x0) socket(0x400000000010, 0x3, 0x0) 40.199647983s ago: executing program 6 (id=2967): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2b, 0x25dfdb7f, {0x2, 0x0, 0x0, r2, 0x4, 0x1f4}, [@NDA_CACHEINFO={0x14, 0x3, {0xe, 0xfffffffe, 0x8f8, 0x4}}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20025094) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000045c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 40.18749395s ago: executing program 35 (id=2967): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x33, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2b, 0x25dfdb7f, {0x2, 0x0, 0x0, r2, 0x4, 0x1f4}, [@NDA_CACHEINFO={0x14, 0x3, {0xe, 0xfffffffe, 0x8f8, 0x4}}, @NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20025094) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000045c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.555979771s ago: executing program 0 (id=3386): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000004000407040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095", @ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8e, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x2f) 2.555473701s ago: executing program 0 (id=3387): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x28f5c, 0x460, 0x1b0, 0x1b0, 0xffffffff, 0x1b0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x178, 0x1b0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@unspec=@limit={{0x48}, {0x5, 0xb8e, 0x3, 0x80000000, 0x7f, 0x0, 0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 2.485798249s ago: executing program 0 (id=3388): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xd) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x9, 0x0, 0x2, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3}, 0x4, 0x6, 0xe723, 0x1, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) r3 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc1}}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000540)='(pu&00\t(|') mmap(&(0x7f00005c1000/0x1000)=nil, 0x1000, 0x2, 0x8010, r2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x1, 0x0, 0xff, 0x0, 0x0, 0x22, 0x2640, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x59}, 0x100118, 0x8000000000000, 0x0, 0x0, 0xfff, 0x8001, 0x8001, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x42) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c041) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.119934586s ago: executing program 8 (id=3391): io_setup(0x8, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) io_setup(0xfffdfffc, &(0x7f00000001c0)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x181e42) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001180)=ANY=[@ANYRES8, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000120) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x804) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x401, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/179, 0xb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000"], 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.747700452s ago: executing program 1 (id=3396): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000980)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 1.625031541s ago: executing program 1 (id=3399): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000001080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x8400, 0x0, 0x4451099e661a63b1}, 0x0) 1.541538046s ago: executing program 0 (id=3400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x44, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x0, 0xa, 0x5}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8881}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.467903783s ago: executing program 1 (id=3401): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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") setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000140)=0x6, 0x4) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100), 0x4440, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x94}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @rand_addr=0x64010102}, 0x2}}, 0x2e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f8, &(0x7f0000000080)) creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x18c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xfffffffffffffeff}, {0xc, 0x90, 0xfffffffffffffff7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x10001}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xfffffffffffffffd}, {0xc, 0x90, 0xdd3c}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xffffffffffffffff}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x8}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) 1.189782745s ago: executing program 1 (id=3403): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x2000000000000216, &(0x7f00000007c0)=ANY=[@ANYBLOB="c817ed28544911ec6e6c76be9ac529b780633ec10bd714ccdbe8e0a45c512949c602ad2026d80a6fb535c42d7f6ab58ba2f70324b934af4d6b101fa04f7115df0ec7a8e5fb8d16db299c88caee8a6a4ea988436e53d7172d8e21ced020019beb83c6852f678d152dd1c3bb732f269f82c3d35532cde47fcc8211452d7da844660ec3a4f49a1f724417a5e9e2a1797f89c9cfd9965d83aaa26cdc99f831a068ec8f8bbb9b285170adaa496a5ad079b9", @ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0xb, 0x0, 0x9, 0x80, 0x0, 0x200, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x10, 0xffffffffffffffff, 0x9) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socket$rds(0x15, 0x5, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc090}, 0x8801) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x60c10, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x8006, 0x6}, 0x100, 0x10001, 0xda, 0x5, 0xabca, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0x5, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) socket(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x2) io_uring_setup(0x323, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffffe, 0x182}) write$vga_arbiter(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes io+'], 0xf) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) 991.014121ms ago: executing program 7 (id=3407): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44060}, 0x98) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, 0x0, 0x0) listen(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 988.507171ms ago: executing program 0 (id=3408): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x80) r2 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100050c10000000010000000000", 0x58}], 0x1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0xa, 0x4e20, 0xfbfffffe, @empty}, r1}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013f00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r8, &(0x7f0000000100)={0x20000014}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f9599, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setrlimit(0x40000000000008, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x85) 935.972152ms ago: executing program 7 (id=3409): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be00"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000ffffffffffffffa600000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 836.310894ms ago: executing program 3 (id=3411): r0 = socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x1f000000) 835.949574ms ago: executing program 7 (id=3412): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x44, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x40, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x6, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x0, 0xa, 0x5}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8881}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x7}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 833.767354ms ago: executing program 1 (id=3413): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0xfffffffd, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], &(0x7f0000000100)=""/172, 0x155, 0xac, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 777.402124ms ago: executing program 3 (id=3414): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 723.304875ms ago: executing program 1 (id=3415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x18c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x15c, 0x2, [@TCA_TCINDEX_ACT={0x158, 0x7, [@m_xt={0x124, 0x17, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0x5, 'filter\x00', 0x2, 0x4}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x30, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r3, &(0x7f0000000340)="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", 0xcc1, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) recvfrom(r0, &(0x7f0000000040)=""/117, 0x75, 0x40000042, &(0x7f0000000140)=@rc={0x1f, @any, 0x81}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x54}}, 0x20008044) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001480)={0x12b4, 0x0, 0x5, 0x302, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x9}, 0xa, 0x8, 0x71b6, 0x8, 0x21, 'syz0\x00', "d829cd031a08b7f29fb46ae6856572dec828d82a835be94e497a2ef3e1b427c7", "97cff6419737b3a0272a3461caabc1c2db69aabda54586dc902ea69cc8e3756f", [{0x8e9, 0xc, {0x3, 0x2}}, {0x7ff, 0x6b5, {0x1, 0x7f}}, {0xb, 0xc, {0x1, 0x2}}, {0x5, 0x4, {0x3, 0xfffffffd}}, {0x4, 0x2, {0x0, 0x8}}, {0x700, 0x1, {0x1, 0xf4}}, {0x3875, 0xde, {0x2, 0x2}}, {0x0, 0x6, {0x3, 0xef}}, {0x165, 0x2, {0x1, 0x44}}, {0x3, 0x2, {0x1, 0x100}}, {0x1, 0x7, {0x0, 0x5}}, {0x7, 0x6c88, {0x3, 0x8}}, {0x8001, 0xa, {0x1, 0x5}}, {0x5, 0x8, {0x0, 0x4}}, {0xf8, 0x1b5, {0x3, 0x1}}, {0x8, 0xffff, {0x0, 0x2}}, {0x4, 0x2, {0x2, 0x9}}, {0x0, 0x7, {0x0, 0x73}}, {0x7f, 0x8, {0x1, 0x101}}, {0x9, 0x502, {0x1, 0x8}}, {0x7, 0x2, {0x1, 0x800000}}, {0x6, 0x3, {0x0, 0x3}}, {0x2, 0x8, {0x3, 0x33}}, {0xa6d2, 0xff, {0x1, 0xb64}}, {0x6, 0x4, {0x3, 0xc}}, {0xe78, 0x9, {0x5, 0x80000000}}, {0x3, 0xba8, {0x0, 0x10000}}, {0x0, 0x7, {0x0, 0x7}}, {0x2, 0x9, {0x2, 0x6}}, {0x7000, 0xf8f7, {0x0, 0x800}}, {0x7, 0x4, {0x2, 0x5}}, {0xbbe8, 0x5, {0x2, 0x2}}, {0x4, 0x9, {0x1, 0x6183}}, {0x3, 0x6, {0x2, 0x4}}, {0x1, 0x1ff, {0x3, 0x2}}, {0x1, 0x9, {0x0, 0x9}}, {0xffff, 0x4, {0x3, 0x7235}}, {0xff, 0x5, {0x2, 0x2}}, {0x7, 0xf72d, {0x2, 0x8ff0}}, {0x6, 0x3, {0x3, 0x8001}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x7, 0xff, 0x1, 0xfffd, 0xa, 'syz1\x00', "17f21619ca60ae334efe747dc03baaa62047307abbd5853ee3dfcba175443f07", "42a3ecffaf07b8bdd8750974f1d0f7eaa2aadec076d005619be8d8de8d8c3cdc", [{0x4, 0x80, {0x1, 0xffffff80}}, {0x3, 0x2, {0x325b604d95b96b2e, 0x8001}}, {0x2, 0x10, {0x0, 0x2}}, {0x10, 0x5, {0x0, 0x20}}, {0x1, 0x5, {0x2, 0x5}}, {0x1, 0x6, {0x2, 0x40}}, {0x8bf, 0x8b8, {0x0, 0x5}}, {0x6, 0x3, {0x2, 0x3}}, {0x7, 0x1, {0x1, 0xfff}}, {0x1, 0x1, {0x3, 0x8}}, {0x0, 0x9}, {0x3, 0x0, {0x1, 0x95}}, {0x3, 0x2, {0x3, 0x5}}, {0x2b, 0x2, {0x2, 0x6}}, {0x800, 0x401, {0x0, 0x97}}, {0x9, 0x7ff, {0x0, 0x6}}, {0x9, 0x3, {0x2, 0x31b}}, {0x3, 0xa, {0x1, 0x5}}, {0x2, 0x4, {0x1, 0x71}}, {0x7, 0xf, {0x0, 0x6}}, {0x2, 0x9, {0x2, 0x8}}, {0x4, 0x5, {0x2, 0x8}}, {0x3, 0x1, {0x2, 0x7}}, {0x400, 0x5}, {0x2, 0x8, {0x0, 0x1ab6a68}}, {0xd, 0x289c, {0x2, 0xc}}, {0x400, 0x6329, {0x1, 0x10}}, {0x7ff, 0x6, {0x0, 0x3}}, {0x6, 0x0, {0x1, 0x81}}, {0xb4, 0x5, {0x1, 0xff00000}}, {0x401, 0x4, {0x3, 0x8}}, {0x8, 0x0, {0x0, 0x1}}, {0xa, 0x8, {0x3, 0x4}}, {0x8, 0xfff5, {0x2, 0x8000}}, {0xedf, 0x101, {0x0, 0x9}}, {0x8, 0x1, {0x2, 0x3ff}}, {0x5, 0x76d7, {0x2, 0x8}}, {0x0, 0x5, {0x0, 0x200}}, {0x2, 0x36, {0x0, 0xfffffffe}}, {0x4, 0xfffb, {0x3, 0xc}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x91, 0x4, 0x2, 0x80, 0x14, 'syz0\x00', "54eab1ba98b5b20b4a15105b4ff3888aabd40c4e3f8f5872b66f886a8941d28e", "dd75d92b4b667f8de5cfe966f622758e25bca935d91a1c4edcff1d7a64b67085", [{0x0, 0x2, {0x3, 0x10000}}, {0x200, 0x1, {0x2, 0x67f}}, {0x7, 0x7ff, {0x8226b48813587479, 0x100}}, {0x1, 0x0, {0x2, 0x2}}, {0x3ff, 0x38, {0x1, 0x6}}, {0x200, 0x0, {0x3, 0x6}}, {0x80, 0x401}, {0x7, 0x2, {0x0, 0x80}}, {0x3b60, 0xfffd, {0x1, 0xe6}}, {0x18, 0x1, {0x3, 0x3}}, {0x9, 0x3, {0x2, 0x3}}, {0x9, 0x8, {0x0, 0x9}}, {0x520, 0x69f, {0x1, 0xffffbc17}}, {0x6, 0x5, {0x1, 0x6}}, {0x9, 0x7f, {0x0, 0x10000}}, {0xa, 0x2, {0x2, 0x9}}, {0x1, 0x6, {0x1, 0xb5}}, {0x8, 0x9, {0x2, 0x3}}, {0x0, 0x26, {0x5b28f336f5ccb15d, 0xfffffff7}}, {0x4000, 0x2, {0x2, 0xfffff001}}, {0xc1bc, 0x3, {0x3, 0x7fff}}, {0x7f, 0x5, {0x1, 0x2}}, {0x9, 0x9, {0x1, 0x3}}, {0x80, 0x3ea, {0x1}}, {0x6, 0x6, {0x3, 0x2}}, {0x1000, 0x8, {0x3, 0x8}}, {0x6, 0x1, {0x2, 0x6}}, {0x9, 0x7, {0x0, 0x6}}, {0x0, 0x7, {0x0, 0x8}}, {0x8, 0x4, {0x3, 0xc}}, {0xf8, 0x8a56, {0x3, 0xce}}, {0x0, 0x6, {0x2, 0x1}}, {0x7, 0x9, {0x1, 0x6c17}}, {0x49fd, 0x6, {0x3, 0x8001}}, {0x8, 0x9, {0x0, 0x100}}, {0xff, 0x80, {0x1, 0x8b7}}, {0x2, 0x2, {0x1, 0xe5}}, {0x0, 0xfe01, {0x1, 0xf}}, {0xffff, 0x4, {0x1, 0x7}}, {0xea, 0x200, {0x0, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0xa, 0x0, 0x217b, 0x3, 0x21, 'syz1\x00', "0985aeb1effa6f92c4d40bfa96d2f66c7d32136940baeebf76c31266a5401ca5", "0dc0659795c212a9c6d027d6c73ebf9d4e9d22f9190c099555c75aa5645640fe", [{0x100, 0x0, {0x3, 0x80000001}}, {0x7, 0x2, {0x3, 0x8}}, {0x5, 0x4, {0x2, 0x20000000}}, {0x6, 0xdf8, {0x0, 0x5}}, {0x5b39, 0xffff, {0x3, 0x7}}, {0x3, 0xfffe, {0x0, 0x4}}, {0x80c3, 0x8000, {0x2, 0x7fffffff}}, {0x8, 0x6, {0x1, 0x3d}}, {0x9, 0x2, {0x3, 0xa26}}, {0x8001, 0xa27, {0x0, 0x6}}, {0x4, 0x6, {0x0, 0xffff1f97}}, {0xad, 0xfff9, {0x2, 0x1}}, {0x72f, 0x1, {0x3, 0x7}}, {0x8, 0x6, {0x0, 0x2}}, {0x7a, 0x3, {0x1, 0x200}}, {0xdd2f, 0x8, {0x2, 0x9}}, {0x1, 0xff80, {0x0, 0x900}}, {0x7fff, 0x5b4, {0x2, 0x6}}, {0x400, 0x4432, {0x2, 0x7}}, {0x3, 0x400, {0x0, 0x11}}, {0x200, 0x8}, {0x8e1, 0x8, {0x0, 0x1}}, {0x7, 0x7fff, {0x1}}, {0x401, 0x401, {0x0, 0x7b}}, {0x5, 0x9, {0x1, 0x1}}, {0xff80, 0x2, {0x0, 0xffff}}, {0x7eb, 0xe, {0x2, 0x401}}, {0x3, 0x1, {0x0, 0x8}}, {0x5, 0x0, {0x2, 0x9}}, {0x9, 0x3, {0x1}}, {0x8, 0x64eb, {0x2, 0x743c}}, {0x7, 0x6, {0x1, 0x3ff}}, {0x1, 0x4, {0x0, 0x2}}, {0x1, 0x8, {0x1470c64174f17a64, 0x8}}, {0x3, 0x9, {0x2, 0xf6}}, {0x2, 0x5, {0x1, 0x2}}, {0x7, 0x4, {0x2, 0x1}}, {0x0, 0xc, {0x3, 0x6}}, {0x7ff, 0x2ae1, {0x1, 0x8a4}}, {0x1000, 0x7, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x80000001}, 0x9, 0x4, 0xfff7, 0x7, 0x22, 'syz1\x00', "7c8284f710bb11e759f1430f7585f9c1abcaaf162049bf61f9ffed7ef1124822", "11ca0c07ecaf35ae59600b0c423d1c8a7467c77d932b2786456c418d51d87584", [{0x5, 0x8, {0x2, 0x300}}, {0x0, 0x5, {0x0, 0x7}}, {0xfffe, 0x1, {0x0, 0x1a}}, {0x81, 0xfe01, {0x3, 0x7}}, {0xe, 0x7, {0x1, 0x7}}, {0x4c, 0xe3, {0x3, 0x80000000}}, {0x3, 0x7, {0x3, 0x6}}, {0xfff7, 0x3, {0x3, 0xfffffff7}}, {0x1, 0x2, {0x0, 0x4}}, {0x5, 0x0, {0x2, 0x8}}, {0x2, 0x7, {0x2}}, {0x0, 0x6, {0x0, 0x7}}, {0x3ff, 0x7fff, {0x3, 0x4}}, {0xc, 0x1000, {0x0, 0x3}}, {0x1, 0x7, {0x2, 0x4}}, {0x1, 0x1000, {0x2, 0x5}}, {0x5, 0x1, {0x1, 0x4}}, {0x0, 0x3, {0x2, 0x9}}, {0x6, 0xfff7, {0x0, 0x1}}, {0x0, 0x7ff}, {0xb, 0x1, {0x1, 0x8}}, {0x9, 0x9, {0x0, 0x5}}, {0x3, 0x514, {0x1, 0x6}}, {0x3, 0x67, {0x1, 0x2b0}}, {0xfe60, 0x1, {0x0, 0x1ff}}, {0x100, 0x5, {0x2, 0x3}}, {0xf, 0xfffd, {0x2, 0x7}}, {0x3, 0x1, {0x2, 0x7f}}, {0x1, 0x8, {0x3, 0x3}}, {0x5, 0x2, {0x3, 0xb6b9}}, {0x9, 0x0, {0x2, 0x100}}, {0x0, 0x7, {0x1, 0xfffffffd}}, {0x2, 0xe, {0x2, 0x80000000}}, {0x9, 0x5, {0x2, 0x6}}, {0x9, 0x10, {0x3, 0x7}}, {0x3, 0xb6a3, {0x3, 0xfff}}, {0x73, 0x829, {0x0, 0x2}}, {0x7ff, 0x2, {0x3, 0x9ba7}}, {0x7, 0xf4, {0x2, 0x9}}, {0x6, 0x1, {0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x9, 0x2, 0x200, 0x2, 0x16, 'syz0\x00', "e3b6d0a0f4d3e04aa3fa854383638b4998f1022374e010da4da689e35c43321c", "d8edfc05618180cd1d8cc15c98aba4078cea5093dcdf05bd11f230662c533b63", [{0xa917, 0x8, {0x1, 0x8001}}, {0x1ff, 0x101, {0x2, 0xffff2486}}, {0x8, 0x40, {0x3, 0x8}}, {0x9, 0x8, {0x2, 0x7fffffff}}, {0x3e0, 0x6, {0x2, 0x7ff}}, {0x2, 0x7, {0x2, 0x9}}, {0x2, 0x4, {0x0, 0xffffff00}}, {0x597c, 0x7b78, {0x2, 0x400}}, {0x1, 0x8, {0x3, 0x7f}}, {0xb4, 0x3, {0x0, 0x8}}, {0x4, 0x41b0, {0x3, 0x5ca4bc4a}}, {0x1, 0x3, {0x2, 0x1}}, {0xfefa, 0x4, {0x3}}, {0x6, 0xfff, {0x2, 0x3}}, {0x3, 0x7, {0x3, 0x1}}, {0x6, 0x4, {0x0, 0xb48}}, {0xffff, 0x2, {0x3, 0x7f}}, {0x7, 0x8001, {0x0, 0x1ff}}, {0x0, 0x3, {0x1, 0x1ff}}, {0x9, 0x89, {0x1, 0x8}}, {0x2, 0xf1, {0x1, 0x7}}, {0xef5d, 0x9, {0x0, 0x8001}}, {0xbdf, 0x81, {0x0, 0x7}}, {0x80, 0x3, {0x0, 0x5}}, {0x5, 0x6, {0x0, 0x2}}, {0x18, 0x100, {0x0, 0xe}}, {0x100, 0x5, {0x3, 0x3}}, {0x815b, 0x0, {0x3, 0x4307}}, {0x3, 0x8001, {0x5, 0x8}}, {0x9, 0xc, {0x0, 0x100}}, {0x8254, 0x8, {0x2, 0x7}}, {0x3, 0xd35, {0x2}}, {0xd, 0xe2, {0x0, 0x1}}, {0xd, 0x8001, {0x1, 0x6}}, {0x401, 0xa03, {0x0, 0x10}}, {0x7fff, 0x800, {0x1, 0x2}}, {0x7, 0x7, {0x1, 0x7}}, {0x6, 0xaac, {0x2, 0xfffffffa}}, {0x58e, 0x0, {0x1, 0x1}}, {0x2, 0x5, {0x3, 0x23}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x1, 0xec, 0x5, 0x5e77, 0x17, 'syz1\x00', "d5e501409efa4309e9eac6eec6dd6ca4201a0328f81183cd8550dc2d828af073", "df20da8aa334b28339419b7ebe5b6d35898733c02c299ec4f65f0ac33f02b4b1", [{0x5, 0x1, {0x1, 0x5}}, {0x99, 0x2, {0x1, 0x3d}}, {0x8, 0x4, {0x1, 0x3a5}}, {0x3, 0x98f, {0x2, 0x9}}, {0x6, 0x9, {0x1, 0xf8000000}}, {0x1, 0x6, {0x1, 0x9}}, {0x7, 0x800, {0x1, 0xb}}, {0x0, 0x52, {0x0, 0xa8}}, {0x2, 0xfff3, {0x2}}, {0x100, 0x1, {0x1, 0x7}}, {0x6, 0x8, {0x0, 0x4}}, {0x8, 0xffff, {0x0, 0x2}}, {0x8, 0x9, {0x3, 0xd}}, {0x9, 0x7, {0x3, 0x452ad10b}}, {0x9, 0x9, {0x1, 0x1}}, {0x1, 0xcf04, {0x2, 0x4}}, {0x280a, 0x8, {0x3, 0xe631}}, {0x10, 0x9, {0x0, 0x7}}, {0x2, 0x2, {0x3, 0x2}}, {0x40, 0x4, {0x3, 0x1}}, {0x8, 0xfffd, {0x1, 0xfffffff5}}, {0x80, 0x6, {0x3, 0x7f}}, {0x7fff, 0x0, {0x0, 0x2}}, {0xa717, 0x7, {0x3}}, {0x5, 0x3, {0x2, 0x7ff}}, {0x3, 0x4, {0x2, 0x2}}, {0x61d, 0x6, {0x0, 0x6}}, {0x7, 0xe, {0x1, 0x8}}, {0x6, 0x0, {0x0, 0x89}}, {0x3, 0x9, {0x1, 0x7}}, {0x3, 0x5, {0x2, 0x1}}, {0x6846, 0xffff, {0x2, 0x2}}, {0x7ff, 0x8001, {0x1, 0x8b}}, {0x5c6, 0x6, {0x2, 0x2}}, {0x5, 0xc000, {0x3, 0xc4c6}}, {0x4, 0xffff, {0x0, 0x6}}, {0xa, 0x8, {0x1, 0x5b3}}, {0xac96, 0x5, {0x3}}, {0x401, 0x6, {0x2, 0x8}}, {0x0, 0x1, {0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x6f3}, 0x7, 0x6, 0x0, 0x6, 0x4, 'syz0\x00', "4d5510029a3db982face39c70374fca6866d5fee1bc0dd8c4152c02eba8a9664", "37d3e1d80e3bf4c2880c3dc01d4ca8cc5228ab6eb445c18766c12990640bc51d", [{0x6, 0x10, {0x1}}, {0xb, 0x5, {0x1}}, {0x90, 0x10, {0x1, 0xd}}, {0x2, 0x25, {0x1, 0x3e}}, {0x7, 0x252f, {0x2, 0xfffffff7}}, {0x3, 0x1, {0x2, 0x7ce}}, {0x3, 0x6, {0x1, 0x3}}, {0x5, 0x8001, {0x0, 0x6}}, {0xabe, 0x6, {0x3, 0xfffffffd}}, {0xd, 0x2, {0x2, 0x4}}, {0x9, 0x4, {0x2, 0xfffffffa}}, {0x1, 0xb, {0x3, 0x101}}, {0x0, 0x2, {0x1, 0xab}}, {0x5, 0x7, {0x3}}, {0x401, 0xd8, {0x3, 0x2}}, {0x9, 0x7, {0x0, 0x6}}, {0x7, 0xff, {0x2, 0xfa94}}, {0x800, 0x9554, {0x3, 0x9}}, {0x9, 0x8, {0x1, 0x80}}, {0x97ba, 0xd, {0x1, 0xa}}, {0xfffb, 0x9, {0x2, 0x2}}, {0xd, 0x0, {0x1, 0x4}}, {0x6, 0x9, {0x3, 0x4}}, {0x2dc3, 0x6, {0x3, 0x9}}, {0x3, 0x8, {0x2, 0x4}}, {0x7f, 0x0, {0x1, 0x8}}, {0x5, 0x7f, {0x0, 0x7}}, {0x9, 0x10, {0x2, 0x5}}, {0x40, 0x7a, {0x2, 0x101}}, {0x0, 0x3, {0x0, 0x1}}, {0x3, 0x9, {0x2, 0x7}}, {0x1, 0x6, {0x1, 0x2}}, {0xa, 0x5, {0x3, 0x9}}, {0xc38, 0x3e08, {0x3}}, {0x8, 0x9, {0x2, 0x3}}, {0x4, 0x38ba, {0x3, 0x9}}, {0x100, 0xb077, {0x1, 0x1}}, {0x2, 0x7, {0x2}}, {0x3, 0xb, {0x3, 0xf}}, {0x40, 0x800, {0x0, 0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0) syz_open_pts(r4, 0xc000) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}, 0x2c, {[{@timeout}]}}) 718.497474ms ago: executing program 36 (id=3415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000002440)=@delchain={0x18c, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x15c, 0x2, [@TCA_TCINDEX_ACT={0x158, 0x7, [@m_xt={0x124, 0x17, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x2a, 0x6, {0x5, 'filter\x00', 0x2, 0x4}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0x30, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x810}, 0x41) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc2) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000a, 0x11, r2, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r3, &(0x7f0000000340)="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", 0xcc1, 0x0, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) recvfrom(r0, &(0x7f0000000040)=""/117, 0x75, 0x40000042, &(0x7f0000000140)=@rc={0x1f, @any, 0x81}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x54}}, 0x20008044) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000001480)={0x12b4, 0x0, 0x5, 0x302, 0x0, 0x0, {0x0, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x9}, 0xa, 0x8, 0x71b6, 0x8, 0x21, 'syz0\x00', "d829cd031a08b7f29fb46ae6856572dec828d82a835be94e497a2ef3e1b427c7", "97cff6419737b3a0272a3461caabc1c2db69aabda54586dc902ea69cc8e3756f", [{0x8e9, 0xc, {0x3, 0x2}}, {0x7ff, 0x6b5, {0x1, 0x7f}}, {0xb, 0xc, {0x1, 0x2}}, {0x5, 0x4, {0x3, 0xfffffffd}}, {0x4, 0x2, {0x0, 0x8}}, {0x700, 0x1, {0x1, 0xf4}}, {0x3875, 0xde, {0x2, 0x2}}, {0x0, 0x6, {0x3, 0xef}}, {0x165, 0x2, {0x1, 0x44}}, {0x3, 0x2, {0x1, 0x100}}, {0x1, 0x7, {0x0, 0x5}}, {0x7, 0x6c88, {0x3, 0x8}}, {0x8001, 0xa, {0x1, 0x5}}, {0x5, 0x8, {0x0, 0x4}}, {0xf8, 0x1b5, {0x3, 0x1}}, {0x8, 0xffff, {0x0, 0x2}}, {0x4, 0x2, {0x2, 0x9}}, {0x0, 0x7, {0x0, 0x73}}, {0x7f, 0x8, {0x1, 0x101}}, {0x9, 0x502, {0x1, 0x8}}, {0x7, 0x2, {0x1, 0x800000}}, {0x6, 0x3, {0x0, 0x3}}, {0x2, 0x8, {0x3, 0x33}}, {0xa6d2, 0xff, {0x1, 0xb64}}, {0x6, 0x4, {0x3, 0xc}}, {0xe78, 0x9, {0x5, 0x80000000}}, {0x3, 0xba8, {0x0, 0x10000}}, {0x0, 0x7, {0x0, 0x7}}, {0x2, 0x9, {0x2, 0x6}}, {0x7000, 0xf8f7, {0x0, 0x800}}, {0x7, 0x4, {0x2, 0x5}}, {0xbbe8, 0x5, {0x2, 0x2}}, {0x4, 0x9, {0x1, 0x6183}}, {0x3, 0x6, {0x2, 0x4}}, {0x1, 0x1ff, {0x3, 0x2}}, {0x1, 0x9, {0x0, 0x9}}, {0xffff, 0x4, {0x3, 0x7235}}, {0xff, 0x5, {0x2, 0x2}}, {0x7, 0xf72d, {0x2, 0x8ff0}}, {0x6, 0x3, {0x3, 0x8001}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x7, 0xff, 0x1, 0xfffd, 0xa, 'syz1\x00', "17f21619ca60ae334efe747dc03baaa62047307abbd5853ee3dfcba175443f07", "42a3ecffaf07b8bdd8750974f1d0f7eaa2aadec076d005619be8d8de8d8c3cdc", [{0x4, 0x80, {0x1, 0xffffff80}}, {0x3, 0x2, {0x325b604d95b96b2e, 0x8001}}, {0x2, 0x10, {0x0, 0x2}}, {0x10, 0x5, {0x0, 0x20}}, {0x1, 0x5, {0x2, 0x5}}, {0x1, 0x6, {0x2, 0x40}}, {0x8bf, 0x8b8, {0x0, 0x5}}, {0x6, 0x3, {0x2, 0x3}}, {0x7, 0x1, {0x1, 0xfff}}, {0x1, 0x1, {0x3, 0x8}}, {0x0, 0x9}, {0x3, 0x0, {0x1, 0x95}}, {0x3, 0x2, {0x3, 0x5}}, {0x2b, 0x2, {0x2, 0x6}}, {0x800, 0x401, {0x0, 0x97}}, {0x9, 0x7ff, {0x0, 0x6}}, {0x9, 0x3, {0x2, 0x31b}}, {0x3, 0xa, {0x1, 0x5}}, {0x2, 0x4, {0x1, 0x71}}, {0x7, 0xf, {0x0, 0x6}}, {0x2, 0x9, {0x2, 0x8}}, {0x4, 0x5, {0x2, 0x8}}, {0x3, 0x1, {0x2, 0x7}}, {0x400, 0x5}, {0x2, 0x8, {0x0, 0x1ab6a68}}, {0xd, 0x289c, {0x2, 0xc}}, {0x400, 0x6329, {0x1, 0x10}}, {0x7ff, 0x6, {0x0, 0x3}}, {0x6, 0x0, {0x1, 0x81}}, {0xb4, 0x5, {0x1, 0xff00000}}, {0x401, 0x4, {0x3, 0x8}}, {0x8, 0x0, {0x0, 0x1}}, {0xa, 0x8, {0x3, 0x4}}, {0x8, 0xfff5, {0x2, 0x8000}}, {0xedf, 0x101, {0x0, 0x9}}, {0x8, 0x1, {0x2, 0x3ff}}, {0x5, 0x76d7, {0x2, 0x8}}, {0x0, 0x5, {0x0, 0x200}}, {0x2, 0x36, {0x0, 0xfffffffe}}, {0x4, 0xfffb, {0x3, 0xc}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x91, 0x4, 0x2, 0x80, 0x14, 'syz0\x00', "54eab1ba98b5b20b4a15105b4ff3888aabd40c4e3f8f5872b66f886a8941d28e", "dd75d92b4b667f8de5cfe966f622758e25bca935d91a1c4edcff1d7a64b67085", [{0x0, 0x2, {0x3, 0x10000}}, {0x200, 0x1, {0x2, 0x67f}}, {0x7, 0x7ff, {0x8226b48813587479, 0x100}}, {0x1, 0x0, {0x2, 0x2}}, {0x3ff, 0x38, {0x1, 0x6}}, {0x200, 0x0, {0x3, 0x6}}, {0x80, 0x401}, {0x7, 0x2, {0x0, 0x80}}, {0x3b60, 0xfffd, {0x1, 0xe6}}, {0x18, 0x1, {0x3, 0x3}}, {0x9, 0x3, {0x2, 0x3}}, {0x9, 0x8, {0x0, 0x9}}, {0x520, 0x69f, {0x1, 0xffffbc17}}, {0x6, 0x5, {0x1, 0x6}}, {0x9, 0x7f, {0x0, 0x10000}}, {0xa, 0x2, {0x2, 0x9}}, {0x1, 0x6, {0x1, 0xb5}}, {0x8, 0x9, {0x2, 0x3}}, {0x0, 0x26, {0x5b28f336f5ccb15d, 0xfffffff7}}, {0x4000, 0x2, {0x2, 0xfffff001}}, {0xc1bc, 0x3, {0x3, 0x7fff}}, {0x7f, 0x5, {0x1, 0x2}}, {0x9, 0x9, {0x1, 0x3}}, {0x80, 0x3ea, {0x1}}, {0x6, 0x6, {0x3, 0x2}}, {0x1000, 0x8, {0x3, 0x8}}, {0x6, 0x1, {0x2, 0x6}}, {0x9, 0x7, {0x0, 0x6}}, {0x0, 0x7, {0x0, 0x8}}, {0x8, 0x4, {0x3, 0xc}}, {0xf8, 0x8a56, {0x3, 0xce}}, {0x0, 0x6, {0x2, 0x1}}, {0x7, 0x9, {0x1, 0x6c17}}, {0x49fd, 0x6, {0x3, 0x8001}}, {0x8, 0x9, {0x0, 0x100}}, {0xff, 0x80, {0x1, 0x8b7}}, {0x2, 0x2, {0x1, 0xe5}}, {0x0, 0xfe01, {0x1, 0xf}}, {0xffff, 0x4, {0x1, 0x7}}, {0xea, 0x200, {0x0, 0x7fffffff}}]}}}, {{0x254, 0x1, {{0x2, 0x4}, 0xa, 0x0, 0x217b, 0x3, 0x21, 'syz1\x00', "0985aeb1effa6f92c4d40bfa96d2f66c7d32136940baeebf76c31266a5401ca5", "0dc0659795c212a9c6d027d6c73ebf9d4e9d22f9190c099555c75aa5645640fe", [{0x100, 0x0, {0x3, 0x80000001}}, {0x7, 0x2, {0x3, 0x8}}, {0x5, 0x4, {0x2, 0x20000000}}, {0x6, 0xdf8, {0x0, 0x5}}, {0x5b39, 0xffff, {0x3, 0x7}}, {0x3, 0xfffe, {0x0, 0x4}}, {0x80c3, 0x8000, {0x2, 0x7fffffff}}, {0x8, 0x6, {0x1, 0x3d}}, {0x9, 0x2, {0x3, 0xa26}}, {0x8001, 0xa27, {0x0, 0x6}}, {0x4, 0x6, {0x0, 0xffff1f97}}, {0xad, 0xfff9, {0x2, 0x1}}, {0x72f, 0x1, {0x3, 0x7}}, {0x8, 0x6, {0x0, 0x2}}, {0x7a, 0x3, {0x1, 0x200}}, {0xdd2f, 0x8, {0x2, 0x9}}, {0x1, 0xff80, {0x0, 0x900}}, {0x7fff, 0x5b4, {0x2, 0x6}}, {0x400, 0x4432, {0x2, 0x7}}, {0x3, 0x400, {0x0, 0x11}}, {0x200, 0x8}, {0x8e1, 0x8, {0x0, 0x1}}, {0x7, 0x7fff, {0x1}}, {0x401, 0x401, {0x0, 0x7b}}, {0x5, 0x9, {0x1, 0x1}}, {0xff80, 0x2, {0x0, 0xffff}}, {0x7eb, 0xe, {0x2, 0x401}}, {0x3, 0x1, {0x0, 0x8}}, {0x5, 0x0, {0x2, 0x9}}, {0x9, 0x3, {0x1}}, {0x8, 0x64eb, {0x2, 0x743c}}, {0x7, 0x6, {0x1, 0x3ff}}, {0x1, 0x4, {0x0, 0x2}}, {0x1, 0x8, {0x1470c64174f17a64, 0x8}}, {0x3, 0x9, {0x2, 0xf6}}, {0x2, 0x5, {0x1, 0x2}}, {0x7, 0x4, {0x2, 0x1}}, {0x0, 0xc, {0x3, 0x6}}, {0x7ff, 0x2ae1, {0x1, 0x8a4}}, {0x1000, 0x7, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0x80000001}, 0x9, 0x4, 0xfff7, 0x7, 0x22, 'syz1\x00', "7c8284f710bb11e759f1430f7585f9c1abcaaf162049bf61f9ffed7ef1124822", "11ca0c07ecaf35ae59600b0c423d1c8a7467c77d932b2786456c418d51d87584", [{0x5, 0x8, {0x2, 0x300}}, {0x0, 0x5, {0x0, 0x7}}, {0xfffe, 0x1, {0x0, 0x1a}}, {0x81, 0xfe01, {0x3, 0x7}}, {0xe, 0x7, {0x1, 0x7}}, {0x4c, 0xe3, {0x3, 0x80000000}}, {0x3, 0x7, {0x3, 0x6}}, {0xfff7, 0x3, {0x3, 0xfffffff7}}, {0x1, 0x2, {0x0, 0x4}}, {0x5, 0x0, {0x2, 0x8}}, {0x2, 0x7, {0x2}}, {0x0, 0x6, {0x0, 0x7}}, {0x3ff, 0x7fff, {0x3, 0x4}}, {0xc, 0x1000, {0x0, 0x3}}, {0x1, 0x7, {0x2, 0x4}}, {0x1, 0x1000, {0x2, 0x5}}, {0x5, 0x1, {0x1, 0x4}}, {0x0, 0x3, {0x2, 0x9}}, {0x6, 0xfff7, {0x0, 0x1}}, {0x0, 0x7ff}, {0xb, 0x1, {0x1, 0x8}}, {0x9, 0x9, {0x0, 0x5}}, {0x3, 0x514, {0x1, 0x6}}, {0x3, 0x67, {0x1, 0x2b0}}, {0xfe60, 0x1, {0x0, 0x1ff}}, {0x100, 0x5, {0x2, 0x3}}, {0xf, 0xfffd, {0x2, 0x7}}, {0x3, 0x1, {0x2, 0x7f}}, {0x1, 0x8, {0x3, 0x3}}, {0x5, 0x2, {0x3, 0xb6b9}}, {0x9, 0x0, {0x2, 0x100}}, {0x0, 0x7, {0x1, 0xfffffffd}}, {0x2, 0xe, {0x2, 0x80000000}}, {0x9, 0x5, {0x2, 0x6}}, {0x9, 0x10, {0x3, 0x7}}, {0x3, 0xb6a3, {0x3, 0xfff}}, {0x73, 0x829, {0x0, 0x2}}, {0x7ff, 0x2, {0x3, 0x9ba7}}, {0x7, 0xf4, {0x2, 0x9}}, {0x6, 0x1, {0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x9, 0x2, 0x200, 0x2, 0x16, 'syz0\x00', "e3b6d0a0f4d3e04aa3fa854383638b4998f1022374e010da4da689e35c43321c", "d8edfc05618180cd1d8cc15c98aba4078cea5093dcdf05bd11f230662c533b63", [{0xa917, 0x8, {0x1, 0x8001}}, {0x1ff, 0x101, {0x2, 0xffff2486}}, {0x8, 0x40, {0x3, 0x8}}, {0x9, 0x8, {0x2, 0x7fffffff}}, {0x3e0, 0x6, {0x2, 0x7ff}}, {0x2, 0x7, {0x2, 0x9}}, {0x2, 0x4, {0x0, 0xffffff00}}, {0x597c, 0x7b78, {0x2, 0x400}}, {0x1, 0x8, {0x3, 0x7f}}, {0xb4, 0x3, {0x0, 0x8}}, {0x4, 0x41b0, {0x3, 0x5ca4bc4a}}, {0x1, 0x3, {0x2, 0x1}}, {0xfefa, 0x4, {0x3}}, {0x6, 0xfff, {0x2, 0x3}}, {0x3, 0x7, {0x3, 0x1}}, {0x6, 0x4, {0x0, 0xb48}}, {0xffff, 0x2, {0x3, 0x7f}}, {0x7, 0x8001, {0x0, 0x1ff}}, {0x0, 0x3, {0x1, 0x1ff}}, {0x9, 0x89, {0x1, 0x8}}, {0x2, 0xf1, {0x1, 0x7}}, {0xef5d, 0x9, {0x0, 0x8001}}, {0xbdf, 0x81, {0x0, 0x7}}, {0x80, 0x3, {0x0, 0x5}}, {0x5, 0x6, {0x0, 0x2}}, {0x18, 0x100, {0x0, 0xe}}, {0x100, 0x5, {0x3, 0x3}}, {0x815b, 0x0, {0x3, 0x4307}}, {0x3, 0x8001, {0x5, 0x8}}, {0x9, 0xc, {0x0, 0x100}}, {0x8254, 0x8, {0x2, 0x7}}, {0x3, 0xd35, {0x2}}, {0xd, 0xe2, {0x0, 0x1}}, {0xd, 0x8001, {0x1, 0x6}}, {0x401, 0xa03, {0x0, 0x10}}, {0x7fff, 0x800, {0x1, 0x2}}, {0x7, 0x7, {0x1, 0x7}}, {0x6, 0xaac, {0x2, 0xfffffffa}}, {0x58e, 0x0, {0x1, 0x1}}, {0x2, 0x5, {0x3, 0x23}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x1, 0xec, 0x5, 0x5e77, 0x17, 'syz1\x00', "d5e501409efa4309e9eac6eec6dd6ca4201a0328f81183cd8550dc2d828af073", "df20da8aa334b28339419b7ebe5b6d35898733c02c299ec4f65f0ac33f02b4b1", [{0x5, 0x1, {0x1, 0x5}}, {0x99, 0x2, {0x1, 0x3d}}, {0x8, 0x4, {0x1, 0x3a5}}, {0x3, 0x98f, {0x2, 0x9}}, {0x6, 0x9, {0x1, 0xf8000000}}, {0x1, 0x6, {0x1, 0x9}}, {0x7, 0x800, {0x1, 0xb}}, {0x0, 0x52, {0x0, 0xa8}}, {0x2, 0xfff3, {0x2}}, {0x100, 0x1, {0x1, 0x7}}, {0x6, 0x8, {0x0, 0x4}}, {0x8, 0xffff, {0x0, 0x2}}, {0x8, 0x9, {0x3, 0xd}}, {0x9, 0x7, {0x3, 0x452ad10b}}, {0x9, 0x9, {0x1, 0x1}}, {0x1, 0xcf04, {0x2, 0x4}}, {0x280a, 0x8, {0x3, 0xe631}}, {0x10, 0x9, {0x0, 0x7}}, {0x2, 0x2, {0x3, 0x2}}, {0x40, 0x4, {0x3, 0x1}}, {0x8, 0xfffd, {0x1, 0xfffffff5}}, {0x80, 0x6, {0x3, 0x7f}}, {0x7fff, 0x0, {0x0, 0x2}}, {0xa717, 0x7, {0x3}}, {0x5, 0x3, {0x2, 0x7ff}}, {0x3, 0x4, {0x2, 0x2}}, {0x61d, 0x6, {0x0, 0x6}}, {0x7, 0xe, {0x1, 0x8}}, {0x6, 0x0, {0x0, 0x89}}, {0x3, 0x9, {0x1, 0x7}}, {0x3, 0x5, {0x2, 0x1}}, {0x6846, 0xffff, {0x2, 0x2}}, {0x7ff, 0x8001, {0x1, 0x8b}}, {0x5c6, 0x6, {0x2, 0x2}}, {0x5, 0xc000, {0x3, 0xc4c6}}, {0x4, 0xffff, {0x0, 0x6}}, {0xa, 0x8, {0x1, 0x5b3}}, {0xac96, 0x5, {0x3}}, {0x401, 0x6, {0x2, 0x8}}, {0x0, 0x1, {0x2}}]}}}, {{0x254, 0x1, {{0x3, 0x6f3}, 0x7, 0x6, 0x0, 0x6, 0x4, 'syz0\x00', "4d5510029a3db982face39c70374fca6866d5fee1bc0dd8c4152c02eba8a9664", "37d3e1d80e3bf4c2880c3dc01d4ca8cc5228ab6eb445c18766c12990640bc51d", [{0x6, 0x10, {0x1}}, {0xb, 0x5, {0x1}}, {0x90, 0x10, {0x1, 0xd}}, {0x2, 0x25, {0x1, 0x3e}}, {0x7, 0x252f, {0x2, 0xfffffff7}}, {0x3, 0x1, {0x2, 0x7ce}}, {0x3, 0x6, {0x1, 0x3}}, {0x5, 0x8001, {0x0, 0x6}}, {0xabe, 0x6, {0x3, 0xfffffffd}}, {0xd, 0x2, {0x2, 0x4}}, {0x9, 0x4, {0x2, 0xfffffffa}}, {0x1, 0xb, {0x3, 0x101}}, {0x0, 0x2, {0x1, 0xab}}, {0x5, 0x7, {0x3}}, {0x401, 0xd8, {0x3, 0x2}}, {0x9, 0x7, {0x0, 0x6}}, {0x7, 0xff, {0x2, 0xfa94}}, {0x800, 0x9554, {0x3, 0x9}}, {0x9, 0x8, {0x1, 0x80}}, {0x97ba, 0xd, {0x1, 0xa}}, {0xfffb, 0x9, {0x2, 0x2}}, {0xd, 0x0, {0x1, 0x4}}, {0x6, 0x9, {0x3, 0x4}}, {0x2dc3, 0x6, {0x3, 0x9}}, {0x3, 0x8, {0x2, 0x4}}, {0x7f, 0x0, {0x1, 0x8}}, {0x5, 0x7f, {0x0, 0x7}}, {0x9, 0x10, {0x2, 0x5}}, {0x40, 0x7a, {0x2, 0x101}}, {0x0, 0x3, {0x0, 0x1}}, {0x3, 0x9, {0x2, 0x7}}, {0x1, 0x6, {0x1, 0x2}}, {0xa, 0x5, {0x3, 0x9}}, {0xc38, 0x3e08, {0x3}}, {0x8, 0x9, {0x2, 0x3}}, {0x4, 0x38ba, {0x3, 0x9}}, {0x100, 0xb077, {0x1, 0x1}}, {0x2, 0x7, {0x2}}, {0x3, 0xb, {0x3, 0xf}}, {0x40, 0x800, {0x0, 0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x803, 0x0) syz_open_pts(r4, 0xc000) mount$9p_rdma(&(0x7f0000000200), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e25}, 0x2c, {[{@timeout}]}}) 714.215333ms ago: executing program 3 (id=3417): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r6 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@getpolicy={0x27c, 0x15, 0x300, 0x70bd2a, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e22, 0x7, 0x4e24, 0x8, 0xa, 0x100, 0x20, 0x8, 0x0, 0xee01}, 0x6e6bb6}, [@sec_ctx={0x75, 0x8, {0x71, 0x8, 0x0, 0x72, 0x69, "b3668f0c3a4378f73e3b728ef1fa678e384745dff7e55ed476b3d000cc45f032733bedf6f3e53d6ecb64d7be3c58ba4ac9197da51be9f1e63f2ccc2b286877877d0f08521dd6f5ea304af8919a7465bdef7dd8aae4cb4b36bd0f06984ea977be53c1e6a496b4827b30"}}, @algo_auth={0xf2, 0x1, {{'nhpoly1305-avx2\x00'}, 0x550, "5392e292c35f5492056feee6dea771d25ff549db338da0513458dfaebf40c4d010739490d1092ecb91469bd7a30d67021e8f83ffbbf5e6b9af31efd398dec019dcff753bc98fb2e82fe94651c4698f3aa6e747245632e6c0e4ac257b7d158a34480b6ac0cf4ebe17712995e46254e43186cfab8701a516f4f7910377483a0b1988da30e1e3111c20415b96559b368d1c5be56bfdb2b3c60a95f1bf5a9e9d2a4da97bc9a7f44612e1a9b5"}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@private0, 0x4e21, 0x827, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2e, r4, r6}, {0x7b1, 0x9, 0xa, 0x4, 0x5, 0x9, 0x2cb3, 0xe}, {0x8, 0x3, 0x4, 0xffffffff}, 0x10000, 0x6e6bbb, 0x1, 0x0, 0x3, 0x3}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @etimer_thresh={0x8, 0xc, 0x4}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) pidfd_getfd(0xffffffffffffffff, r2, 0x0) recvfrom$l2tp6(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r1, &(0x7f0000000300)=""/212, 0xd4) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet6(0xa, 0x2, 0x0) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r5, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) (async) geteuid() (async) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@getpolicy={0x27c, 0x15, 0x300, 0x70bd2a, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e22, 0x7, 0x4e24, 0x8, 0xa, 0x100, 0x20, 0x8, 0x0, 0xee01}, 0x6e6bb6}, [@sec_ctx={0x75, 0x8, {0x71, 0x8, 0x0, 0x72, 0x69, "b3668f0c3a4378f73e3b728ef1fa678e384745dff7e55ed476b3d000cc45f032733bedf6f3e53d6ecb64d7be3c58ba4ac9197da51be9f1e63f2ccc2b286877877d0f08521dd6f5ea304af8919a7465bdef7dd8aae4cb4b36bd0f06984ea977be53c1e6a496b4827b30"}}, @algo_auth={0xf2, 0x1, {{'nhpoly1305-avx2\x00'}, 0x550, "5392e292c35f5492056feee6dea771d25ff549db338da0513458dfaebf40c4d010739490d1092ecb91469bd7a30d67021e8f83ffbbf5e6b9af31efd398dec019dcff753bc98fb2e82fe94651c4698f3aa6e747245632e6c0e4ac257b7d158a34480b6ac0cf4ebe17712995e46254e43186cfab8701a516f4f7910377483a0b1988da30e1e3111c20415b96559b368d1c5be56bfdb2b3c60a95f1bf5a9e9d2a4da97bc9a7f44612e1a9b5"}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@private0, 0x4e21, 0x827, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2e, r4, r6}, {0x7b1, 0x9, 0xa, 0x4, 0x5, 0x9, 0x2cb3, 0xe}, {0x8, 0x3, 0x4, 0xffffffff}, 0x10000, 0x6e6bbb, 0x1, 0x0, 0x3, 0x3}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @etimer_thresh={0x8, 0xc, 0x4}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000}, 0x10000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r2, 0x0) (async) recvfrom$l2tp6(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) read(r1, &(0x7f0000000300)=""/212, 0xd4) (async) 679.894087ms ago: executing program 8 (id=3418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xa1ff}, 0x0) 511.897308ms ago: executing program 8 (id=3419): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioprio_set$pid(0x0, 0xffffffffffffffff, 0x6000) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f0000247000/0x3000)=nil, 0x3000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x60400) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44060}, 0x18) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2c, 0x80000, 0x400) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x6, 0xfffffe01, 0xfffffffd, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x46, 0xffff8001}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x204400, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) sendto$packet(r8, &(0x7f0000000180)="d0a7c0c2142145520ff59fa9a379ab74c0d21533d286c50ef0934428f087", 0x1e, 0x4000000, 0x0, 0x0) bind$vsock_stream(r5, 0x0, 0x0) listen(r5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 511.400088ms ago: executing program 8 (id=3420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b80)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b8", 0x1}], 0xef}}], 0x2, 0x4000000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000850000000e000000950000000000000009390917910a10394b498aed2d90fde1dbb2e63626c6bf66b54104cb5b9f7691f722a78e35610242aa47f1b6352ae19f6b5944382283b280a85f2d612158f6ec1ca82125dd0659d9a84bc95d47c4139bc1f290c0bfb0c5828348e13d9ff48dff175c20275d90f431df3ea7408b1f6505ce8b7bf3f33a2d79c1a4b8413a9468a0aca1ef8b9e828ede4087d5d6d10b0bb720ea9dac19fedbd41612716ba641647558935faef903c3234cd1563a5c6e0188fb873022686ac1f639ed39e4013086bb"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc7c0000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000080)={{r6}, {@void, @actul_num={@void, 0x4, 0x54}}}) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000640)=""/145, &(0x7f0000000040)=0x91) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) open(&(0x7f0000000180)='./file1\x00', 0x4c0000, 0x10) 463.70731ms ago: executing program 3 (id=3421): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) 441.434226ms ago: executing program 8 (id=3422): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000040)) r2 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x18400) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x100) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000100)={r3, 0x9}) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000140)={@rand_addr=0x64010101, @loopback, @multicast1}, 0xc) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x8, 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000240)={&(0x7f00000001c0)=""/88, 0x58, 0x9, 0x2}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000280)="ec6f0b32f09cb36798c35e3b20e540ef", 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x12, &(0x7f00000002c0)=""/32, &(0x7f0000000300)=0x20) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x88000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000380)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x80, 0x8010, 0x81, 0x101, {{0xa, 0x4, 0x1, 0xe, 0x28, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x13, 0xf5, [@dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010102, @rand_addr=0x64010101, @remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf8, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4040080}, 0x10) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000006c0)={0x0, 0x30}, &(0x7f0000000700)=0x8) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[{0x6, 0xe, 0x2, 0xd377}]}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008013}, 0x40080) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000900)) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000940), &(0x7f0000000980)=0x4) connect$rds(r1, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) 387.991966ms ago: executing program 3 (id=3423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be00"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc02000000000000000000000000000000000000000000000000000000000080ffffffffffffff00000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 385.427066ms ago: executing program 3 (id=3424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1804, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x400, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004011}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r5, 0x407, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 375.861955ms ago: executing program 7 (id=3425): setreuid(0xee01, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) write$binfmt_misc(r0, &(0x7f00000001c0)="0f16b7ac", 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0xffffffffffff4714) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000003fe1f99f514d201366e1cbb5839cc782114bebddc5bc8f2d1433440001ce084d62e50c00070000000000d5008000040800090000000000090006006e6f6e65000f08000b007380e0f1e4f88469700078c99d59b78d0bd0622a7e0399efc76f88ba21dcac0000000000000000000000a8471fea3f7fb3ef1521a739a86ceec5cf86"], 0x58}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9a832f4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008042}, 0x41) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xc0000000}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x0, 0x80, 0xe, 0x8, 0x0, 0x4}, 0x9c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000741, &(0x7f0000000500)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@nolazytime, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@nomblk_io_submit}, {@grpquota}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x727}}, {@usrquota}, {@norecovery}, {@journal_checksum}, {@mblk_io_submit}], [], 0x2c}, 0x7, 0x50c, &(0x7f0000000a40)="$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") setreuid(0xee01, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) (async) write$binfmt_misc(r0, &(0x7f00000001c0)="0f16b7ac", 0x4) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0xffffffffffff4714) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000003fe1f99f514d201366e1cbb5839cc782114bebddc5bc8f2d1433440001ce084d62e50c00070000000000d5008000040800090000000000090006006e6f6e65000f08000b007380e0f1e4f88469700078c99d59b78d0bd0622a7e0399efc76f88ba21dcac0000000000000000000000a8471fea3f7fb3ef1521a739a86ceec5cf86"], 0x58}}, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9a832f4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008042}, 0x41) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xc0000000}, &(0x7f0000000280)=0x8) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x0, 0x80, 0xe, 0x8, 0x0, 0x4}, 0x9c) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000741, &(0x7f0000000500)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@nolazytime, 0x0}, {@stripe={'stripe', 0x3d, 0x9}}, {@nomblk_io_submit}, {@grpquota}, {@mblk_io_submit}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x727}}, {@usrquota}, {@norecovery}, {@journal_checksum}, {@mblk_io_submit}], [], 0x2c}, 0x7, 0x50c, &(0x7f0000000a40)="$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") (async) 361.162552ms ago: executing program 8 (id=3426): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2de, &(0x7f0000000b40)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) truncate(&(0x7f0000000540)='./bus\x00', 0x9471) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) clock_nanosleep(0x7, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2902, 0x0, 0x5, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xa, 0x80, 0x10, 0x69, 0x0, 0x8, 0x30c3, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x5, @perf_config_ext={0x6, 0x1}, 0x100200, 0x8001, 0x7fff, 0x0, 0x9, 0x3, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffd0a}, r0, 0xa, r4, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000001009755cdfe9a51a4e30100766c616e000000001800028000a6c6eed3fe87b48e860c0002001e0000001f00000006000100fa0f0000080005008fd144ac37ae05d7354ae6a4a9884f82528161986e52", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x8000) ioctl$TIOCSRS485(r8, 0x542f, &(0x7f0000000080)={0xffffffff, 0x8001, 0xf538}) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000680)=0x1, 0x4) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000058000/0x3000)=nil, 0x3000, 0x80000a, 0x50, r4, 0x4000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r9, 0x1, 0x1) 171.681079ms ago: executing program 7 (id=3427): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 171.204789ms ago: executing program 7 (id=3428): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0xfffffffd, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], &(0x7f0000000100)=""/172, 0x155, 0xac, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1e, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0xffffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xffa1}, 0x0) kernel console output (not intermixed with test programs): g): Released all slaves [ 325.482869][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2710'. [ 325.706071][T12483] loop1: detected capacity change from 0 to 512 [ 325.718322][T12483] ext3: Unknown parameter 'obj_user' [ 327.333124][T12484] loop3: detected capacity change from 0 to 512 [ 327.625803][T12487] loop1: detected capacity change from 0 to 512 [ 327.665982][T12493] Cannot find del_set index 2 as target [ 327.860478][T12505] loop4: detected capacity change from 0 to 512 [ 327.890250][T12507] SET target dimension over the limit! [ 328.413885][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 328.422989][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2724'. [ 328.727968][T12525] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 328.754725][T12525] bond3 (unregistering): Released all slaves [ 328.802727][T12529] Cannot find del_set index 2 as target [ 328.814254][ T28] audit: type=1400 audit(1773086311.868:1686): avc: denied { shutdown } for pid=12500 comm="syz.6.2718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 328.972756][T12535] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 329.062994][T12535] bond1 (unregistering): Released all slaves [ 329.466411][T12553] loop3: detected capacity change from 0 to 512 [ 329.476350][T12553] ext3: Unknown parameter 'obj_user' [ 329.964268][T12560] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2731'. [ 329.970076][T12560] loop3: detected capacity change from 0 to 512 [ 330.208830][T12564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.208962][T12564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.575887][T12585] Cannot find del_set index 2 as target [ 330.684780][ T28] audit: type=1400 audit(1773086314.197:1687): avc: denied { map } for pid=12598 comm="syz.0.2744" path="socket:[35209]" dev="sockfs" ino=35209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 331.010185][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 331.110137][T12609] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2746'. [ 331.182543][T12613] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 331.268390][T12617] Cannot find del_set index 2 as target [ 331.317651][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2753'. [ 331.352508][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2753'. [ 331.384833][T12626] tipc: Started in network mode [ 331.389686][T12626] tipc: Node identity , cluster identity 4711 [ 331.426752][T12626] tipc: Failed to obtain node identity [ 331.432210][T12626] tipc: Enabling of bearer rejected, failed to enable media [ 331.456871][T12629] syzkaller0: entered promiscuous mode [ 331.466018][T12629] syzkaller0: entered allmulticast mode [ 331.486337][T12626] syzkaller0: mtu less than device minimum [ 331.935367][T12649] Cannot find del_set index 2 as target [ 332.230854][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2765'. [ 332.374835][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2766'. [ 332.699417][T12662] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 332.711431][T12662] bond1 (unregistering): Released all slaves [ 332.817578][ T28] audit: type=1400 audit(1773086316.190:1688): avc: denied { create } for pid=12675 comm="syz.4.2772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 332.871018][T12678] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2773'. [ 332.880239][T12678] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2773'. [ 332.974316][T12683] Cannot find del_set index 2 as target [ 332.993666][T12680] SELinux: policydb version -2081853680 does not match my version range 15-35 [ 333.020282][T12680] SELinux: failed to load policy [ 333.056145][T12692] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2779'. [ 333.170014][T12695] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 333.248932][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2778'. [ 333.275595][T12695] bond2 (unregistering): Released all slaves [ 333.374545][T12703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.462488][T12703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.541264][T12709] program syz.1.2782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 333.542096][T12709] 8021q: VLANs not supported on gre0 [ 333.772285][T12717] loop6: detected capacity change from 0 to 1024 [ 333.781514][T12717] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.799606][T12717] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 333.808554][T12717] EXT4-fs (loop6): orphan cleanup on readonly fs [ 333.815743][T12717] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.2784: Freeing blocks not in datazone - block = 0, count = 4096 [ 333.829358][T12717] loop6: lost filesystem error report for type 5 error -117 [ 333.829589][T12717] EXT4-fs (loop6): 1 orphan inode deleted [ 333.836908][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 333.836927][ C0] EXT4-fs (loop6): initial error at time 1773086317: ext4_free_blocks:6724 [ 333.836945][ C0] EXT4-fs (loop6): last error at time 1773086317: ext4_free_blocks:6724 [ 333.867042][T12717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.881368][T12717] loop6: Can't mount, would change RO state [ 333.896828][T10040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.188711][T12720] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 334.221306][T12720] bond1 (unregistering): Released all slaves [ 334.291715][T12725] tipc: Started in network mode [ 334.296828][T12725] tipc: Node identity 000000000000000099fda0cce00001, cluster identity 4711 [ 334.305790][T12725] tipc: Enabling of bearer rejected, failed to enable media [ 334.379897][T12730] Cannot find del_set index 2 as target [ 334.410434][T12733] loop3: detected capacity change from 0 to 512 [ 334.428221][T12733] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 334.473486][T12733] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 334.516977][T12733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2788: bg 0: block 248: padding at end of block bitmap is not set [ 334.546079][T12741] loop6: detected capacity change from 0 to 1024 [ 334.548251][T12733] loop3: lost filesystem error report for type 5 error -117 [ 334.555175][T12733] Quota error (device loop3): write_blk: dquota write failed [ 334.562558][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 334.562588][ C0] EXT4-fs (loop3): last error at time 1773086317: ext4_validate_block_bitmap:441 [ 334.570331][T12741] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 334.576795][T12733] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 334.606103][T12733] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.2788: Failed to acquire dquot type 1 [ 334.617504][T12733] loop3: lost filesystem error report for type 5 error -117 [ 334.618216][T12741] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 334.618727][T12733] EXT4-fs (loop3): 1 truncate cleaned up [ 334.636433][T12741] EXT4-fs (loop6): orphan cleanup on readonly fs [ 334.652123][T12733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 334.655444][T12741] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.2793: Freeing blocks not in datazone - block = 0, count = 4096 [ 334.678132][T12741] loop6: lost filesystem error report for type 5 error -117 [ 334.678886][T12741] EXT4-fs (loop6): 1 orphan inode deleted [ 334.692430][T12741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.738372][T10040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.748510][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 334.936611][T12759] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 334.955367][T12759] bond1 (unregistering): Released all slaves [ 335.296027][T12762] loop3: detected capacity change from 0 to 512 [ 335.496009][T12766] loop0: detected capacity change from 0 to 8192 [ 335.515765][ T28] audit: type=1400 audit(1773086318.715:1689): avc: denied { write } for pid=12764 comm="syz.0.2800" path="socket:[36507]" dev="sockfs" ino=36507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 335.579809][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.588501][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.621110][T12767] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 335.657203][T12767] bond1 (unregistering): Released all slaves [ 335.853086][T12785] rdma_rxe: rxe_newlink: failed to add lo [ 335.991269][T12797] Cannot find del_set index 2 as target [ 336.191359][T12806] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 336.205753][T12806] bond1 (unregistering): Released all slaves [ 336.345425][T12821] loop0: detected capacity change from 0 to 128 [ 336.352770][T12821] msdos: Unknown parameter 'fots' [ 336.379380][T12827] Cannot find del_set index 2 as target [ 336.413043][T12829] __nla_validate_parse: 3 callbacks suppressed [ 336.413057][T12829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2822'. [ 336.479276][T12840] loop3: detected capacity change from 0 to 2048 [ 336.498062][T12814] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 336.508704][T12840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.555320][T12814] bond1 (unregistering): Released all slaves [ 336.651114][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2823'. [ 336.730060][T12898] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2823'. [ 336.790799][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.922297][T12922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.944816][T12922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.078268][T12845] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 337.104015][T12845] bond3 (unregistering): Released all slaves [ 337.277489][T12904] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 337.280497][T12904] bond1 (unregistering): Released all slaves [ 337.538380][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 337.896430][T13078] lo speed is unknown, defaulting to 1000 [ 338.431254][T13126] netlink: 'syz.1.2841': attribute type 19 has an invalid length. [ 338.439135][T13126] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2841'. [ 338.551358][T13119] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 338.563376][T13119] bond2 (unregistering): Released all slaves [ 338.599332][T13082] lo speed is unknown, defaulting to 1000 [ 338.617326][T13198] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 338.849440][T13215] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2845'. [ 338.901134][T13221] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 338.917794][T13221] bond1 (unregistering): Released all slaves [ 338.946346][T13228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2846'. [ 339.002450][T13319] loop4: detected capacity change from 0 to 1024 [ 339.020104][T13319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.036615][ T28] audit: type=1400 audit(1773086322.008:1690): avc: denied { mounton } for pid=13318 comm="syz.4.2847" path="/542/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 339.078591][ T3321] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 339.090531][ T3321] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 339.149510][ T4217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.213701][T13335] loop3: detected capacity change from 0 to 512 [ 339.235631][T13335] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 339.263887][T13335] EXT4-fs error (device loop3): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 339.295023][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 339.301464][ C1] EXT4-fs (loop3): initial error at time 1773086322: mb_free_blocks:2047: inode 11: block 64 [ 339.311675][ C1] EXT4-fs (loop3): last error at time 1773086322: mb_free_blocks:2047: inode 11: block 64 [ 339.322161][T13335] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.2850: corrupted inode contents [ 339.334210][T13335] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.335230][T13335] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #11: comm syz.3.2850: mark_inode_dirty error [ 339.359105][T13335] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.359734][T13335] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2850: invalid indirect mapped block 1 (level 1) [ 339.412607][T13335] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.413327][T13335] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.2850: corrupted inode contents [ 339.453392][T13335] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.453682][T13335] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 339.484081][T13335] loop3: lost filesystem error report for type 5 error -117 [ 339.484329][T13335] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #11: comm syz.3.2850: corrupted inode contents [ 339.537820][T13335] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.537957][T13335] EXT4-fs error (device loop3): ext4_truncate:4587: inode #11: comm syz.3.2850: mark_inode_dirty error [ 339.611861][T13335] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 339.612104][T13335] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 339.665947][T13347] lo speed is unknown, defaulting to 1000 [ 339.681359][T13335] loop3: lost filesystem error report for type 5 error -117 [ 339.681583][T13335] EXT4-fs (loop3): 1 truncate cleaned up [ 339.726087][T13335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.847139][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.927929][T13357] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 339.952831][T13357] bond3 (unregistering): Released all slaves [ 340.013754][T13424] loop6: detected capacity change from 0 to 128 [ 340.064297][T13424] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 340.361600][T13525] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 340.391562][T13525] bond1 (unregistering): Released all slaves [ 340.403997][T13347] chnl_net:caif_netlink_parms(): no params data found [ 340.483854][T13639] loop0: detected capacity change from 0 to 512 [ 340.540871][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.549420][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.562461][T13347] bridge_slave_0: entered allmulticast mode [ 340.585204][T13347] bridge_slave_0: entered promiscuous mode [ 340.592411][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.599899][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.607304][T13347] bridge_slave_1: entered allmulticast mode [ 340.614449][T13347] bridge_slave_1: entered promiscuous mode [ 340.631341][T13639] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 340.676716][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.698623][T13639] EXT4-fs (loop0): 1 truncate cleaned up [ 340.713175][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.736748][T13639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.783058][T13347] team0: Port device team_slave_0 added [ 340.819676][T13347] team0: Port device team_slave_1 added [ 340.901671][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.908649][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.908703][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.909760][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.909771][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.909827][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.926837][T13347] hsr_slave_0: entered promiscuous mode [ 340.996124][T13347] hsr_slave_1: entered promiscuous mode [ 341.003019][T13639] netlink: 'syz.0.2865': attribute type 27 has an invalid length. [ 341.014869][T13639] vlan2: left allmulticast mode [ 341.020089][T13639] batadv_slave_0: left allmulticast mode [ 341.027288][T13639] ipip0: left promiscuous mode [ 341.046539][T13755] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 341.062361][T13755] bond1 (unregistering): Released all slaves [ 341.113846][T13639] bridge0: port 3(gretap0) entered blocking state [ 341.120370][T13639] bridge0: port 3(gretap0) entered forwarding state [ 341.129834][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.139314][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.148788][T13639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.194688][ T10] lo speed is unknown, defaulting to 1000 [ 341.200498][ T10] syU×: Port: 1 Link ACTIVE [ 341.217333][ T10] lo speed is unknown, defaulting to 1000 [ 341.230828][T13755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.240148][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.255785][T13755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.324951][T13892] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 341.364195][T13347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 341.384086][T13347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 341.401064][T13347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 341.414261][T13347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 341.466043][T13912] loop1: detected capacity change from 0 to 1024 [ 341.466576][T13912] EXT4-fs: Ignoring removed bh option [ 341.487808][T13912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 341.694728][T13947] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 341.701095][T13947] bond3 (unregistering): Released all slaves [ 341.722688][ T6851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 341.820947][T14025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2877'. [ 341.820970][T14025] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2877'. [ 341.820981][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2877'. [ 341.823400][T14025] loop1: detected capacity change from 0 to 512 [ 341.845730][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.867905][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.879597][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.879631][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.885347][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.885489][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.906114][T14031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2878'. [ 341.927443][T13347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.927577][T13347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.970216][T14046] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2878'. [ 342.073783][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.075562][T14052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2882'. [ 342.198280][T14058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.198465][T14058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.206745][T14058] netlink: 15 bytes leftover after parsing attributes in process `syz.1.2883'. [ 342.743379][T13347] veth0_vlan: entered promiscuous mode [ 342.761898][T13347] veth1_vlan: entered promiscuous mode [ 342.811409][T13347] veth0_macvtap: entered promiscuous mode [ 342.819544][T13347] veth1_macvtap: entered promiscuous mode [ 342.831555][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.844761][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.857100][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.870740][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.911441][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.926755][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.205861][T14083] loop1: detected capacity change from 0 to 512 [ 343.523474][T14097] loop7: detected capacity change from 0 to 2048 [ 343.584414][T14104] loop3: detected capacity change from 0 to 512 [ 343.604113][T14097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.626412][T14104] ext3: Unknown parameter 'obj_user' [ 343.659108][T14097] delete_channel: no stack [ 343.664289][T14097] delete_channel: no stack [ 343.770183][T13347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.783497][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 343.804321][T14123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 344.385992][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2888'. [ 344.419543][T14127] loop3: detected capacity change from 0 to 512 [ 344.609899][ T28] audit: type=1400 audit(1773086327.228:1691): avc: denied { getopt } for pid=14146 comm="syz.0.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 344.669299][T14164] Cannot find del_set index 2 as target [ 344.681820][T14166] loop3: detected capacity change from 0 to 512 [ 344.702677][T14166] ext3: Unknown parameter 'obj_user' [ 345.960189][T14189] loop3: detected capacity change from 0 to 512 [ 346.060140][T14192] loop1: detected capacity change from 0 to 512 [ 346.525100][T14207] loop7: detected capacity change from 0 to 2048 [ 346.561171][T14214] tipc: New replicast peer: 255.255.255.255 [ 346.573654][T14207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.587262][T14214] tipc: Enabled bearer , priority 10 [ 346.602028][T14215] tipc: Enabling of bearer rejected, already enabled [ 346.613954][T14205] tipc: Disabling bearer [ 346.667507][T13347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.786543][T14239] Cannot find del_set index 2 as target [ 347.268199][T14254] loop7: detected capacity change from 0 to 512 [ 347.616435][T14266] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 347.638670][T14266] bond3 (unregistering): Released all slaves [ 347.667113][T14334] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 347.675018][T14334] netlink: 'syz.3.2918': attribute type 3 has an invalid length. [ 347.683093][T14334] __nla_validate_parse: 7 callbacks suppressed [ 347.683106][T14334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2918'. [ 347.788256][T14339] Process accounting resumed [ 347.817586][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'. [ 347.827980][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2922'. [ 347.841653][T14353] loop6: detected capacity change from 0 to 2048 [ 347.865249][T14353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.995293][T14369] lo speed is unknown, defaulting to 1000 [ 348.018558][T14371] loop7: detected capacity change from 0 to 7 [ 348.217634][T14391] loop3: detected capacity change from 0 to 512 [ 348.769346][T10040] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.977259][T14445] loop3: detected capacity change from 0 to 128 [ 348.984120][T14445] msdos: Unknown parameter 'func' [ 349.243231][T14446] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 349.300308][T14446] bond1 (unregistering): Released all slaves [ 349.379603][ T28] audit: type=1400 audit(1773086331.662:1692): avc: denied { bind } for pid=14491 comm="syz.0.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 349.431253][ T28] audit: type=1400 audit(1773086331.671:1693): avc: denied { ioctl } for pid=14491 comm="syz.0.2937" path="/560/file0" dev="tmpfs" ino=2974 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 349.564501][T14540] loop0: detected capacity change from 0 to 512 [ 349.579483][T14540] ext3: Unknown parameter 'obj_user' [ 349.687479][ T28] audit: type=1400 audit(1773086331.980:1694): avc: denied { create } for pid=14550 comm="syz.7.2942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 350.040021][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 350.054751][T14561] loop0: detected capacity change from 0 to 512 [ 350.148740][ T28] audit: type=1400 audit(1773086331.980:1695): avc: denied { create } for pid=14550 comm="syz.7.2942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 350.179021][T14574] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 350.183556][ T28] audit: type=1400 audit(1773086331.980:1696): avc: denied { write } for pid=14550 comm="syz.7.2942" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_netfilter_socket permissive=1 [ 350.201407][T14545] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 350.223197][T14545] bond1 (unregistering): Released all slaves [ 350.267080][T14556] lo speed is unknown, defaulting to 1000 [ 350.284018][T14556] lo speed is unknown, defaulting to 1000 [ 350.290550][T14556] lo speed is unknown, defaulting to 1000 [ 350.301213][T14556] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 350.308878][T14556] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 350.393395][T14573] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 350.421196][T14573] bond1 (unregistering): Released all slaves [ 350.451576][T14556] lo speed is unknown, defaulting to 1000 [ 350.464661][T14556] lo speed is unknown, defaulting to 1000 [ 350.471893][T14556] lo speed is unknown, defaulting to 1000 [ 350.478358][T14556] lo speed is unknown, defaulting to 1000 [ 350.484443][T14556] lo speed is unknown, defaulting to 1000 [ 350.490752][T14556] lo speed is unknown, defaulting to 1000 [ 350.497217][T14556] lo speed is unknown, defaulting to 1000 [ 350.541289][T14744] loop7: detected capacity change from 0 to 128 [ 350.549286][T14744] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.561569][T14744] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.574062][ T28] audit: type=1400 audit(1773086332.803:1697): avc: denied { add_name } for pid=14742 comm="syz.7.2951" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 350.598061][T14749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 350.602315][ T28] audit: type=1400 audit(1773086332.822:1698): avc: denied { remove_name } for pid=14742 comm="syz.7.2951" name="file3" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 350.637071][ T28] audit: type=1400 audit(1773086332.822:1699): avc: denied { rename } for pid=14742 comm="syz.7.2951" name="file3" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 350.660130][ T28] audit: type=1400 audit(1773086332.822:1700): avc: denied { reparent } for pid=14742 comm="syz.7.2951" name="file3" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 350.682795][ T28] audit: type=1400 audit(1773086332.840:1701): avc: denied { mounton } for pid=14748 comm="syz.1.2952" path="/proc/966/cgroup" dev="proc" ino=37825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 350.714154][T14760] loop0: detected capacity change from 0 to 512 [ 350.720544][T14761] loop3: detected capacity change from 0 to 1764 [ 350.720952][T14760] EXT4-fs: Ignoring removed nobh option [ 350.740173][T14761] iso9660: Unknown parameter 'ÿÿ18446744073709551615' [ 350.753476][T14760] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 350.773368][T14760] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2954: invalid indirect mapped block 2061 (level 1) [ 350.795145][T14760] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 350.795287][T14760] EXT4-fs (loop0): Remounting filesystem read-only [ 350.804456][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 350.804479][ C1] EXT4-fs (loop0): initial error at time 1773086333: ext4_free_branches:1023: inode 13 [ 350.804508][ C1] EXT4-fs (loop0): last error at time 1773086333: ext4_free_branches:1023: inode 13 [ 350.837270][T14760] EXT4-fs (loop0): 1 truncate cleaned up [ 350.843395][T14760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.860127][T14760] EXT4-fs (loop0): shut down requested (0) [ 350.860453][ T28] audit: type=1400 audit(1773086333.074:1702): avc: denied { write } for pid=14780 comm="syz.1.2958" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.890792][ T28] audit: type=1400 audit(1773086333.074:1703): avc: denied { open } for pid=14780 comm="syz.1.2958" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.914785][ T28] audit: type=1400 audit(1773086333.084:1704): avc: denied { write } for pid=14780 comm="syz.1.2958" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.986248][T14786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2954'. [ 350.996072][T14786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2954'. [ 351.147038][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.180134][T14797] ext3: Unknown parameter 'obj_user' [ 351.295911][T14804] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2962'. [ 351.307711][T14804] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2962'. [ 351.623074][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2960'. [ 351.713724][T13347] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 351.810958][ T6683] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.826931][ T6683] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.892278][ T6683] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.922911][ T6683] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.997648][ T6683] bridge0: port 3(netdevsim1) entered disabled state [ 352.009957][ T6683] netdevsim netdevsim6 netdevsim1 (unregistering): left allmulticast mode [ 352.025284][ T6683] netdevsim netdevsim6 netdevsim1 (unregistering): left promiscuous mode [ 352.034199][ T6683] bridge0: port 3(netdevsim1) entered disabled state [ 352.048546][ T6683] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.064438][ T6683] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.145691][T14872] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 352.176639][ T6683] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.198122][ T6683] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.292231][T14847] lo speed is unknown, defaulting to 1000 [ 352.508018][ T6683] bridge_slave_1: left allmulticast mode [ 352.575563][ T6683] bridge_slave_1: left promiscuous mode [ 352.610380][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.652923][ T6683] bridge_slave_0: left allmulticast mode [ 352.668356][ T6683] bridge_slave_0: left promiscuous mode [ 352.683352][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.787827][T14920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.827921][T14920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.042622][T14936] __nla_validate_parse: 2 callbacks suppressed [ 353.042637][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'. [ 353.125074][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2986'. [ 353.310027][T14958] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2983'. [ 353.319454][ T6683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.343206][ T6683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.364011][ T6683] bond0 (unregistering): Released all slaves [ 353.374100][T14847] lo speed is unknown, defaulting to 1000 [ 353.439435][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2983'. [ 353.473334][T14959] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 353.485663][T14959] bond3 (unregistering): Released all slaves [ 353.546994][ T6683] hsr_slave_0: left promiscuous mode [ 353.553667][ T6683] hsr_slave_1: left promiscuous mode [ 353.568438][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.586887][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.600350][ T6683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.616397][ T6683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.637196][ T6683] veth1_macvtap: left promiscuous mode [ 353.649540][ T6683] veth0_macvtap: left promiscuous mode [ 353.660913][ T6683] veth1_vlan: left promiscuous mode [ 353.671803][ T6683] veth0_vlan: left promiscuous mode [ 353.802346][ T6683] team0 (unregistering): Port device team_slave_1 removed [ 353.812483][ T6683] team0 (unregistering): Port device team_slave_0 removed [ 353.917208][T14847] chnl_net:caif_netlink_parms(): no params data found [ 354.311144][T14847] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.319164][T14847] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.326567][T14847] bridge_slave_0: entered allmulticast mode [ 354.333634][T14847] bridge_slave_0: entered promiscuous mode [ 354.340829][T14847] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.348407][T14847] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.355634][T14847] bridge_slave_1: entered allmulticast mode [ 354.362529][T14847] bridge_slave_1: entered promiscuous mode [ 354.380087][T14847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.390792][T14847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.413648][T14847] team0: Port device team_slave_0 added [ 354.420346][T14847] team0: Port device team_slave_1 added [ 354.436032][T14847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.444128][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.470735][T14847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.483673][ T6683] IPVS: stop unused estimator thread 0... [ 354.497748][T14847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.504699][T14847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.538491][T14847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.587194][T14847] hsr_slave_0: entered promiscuous mode [ 354.603556][T14847] hsr_slave_1: entered promiscuous mode [ 354.609550][T14847] debugfs: 'hsr0' already exists in 'hsr' [ 354.615567][T14847] Cannot create hsr debugfs directory [ 354.707272][T15284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2993'. [ 354.771791][T14847] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 354.883165][T14847] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 354.971402][T14847] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 355.027734][T15360] set_capacity_and_notify: 3 callbacks suppressed [ 355.027750][T15360] loop3: detected capacity change from 0 to 128 [ 355.057545][T15360] syz.3.2995: attempt to access beyond end of device [ 355.057545][T15360] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 355.071683][T15360] syz.3.2995: attempt to access beyond end of device [ 355.071683][T15360] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 355.073220][T14847] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 355.092115][T15360] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 355.117230][T15360] syz.3.2995: attempt to access beyond end of device [ 355.117230][T15360] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 355.161257][T15360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2995'. [ 355.180845][T15360] syz.3.2995: attempt to access beyond end of device [ 355.180845][T15360] loop3: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 355.182838][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2997'. [ 355.208676][T15360] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 355.219429][T14847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.233910][T14847] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.238048][T15375] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2997'. [ 355.267401][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.274521][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.285583][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.292763][ T6699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.372148][T14847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.645185][T14847] veth0_vlan: entered promiscuous mode [ 355.666462][T14847] veth1_vlan: entered promiscuous mode [ 355.689863][T14847] veth0_macvtap: entered promiscuous mode [ 355.752701][T15418] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 355.769587][T14847] veth1_macvtap: entered promiscuous mode [ 355.785486][T15422] loop0: detected capacity change from 0 to 128 [ 355.797758][T14847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.818369][T14847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.847181][ T6697] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.856826][ T6697] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.866361][ T6697] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.877119][T15422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3001'. [ 355.889484][ T6697] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.899563][T15422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3001'. [ 355.973508][T15441] netlink: 'syz.8.2969': attribute type 14 has an invalid length. [ 355.985821][T15441] netlink: 'syz.8.2969': attribute type 11 has an invalid length. [ 356.766314][T15484] netlink: 'syz.8.3014': attribute type 2 has an invalid length. [ 357.886582][T15511] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 357.908831][T15511] bond1 (unregistering): Released all slaves [ 357.951364][T15564] loop1: detected capacity change from 0 to 512 [ 358.125093][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 358.125113][ T28] audit: type=1400 audit(1773086339.866:1710): avc: denied { map } for pid=15565 comm="syz.8.3021" path="socket:[41752]" dev="sockfs" ino=41752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 358.859636][T15593] loop0: detected capacity change from 0 to 512 [ 358.913779][T15593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 359.011889][T15593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.025413][T15593] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.027592][T15601] loop8: detected capacity change from 0 to 512 [ 359.063809][T15601] EXT4-fs: Ignoring removed nobh option [ 359.092994][T15601] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 359.126086][T15564] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 359.136026][T15601] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 359.144363][T15601] EXT4-fs (loop8): orphan cleanup on readonly fs [ 359.151343][T15601] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3023: bg 0: block 273: padding at end of block bitmap is not set [ 359.165996][T15601] loop8: lost filesystem error report for type 5 error -117 [ 359.167589][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 359.179718][T15564] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 359.181327][ C1] EXT4-fs (loop8): initial error at time 1773086340: ext4_validate_block_bitmap:441 [ 359.195935][T15564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3020: bg 0: block 248: padding at end of block bitmap is not set [ 359.205002][ C1] EXT4-fs (loop8): last error at time 1773086340: ext4_validate_block_bitmap:441 [ 359.207272][T15601] EXT4-fs (loop8): Remounting filesystem read-only [ 359.220853][T15564] loop1: lost filesystem error report for type 5 error -117 [ 359.229240][T15601] EXT4-fs (loop8): 1 truncate cleaned up [ 359.241211][T15564] Quota error (device loop1): write_blk: dquota write failed [ 359.243111][T15601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 359.253104][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 359.256005][T15564] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 359.267244][ C0] EXT4-fs (loop1): last error at time 1773086340: ext4_validate_block_bitmap:441 [ 359.295583][T15601] __nla_validate_parse: 5 callbacks suppressed [ 359.295598][T15601] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3023'. [ 359.312678][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3023'. [ 359.319596][T15564] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3020: Failed to acquire dquot type 1 [ 359.324660][T15622] program syz.7.3026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.354732][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.362991][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.374643][ T28] audit: type=1400 audit(1773086341.035:1711): avc: denied { read append } for pid=15597 comm="syz.8.3023" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 359.380673][T15564] loop1: lost filesystem error report for type 5 error -117 [ 359.409546][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3028'. [ 359.427682][T15622] 8021q: VLANs not supported on gre0 [ 359.441197][T15632] loop0: detected capacity change from 0 to 2048 [ 359.446145][T15626] syz_tun: entered promiscuous mode [ 359.453309][T15626] macsec1: entered promiscuous mode [ 359.453480][T14847] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 359.458708][T15626] macsec1: entered allmulticast mode [ 359.473029][T15626] syz_tun: entered allmulticast mode [ 359.480446][T15626] syz_tun: left allmulticast mode [ 359.485696][T15626] syz_tun: left promiscuous mode [ 359.499779][T15564] EXT4-fs (loop1): 1 truncate cleaned up [ 359.506056][T15564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 359.506724][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3029'. [ 359.527823][T15632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.540747][T15632] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.573633][ T6851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 359.626873][T15651] netlink: 'syz.3.3032': attribute type 7 has an invalid length. [ 359.647479][T15651] netlink: 'syz.3.3032': attribute type 8 has an invalid length. [ 359.684921][T15651] loop3: detected capacity change from 0 to 512 [ 359.885480][T15654] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3027: bg 0: block 345: padding at end of block bitmap is not set [ 359.905678][T15654] EXT4-fs (loop0): Remounting filesystem read-only [ 359.968642][T15681] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 359.983739][T15681] bond1 (unregistering): Released all slaves [ 359.993561][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.019969][T15759] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3039'. [ 360.176133][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3043'. [ 360.187097][T15775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3044'. [ 360.319362][T15775] syz_tun: entered promiscuous mode [ 360.324982][T15775] macsec1: entered promiscuous mode [ 360.330416][T15775] macsec1: entered allmulticast mode [ 360.336435][T15775] syz_tun: entered allmulticast mode [ 361.053596][T15787] loop3: detected capacity change from 0 to 512 [ 361.160772][T15775] syz_tun: left allmulticast mode [ 361.193317][T15775] syz_tun: left promiscuous mode [ 361.231064][T15786] loop1: detected capacity change from 0 to 512 [ 361.295304][T15809] program syz.8.3048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.412631][T15809] 8021q: VLANs not supported on gre0 [ 361.436091][T15821] netlink: 'syz.7.3052': attribute type 22 has an invalid length. [ 361.444036][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3052'. [ 361.458043][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.466884][T15821] netlink: 'syz.7.3052': attribute type 22 has an invalid length. [ 361.474687][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3052'. [ 361.483602][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.494181][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.506088][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.532330][T15829] netlink: 'syz.3.3053': attribute type 1 has an invalid length. [ 361.568401][ T28] audit: type=1400 audit(1773086343.084:1712): avc: denied { append } for pid=15865 comm="syz.0.3054" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 361.571662][T15829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.687774][ T28] audit: type=1326 audit(1773086343.196:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448ac3c799 code=0x7ffc0000 [ 361.731233][T15829] bond1: (slave geneve2): making interface the new active one [ 361.771893][ T28] audit: type=1326 audit(1773086343.196:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448ac3c799 code=0x7ffc0000 [ 361.777557][T15829] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 361.834856][ T28] audit: type=1326 audit(1773086343.224:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448ac3c799 code=0x7ffc0000 [ 361.891074][ T28] audit: type=1326 audit(1773086343.224:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448ac3c799 code=0x7ffc0000 [ 361.917544][ T28] audit: type=1326 audit(1773086343.233:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15827 comm="syz.3.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f448ac3c799 code=0x7ffc0000 [ 362.113736][T15904] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 362.144979][T15904] bond3 (unregistering): Released all slaves [ 362.174537][T15940] Cannot find del_set index 2 as target [ 362.193238][T15920] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 362.218176][T15920] bond2 (unregistering): Released all slaves [ 362.322054][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3063'. [ 362.640249][T16069] loop0: detected capacity change from 0 to 4096 [ 362.686074][T16073] 9pnet_fd: Insufficient options for proto=fd [ 362.704713][T16069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.861663][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.939243][T16082] netlink: 'syz.3.3072': attribute type 4 has an invalid length. [ 362.972730][T16082] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 362.987104][T16082] bond2 (unregistering): Released all slaves [ 363.061989][T16170] loop8: detected capacity change from 0 to 128 [ 363.169649][T16192] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16192 comm=syz.1.3081 [ 363.486222][T16212] bond1: option xmit_hash_policy: invalid value (64) [ 363.506270][T16227] loop0: detected capacity change from 0 to 1024 [ 363.547575][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 363.547965][ T28] audit: type=1400 audit(1773086344.936:1766): avc: denied { mounton } for pid=16213 comm="syz.0.3086" path="/file1" dev="ramfs" ino=42042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 363.588058][T16212] bond1 (unregistering): Released all slaves [ 363.670712][T16227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.721281][T16227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.863264][T16221] lo speed is unknown, defaulting to 1000 [ 364.091750][T16221] lo speed is unknown, defaulting to 1000 [ 364.299997][T16344] Cannot find del_set index 2 as target [ 364.346405][T16347] syzkaller0: entered promiscuous mode [ 364.351943][T16347] syzkaller0: entered allmulticast mode [ 364.384224][ T28] audit: type=1400 audit(1773086345.712:1767): avc: denied { bind } for pid=16361 comm="syz.1.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.440039][T16367] syzkaller0: left allmulticast mode [ 364.459293][ T28] audit: type=1400 audit(1773086345.712:1768): avc: denied { connect } for pid=16361 comm="syz.1.3096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.714789][T16408] __nla_validate_parse: 3 callbacks suppressed [ 364.714802][T16408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3101'. [ 364.767450][T16371] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 364.790131][T16371] bond1 (unregistering): Released all slaves [ 364.899267][ T28] audit: type=1326 audit(1773086346.199:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.0.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028873c799 code=0x7ffc0000 [ 364.930827][ T28] audit: type=1326 audit(1773086346.199:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.0.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f028873c799 code=0x7ffc0000 [ 364.954625][ T28] audit: type=1326 audit(1773086346.199:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.0.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028873c799 code=0x7ffc0000 [ 365.000824][ T28] audit: type=1326 audit(1773086346.208:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.0.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f028873c799 code=0x7ffc0000 [ 365.031536][ T28] audit: type=1326 audit(1773086346.208:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.0.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028873c799 code=0x7ffc0000 [ 365.055275][ T28] audit: type=1326 audit(1773086346.208:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.0.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02886fcfce code=0x7ffc0000 [ 365.079086][ T28] audit: type=1326 audit(1773086346.208:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16471 comm="syz.0.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f028873c799 code=0x7ffc0000 [ 365.102884][T16482] loop8: detected capacity change from 0 to 512 [ 365.109442][T16482] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 365.148622][T16491] loop3: detected capacity change from 0 to 736 [ 365.230166][T16501] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 365.232533][T16508] FAULT_INJECTION: forcing a failure. [ 365.232533][T16508] name fail_futex, interval 1, probability 0, space 0, times 0 [ 365.255395][T16508] CPU: 0 UID: 0 PID: 16508 Comm: syz.0.3109 Tainted: G W syzkaller #0 PREEMPT(full) [ 365.255428][T16508] Tainted: [W]=WARN [ 365.255433][T16508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 365.255452][T16508] Call Trace: [ 365.255463][T16508] [ 365.255471][T16508] __dump_stack+0x1d/0x30 [ 365.255497][T16508] dump_stack_lvl+0x95/0xd0 [ 365.255519][T16508] dump_stack+0x15/0x1b [ 365.255535][T16508] should_fail_ex+0x263/0x280 [ 365.255572][T16508] should_fail+0xb/0x20 [ 365.255592][T16508] get_futex_key+0x12f/0xbe0 [ 365.255618][T16508] futex_wake_op+0x140/0xa70 [ 365.255632][T16508] ? __send_signal_locked+0x655/0x780 [ 365.255707][T16508] do_futex+0x348/0x380 [ 365.255731][T16508] __se_sys_futex+0x2f6/0x370 [ 365.255757][T16508] ? perf_pending_task+0x1df/0x210 [ 365.255784][T16508] __x64_sys_futex+0x78/0x90 [ 365.255823][T16508] x64_sys_call+0x24ab/0x3020 [ 365.255847][T16508] do_syscall_64+0x12c/0x370 [ 365.255877][T16508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.255899][T16508] RIP: 0033:0x7f028873c799 [ 365.255912][T16508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.255926][T16508] RSP: 002b:00007f0287197028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 365.255953][T16508] RAX: ffffffffffffffda RBX: 00007f02889b5fa0 RCX: 00007f028873c799 [ 365.255968][T16508] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000140 [ 365.255989][T16508] RBP: 00007f0287197090 R08: 0000200000000000 R09: 000000001f000000 [ 365.256004][T16508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.256016][T16508] R13: 00007f02889b6038 R14: 00007f02889b5fa0 R15: 00007ffc2bb84318 [ 365.256073][T16508] [ 365.448949][T16512] loop3: detected capacity change from 0 to 128 [ 365.500176][T16512] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.512845][T16512] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 365.551642][T16527] loop1: detected capacity change from 0 to 512 [ 365.560910][T16512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3110'. [ 365.587979][T16527] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 365.596517][T16527] EXT4-fs (loop1): orphan cleanup on readonly fs [ 365.603450][T16527] EXT4-fs error (device loop1): ext4_quota_enable:7192: inode #15: comm syz.1.3112: iget: bad i_size value: -4294967286 [ 365.620664][T16527] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 365.620889][T11818] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.624808][T16527] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.3112: Bad quota inode: 15, type: 2 [ 365.639009][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 365.639030][ C0] EXT4-fs (loop1): last error at time 1773086346: ext4_quota_enable:7192: inode 15 [ 365.665754][T16527] loop1: lost filesystem error report for type 5 error -117 [ 365.672064][T16527] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 365.755868][T16527] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 365.763037][T16527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.779308][T16521] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3113'. [ 365.810583][ T6851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.847486][T16559] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3113'. [ 365.919791][T16550] lo speed is unknown, defaulting to 1000 [ 365.977631][T16550] lo speed is unknown, defaulting to 1000 [ 365.985935][T16576] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3122'. [ 366.123441][T16550] chnl_net:caif_netlink_parms(): no params data found [ 366.153412][ T977] gretap0: left allmulticast mode [ 366.158483][ T977] gretap0: left promiscuous mode [ 366.168199][ T977] bridge0: port 3(gretap0) entered disabled state [ 366.190266][ T977] bridge_slave_1: left allmulticast mode [ 366.198646][ T977] bridge_slave_1: left promiscuous mode [ 366.211465][ T977] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.235363][ T977] bridge_slave_0: left allmulticast mode [ 366.241822][ T977] bridge_slave_0: left promiscuous mode [ 366.251898][ T977] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.326293][ T977] dvmrp1 (unregistering): left allmulticast mode [ 366.425591][T16558] loop1: detected capacity change from 0 to 1024 [ 366.464104][T16558] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.482230][T16558] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #3: block 1: comm syz.1.3119: lblock 1 mapped to illegal pblock 1 (length 1) [ 366.496937][T16558] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 366.497920][T16558] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3119: Failed to acquire dquot type 0 [ 366.507208][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 366.507367][ C1] EXT4-fs (loop1): initial error at time 1773086347: ext4_map_blocks:818: inode 3: block 1 [ 366.507550][ C1] EXT4-fs (loop1): last error at time 1773086347: ext4_map_blocks:818: inode 3: block 1 [ 366.546805][T16558] loop1: lost filesystem error report for type 5 error -117 [ 366.548605][T16558] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.3119: Freeing blocks not in datazone - block = 0, count = 4096 [ 366.569884][T16558] loop1: lost filesystem error report for type 5 error -117 [ 366.571384][T16558] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3119: Invalid inode bitmap blk 0 in block_group 0 [ 366.592111][T16558] loop1: lost filesystem error report for type 5 error -117 [ 366.592523][ T6697] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 366.593919][T16558] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 366.600057][ T6697] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 366.600208][ T6697] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 0 [ 366.614230][T16558] loop1: lost filesystem error report for type 5 error -117 [ 366.623085][ T6697] loop1: lost filesystem error report for type 5 error -117 [ 366.637050][T16558] EXT4-fs (loop1): 1 orphan inode deleted [ 366.667719][T16558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.757057][ T6851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.776154][T16669] FAULT_INJECTION: forcing a failure. [ 366.776154][T16669] name fail_futex, interval 1, probability 0, space 0, times 0 [ 366.789342][T16669] CPU: 0 UID: 0 PID: 16669 Comm: syz.1.3124 Tainted: G W syzkaller #0 PREEMPT(full) [ 366.789371][T16669] Tainted: [W]=WARN [ 366.789377][T16669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 366.789449][T16669] Call Trace: [ 366.789455][T16669] [ 366.789463][T16669] __dump_stack+0x1d/0x30 [ 366.789487][T16669] dump_stack_lvl+0x95/0xd0 [ 366.789506][T16669] dump_stack+0x15/0x1b [ 366.789537][T16669] should_fail_ex+0x263/0x280 [ 366.789557][T16669] should_fail+0xb/0x20 [ 366.789574][T16669] get_futex_key+0x5b7/0xbe0 [ 366.789598][T16669] futex_wake_op+0x140/0xa70 [ 366.789692][T16669] do_futex+0x348/0x380 [ 366.789788][T16669] __se_sys_futex+0x2f6/0x370 [ 366.789882][T16669] __x64_sys_futex+0x78/0x90 [ 366.789941][T16669] x64_sys_call+0x24ab/0x3020 [ 366.789962][T16669] do_syscall_64+0x12c/0x370 [ 366.789980][T16669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.789998][T16669] RIP: 0033:0x7f34a83cc799 [ 366.790062][T16669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.790114][T16669] RSP: 002b:00007f34a6e27028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 366.790210][T16669] RAX: ffffffffffffffda RBX: 00007f34a8645fa0 RCX: 00007f34a83cc799 [ 366.790222][T16669] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000140 [ 366.790261][T16669] RBP: 00007f34a6e27090 R08: 0000200000000000 R09: 000000001f000000 [ 366.790272][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.790281][T16669] R13: 00007f34a8646038 R14: 00007f34a8645fa0 R15: 00007ffcbe768df8 [ 366.790297][T16669] [ 367.060014][ T977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.085233][ T977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.090118][T16683] loop7: detected capacity change from 0 to 1024 [ 367.101576][ T977] bond0 (unregistering): (slave team0): Releasing backup interface [ 367.117304][T16683] EXT4-fs: Ignoring removed orlov option [ 367.123569][ T977] bond0 (unregistering): Released all slaves [ 367.131240][ T977] bond1 (unregistering): Released all slaves [ 367.141467][ T977] bond2 (unregistering): Released all slaves [ 367.154466][T16683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.170450][T16659] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 367.217949][T13347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.307739][T16730] loop3: detected capacity change from 0 to 2048 [ 367.357905][T16730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.383874][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.399372][T16730] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.420427][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.432348][T16550] bridge_slave_0: entered allmulticast mode [ 367.452904][T16550] bridge_slave_0: entered promiscuous mode [ 367.780742][ T977] hsr_slave_0: left promiscuous mode [ 367.786587][ T977] hsr_slave_1: left promiscuous mode [ 367.792142][ T977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.826722][ T977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.861123][T16772] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3131: bg 0: block 345: padding at end of block bitmap is not set [ 367.877276][T16772] EXT4-fs (loop3): Remounting filesystem read-only [ 367.909603][ T977] team0 (unregistering): Port device team_slave_1 removed [ 367.927782][ T977] team0 (unregistering): Port device team_slave_0 removed [ 367.935980][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.005790][ T6697] smc: removing ib device syU× [ 368.011600][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.029662][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.054114][T16550] bridge_slave_1: entered allmulticast mode [ 368.061801][T16550] bridge_slave_1: entered promiscuous mode [ 368.114993][ T10] lo speed is unknown, defaulting to 1000 [ 368.120865][ T10] syU×: Port: 1 Link DOWN [ 368.174195][T16788] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 368.194288][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 368.247376][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 368.309934][T16788] bond1 (unregistering): Released all slaves [ 368.448216][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.467322][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.522498][T16550] team0: Port device team_slave_0 added [ 368.541239][T16550] team0: Port device team_slave_1 added [ 368.584786][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.613347][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.676225][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.705052][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.722811][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.761719][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.797931][ T977] IPVS: stop unused estimator thread 0... [ 368.818539][T16550] hsr_slave_0: entered promiscuous mode [ 368.839800][T16550] hsr_slave_1: entered promiscuous mode [ 368.858948][T16550] debugfs: 'hsr0' already exists in 'hsr' [ 368.875897][T16550] Cannot create hsr debugfs directory [ 368.888752][T17016] loop3: detected capacity change from 0 to 2048 [ 368.938848][T17016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.981031][T17016] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.156925][T17020] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 369.209512][T17020] bond1 (unregistering): Released all slaves [ 369.496349][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 369.496362][ T28] audit: type=1400 audit(1773086350.502:1810): avc: denied { ioctl } for pid=17212 comm="syz.7.3147" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 369.592192][T17103] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3141: bg 0: block 345: padding at end of block bitmap is not set [ 369.614455][T17103] EXT4-fs (loop3): Remounting filesystem read-only [ 369.626047][T17206] netlink: 'syz.8.3145': attribute type 4 has an invalid length. [ 369.675446][T17216] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 369.708580][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.719094][T17216] bond1 (unregistering): Released all slaves [ 369.802580][T17305] loop3: detected capacity change from 0 to 512 [ 369.818316][T17305] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 369.832831][T16550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.839652][T17224] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3149'. [ 369.851481][T17305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3150: bg 0: block 393: padding at end of block bitmap is not set [ 369.871924][T17305] loop3: lost filesystem error report for type 5 error -117 [ 369.872202][T17305] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 369.879509][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 369.879525][ C0] EXT4-fs (loop3): initial error at time 1773086350: ext4_validate_block_bitmap:441 [ 369.879544][ C0] EXT4-fs (loop3): last error at time 1773086350: ext4_validate_block_bitmap:441 [ 369.921880][T17305] loop3: lost filesystem error report for type 5 error -117 [ 369.922357][T17305] EXT4-fs (loop3): 2 truncates cleaned up [ 369.937681][T16550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.944916][T17305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.967357][T16550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.979401][T16550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 370.099843][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.103834][T17356] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 370.165121][T16550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.185793][T17378] loop8: detected capacity change from 0 to 2048 [ 370.199013][T16550] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.219679][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.226751][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.240168][T17378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.254685][T17378] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.263011][T16550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.755459][T16550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.769010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.776161][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.866161][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.953916][T17403] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3159: bg 0: block 345: padding at end of block bitmap is not set [ 370.976174][T17403] EXT4-fs (loop8): Remounting filesystem read-only [ 370.985749][T16550] veth0_vlan: entered promiscuous mode [ 370.994197][T16550] veth1_vlan: entered promiscuous mode [ 371.004163][T14847] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.011134][T16550] veth0_macvtap: entered promiscuous mode [ 371.022433][T16550] veth1_macvtap: entered promiscuous mode [ 371.067218][T17433] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3164'. [ 371.098619][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.113230][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.146321][ T6697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.155394][ T6697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.193432][ T6697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.202801][ T6697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.226411][T17450] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 371.251788][T17455] loop3: detected capacity change from 0 to 2048 [ 371.266399][T17460] loop0: detected capacity change from 0 to 1024 [ 371.305682][T17468] loop7: detected capacity change from 0 to 512 [ 371.316165][T17471] loop8: detected capacity change from 0 to 2048 [ 371.322674][T17468] ext3: Unknown parameter 'obj_user' [ 371.328114][T11887] loop3: p1 p2 [ 371.336280][T11887] loop3: p2 size 458752 extends beyond EOD, truncated [ 371.351665][T17455] loop3: p1 p2 [ 371.361740][T17471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.361967][T17455] loop3: p2 size 458752 extends beyond EOD, [ 371.374438][T17471] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.398577][T17455] truncated [ 371.759750][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 371.799764][T17517] loop7: detected capacity change from 0 to 512 [ 371.950751][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 371.980890][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 372.001741][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 372.022275][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 372.035551][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 372.067699][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 372.068222][T11887] udevd[11887]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 372.102718][T17495] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3172: bg 0: block 345: padding at end of block bitmap is not set [ 372.118367][T17495] EXT4-fs (loop8): Remounting filesystem read-only [ 372.131004][T17529] bond2: option miimon: invalid value (18446744073709551615) [ 372.138907][T17529] bond2: option miimon: allowed values 0 - 2147483647 [ 372.150530][T17529] bond2 (unregistering): Released all slaves [ 372.172213][T14847] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.350865][T17629] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3183'. [ 372.367467][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3181'. [ 372.442651][T17633] loop3: detected capacity change from 0 to 128 [ 372.452104][T17629] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3183'. [ 372.481860][T17637] loop8: detected capacity change from 0 to 512 [ 372.523056][T17633] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 372.633563][T17633] EXT4-fs: error: could not find journal device path [ 372.671340][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3183'. [ 372.684901][T17629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3183'. [ 372.747408][T17530] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 372.765020][T17530] bond1 (unregistering): Released all slaves [ 372.822546][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3186'. [ 372.823675][T17708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3186'. [ 372.833937][T17709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.848030][T17709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.864415][T17709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.881385][T17709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.943328][T17733] loop1: detected capacity change from 0 to 2048 [ 373.007804][T17737] netlink: 'syz.3.3187': attribute type 4 has an invalid length. [ 373.017145][T17733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.034472][T17733] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.163609][ T28] audit: type=1326 audit(1773086353.935:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.163827][T17737] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 373.242143][T17737] bond2 (unregistering): Released all slaves [ 373.277052][ T28] audit: type=1326 audit(1773086353.935:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.386929][T17830] program syz.8.3196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.387937][ T28] audit: type=1326 audit(1773086353.935:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.420565][T17830] 8021q: VLANs not supported on gre0 [ 373.444924][ T28] audit: type=1326 audit(1773086353.935:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.470829][ T28] audit: type=1326 audit(1773086353.935:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.503903][ T28] audit: type=1326 audit(1773086353.963:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.535576][T17835] loop3: detected capacity change from 0 to 512 [ 373.563258][T17835] EXT4-fs (loop3): 1 truncate cleaned up [ 373.563575][ T28] audit: type=1326 audit(1773086353.963:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.569552][T17835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.612616][ T28] audit: type=1326 audit(1773086353.963:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17753 comm="syz.8.3194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6ebbc799 code=0x7ffc0000 [ 373.963751][T17750] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3190: bg 0: block 345: padding at end of block bitmap is not set [ 373.982751][T17750] EXT4-fs (loop1): Remounting filesystem read-only [ 373.997097][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.014430][T17847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=17847 comm=syz.7.3199 [ 374.036114][ T6851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.049826][ T28] audit: type=1400 audit(1773086354.758:1819): avc: denied { create } for pid=17844 comm="syz.7.3199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 374.100314][T17861] netlink: 'syz.0.3203': attribute type 25 has an invalid length. [ 374.113684][T17861] netlink: 'syz.0.3203': attribute type 3 has an invalid length. [ 374.532546][T17883] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 374.680860][T17883] bond1 (unregistering): Released all slaves [ 375.005525][T17967] loop3: detected capacity change from 0 to 512 [ 375.019407][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 375.019424][ T28] audit: type=1400 audit(1773086355.647:1821): avc: denied { mount } for pid=17971 comm="syz.8.3209" name="/" dev="rpc_pipefs" ino=45098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 375.065988][T17967] EXT4-fs: Ignoring removed oldalloc option [ 375.083493][T17967] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 375.094356][T17967] EXT4-fs (loop3): orphan cleanup on readonly fs [ 375.102739][T17967] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3208: Block bitmap for bg 0 marked uninitialized [ 375.119136][T17924] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 375.124504][T17967] loop3: lost filesystem error report for type 5 error -117 [ 375.134935][T17967] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 375.136049][T17924] bond1 (unregistering): Released all slaves [ 375.142344][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 375.142436][ C1] EXT4-fs (loop3): initial error at time 1773086355: ext4_read_block_bitmap_nowait:517 [ 375.142605][ C1] EXT4-fs (loop3): last error at time 1773086355: ext4_read_block_bitmap_nowait:517 [ 375.142741][T17967] loop3: lost filesystem error report for type 5 error -117 [ 375.142916][T17967] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3208: Block bitmap for bg 0 marked uninitialized [ 375.207695][T17967] loop3: lost filesystem error report for type 5 error -117 [ 375.207903][T17967] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 375.225743][T17967] loop3: lost filesystem error report for type 5 error -117 [ 375.226488][T17967] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.3208: Block bitmap for bg 0 marked uninitialized [ 375.247986][T17967] loop3: lost filesystem error report for type 5 error -117 [ 375.248523][T17967] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 375.265283][T17967] loop3: lost filesystem error report for type 5 error -117 [ 375.266754][T17967] EXT4-fs (loop3): 1 orphan inode deleted [ 375.281330][T17967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.300585][ T28] audit: type=1400 audit(1773086355.937:1822): avc: denied { map } for pid=18061 comm="syz.8.3212" path="/dev/full" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 375.400891][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.417838][T18078] loop0: detected capacity change from 0 to 512 [ 375.441847][T18078] EXT4-fs: test_dummy_encryption option not supported [ 375.469137][T18091] loop3: detected capacity change from 0 to 1024 [ 375.491307][T18078] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 375.513854][T18091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 375.536887][T18091] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.568654][T18091] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #15: comm syz.3.3218: lblock 0 mapped to illegal pblock 0 (length 1) [ 375.612701][T18091] EXT4-fs (loop3): Remounting filesystem read-only [ 375.644942][T18105] loop1: detected capacity change from 0 to 512 [ 375.653363][T18101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.667271][T18105] ext3: Unknown parameter 'obj_user' [ 375.673468][T18101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.073712][T18124] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 376.078069][T18124] bond1 (unregistering): Released all slaves [ 376.102348][T18165] loop1: detected capacity change from 0 to 512 [ 376.466185][T18124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.467417][T18124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.739221][T18203] autofs4:pid:18203:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189372) [ 376.739251][T18203] autofs4:pid:18203:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189372) [ 376.844473][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 376.985289][T18218] netlink: 'syz.3.3224': attribute type 4 has an invalid length. [ 377.097637][T18218] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 377.123053][T18218] bond2 (unregistering): Released all slaves [ 377.173926][T18217] loop1: detected capacity change from 0 to 4096 [ 377.344121][T18306] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=18306 comm=syz.8.3230 [ 377.513414][ T28] audit: type=1400 audit(1773086358.004:1823): avc: denied { append } for pid=18324 comm="syz.0.3236" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 377.580778][T18312] netlink: 'syz.8.3232': attribute type 12 has an invalid length. [ 377.600329][T18312] netlink: 'syz.8.3232': attribute type 29 has an invalid length. [ 377.618652][T18312] __nla_validate_parse: 7 callbacks suppressed [ 377.618708][T18312] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3232'. [ 378.775170][T18356] loop1: detected capacity change from 0 to 512 [ 378.833274][T18355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.844025][T18355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.869625][ T28] audit: type=1400 audit(1773086359.276:1824): avc: denied { ioctl } for pid=18372 comm="syz.0.3247" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45277 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 378.993914][T18356] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 379.005321][T18356] EXT4-fs (loop1): 1 truncate cleaned up [ 379.005834][T18356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.066367][T18404] SET target dimension over the limit! [ 379.185945][ T6851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.212459][T18421] netlink: 'syz.1.3257': attribute type 1 has an invalid length. [ 379.254177][T18421] bond1: entered promiscuous mode [ 379.282395][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'. [ 379.285908][T18421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.297935][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3257'. [ 379.312227][T18413] netlink: 'syz.8.3256': attribute type 4 has an invalid length. [ 379.367999][T18457] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 379.380332][T18457] bond1 (unregistering): Released all slaves [ 379.396834][T18421] bond1: (slave bridge17): making interface the new active one [ 379.404592][T18421] bridge17: entered promiscuous mode [ 379.411350][T18421] bond1: (slave bridge17): Enslaving as an active interface with an up link [ 379.442738][ T28] audit: type=1326 audit(1773086359.810:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.1.3258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34a83cc799 code=0x0 [ 379.465752][ T28] audit: type=1326 audit(1773086359.810:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.1.3258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34a83cc799 code=0x0 [ 379.927290][T18355] Process accounting paused [ 379.977872][T18566] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3267'. [ 380.058109][T18583] Cannot find del_set index 2 as target [ 380.068035][T18578] loop7: detected capacity change from 0 to 512 [ 380.079778][T18578] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 380.110940][T18578] EXT4-fs (loop7): 1 orphan inode deleted [ 380.143521][T18578] EXT4-fs (loop7): 1 truncate cleaned up [ 380.149442][T18578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.169623][T18594] FAULT_INJECTION: forcing a failure. [ 380.169623][T18594] name failslab, interval 1, probability 0, space 0, times 0 [ 380.190884][T18594] CPU: 1 UID: 0 PID: 18594 Comm: syz.3.3275 Tainted: G W syzkaller #0 PREEMPT(full) [ 380.190913][T18594] Tainted: [W]=WARN [ 380.190926][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.190938][T18594] Call Trace: [ 380.190945][T18594] [ 380.190953][T18594] __dump_stack+0x1d/0x30 [ 380.191096][T18594] dump_stack_lvl+0x95/0xd0 [ 380.191127][T18594] dump_stack+0x15/0x1b [ 380.191148][T18594] should_fail_ex+0x263/0x280 [ 380.191168][T18594] should_failslab+0x8c/0xb0 [ 380.191185][T18594] __kvmalloc_node_noprof+0x155/0x650 [ 380.191248][T18594] ? xt_alloc_table_info+0x40/0x80 [ 380.191273][T18594] xt_alloc_table_info+0x40/0x80 [ 380.191297][T18594] do_ipt_set_ctl+0x5dc/0x8e0 [ 380.191348][T18594] nf_setsockopt+0x199/0x1b0 [ 380.191366][T18594] ip_setsockopt+0x102/0x110 [ 380.191418][T18594] udp_setsockopt+0x99/0xb0 [ 380.191434][T18594] sock_common_setsockopt+0x69/0x80 [ 380.191569][T18594] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 380.191586][T18594] __sys_setsockopt+0x184/0x200 [ 380.191608][T18594] __x64_sys_setsockopt+0x64/0x80 [ 380.191632][T18594] x64_sys_call+0x2327/0x3020 [ 380.191684][T18594] do_syscall_64+0x12c/0x370 [ 380.191705][T18594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.191733][T18594] RIP: 0033:0x7f448ac3c799 [ 380.191746][T18594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.191763][T18594] RSP: 002b:00007f4489697028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 380.191824][T18594] RAX: ffffffffffffffda RBX: 00007f448aeb5fa0 RCX: 00007f448ac3c799 [ 380.191838][T18594] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 380.191850][T18594] RBP: 00007f4489697090 R08: 00000000000004c0 R09: 0000000000000000 [ 380.191864][T18594] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 380.191895][T18594] R13: 00007f448aeb6038 R14: 00007f448aeb5fa0 R15: 00007fff18805f28 [ 380.191911][T18594] [ 380.399994][T18569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3268'. [ 380.436236][T13347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.501127][T18612] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3268'. [ 380.618481][T18609] loop3: detected capacity change from 0 to 512 [ 380.666297][T18609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 380.679777][T18609] ext4 filesystem being mounted at /170/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.696485][T18615] netlink: 'syz.7.3278': attribute type 4 has an invalid length. [ 380.746947][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 380.831608][T18611] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 380.885235][T18611] bond1 (unregistering): Released all slaves [ 381.057627][T18712] xt_TPROXY: Can be used only with -p tcp or -p udp [ 381.065042][ T28] audit: type=1400 audit(1773086361.325:1827): avc: denied { ioctl } for pid=18711 comm="syz.7.3284" path="socket:[46145]" dev="sockfs" ino=46145 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 381.144180][T18718] Cannot find del_set index 2 as target [ 381.151816][T18723] FAULT_INJECTION: forcing a failure. [ 381.151816][T18723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.175816][T18723] CPU: 1 UID: 0 PID: 18723 Comm: syz.8.3287 Tainted: G W syzkaller #0 PREEMPT(full) [ 381.175844][T18723] Tainted: [W]=WARN [ 381.175850][T18723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.175873][T18723] Call Trace: [ 381.175877][T18723] [ 381.175883][T18723] __dump_stack+0x1d/0x30 [ 381.175905][T18723] dump_stack_lvl+0x95/0xd0 [ 381.175924][T18723] dump_stack+0x15/0x1b [ 381.175977][T18723] should_fail_ex+0x263/0x280 [ 381.176054][T18723] should_fail+0xb/0x20 [ 381.176070][T18723] should_fail_usercopy+0x1a/0x20 [ 381.176090][T18723] _copy_from_user+0x1c/0xb0 [ 381.176112][T18723] copy_from_sockptr_offset+0x66/0xa0 [ 381.176150][T18723] do_ipt_set_ctl+0x612/0x8e0 [ 381.176173][T18723] nf_setsockopt+0x199/0x1b0 [ 381.176258][T18723] ip_setsockopt+0x102/0x110 [ 381.176278][T18723] udp_setsockopt+0x99/0xb0 [ 381.176295][T18723] sock_common_setsockopt+0x69/0x80 [ 381.176387][T18723] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 381.176405][T18723] __sys_setsockopt+0x184/0x200 [ 381.176427][T18723] __x64_sys_setsockopt+0x64/0x80 [ 381.176536][T18723] x64_sys_call+0x2327/0x3020 [ 381.176618][T18723] do_syscall_64+0x12c/0x370 [ 381.176636][T18723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.176654][T18723] RIP: 0033:0x7fdf6ebbc799 [ 381.176777][T18723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.176791][T18723] RSP: 002b:00007fdf6d617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 381.176807][T18723] RAX: ffffffffffffffda RBX: 00007fdf6ee35fa0 RCX: 00007fdf6ebbc799 [ 381.176867][T18723] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 381.176878][T18723] RBP: 00007fdf6d617090 R08: 00000000000004c0 R09: 0000000000000000 [ 381.176889][T18723] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 381.176899][T18723] R13: 00007fdf6ee36038 R14: 00007fdf6ee35fa0 R15: 00007fffe5527e08 [ 381.176964][T18723] [ 381.454872][T18740] loop8: detected capacity change from 0 to 2048 [ 381.467925][T18727] netlink: 'syz.3.3285': attribute type 4 has an invalid length. [ 381.493682][T18739] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 381.507977][T18739] bond2 (unregistering): Released all slaves [ 381.514463][ T3304] loop8: p3 p4 < > [ 381.526914][ T3304] loop8: p3 start 11362048 is beyond EOD, truncated [ 381.535150][T18730] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 381.541106][T18730] syzkaller1: linktype set to 260 [ 381.548478][T18740] loop8: p3 p4 < > [ 381.552435][T18740] loop8: p3 start 11362048 is beyond EOD, truncated [ 381.560881][ T28] audit: type=1400 audit(1773086361.783:1828): avc: denied { read } for pid=18729 comm="syz.7.3288" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 381.585287][ T28] audit: type=1400 audit(1773086361.783:1829): avc: denied { ioctl } for pid=18729 comm="syz.7.3288" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 381.989633][T18842] netlink: 'syz.0.3296': attribute type 4 has an invalid length. [ 381.998099][T18853] loop7: detected capacity change from 0 to 1024 [ 382.007873][T18853] EXT4-fs: Ignoring removed orlov option [ 382.021255][T18855] netlink: 'syz.8.3294': attribute type 4 has an invalid length. [ 382.040468][T18853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.068413][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3297'. [ 382.070527][T18856] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 382.100261][T18856] bond1 (unregistering): Released all slaves [ 382.144644][T18861] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 382.170406][T18861] bond1 (unregistering): Released all slaves [ 382.256157][T18997] Cannot find del_set index 2 as target [ 382.402523][T19008] loop1: detected capacity change from 0 to 512 [ 382.577243][T18922] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3297'. [ 382.632923][T13347] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.765394][T19058] loop8: detected capacity change from 0 to 512 [ 382.771701][T19057] loop3: detected capacity change from 0 to 136 [ 382.781941][ T28] audit: type=1400 audit(1773086362.915:1830): avc: denied { getattr } for pid=19055 comm="syz.3.3305" path="socket:[46266]" dev="sockfs" ino=46266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 382.783730][T19057] Attempt to read inode for relocated directory [ 382.818904][T19063] program syz.0.3303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.824020][T19058] ext3: Unknown parameter 'obj_user' [ 382.980463][T19063] 8021q: VLANs not supported on gre0 [ 382.990521][T19077] netlink: 'syz.7.3306': attribute type 4 has an invalid length. [ 383.116277][T19062] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 383.143734][T19062] bond1 (unregistering): Released all slaves [ 383.218009][T19151] loop8: detected capacity change from 0 to 512 [ 383.561501][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3312'. [ 383.585882][T19174] netlink: 'syz.1.3313': attribute type 4 has an invalid length. [ 383.606559][T19174] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 383.618364][T19174] bond2 (unregistering): Released all slaves [ 383.688286][T19251] FAULT_INJECTION: forcing a failure. [ 383.688286][T19251] name failslab, interval 1, probability 0, space 0, times 0 [ 383.711850][T19251] CPU: 0 UID: 0 PID: 19251 Comm: syz.0.3315 Tainted: G W syzkaller #0 PREEMPT(full) [ 383.711883][T19251] Tainted: [W]=WARN [ 383.711890][T19251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 383.711976][T19251] Call Trace: [ 383.711982][T19251] [ 383.711988][T19251] __dump_stack+0x1d/0x30 [ 383.712013][T19251] dump_stack_lvl+0x95/0xd0 [ 383.712033][T19251] dump_stack+0x15/0x1b [ 383.712052][T19251] should_fail_ex+0x263/0x280 [ 383.712082][T19251] should_failslab+0x8c/0xb0 [ 383.712101][T19251] __kmalloc_noprof+0xb8/0x4e0 [ 383.712123][T19251] ? bm_init+0x4c/0x6f0 [ 383.712140][T19251] ? pcpu_block_refresh_hint+0x10b/0x170 [ 383.712192][T19251] bm_init+0x4c/0x6f0 [ 383.712210][T19251] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 383.712236][T19251] ? pcpu_alloc_area+0x4ad/0x4d0 [ 383.712298][T19251] textsearch_prepare+0x195/0x200 [ 383.712319][T19251] string_mt_check+0x119/0x170 [ 383.712410][T19251] xt_check_match+0x2ad/0x4f0 [ 383.712432][T19251] ? mutex_unlock+0x4e/0x90 [ 383.712458][T19251] ? xt_find_match+0x1d1/0x210 [ 383.712481][T19251] ? xt_find_match+0x1b5/0x210 [ 383.712518][T19251] translate_table+0xb12/0x10d0 [ 383.712549][T19251] ? _copy_from_user+0x89/0xb0 [ 383.712607][T19251] do_ipt_set_ctl+0x6d0/0x8e0 [ 383.712712][T19251] nf_setsockopt+0x199/0x1b0 [ 383.712732][T19251] ip_setsockopt+0x102/0x110 [ 383.712754][T19251] udp_setsockopt+0x99/0xb0 [ 383.712774][T19251] sock_common_setsockopt+0x69/0x80 [ 383.712795][T19251] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 383.712862][T19251] __sys_setsockopt+0x184/0x200 [ 383.713031][T19251] __x64_sys_setsockopt+0x64/0x80 [ 383.713052][T19251] x64_sys_call+0x2327/0x3020 [ 383.713076][T19251] do_syscall_64+0x12c/0x370 [ 383.713097][T19251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.713154][T19251] RIP: 0033:0x7f76a10fc799 [ 383.713169][T19251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.713185][T19251] RSP: 002b:00007f769fb57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 383.713205][T19251] RAX: ffffffffffffffda RBX: 00007f76a1375fa0 RCX: 00007f76a10fc799 [ 383.713221][T19251] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 383.713297][T19251] RBP: 00007f769fb57090 R08: 00000000000004c0 R09: 0000000000000000 [ 383.713308][T19251] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 383.713321][T19251] R13: 00007f76a1376038 R14: 00007f76a1375fa0 R15: 00007fff0a2cec28 [ 383.713339][T19251] [ 384.024295][T19252] netlink: 'syz.7.3314': attribute type 4 has an invalid length. [ 384.099803][T19182] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 384.118673][T19182] bond1 (unregistering): Released all slaves [ 384.135688][T19304] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 384.359782][T19359] netlink: 'syz.7.3323': attribute type 4 has an invalid length. [ 384.367824][T19366] program syz.1.3325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.383804][T19366] 8021q: VLANs not supported on gre0 [ 384.435849][T19348] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 384.459057][T19348] bond1 (unregistering): Released all slaves [ 384.491559][T19384] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3328'. [ 384.504358][T19384] Cannot find del_set index 2 as target [ 384.761934][T19460] FAULT_INJECTION: forcing a failure. [ 384.761934][T19460] name failslab, interval 1, probability 0, space 0, times 0 [ 384.774827][T19460] CPU: 0 UID: 0 PID: 19460 Comm: syz.8.3330 Tainted: G W syzkaller #0 PREEMPT(full) [ 384.774853][T19460] Tainted: [W]=WARN [ 384.774859][T19460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.774994][T19460] Call Trace: [ 384.775001][T19460] [ 384.775008][T19460] __dump_stack+0x1d/0x30 [ 384.775031][T19460] dump_stack_lvl+0x95/0xd0 [ 384.775114][T19460] dump_stack+0x15/0x1b [ 384.775130][T19460] should_fail_ex+0x263/0x280 [ 384.775148][T19460] ? limit_mt_check+0x159/0x2e0 [ 384.775176][T19460] should_failslab+0x8c/0xb0 [ 384.775236][T19460] __kmalloc_cache_noprof+0x5f/0x410 [ 384.775258][T19460] limit_mt_check+0x159/0x2e0 [ 384.775282][T19460] xt_check_match+0x2ad/0x4f0 [ 384.775341][T19460] ? mutex_unlock+0x4e/0x90 [ 384.775364][T19460] ? xt_find_match+0x1d1/0x210 [ 384.775397][T19460] ? xt_find_match+0x1b5/0x210 [ 384.775420][T19460] translate_table+0xb12/0x10d0 [ 384.775582][T19460] ? _copy_from_user+0x89/0xb0 [ 384.775643][T19460] do_ipt_set_ctl+0x6d0/0x8e0 [ 384.775668][T19460] nf_setsockopt+0x199/0x1b0 [ 384.775685][T19460] ip_setsockopt+0x102/0x110 [ 384.775704][T19460] udp_setsockopt+0x99/0xb0 [ 384.775802][T19460] sock_common_setsockopt+0x69/0x80 [ 384.775819][T19460] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 384.775836][T19460] __sys_setsockopt+0x184/0x200 [ 384.775859][T19460] __x64_sys_setsockopt+0x64/0x80 [ 384.776063][T19460] x64_sys_call+0x2327/0x3020 [ 384.776124][T19460] do_syscall_64+0x12c/0x370 [ 384.776143][T19460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.776161][T19460] RIP: 0033:0x7fdf6ebbc799 [ 384.776191][T19460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.776205][T19460] RSP: 002b:00007fdf6d617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 384.776243][T19460] RAX: ffffffffffffffda RBX: 00007fdf6ee35fa0 RCX: 00007fdf6ebbc799 [ 384.776254][T19460] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 384.776264][T19460] RBP: 00007fdf6d617090 R08: 00000000000004c0 R09: 0000000000000000 [ 384.776274][T19460] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 384.776285][T19460] R13: 00007fdf6ee36038 R14: 00007fdf6ee35fa0 R15: 00007fffe5527e08 [ 384.776329][T19460] [ 385.081169][T19463] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.162262][T19463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.172739][T19463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.241734][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3334'. [ 385.260327][ T6697] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.271487][ T6697] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.302321][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3336'. [ 385.360856][T19481] loop8: detected capacity change from 0 to 2048 [ 385.379512][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.388474][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.409786][T19481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.429925][T19481] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.848410][T19500] loop7: detected capacity change from 0 to 256 [ 385.865052][T19503] batadv1: entered promiscuous mode [ 386.148203][T19498] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3337: bg 0: block 345: padding at end of block bitmap is not set [ 386.219163][T19498] EXT4-fs (loop8): Remounting filesystem read-only [ 386.280027][ T28] audit: type=1400 audit(1773086366.208:1831): avc: denied { name_connect } for pid=19512 comm="syz.3.3341" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 386.357398][T14847] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.436006][T19526] ±ÿ: renamed from lo (while UP) [ 386.461629][T19526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3344'. [ 386.471723][T19526] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3344'. [ 386.481869][T19526] netlink: 'syz.3.3344': attribute type 5 has an invalid length. [ 386.490857][T19526] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3344'. [ 386.653540][T19538] 8021q: VLANs not supported on gre0 [ 386.818049][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3346'. [ 387.450337][T19562] ucma_write: process 110 (syz.0.3350) changed security contexts after opening file descriptor, this is not allowed. [ 387.552102][ T28] audit: type=1400 audit(1773086367.396:1832): avc: denied { setopt } for pid=19564 comm="syz.3.3352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.659924][T19585] pim6reg: entered allmulticast mode [ 387.666152][T19584] pim6reg: left allmulticast mode [ 387.771805][T19610] loop8: detected capacity change from 0 to 512 [ 387.831384][T19599] netlink: 'syz.1.3353': attribute type 4 has an invalid length. [ 388.298888][T19589] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 388.349738][T19589] bond1 (unregistering): Released all slaves [ 388.363263][T19653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.373682][T19653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.664801][T19732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3372'. [ 388.664822][T19732] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3372'. [ 388.820157][T19741] loop3: detected capacity change from 0 to 4096 [ 388.830231][T19741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.854757][ T28] audit: type=1400 audit(1773086368.612:1833): avc: denied { create } for pid=19740 comm="syz.3.3375" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.891559][ T28] audit: type=1400 audit(1773086368.631:1834): avc: denied { rename } for pid=19740 comm="syz.3.3375" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.908351][ T28] audit: type=1400 audit(1773086368.659:1835): avc: denied { link } for pid=19740 comm="syz.3.3375" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 388.997056][T19766] FAULT_INJECTION: forcing a failure. [ 388.997056][T19766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.050469][ T28] audit: type=1400 audit(1773086368.762:1836): avc: denied { read append open } for pid=19740 comm="syz.3.3375" path=2F3138392F66696C65302F66696C65302F233139202864656C6574656429 dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 389.106533][T19766] CPU: 0 UID: 0 PID: 19766 Comm: syz.7.3380 Tainted: G W syzkaller #0 PREEMPT(full) [ 389.106626][T19766] Tainted: [W]=WARN [ 389.106632][T19766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.106688][T19766] Call Trace: [ 389.106693][T19766] [ 389.106699][T19766] __dump_stack+0x1d/0x30 [ 389.106720][T19766] dump_stack_lvl+0x95/0xd0 [ 389.106737][T19766] dump_stack+0x15/0x1b [ 389.106754][T19766] should_fail_ex+0x263/0x280 [ 389.106802][T19766] should_fail+0xb/0x20 [ 389.106822][T19766] should_fail_usercopy+0x1a/0x20 [ 389.106845][T19766] _copy_to_user+0x20/0xa0 [ 389.106869][T19766] simple_read_from_buffer+0xb5/0x130 [ 389.106889][T19766] proc_fail_nth_read+0x10e/0x150 [ 389.106990][T19766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.107013][T19766] vfs_read+0x1ab/0x7f0 [ 389.107039][T19766] ? fdget+0xcb/0x110 [ 389.107083][T19766] ? __sys_connect+0x8d/0x2a0 [ 389.107104][T19766] ksys_read+0xdc/0x1a0 [ 389.107200][T19766] __x64_sys_read+0x40/0x50 [ 389.107240][T19766] x64_sys_call+0x2886/0x3020 [ 389.107264][T19766] do_syscall_64+0x12c/0x370 [ 389.107288][T19766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.107370][T19766] RIP: 0033:0x7f472d1ecfce [ 389.107552][T19766] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.107571][T19766] RSP: 002b:00007f472bc65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.107591][T19766] RAX: ffffffffffffffda RBX: 00007f472bc666c0 RCX: 00007f472d1ecfce [ 389.107605][T19766] RDX: 000000000000000f RSI: 00007f472bc660a0 RDI: 0000000000000006 [ 389.107657][T19766] RBP: 00007f472bc66090 R08: 0000000000000000 R09: 0000000000000000 [ 389.107667][T19766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.107680][T19766] R13: 00007f472d4a6128 R14: 00007f472d4a6090 R15: 00007ffdf9218af8 [ 389.107698][T19766] [ 389.311909][T19767] netlink: 'syz.8.3377': attribute type 4 has an invalid length. [ 389.320093][ T23] IPVS: starting estimator thread 0... [ 389.335022][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.343504][T19770] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 389.355604][T19770] bond1 (unregistering): Released all slaves [ 389.409245][ T28] audit: type=1326 audit(1773086369.127:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19850 comm="syz.3.3385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f448ac3c799 code=0x0 [ 389.432840][T19771] IPVS: using max 2448 ests per chain, 122400 per kthread [ 389.466452][T19859] loop3: detected capacity change from 0 to 512 [ 389.473098][T19859] EXT4-fs: Ignoring removed bh option [ 389.479940][T19859] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 389.490553][T19859] EXT4-fs (loop3): 1 truncate cleaned up [ 389.496673][T19859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.652592][T19871] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3390'. [ 389.757281][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3390'. [ 389.803081][T19874] bond1: entered promiscuous mode [ 389.809574][T19874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.093823][T19912] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3391'. [ 390.158644][T19920] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3391'. [ 390.213038][T19926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 390.337876][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 390.417409][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 390.435813][T19942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 390.517650][T19948] loop1: detected capacity change from 0 to 128 [ 390.561864][T19948] FAT-fs (loop1): Directory bread(block 32) failed [ 390.568442][T19948] FAT-fs (loop1): Directory bread(block 33) failed [ 390.596221][T19948] FAT-fs (loop1): Directory bread(block 34) failed [ 390.602816][T19948] FAT-fs (loop1): Directory bread(block 35) failed [ 390.629977][T19948] FAT-fs (loop1): Directory bread(block 36) failed [ 390.636503][T19948] FAT-fs (loop1): Directory bread(block 37) failed [ 390.649688][T19948] FAT-fs (loop1): Directory bread(block 38) failed [ 390.656214][T19948] FAT-fs (loop1): Directory bread(block 39) failed [ 390.675897][T19948] FAT-fs (loop1): Directory bread(block 40) failed [ 390.685960][T19948] FAT-fs (loop1): Directory bread(block 41) failed [ 390.698559][T19951] netlink: 'syz.0.3400': attribute type 4 has an invalid length. [ 390.739397][T19948] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 390.747157][T19948] FAT-fs (loop1): Filesystem has been set read-only [ 390.749618][T19952] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 390.780014][T19978] tls_set_device_offload_rx: netdev not found [ 390.796704][T19952] bond1 (unregistering): Released all slaves [ 390.870292][T20031] loop1: detected capacity change from 0 to 512 [ 390.878506][T11818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.911886][T20031] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.3403: inode has both inline data and extents flags [ 390.932676][T20031] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.932850][T20031] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3403: couldn't read orphan inode 15 (err -117) [ 390.938932][ T28] audit: type=1326 audit(1773086370.567:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.3.3404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f448ac3c799 code=0x0 [ 390.942100][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 390.983190][ C0] EXT4-fs (loop1): initial error at time 1773086370: ext4_orphan_get:1391: inode 15 [ 390.992586][ C0] EXT4-fs (loop1): last error at time 1773086370: ext4_orphan_get:1391: inode 15 [ 391.002377][T20031] loop1: lost filesystem error report for type 5 error -117 [ 391.008287][T20031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.056540][ T28] audit: type=1400 audit(1773086370.661:1839): avc: denied { write } for pid=20030 comm="syz.1.3403" path="/408/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 391.066585][T20031] loop1: detected capacity change from 512 to 64 [ 391.100657][ T28] audit: type=1400 audit(1773086370.661:1840): avc: denied { mounton } for pid=20030 comm="syz.1.3403" path="/408/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 391.124193][ T28] audit: type=1326 audit(1773086370.698:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.3.3404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f448ac3c799 code=0x0 [ 391.148576][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3409'. [ 391.163645][T20031] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 391.186872][ T6851] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 391.234202][T18530] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.248621][ T6699] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.261567][T20080] program syz.0.3408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 391.311948][T20089] netlink: 'syz.3.3417': attribute type 4 has an invalid length. [ 391.320306][T20089] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3417'. [ 391.397217][ T6699] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.412299][T20089] .`: renamed from bond0 (while UP) [ 391.425158][T20090] netlink: 'syz.7.3412': attribute type 4 has an invalid length. [ 391.447543][T20098] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 391.507110][T20098] bond1 (unregistering): Released all slaves [ 391.522232][ T6699] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.616492][ T6699] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.628750][T20094] lo speed is unknown, defaulting to 1000 [ 391.663336][T20207] loop7: detected capacity change from 0 to 512 [ 391.670831][T20207] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 391.683636][T20207] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0002] [ 391.693209][T20207] EXT4-fs (loop7): orphan cleanup on readonly fs [ 391.701124][T20223] loop8: detected capacity change from 0 to 256 [ 391.708130][T20207] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3425: invalid indirect mapped block 2185560079 (level 1) [ 391.722328][T20207] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 391.732896][T20207] EXT4-fs (loop7): Remounting filesystem read-only [ 391.742034][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 391.742053][ C0] EXT4-fs (loop7): initial error at time 1773086371: ext4_free_branches:1023: inode 11 [ 391.742097][ C0] EXT4-fs (loop7): last error at time 1773086371: ext4_free_branches:1023: inode 11 [ 391.774337][T20207] EXT4-fs (loop7): 1 truncate cleaned up [ 391.780345][T20207] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 391.793279][T20207] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 391.864318][ T6699] bridge_slave_1: left allmulticast mode [ 391.877750][ T6699] bridge_slave_1: left promiscuous mode [ 391.906710][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.915031][ T6699] bridge_slave_0: left allmulticast mode [ 391.920874][ T6699] bridge_slave_0: left promiscuous mode [ 391.926742][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.256382][T20223] ================================================================== [ 392.264465][T20223] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 392.271552][T20223] [ 392.273852][T20223] write to 0xffff8881421efda8 of 2 bytes by task 20292 on cpu 1: [ 392.281541][T20223] fat16_ent_put+0x28/0x60 [ 392.285934][T20223] fat_alloc_clusters+0x57b/0xc50 [ 392.290933][T20223] fat_get_block+0x258/0x5e0 [ 392.295501][T20223] __block_write_begin_int+0x400/0xf90 [ 392.300939][T20223] cont_write_begin+0x5fe/0x970 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 392.305770][T20223] fat_write_begin+0x4f/0xe0 [ 392.310342][T20223] generic_perform_write+0x183/0x490 [ 392.315620][T20223] __generic_file_write_iter+0x9e/0x120 [ 392.321158][T20223] generic_file_write_iter+0x8d/0x310 [ 392.326518][T20223] vfs_write+0x5a6/0x9f0 [ 392.330754][T20223] ksys_write+0xdc/0x1a0 [ 392.334976][T20223] __x64_sys_write+0x40/0x50 [ 392.339545][T20223] x64_sys_call+0x27e1/0x3020 [ 392.344217][T20223] do_syscall_64+0x12c/0x370 [ 392.348795][T20223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.354676][T20223] [ 392.356983][T20223] read to 0xffff8881421ef800 of 2048 bytes by task 20223 on cpu 0: [ 392.364856][T20223] fat_mirror_bhs+0x1df/0x320 [ 392.369519][T20223] fat_ent_write+0xd0/0xe0 [ 392.373920][T20223] fat_chain_add+0x16c/0x490 [ 392.378500][T20223] fat_get_block+0x46c/0x5e0 [ 392.383078][T20223] __block_write_begin_int+0x400/0xf90 [ 392.388527][T20223] cont_write_begin+0x5fe/0x970 [ 392.393370][T20223] fat_write_begin+0x4f/0xe0 [ 392.397951][T20223] cont_write_begin+0x1b0/0x970 [ 392.402792][T20223] fat_write_begin+0x4f/0xe0 [ 392.407375][T20223] generic_cont_expand_simple+0xb0/0x150 [ 392.413007][T20223] fat_cont_expand+0x3e/0x170 [ 392.417679][T20223] fat_setattr+0x2a4/0x870 [ 392.422088][T20223] notify_change+0x872/0x8f0 [ 392.426666][T20223] do_ftruncate+0x349/0x3d0 [ 392.431247][T20223] __x64_sys_ftruncate+0x68/0xc0 [ 392.436168][T20223] x64_sys_call+0x2beb/0x3020 [ 392.440840][T20223] do_syscall_64+0x12c/0x370 [ 392.445425][T20223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.451314][T20223] [ 392.453625][T20223] Reported by Kernel Concurrency Sanitizer on: [ 392.459764][T20223] CPU: 0 UID: 0 PID: 20223 Comm: syz.8.3426 Tainted: G W syzkaller #0 PREEMPT(full) [ 392.470685][T20223] Tainted: [W]=WARN [ 392.474469][T20223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.484508][T20223] ================================================================== [ 392.597131][T20292] syz.8.3426: attempt to access beyond end of device [ 392.597131][T20292] loop8: rw=2049, sector=16544, nr_sectors = 32 limit=256 [ 392.611501][T20292] syz.8.3426: attempt to access beyond end of device [ 392.611501][T20292] loop8: rw=2049, sector=16704, nr_sectors = 32 limit=256 [ 392.625382][T20292] syz.8.3426: attempt to access beyond end of device [ 392.625382][T20292] loop8: rw=2049, sector=16864, nr_sectors = 32 limit=256 [ 392.639164][T20292] syz.8.3426: attempt to access beyond end of device [ 392.639164][T20292] loop8: rw=2049, sector=16992, nr_sectors = 32 limit=256 [ 392.653149][T20292] syz.8.3426: attempt to access beyond end of device [ 392.653149][T20292] loop8: rw=2049, sector=17152, nr_sectors = 32 limit=256 [ 392.666873][T20292] syz.8.3426: attempt to access beyond end of device [ 392.666873][T20292] loop8: rw=2049, sector=17344, nr_sectors = 32 limit=256 [ 392.680670][T20292] syz.8.3426: attempt to access beyond end of device [ 392.680670][T20292] loop8: rw=2049, sector=17568, nr_sectors = 32 limit=256 [ 392.694414][T20292] syz.8.3426: attempt to access beyond end of device [ 392.694414][T20292] loop8: rw=2049, sector=17792, nr_sectors = 32 limit=256 [ 392.708117][T20292] syz.8.3426: attempt to access beyond end of device [ 392.708117][T20292] loop8: rw=2049, sector=17984, nr_sectors = 32 limit=256 [ 392.721788][T20292] syz.8.3426: attempt to access beyond end of device [ 392.721788][T20292] loop8: rw=2049, sector=18240, nr_sectors = 32 limit=256 [ 393.109843][ T6699] bond1 (unregistering): (slave bridge17): Releasing backup interface [ 393.118131][ T6699] bridge17 (unregistering): left promiscuous mode [ 393.185003][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.194665][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.204020][ T6699] bond0 (unregistering): Released all slaves [ 393.211464][ T6699] bond1 (unregistering): Released all slaves [ 393.219272][T20094] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 393.287792][ T6699] hsr_slave_0: left promiscuous mode [ 393.321865][ T6699] hsr_slave_1: left promiscuous mode [ 393.327649][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.335172][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.342738][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.350138][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.359656][ T6699] veth1_macvtap: left promiscuous mode [ 393.365421][ T6699] veth0_macvtap: left promiscuous mode [ 393.370966][ T6699] veth1_vlan: left promiscuous mode [ 393.376351][ T6699] veth0_vlan: left promiscuous mode [ 393.428682][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 393.438001][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 393.766653][ T6699] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.827404][ T6699] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.891038][ T6699] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.933974][ T6699] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.022653][ T6699] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.056488][ T6699] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.105290][ T6699] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.171200][ T6699] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.222036][ T6699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.232458][ T6699] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.265159][ T6699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.275676][ T6699] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.319813][ T6699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.330263][ T6699] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.370563][ T6699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.380907][ T6699] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.458055][ T6699] bridge_slave_1: left allmulticast mode [ 394.463716][ T6699] bridge_slave_1: left promiscuous mode [ 394.469708][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.477388][ T6699] bridge_slave_0: left allmulticast mode [ 394.483063][ T6699] bridge_slave_0: left promiscuous mode [ 394.488845][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.498672][ T6699] bridge_slave_1: left allmulticast mode [ 394.504295][ T6699] bridge_slave_1: left promiscuous mode [ 394.509954][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.517614][ T6699] bridge_slave_0: left allmulticast mode [ 394.523529][ T6699] bridge_slave_0: left promiscuous mode [ 394.529174][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.537643][ T6699] bridge_slave_1: left allmulticast mode [ 394.543311][ T6699] bridge_slave_1: left promiscuous mode [ 394.548995][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.556747][ T6699] bridge_slave_0: left allmulticast mode [ 394.562427][ T6699] bridge_slave_0: left promiscuous mode [ 394.568011][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.641142][ T6699] bond1 (unregistering): (slave geneve2): Releasing active interface [ 394.980716][ T6699] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.990318][ T6699] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.999336][ T6699] .` (unregistering): Released all slaves [ 395.006530][ T6699] bond1 (unregistering): Released all slaves [ 395.119713][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.132063][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.141591][ T6699] bond0 (unregistering): Released all slaves [ 395.226523][ T6699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.236128][ T6699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.245473][ T6699] bond0 (unregistering): Released all slaves [ 395.327299][ T6699] tipc: Left network mode [ 395.342387][ T6699] hsr_slave_0: left promiscuous mode [ 395.348292][ T6699] hsr_slave_1: left promiscuous mode [ 395.354360][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.361789][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.369852][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.377371][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.387207][ T6699] hsr_slave_0: left promiscuous mode [ 395.392911][ T6699] hsr_slave_1: left promiscuous mode [ 395.399049][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.406404][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.413938][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.421394][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.429361][ T6699] hsr_slave_0: left promiscuous mode [ 395.434910][ T6699] hsr_slave_1: left promiscuous mode [ 395.447566][ T6699] veth1_macvtap: left promiscuous mode [ 395.453070][ T6699] veth0_macvtap: left promiscuous mode [ 395.458533][ T6699] veth1_vlan: left promiscuous mode [ 395.463791][ T6699] veth0_vlan: left promiscuous mode [ 395.469470][ T6699] veth1_macvtap: left promiscuous mode [ 395.474985][ T6699] veth0_macvtap: left promiscuous mode [ 395.480506][ T6699] veth1_vlan: left promiscuous mode [ 395.485909][ T6699] veth0_vlan: left promiscuous mode [ 395.491590][ T6699] veth1_macvtap: left promiscuous mode [ 395.497103][ T6699] veth0_macvtap: left promiscuous mode [ 395.603475][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 395.612696][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 395.659992][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 395.670039][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 395.710322][ T6699] team0 (unregistering): Port device team_slave_1 removed [ 395.719798][ T6699] team0 (unregistering): Port device team_slave_0 removed [ 395.751532][ T10] lo speed is unknown, defaulting to 1000 [ 395.757275][ T10] infiniband syz2: ib_query_port failed (-19) [ 396.335855][ T6699] IPVS: stop unused estimator thread 0...