last executing test programs: 3m36.425675078s ago: executing program 32 (id=401): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x100000}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 6) 3m8.9507829s ago: executing program 33 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000b06030000004000000000000200000605000100070000000900020073797a3200000000180007800900120073797a31000000000800064000000c26"], 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) 2m14.531032254s ago: executing program 0 (id=1710): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0xc9983fc1922c5fd5, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x25) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000680)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 2m14.481301307s ago: executing program 0 (id=1713): r0 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x2, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) 2m14.338746555s ago: executing program 0 (id=1716): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, @in={0x2, 0x4e22}, @in6={0xa, 0x4e23, 0xfffffff8, @local, 0x200}}}, 0x118) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@private2, 0x2, r6}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2, r6}, 0x14) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x2}, 0x8) sendto$inet6(r8, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2, 0x81, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x10000006, 0x2, 0x87, 0xffffffff, 0x40}) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) unshare(0xa000400) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000000340)=ANY=[], 0x4) ioctl$SG_IO(r10, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x1a, 0x0, @scatter={0x6, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/186, 0x10e}, {&(0x7f00000002c0)}, {&(0x7f0000002080)=""/4111, 0x1000}, {&(0x7f0000000300)=""/48, 0x30}, {&(0x7f0000000740)=""/85, 0x55}, {&(0x7f0000000900)=""/185, 0xb7}]}, &(0x7f0000000bc0)="2808f99a33660a01f5688fddcd98d3839b211e426df2ce6312ea0e8a43172e656acf9f6a3104c5300973bc16e07f674c59def576e2a15d6896b3a05e477e17fda7893760e8765f2dfc5e7b7313092f86fb1e78ebcedd35beddbdf72e511fb62d73b655c5dc47d466d1825f06d6d5f70e2227b6d95d7627288bc307ba42d215554dba7b1863e60ecaa3fe744ab88349ea67994c12a2a469a1177c61d9a87e0d74236da0613e8ddcca04ed333bd387d6b0d6dae79c4e67719fbfbf5ad5f694dffa8c9aeb912b522dcc614fce6fdc75e65bef588b7c9baae3eaa14a6a12ffffee6992f18bae88aadc220650b4e78191631e77", 0x0, 0x3, 0x10013, 0x1, 0x0}) 2m14.25416313s ago: executing program 0 (id=1718): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf25000000", @ANYRES32=0x0, @ANYBLOB="05b79782e222345b39d7bb8c9a7349c1b8dbdf9b5c647e32b9eb5890befaffea41ee2b9b40db6035beda4786768ba6e04eddddd45977a2a9dee622cebfd2814a9aa4af28d036e6c1129860e9cbe8034344ce8d7ccfaeb1e23581bc635fda3d087a3c7c983fbd0023acf095800308274f783f1f20032049448c9a09355a3c2c9ad5b0aa8566ca6743fbc42ae0c0b1dc3c921db774087f9a038b9cce876ae1d54481f044"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x859) getpid() r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000000)=0x970) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x106, 0xfffffffd, 0x2b) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00082bbd7000ffdbdf2549000000080001003d00000008000300", @ANYRES32=r10, @ANYBLOB="dbef3bca885f5b6f729b49b37a694564f21a4f29f1ce0ee3dcb0b7f00f7b980513940882a632791f8706b9770b4f0dc87dd729c7"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4000000", @ANYRES16=0x0, @ANYBLOB="f6002d000300", @ANYRES32=r10, @ANYBLOB="0a000600505050505050000095002a00000601010101010104060b079b000018265af016064dba6538257ea4415c89291928d3b87824342f106699b7a6d6e1911623489df3e546b113ae4f2570c46a9685bd1d17e0fe39e954755dbaf98a76f90dfbcca19afaa3d7ccf38ac92c4c80e4f0fbcfbfb0ea7d2ccaabd0c77e156e389d0802110000010200000009000000001000003c04004c7cff72060303030303030000000a00060050505050505000000c002a0000060202020202020a0006005050505050500000"], 0xe4}, 0x1, 0x0, 0x0, 0x24000001}, 0x54) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f0000000140)={0xb2, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000242000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x2, 0x38, 0x6a}) 2m13.759934389s ago: executing program 0 (id=1720): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x4001ffffffffd]}, 0x8, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@barrier}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@bsdgroups}]}, 0x1, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0xe7f) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x39e}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/218, 0xda}], 0x1, 0x5, 0x2, 0x32) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) r4 = syz_io_uring_setup(0x6b0c, &(0x7f0000000080)={0x0, 0x3416, 0x80, 0x2, 0x20b, 0x0, r0}, &(0x7f0000000680)=0x0, &(0x7f0000000200)=0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) unlink(&(0x7f00000002c0)='./file1\x00') syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) r8 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x28101) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000200)={'\x00', 0x80, 0x4, 0xfffffff8, 0x27cca22e, 0x3f}) io_uring_enter(r4, 0x2def, 0x9566, 0x0, 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) file_getattr(r9, 0x0, &(0x7f0000000040), 0x64, 0x1000) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) syz_io_uring_setup(0x38a7, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000004c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m13.492251954s ago: executing program 0 (id=1724): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{}], 0x1) 1m57.354332146s ago: executing program 34 (id=1724): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000100)=[{}], 0x1) 1m42.567797558s ago: executing program 3 (id=2111): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x1, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xdbd}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x78, @any, 0x0, 0x1}, 0xe) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, &(0x7f0000000040)) 1m42.480587663s ago: executing program 3 (id=2113): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0xffffffffffffff80}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1m42.477291043s ago: executing program 3 (id=2115): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00', 0x10, 0x0, 0xe}, 0x2c) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0xd64}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000480)={@val, @void, @eth={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x2, 0x6, "5079e3", 0x20, 0x6, 0x0, @local, @mcast1, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x3, 0x2, 0x8, 0x0, 0x3, 0x6, 0x5, 0x3, 0xffff, 0x2, 0x2, 0x4e21, 0x4e24}, 0x3, 0x1}}}}}}}}}}, 0x5a) ptrace$ARCH_SET_GS(0x1e, r2, &(0x7f0000000200), 0x1001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e000001000000000000000807010000080700ffe500fcff0000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0xfa, &(0x7f0000000300)=""/250}, 0x94) r7 = syz_pidfd_open(r1, 0x0) setns(r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f00000001c0)) 1m42.290682984s ago: executing program 3 (id=2120): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000001500)="fe259d88d06f", 0x6, 0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) syz_open_procfs(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x3ff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x41, 0x0, 0xfffffffffffffe3a}, &(0x7f0000000500)=[{}, {}, {}, {}]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffbf) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4b5c952bb5a53200}, 0x0, 0x0, 0x0, 0x0, 0x800000000000002, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) open(0x0, 0x90000, 0x41) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x440202, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m42.048675658s ago: executing program 3 (id=2122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe"], 0x24}}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m41.944672024s ago: executing program 3 (id=2125): r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000007c0)=""/77, 0x4d, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x400) r2 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000000114a71b", @ANYRESHEX=r1], 0x5c}}, 0x2040040) 1m41.942901834s ago: executing program 35 (id=2125): r0 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r0, &(0x7f00000007c0)=""/77, 0x4d, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x400) r2 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000000114a71b", @ANYRESHEX=r1], 0x5c}}, 0x2040040) 1m32.000097885s ago: executing program 7 (id=2288): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x4000000, 0x1, 0x0, r0, &(0x7f0000000040)="5700ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m31.503690273s ago: executing program 7 (id=2292): syz_emit_ethernet(0x56, &(0x7f0000000140)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f700df", 0x1c, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xfffffffc) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xe5d8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d2, 0x33}, 0x54a25bf53473644c, @in6=@remote, 0x0, 0x5, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) gettimeofday(&(0x7f0000000040), &(0x7f00000000c0)) 1m31.480015645s ago: executing program 7 (id=2294): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote}, {{@in=@remote, 0x4d2, 0x33}, 0x54a25bf53473644c, @in6=@remote, 0x0, 0x5, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1m31.403626709s ago: executing program 7 (id=2298): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x100c404, &(0x7f0000000300)=ANY=[@ANYBLOB='flush,fmask=00000000000000000006675,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB='\x00\x00', @ANYRESHEX=0xee00, @ANYBLOB=',check=strict,nodots,dots,allow_utime=00000000000000000000002,nodots,check=normal,dots,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,dots,dots,subj_user=$],\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) io_setup(0x8f0, &(0x7f0000002400)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x4001, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x101080, 0x110) umount2(&(0x7f0000000000)='./file0\x00', 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5700ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m31.069241738s ago: executing program 7 (id=2305): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m30.973072544s ago: executing program 7 (id=2308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x10040) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000a6f13f313ab1326f000000b7020000000000008500000086000000180154467a62239599737927951b00002020702500400000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008c7000000b703400000000000850000009b00000095000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x1ff, 0x2) unshare(0x2040400) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x40084503, &(0x7f0000ffcffc)) r9 = socket(0x29, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r9) 1m30.930306796s ago: executing program 36 (id=2308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000001c0)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x10040) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) r3 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000a6f13f313ab1326f000000b7020000000000008500000086000000180154467a62239599737927951b00002020702500400000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008c7000000b703400000000000850000009b00000095000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0xfffffffffffffff8, 0x1ff, 0x2) unshare(0x2040400) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r8, 0x40084503, &(0x7f0000ffcffc)) r9 = socket(0x29, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r9) 1m24.912501338s ago: executing program 5 (id=2393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x2000, 0x0, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000180)={[{@noinit_itable}, {@init_itable}, {@grpquota}]}, 0x3, 0x481, &(0x7f00000004c0)="$eJzs3M9rHFUcAPDvTLKpMdXEWn+1/ohWsYgmTVu1iAcVBQ8VBD3ocUliqU2rNBFsCZh6qCcRwbt49F/wpBcRT4JXvUuhSC+2nlZmdia7m2w2TbKbrd3PB7b9vvmx73135u2+mbebAAbWZPZPErE3Iv6IiPF6sXWDyfp/168tz964tjybRK32zt9Jvt0/15Zny03L/caaC5HEwTb1Ll64eKa6sDB/vihPL539eHrxwsXnTp+tnpo/NX/u6IkTx4/NvPjC0ee7kudYpEX05vtfv3Xyy5b81+TRJZOdVj5Vq3W5uv66qyke7mM72Jqh4nhV8v4/HkNNR2883vh8tfBZnxoI9EytVquNbbx6pQbcxpJoLevyMCjKD/ry+rfddfArTXGl6yOQ/rr6av0CKMv7evGorxlevWNQWXN9202TEfHeyr/fZo/ozX0IAIAWP2bjn2ez0c7ybDb2aIw/0ri/abu7i7mhiYi4JyL2RcS9cS72R8R9Efm2D0TEg1usv2mSJB9mrh//pFe2ndxNyMZ/LxdzW63jv3L0FxNDeelCvRCV5IPTC/NHitfkcFT2ZOWZDnX89PrvX220rnn8lz2y+suxYNGOK8N7WveZqy5Vt59xq6uXIg4Mt8s/WZ0JSCLioYg40O4J0s3rOP3M9w9vtG7z/DvowkRT7buIp+vHfyXW5F9KOs9PTt8RC/NHpsuzYr1ff7v89kb17yj/LsiO/51tz//V/CeS5vnaxa3XcfnPLza8ppksLyi3cP6vVJeqI8m7eTxSLPu0urR0fiZiJDlZb3Tz8qONfctyuX2W/+FD7fv/vmi8EgcjIjuJH4mIRyPiseLYPR4RT0TEoQ75//Lakx+uXTZa5n8LHP+5LR3/RjASrUvSNttkwdCZn39oqXSiERb53+j8/nc8jw4XS27m/W99K9oHO339AAAA4P8gzb8DmKRTRbw30nRqqv4d/v2N6f5Pzs3VfyMwEZW0vNM13nQ/dKa4rK+XL2XPmu9Yrj8WaX7f+Juh0bw8NfvRwlxfMwfG8j6/vv9n/hrqd+uAnvODLRhc+j8MrLRj/7/dvvEPtFjX/zv2+T09bQuwu9p8/o/2ox3A7ms3/vf3fmAwrOn/pv1ggLj/D4NL/4fBpf/DQFocjc1/JN8xKJ9pm7tvFoxH7LSF/Qmicks0o2dBpDez8Us7qWJkB6dWGhG78mqUH55Nq5LedYfdC/rzfgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBt/wUAAP//6VjKww==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x22) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002100df4c2abd700000000000020010000000000100000000140011006e657464657673696d30000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x240000ef}, 0x0) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futex(&(0x7f0000000000), 0x2, 0x1, &(0x7f0000000280)={r4, r5+60000000}, &(0x7f00000002c0), 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, r9, 0x800, 0x70bd2b, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x2004c084) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x23040058}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x44, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "d59a078e08455dd789718df31e6990ae"}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8080) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x4, 0x0, 0x0, 0x0) 1m24.154694432s ago: executing program 5 (id=2397): r0 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000040000fedbdf2512000000080015000000000008001500c0000000080001007240bc20c503be90c6bbdeb7ef553ca990532b2d70741c0d04686c4f7444b53518394e13151786b3e85a9944d71933d78d9e88a6315839c23d495a87ed7537c8ce250febf0df4f110bfa81f3350a5e4a1196f08220b132e2744f46bcddf70d18db9d51fe234ae06a1abff40b5a26a1849fbd0f5d827172baf96a055a4e7dbf35730aa38cc9ede8c87acd13944d", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) 1m23.992190651s ago: executing program 5 (id=2400): r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)={0x5e}, 0x8) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r1, 0x84, 0x11, 0x0, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x3, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r4, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c045}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x8, 0x8, 0x90, 0x4, {{0x26, 0x4, 0x3, 0x4, 0x98, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x24}, {[@timestamp_addr={0x44, 0x1c, 0x7b, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x40}, 0xe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x8c00}]}, @noop, @noop, @cipso={0x86, 0x2d, 0x3, [{0x6, 0x8, "6928ba1b3c87"}, {0x5, 0xd, "d2770ac6e20287b2eeef65"}, {0x1, 0xb, "18cb0fb9741d2a522a"}, {0x2, 0x7, "fc28085dfb"}]}, @timestamp_prespec={0x44, 0x14, 0x7d, 0x3, 0x4, [{@broadcast, 0xfffffffa}, {@multicast1, 0xfff}]}, @timestamp_addr={0x44, 0x24, 0x70, 0x1, 0xa, [{@rand_addr=0x64010102, 0x80}, {@remote, 0x3}, {@empty, 0x1}, {@empty, 0xe38}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_getnetconf={0x0, 0x52, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x0, 0x6, 0x9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x0, 0x6, 0x183f}, @NETCONFA_FORWARDING={0x0, 0x2, 0x925}, @NETCONFA_IFINDEX={0x0, 0x1, r5}, @NETCONFA_FORWARDING={0x0, 0x2, 0x3}, @NETCONFA_RP_FILTER={0x0, 0x3, 0x8}, @NETCONFA_RP_FILTER={0x0, 0x3, 0x7ff}, @NETCONFA_FORWARDING={0x0, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m23.696307579s ago: executing program 5 (id=2408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_setup(0x81, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2242, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x2b, 0xec94a9d86b276804, @thr={&(0x7f00000004c0)="2818534756174147f5caea2d4178f1270ddaf7db5b782b46dbb08d23f568b1aa2fbef5402e79fed3b4694c5d0230083e64cd79f237148ce526b45bf88edb3a6bd3ad9b6c86c3066964ca3e03c64babc82fc44b8ec675d819d795d12bf49bc56b340596a5c82b67c231629c8868da998f4eed3c7d6cf0f50b659922763f1e23eb59153325012ac4aa33dedb82f9ad88509a3b92c9fda338e9281fcca49cfb77bcb9b5b127c5de49c6af0ca2810da86c2f6ef33ee332301253b4a90a12721d30f176da73b9f73b94669cdd1f1a06fc876cd0484a9d6854d96185e1fc24d2ed0da78087521ae76a344728", &(0x7f00000005c0)="682391089c06e5f8235b928367e5e8c1e8fac659cd3014f6dcf81f8b9f5cbd6d6ade374e5f075b5c1f260ad5f97239c6a6de212bf33812f5aaca65d5b922453a58d8da6ac5a1b768741418f73d5685a87305714009c8f6dd17c3a40939673a44ee062adb35b49682a6adf8c84440a15e2a85ab530ca7abfa620cbcc8f9d000326834d34f89cb69760f469e409df594b2c2fbafee58c4d6e127a60132"}}, &(0x7f0000000680)=0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000740)={{r6, r7+10000000}, {0x0, 0x989680}}, &(0x7f0000000780)) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3800000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0x5) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_open_dev$vcsu(&(0x7f00000007c0), 0xea1, 0x101500) 1m22.628090811s ago: executing program 5 (id=2421): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000100)={[{@inlinecrypt}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f0000000f80)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000340)='./file0/file0\x00') recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xb0}, 0x100) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@ipv6_getaddr={0x40, 0x16, 0x300, 0x70bd2b, 0x25dfdbfd, {0xa, 0x3f, 0x81, 0x0, r5}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0xce695332bfd921a}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_FLAGS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x40040) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2}, 0x50) (async) r8 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x9, &(0x7f0000000040)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) (async) sendmsg$key(r8, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4) (async) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r10, 0x80000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x1ff, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1m22.403446904s ago: executing program 5 (id=2426): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x80, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c00dff0b3fbb06a13c67c5c3aa635d2ff7b15ac9288a7891bfc993f94603e0099a568fd15e20d6e2dec18fa63d7271b0cd160ab72e44791657bec3f42fffe5f13b4bed18c007d39cec3eb14e9673f5092e0f4ee9156f01978ce165498b8"]) splice(r5, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010"], 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0), 0x106}}, 0x20) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x23010a4, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r8, 0x40085503, &(0x7f0000000200)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffebb, 0xfa00, {0x1, &(0x7f0000000300), 0x106, 0x9}}, 0x20) r9 = socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x1a) pipe2$9p(&(0x7f0000000240), 0x84000) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080049500000006000000000000ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) listen(r9, 0x5) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8064) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r9, 0x0, 0x0, 0x0) sendto$packet(r11, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) 1m6.298186593s ago: executing program 37 (id=2426): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x80, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c00dff0b3fbb06a13c67c5c3aa635d2ff7b15ac9288a7891bfc993f94603e0099a568fd15e20d6e2dec18fa63d7271b0cd160ab72e44791657bec3f42fffe5f13b4bed18c007d39cec3eb14e9673f5092e0f4ee9156f01978ce165498b8"]) splice(r5, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010"], 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0), 0x106}}, 0x20) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount$9p_fd(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x23010a4, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r8, 0x40085503, &(0x7f0000000200)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffebb, 0xfa00, {0x1, &(0x7f0000000300), 0x106, 0x9}}, 0x20) r9 = socket$vsock_stream(0x28, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x1a) pipe2$9p(&(0x7f0000000240), 0x84000) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080049500000006000000000000ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) listen(r9, 0x5) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x8064) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r9, 0x0, 0x0, 0x0) sendto$packet(r11, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) 34.563909154s ago: executing program 6 (id=3096): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, @perf_config_ext={0x9, 0xc64}, 0x10096, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$UHID_INPUT(r0, &(0x7f0000000080)={0xc, {"a2e3ada14fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0ffe8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38dfcd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac4850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778ef85ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba551eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7ccef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e4b15f929b47f741f0efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2bb9935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf9f394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa37ef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffffffffffff00", 0x1000}}, 0x1006) brk(0x7ff877c47fff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000001100)=""/4127, &(0x7f0000000000)=0x101f) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0xbc0023, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x8c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) sendfile(r5, r5, 0x0, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) r6 = inotify_init() inotify_add_watch(r6, &(0x7f00000010c0)='./file0\x00', 0x40000600) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0719, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x100, 0x4}, 0xa822, 0x4005, 0xb, 0x3, 0x6, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 34.346374107s ago: executing program 6 (id=3101): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000008000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) 34.305533509s ago: executing program 6 (id=3102): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r1, 0x0}]) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "dd761803baff7a9b", "13e38722848a6b25c6625081851494d3", "166ff367", "c60277a92384b727"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000210000400000084f1000100080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x99c0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) kexec_load(0x5, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "b61ab9b6df2656bb", "74030000003e5f679447d0bb7d1c00", "253bfce3", "5b409b3b505ccaaa"}, 0x28) syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) 33.472563138s ago: executing program 6 (id=3116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0xc01, 0x3, 0x250, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x1b8, 0x3c8, 0x3c8, 0x1b8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xffffff00, 0xfe, 'geneve0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x1, 0x6f}, 0x60, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x8513, 0x2, [0x6, 0x7, 0x1f, 0x24, 0x2d, 0x1b, 0x3, 0xb, 0x31, 0x10, 0x38, 0x3, 0x18, 0x3f, 0x23, 0x2], 0x3, 0x3, 0x7}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x0, "53f99237f41c832fc8969da1f2b7a86ddedeb7587f1590839a7a3acebc0f"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$eJzs3E1rY9UfB/BfOn36d/59UMfRGRAPiqCbMO3CjW6KdEAmoHSmixlByNhbDb0kpTcUIuLoyvcigrgWxJ1uuvEdCO66cTmieKRNMrXTIHQojcjns8lJzvnenHNvcuFc7rkHb+7lnKv6VrMbE7VaTOxEpIcpUkzE0Gfx2hs//PjC7bv3bq02GmvrKd1cvbP8ekpp4cXv3vvkq5e+716eiYVvZ2J/6f2DX1d+2b+6f+3gzzsftarUqlK7003NdL/T6Tbvl0XabFXb9ZTeLYtmVaRWuyp2+/WXIqIs0lbZ2dnppWZ7c35uZ7eoqtRs99J20UvdTuru9lLzw2arner1epqfC85u8lFp48uHOeeInKdiOnLO+X8xF5fj/zEfC7E4uRRPxdPxTFyJZ+NqPBfPxzc/f907TAAAAAAAAAAAAAAAAAAAAADn5x/X/8fp9f/XjlrF1Lj7DQAAAAAAAAAAAAAAAAAAAP8lt+/eu7XaaKytpzQbUX6xt7G30X/t169uRSvKKOJGLMYfcbT6P+fa4KkBOd98u7F2Ix1Zis/LB4P8g72NS8f54dMClob5fCK/3M+nk/mZmJuOiOH3r8RiXBmdXxmZn41XX/5b/+uxGD99EJ0oYzMOs8f5T5dTeuudxmP560ft+iZH7LlXLuLwAAAAwLmoD+bOaWr0/L3+qMHj9f386OsDedT1gRPz68Ps9VHTai5U1ft4u1muD96VZbHb/0ThyQu1we/6vLc8Pd5x/ZZz/jfs3rEUhv+U01UzEfHEW65FxFlTv+ecz2FcsyfOAKfbHNZNj+msxEU5Pujj7gkAAAAAAAAAAABncRF3UI57jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CoAAP//VSLIQQ==") creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0xfffd, 0x0) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000040)=@tipc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/243, 0xf3}, {&(0x7f0000000180)=""/140, 0x8c}], 0x2, &(0x7f0000000100)=""/8, 0x8}, 0x40000001) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c8e66646e6f37515ea1afbb5c29a203243b5e3d", @ANYRESHEX=r5, @ANYBLOB=',\x00']) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000600)={{0x0, 0x2, 0xe, 0x2, 0xd764}, 0x3e92, 0x1000, 'id0\x00', 'timer1\x00', 0x0, 0x3, 0x4, 0x1, 0x2}) fsmount(r5, 0x1, 0xe) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8, 0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) pwrite64(r3, &(0x7f0000000000)="02f6a3080000000000000048260000d909a8e72e95000000000000000000", 0x1e, 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r8, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x36af357c51f774b6) 33.310353377s ago: executing program 6 (id=3129): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20008010) 32.552253361s ago: executing program 6 (id=3128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x20}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56d65, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0x5}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x8, 0x8fa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x20008840) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x18, 0x800, 0x1) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0x100, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x9, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x2, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r11, &(0x7f0000000140)="ed", 0x1, 0x20000854, &(0x7f0000000100)={0x2, 0x4e20}, 0x3) recvfrom(r11, &(0x7f00000022c0)=""/4078, 0xfee, 0x10022, 0x0, 0xfffffffffffffeed) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 32.529675002s ago: executing program 38 (id=3128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'batadv0\x00', 0x20}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56d65, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0x5}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x8, 0x8fa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x20008840) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x18, 0x800, 0x1) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0x100, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x9, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x2, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040084}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3}, {}, {0x4, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r11, &(0x7f0000000140)="ed", 0x1, 0x20000854, &(0x7f0000000100)={0x2, 0x4e20}, 0x3) recvfrom(r11, &(0x7f00000022c0)=""/4078, 0xfee, 0x10022, 0x0, 0xfffffffffffffeed) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.699836844s ago: executing program 4 (id=3471): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) flock(r0, 0x4) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)='$', 0x1) 3.490060376s ago: executing program 4 (id=3475): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x4, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/4127, 0x5a0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) 3.314824236s ago: executing program 4 (id=3477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000004}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="000500004ec6"}) 3.25574577s ago: executing program 4 (id=3479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_setup(0x81, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2242, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x2b, 0xec94a9d86b276804, @thr={&(0x7f00000004c0)="2818534756174147f5caea2d4178f1270ddaf7db5b782b46dbb08d23f568b1aa2fbef5402e79fed3b4694c5d0230083e64cd79f237148ce526b45bf88edb3a6bd3ad9b6c86c3066964ca3e03c64babc82fc44b8ec675d819d795d12bf49bc56b340596a5c82b67c231629c8868da998f4eed3c7d6cf0f50b659922763f1e23eb59153325012ac4aa33dedb82f9ad88509a3b92c9fda338e9281fcca49cfb77bcb9b5b127c5de49c6af0ca2810da86c2f6ef33ee332301253b4a90a12721d30f176da73b9f73b94669cdd1f1a06fc876cd0484a9d6854d96185e1fc24d2ed0da78087521ae76a344728", &(0x7f00000005c0)="682391089c06e5f8235b928367e5e8c1e8fac659cd3014f6dcf81f8b9f5cbd6d6ade374e5f075b5c1f260ad5f97239c6a6de212bf33812f5aaca65d5b922453a58d8da6ac5a1b768741418f73d5685a87305714009c8f6dd17c3a40939673a44ee062adb35b49682a6adf8c84440a15e2a85ab530ca7abfa620cbcc8f9d000326834d34f89cb69760f469e409df594b2c2fbafee58c4d6e127a60132"}}, &(0x7f0000000680)=0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000740)={{r7, r8+10000000}, {0x0, 0x989680}}, &(0x7f0000000780)) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3800000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f00000001c0)=0x5) sendmsg$NFT_BATCH(r9, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_open_dev$vcsu(&(0x7f00000007c0), 0xea1, 0x101500) 2.971747976s ago: executing program 4 (id=3480): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1208002, &(0x7f0000000780), 0x1, 0x5de, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@resuid}]}, 0xee, 0x2aa, &(0x7f0000001580)="$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") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000000000c020000000b00000007d4825d5936ea3215000000080000000a000000a70c000005000000b30000000e000000070000000000000002000000090000007d05000005000000fe03000000005f00"], 0x0, 0x6c}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18036fd2e6f8951c3353a901000000000000000000000000bcac37e90d138d0ef45f94e8be143623073fd572c0e216a04549548ef8d5843ff0d1a87fdfe31c0cb5981973beda0207f1cfcb2e3737c7b67ccbe5ecb0c76d650ce9570d7f179726f6ad90d6bd6548cb4f03ecd29b4125b0655b332fb92e3fbf7572ae1e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r6, 0x77, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x8, 0x0, 0x0}}, 0x10) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x4000}]) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604000000040060100000000000000000000000000000000008000000000000000000002000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000700009078000f01057e8f2a1312942b8815d3e259669db6316fb9d1bb6b1312d415e784ab04f748a430e01804c52770000000"], 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8}) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000040)={0x6, 0x27, 0x3ff, 0xffff, 0x7}) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) fallocate(r0, 0x0, 0x1, 0x2) write$binfmt_aout(r8, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$BTRFS_IOC_SPACE_INFO(r8, 0xc0109414, &(0x7f0000001e40)={0x959, 0x7f, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r9, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) 2.970734166s ago: executing program 1 (id=3490): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6ef68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f0000000040)="068aad42b5378cd3a23f7fa27f307f6adbea8f82e6a6b558a1976ee2498591bdd4fd689d04c6440b5be46a42ee2e78cd5c3d644eb92c12ca92c7956faa087d98f18c4a1ee0e6f7fff034ad", 0x4b}], 0x2, 0x0, 0xfffffffffffffd97}, 0x20008080) r1 = socket$nl_generic(0x10, 0x3, 0x10) futex_waitv(&(0x7f0000001480)=[{0x2, &(0x7f0000001400)=0x2, 0x82}, {0x9, &(0x7f0000001440)=0x9, 0x82}], 0x2, 0x0, &(0x7f00000014c0)={0x77359400}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x34, r2, 0x801, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2.756091709s ago: executing program 8 (id=3482): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ec, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0xfffffffffffffff2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000c00)={0x2, {{0x2, 0x4e21, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x20000) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x891a, 0x0) pipe2$9p(&(0x7f0000000080), 0x80000) clock_gettime(0x0, &(0x7f00000001c0)) futimesat(r0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={{}, {0x77359400}}) 2.280725987s ago: executing program 2 (id=3487): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x8007, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$usbfs(0x0, 0x205, 0x8401) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESDEC=r1], &(0x7f00000002c0)='syzkaller\x00', 0xcb3}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000440), 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0x100, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x36e, &(0x7f0000000c00)="$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") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000001b00010326bd7000fcdbdf250a010101000000000000000000000000ac1414aa0000000000000000000000004e2400004f2000450200c02032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b2035d39b3b7409a890000b889e702fd6f0e00000065784391b078bb964755517a849e8f000000000000ff010000000000000200000000000000000000000000002880000000000000000400000000001f0006000000000000000500006d00000000000000000000000102940000000000000000000000000c001500bf000000090000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x20040000}, 0x48000) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) sendfile(r5, r5, 0x0, 0x800000a1e) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/26) 2.22441867s ago: executing program 8 (id=3488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'L%', 0x3a, ')}\xdc\x8e\x18?', 0x3a, './file0', 0x3a, [0x46, 0x4f]}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x200000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3410000052001b762dbd70000400000002"], 0x1034}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="a4fb2af3182c021f2063dfab5c787ecb652d115a9ef7684d30e5c679a81b514967e15e1b3d9d462896218ecccb006b43d94c83ba6151cdb6c745828f9fc4291f634af9f8ae25e2306177342b61a2ce01c416a99187852bbcdf137fff1797ca2ad468ec351eb36ae12577f3ee5dbb0d9b0e3db9d0798e22a475a8911538f200209947e8302f5abbb15a43fa9c6e62f537ab193970c23d8785447ac11a4f02ba50"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047452, 0xf0ff1f00000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0xfffffffd, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r7, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d", 0x5d) 2.152419604s ago: executing program 9 (id=3489): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@errors_remount}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4ec, &(0x7f0000000a00)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x28020480) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000020000000000000700000000000000000000000201000000020000000000001202000000020000000000000e0300000000000000002e5f00"], 0x0, 0x50}, 0x28) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r4, 0x8}, 0x8) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) close(0x3) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x78, &(0x7f0000000540)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x1, @empty}, @in={0x2, 0x8, @private=0xa010100}, @in6={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7fffffff}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @remote, 0x100000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f00000000c0)) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') lseek(r8, 0x10001, 0x0) 2.096129358s ago: executing program 2 (id=3491): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070100000700ffff9702000008000000b703000000000028850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2b}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') writev(r1, &(0x7f00000003c0), 0x100000000000022d) ioctl$RTC_UIE_ON(r0, 0x7003) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r2, &(0x7f0000001880)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/214, 0xd6}, {&(0x7f0000000480)=""/35, 0x23}], 0x4}, 0xfffffffc}, {{&(0x7f0000000400)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f0000001a40)=""/47, 0x2f}, {&(0x7f00000004c0)=""/180, 0xb4}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f00000005c0)=""/80, 0x50}], 0x4, &(0x7f0000000680)=""/150, 0x96}, 0x200}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/189, 0xbd}, {&(0x7f0000000880)=""/143, 0x8f}, {&(0x7f0000000940)=""/14, 0xe}], 0x3}, 0xb1}, {{&(0x7f00000009c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000a40)=""/44, 0x2c}, {&(0x7f0000000a80)=""/114, 0x72}, {&(0x7f0000000b00)=""/146, 0x92}, {&(0x7f0000000bc0)=""/33, 0x21}, {&(0x7f0000000c00)=""/95, 0x5f}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/195, 0xc3}, {&(0x7f0000000e80)=""/99, 0x63}], 0x8, &(0x7f0000000f80)=""/26, 0x1a}, 0x6}, {{&(0x7f0000000fc0)=@xdp, 0x80, &(0x7f0000001540)=[{&(0x7f0000001040)=""/104, 0x68}, {&(0x7f00000010c0)=""/95, 0x5f}, {&(0x7f0000001140)=""/14, 0xe}, {&(0x7f0000001180)=""/177, 0xb1}, {&(0x7f0000001240)=""/9, 0x9}, {&(0x7f0000001280)=""/27, 0x1b}, {&(0x7f00000012c0)=""/136, 0x88}, {&(0x7f0000001380)=""/74, 0x4a}, {&(0x7f0000001400)=""/195, 0xc3}, {&(0x7f0000001500)=""/43, 0x2b}], 0xa, &(0x7f0000001600)=""/14, 0xe}, 0x8}, {{&(0x7f0000001640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000016c0)=""/2, 0x2}, {&(0x7f0000001700)=""/179, 0xb3}], 0x2, &(0x7f0000001800)=""/66, 0x42}, 0x1ff}], 0x6, 0x40000020, &(0x7f0000001a00)) ioctl$RTC_AIE_ON(r0, 0x7001) 2.04597804s ago: executing program 1 (id=3492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000066c0)={{r0}, "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"}) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000d00), 0x1}, 0x0, 0x8, 0x40008, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) pipe(0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="8000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac14141f080002007f0000010c00028005000100000000000800074000000000080003400000100e14000f80080001"], 0x80}}, 0x4000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x1000000, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2]) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xe) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r3, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1000000000000094, 0x1000, 0x4005, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(0xffffffffffffffff, 0x0) 1.864451161s ago: executing program 9 (id=3493): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x2000000, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4000, @broadcast}}}, 0x118) (fail_nth: 1) 1.509220612s ago: executing program 1 (id=3494): syz_read_part_table(0x1053, &(0x7f0000001080)="$eJzsz8GJwlAYhdH7JpNkwixMB9qEpYg1uLMBEUtxmxLdRIwRbUBEOGf3Xf63eOGjupIsd3P8veyPqJv85DCvVZs+Xf7P++flqa+TcVHmXA3J7zbJ+jI9v69jknJspvuSkvbWqTbD2z8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/gGgAA//92kQmF") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x1, 0xffffffff, {{0x2d, 0x4, 0x1, 0x4, 0xb4, 0x67, 0x0, 0x3, 0x29, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x14, 0xc5, 0x3, 0x4, [{@remote, 0x61c01d1e}, {@rand_addr=0x64010101, 0x200}]}, @noop, @noop, @generic={0x83, 0x7, "29967866b2"}, @timestamp_prespec={0x44, 0x14, 0xdc, 0x3, 0xa, [{@private=0xa010100, 0x6074}, {@multicast1, 0x7}]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x7, 0x4, "dc56"}, {0x5, 0x4, "d875"}]}, @timestamp_prespec={0x44, 0x3c, 0x21, 0x3, 0x0, [{@loopback, 0x10}, {@empty, 0xffff}, {@rand_addr=0x64010100, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x6}, {@local, 0x2}, {@remote, 0x5}]}, @timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x9, [{@local, 0x6}, {@loopback, 0x3ff}, {@rand_addr=0x64010101, 0x9000}, {@private=0xa010101, 0x2}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00', 0x0}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r8, @ANYBLOB="8000260b0a0002000180c200000c00000c000e80050001"], 0x34}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040010) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@remote, 0x0}, &(0x7f0000000300)=0x14) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r11, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r11, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r14, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r15 = socket(0x2a, 0x2, 0x0) getsockname$packet(r15, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x800, 0x4, 0x5, 0x78d9, 0x3ff, 0x1, 0x4, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x14c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r16, {0xe, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x120, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x0, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x4, 0xffff}, {0x5, 0x81, 0x3, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x8, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x10003, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x14c}}, 0x4080) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @dev, @empty}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xd6, 0xfffffffc, 0x4c, @private2, @empty, 0x20, 0x40, 0x4, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x4, 0x0, 0xd6, 0xfffffffc, 0x4c, @private2, @empty, 0x20, 0x40, 0x4, 0x7}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="000325bd7000ffdbdf25090000002c00018008000300020000000800030000000000080003000200000008000300010000000800030003000000580001800800030003000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468305f746f5f6873720000000014000200626174616476300000000000000000001400020064766d727030000000000000000000005800018008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYBLOB="14000200626174616476300000000000000000001400020064756d6d79300000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="2800018008000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020070696d367265673000000000000000003800018008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="3400018008000100", @ANYRES32=r16, @ANYBLOB="14000200687372300000000000000000000000001400020073797a6b616c6c6572300000000000001400018008000100", @ANYRES32=r17, @ANYBLOB="08000300020000005400018008000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="140002006261746164765f736c6100080003000200000014000200626f6e64300000000000000000000000f8e56e32a0b30b01f22f422c3fd96754135606bbd1d1a43b6b475f853587ca0a7f116284be2c124aea9d4dee520fafe231"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r1, @ANYBLOB="000325bd7000ffdbdf25090000002c00018008000300020000000800030000000000080003000200000008000300010000000800030003000000580001800800030003000000080003000300000008000100", @ANYRES32=r2, @ANYBLOB="1400020076657468305f746f5f6873720000000014000200626174616476300000000000000000001400020064766d727030000000000000000000005800018008000100", @ANYRES32=r3, @ANYBLOB="1400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r5, @ANYBLOB="14000200626174616476300000000000000000001400020064756d6d79300000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="2800018008000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020070696d367265673000000000000000003800018008000300020000001400020070696d3672656731000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="3400018008000100", @ANYRES32=r16, @ANYBLOB="14000200687372300000000000000000000000001400020073797a6b616c6c6572300000000000001400018008000100", @ANYRES32=r17, @ANYBLOB="08000300020000005400018008000100", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="140002006261746164765f736c6100080003000200000014000200626f6e64300000000000000000000000f8e56e32a0b30b01f22f422c3fd96754135606bbd1d1a43b6b475f853587ca0a7f116284be2c124aea9d4dee520fafe231"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) 1.425621417s ago: executing program 9 (id=3495): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) unshare(0x2a060400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000002800048024000180090001007866726d0000000014000280050003000000010000000000000000000500000a00"/124], 0x7c}}, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) listen(r0, 0x22e1) socket$inet6(0xa, 0x1000080002, 0x100000000000088) syz_read_part_table(0x5fb, &(0x7f0000000600)="$eJzs2zFoVHccB/DfnTkOlOLi5KQOUloXxdGjVbk7FQvhNEuRYkAR8aYThJMeRHTQoyjeIOmWJQ3ckqZTLjdkSkigU4cSMqQEMmRpaZZAlr5yl1dokhZSeqUInw8HP/7/93vv+37Hf33Bey0bvyRJkomI5IeII//w7pF2sXT91PDlyu2ITNyJiC++/vCb3pVM2pHkd+uZdL2WricnjnZfbV3LtVdvbZ+9u9DM/vHIsf4vjk11RgYwHv+x6cLi8ecvauXX9cLDlXJj4+WP33/27a/FSudmszVzI3f1Xtq3lNahtD6OejyNRzEaQ/Es7kftrx//6Vf9M3r4/PH2+vncyXJ79sGlnVL3zfyFftfBc539+N9MvTe/f2Ajopf/5PTbz1uNK+e+O/HuYn1uubKZRlfz++8cHcwLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwULlYPP78Ra38ul54uFJubLzM9XaLlc7NZmvmRu7qvbRvKa1DaX0c9Xgaj2I0qlGN+1Hb3T5yMOGDPy/y+69OF/bmj7fXz/92styefXBpp9R9M38h7Rse3Mh/l5/08p+cfvtJq3HlXP7Eu4v1ueXKZjpR9cCbR//fAwAAAAAAAAAAAAAAAAAAgEEolq6fGr5cuR2RiTsR8dHPX2Z7+0l+92v+TNp3JiKeRcRa+h385MTR7quta7n26q3ts3cXmj/lI0mSJMYiE2MRcWyqM/I/jsUh/R4AAP//omWTPA==") 1.346093391s ago: executing program 8 (id=3496): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) unshare(0x2a060400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a54000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000002800048024000180090001007866726d0000000014000280050003000000010000000000000000000500000a00"/124], 0x7c}}, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) listen(r0, 0x22e1) socket$inet6(0xa, 0x1000080002, 0x100000000000088) syz_read_part_table(0x5fb, &(0x7f0000000600)="$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") 1.126278694s ago: executing program 1 (id=3497): semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000140)=""/44) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfff5, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.125352414s ago: executing program 2 (id=3498): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000b80)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000300)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)={0x0, 0x3}, 0x8) 1.082192357s ago: executing program 8 (id=3499): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x7de70cffef05e421, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x5, 0x2}, 0x0, 0x10000, 0x1000000, 0x9, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be0038668d0fee0746d90086dd88a888be000000021609660501000000000088a8080022eb00020000000000000200049403080065580000000200000000000000"], 0x7a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x406000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r3, 0x2, &(0x7f0000000280)=0x8) r4 = socket(0x1, 0x803, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x9, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002"], 0x110) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f00000000c0)="b8a41064e8978f3170f0bd902918822f1d41d6c584fb70c0e441d53ddcbbe8978bbab55392b79f06b19bdf114dd70e1a001f9baa64629a964ec892df72e9032b7d4bfdab4cc5774d781540f44dc08559d9ed4ff96d", &(0x7f00000002c0)=""/235, 0x2499138fd760cd49}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000050000000000000000000000ac0000000005000000000a0020000000000000000000000000000000000000009176944b4fce37c3fbb29d514506614dc88864dc65431484134ca34785a9b398efd6a2942728aecfeb7dcdc32cc2695d9dc098c8902bd1cc2f2a1277cbd19af802b30d7b9a447ffe30101b584d3c6bb950aaa6f99cb26405a32fc9eb8ed31a27ed165c28449cf531846c880cbb10ae790b30a64b4cc792b5b7a0531be2e216b339184efe77a73129de9b75c180d991c3c74e41251be78a58c1810bb94061a9cb7681b11fe6616ec2ab8dc40029d718d5b71013d23235d834de29d4cc64ceb350d2d42fe2976a222fcdc9c5867b86b1720402e0084999c6033d3e025f1cbe47dc3b6b59b9703a6a3cb7a434", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300004900"/180], 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = io_uring_setup(0x539a, &(0x7f00000001c0)={0x0, 0x37db, 0x1000, 0x2, 0x33b}) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000400)='multiq\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) 997.428961ms ago: executing program 2 (id=3500): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) 995.782021ms ago: executing program 9 (id=3501): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="a300"/20, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="0200691f4bd2837c4021c881bef104f72d5a00"/28], 0x50) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000580)={0x0, 0x3, @status={[0x4, 0xfff, 0x4, 0x9, 0x8000, 0x7]}, [0x0, 0x2, 0x0, 0x4, 0x4000000000000000, 0xffffffffffffffff, 0xde, 0xfa0, 0x0, 0x1c25, 0x9, 0x1, 0xe3cf, 0x6, 0x200, 0x9c, 0x3, 0x1, 0xa2, 0x10000, 0x8, 0x4, 0x200000080000001, 0x8, 0x9, 0x4, 0x7, 0x5, 0x6c2f, 0x3, 0x7, 0x0, 0x7, 0x3, 0x8, 0x3, 0x400, 0xb, 0x10001, 0x6, 0xd, 0xfa6, 0xb, 0x100, 0x7fffffffffffffff, 0x80000000, 0x3, 0x96df, 0x16f8, 0xe, 0x5, 0x6, 0x6, 0xffffffffffff2d49, 0x8, 0x80000000, 0x9, 0x4, 0x6, 0x6, 0x6, 0x47, 0x8000000000000001, 0xf]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7610, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x9c, 0x2d, 0x200, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4}, @nested={0x7d, 0x1, 0x0, 0x1, [@generic="d382e603408947c4293e8ac6701ae12bbd7f5e260a11266d704821ac857929470971a59fb184fc4f8831b5a3846addd878a5d0e566e4d3ba8822deb3937896bd7344f6768392210e08f4dcd0b187fbd2038493254300a0777db9be4548b74e11ff33a73aadf2c3b74396277ee1803541bbd57ed20a", @typed={0x4, 0x75}]}]}, 0x9c}], 0x1}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r1, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000480)={0x1, 0x4, 0x81, 0xf, r6}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x58}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) clock_settime(0x0, &(0x7f0000000040)) write$UHID_INPUT(r1, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) munlock(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r7, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0xee819279392cdd21}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r8, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x15}}}, 0x118) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 980.761053ms ago: executing program 2 (id=3502): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r1, 0x0}]) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffe, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000300)=@ccm_128={{0x303}, "dd761803baff7a9b", "13e38722848a6b25c6625081851494d3", "166ff367", "c60277a92384b727"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010300000000000000000210000400000084f1000100080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x99c0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x100003fff8001}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) kexec_load(0x5, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000}], 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "b61ab9b6df2656bb", "74030000003e5f679447d0bb7d1c00", "253bfce3", "5b409b3b505ccaaa"}, 0x28) syz_genetlink_get_family_id$team(&(0x7f0000000100), r3) 636.601452ms ago: executing program 9 (id=3503): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000080)={[{@discard}, {@nouid32}]}, 0x3, 0x44d, &(0x7f0000000c80)="$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") 584.105276ms ago: executing program 1 (id=3504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000066c0)={{r0}, "cbeb3746181bae462c7d983d020276f875690e6d5f6bd241b355c65e6f9a82628fe323a2420ec5f97597ba68cdddca3e03aa9938d465063da9884966331b2bba53fdc48553972fcaa0757dc899bba2324a3b4b449f8d9f951f7a99092939582a27ab39682d4788540d69ca4a1defbc533bb9831104b599cf3b7ba39a9c66d24e11a443823042e3ef04cccc528edf5bb5995be61cbc7a7a93699dce7fcb599ea722a5f13261189f8c07aab22ba23e1d8fd2ed5f1bb6a7ec2928cda44373d9163fcae3f862d06baa24c6153ede581f767f237c5cde95771f5b5bd1d1fb5a5ca8a84088e7898c8ca4c0af272a80458f0a3a5eadad4d48b0f0bfabe124e5a6fa4752def8f68537da750b5a14df5b69dc289acb5616347310b0de8b584dd64d44a6a4f2e1d335d54479ebdeee1e44c8ce02f85a300acde7a48936e1089449c3939263a3ef2fb6cc6fd7369f91284598f867e9e3b4778fefee59f1ad3d760d19d7f491dc0f6d8f604c132b0e2137b741ba07e56380583c4767a5c1087f43d445a585212271bf64ad38cb9e0c6841a89b31cb8ff59ed2f5b3849044ce0a875bde846694f3c450fd07bc2754f3b0d53cf5a1d98a1e54734bda74d349a13c34660339768069ffd92bb34e966c42a9e43c88f0a347b5bd88e0e8b2e20163c2b870d2bca0cab80404de817df1446b465bfd67a58c0966f7162b634396b15e541ce2cd38256c2bc37fac6e4240de484f208144c096edaf6b997b7e43846acb179a88fe59cae29737cfacc84b02a7127764b013edc24351125a0239a8f073b45febfddf9345f47ee315cd05f3ca55daa481236f855e9e538caf89f39e83e6c446a6f6baa56433d51afb8fab9e35856f467b791090cf6afbeb7cccfa328dc681d47fa751c31c97c987239a4a0c611a59c3e710b20fe389cbbbaa93c9b475752755ce75c3c7ec1e8dba24258de24f30b94cd2211680b6b0d03f08ef8aa75247ce8cb9fe764dcc013657bda09263c9e0b36c875256bf8db139ec11dee04d1dd2e7e54380a35b3fb5ecf93fb822cca2e7ce301447502e7139259f20c059fc105ae23ac62756064daeae572a784303d09e5c117fbe20ebc8f75a8bdf36545b6c69aced92935a5a0061d1a7cd69e728674b7f0af6f3a874d9ee5ef4166424e7a75e79e373bf0cbb9602cc389be68fdd699f9bdee0308ceacea4a12b315e7ef5b27536ff8a271db6d83c964912e66369a9ddfba3a210d2e33f3089eb4f6ea05c7cc0debc1cc9beb634c14ccf215211741e6cb59f19487654bb77c7d4540b3ed4424222ed0caba445738679fb727602a0ea15064f9b666d2bb1cfd3054a1413e6d4fc6d305aecf80b1193bf3ece693b9ed360680644fbb87e3330818e9304083825d160f741ccf7dce1af23f850be16aceb293a298ddfb16eeb3554beeff23db21071f2568bf2cbb6c365fd759d287d8150030ab777bbc830916b0322a305ec164d72db907783f8966b31f734b69384ebc7ae1290291b84fea1b51e5a87b51cca2acb0d387bc8af483e91f262d297e2152c12a5d4e0db6498c5fcf9e263ff2a268ec7f4b7c0ad69b257f96721d8a0a0bed3fbc45780cee7b4a487a82fc59029e7d375f5952ca0699dc5d667599718baa3048e37436c30b780fa85d3a6d25afa01e7d2cca09cf9dbbb483a5bdca159fe08291de6a3117b3102e3c612288465148687af5cac45550cd25e86e9cf94f5b2486c4342e9a96a7cc8750d7f3c0bc89cc9655535e8ad96bfd516fdb7a528de1069527e944807f3dcda65ac6acd8b19728c21127f099e51a69e8d79ef78e37cd58ce2cabdc477a172826793a4066427d0cfc81f90c4b5ee099531c7c3c0c23568b6f701de62e3cd428548a41e081296e0a2bdaf945611cd76c3b38daf5d13aa81beb1f8fb227fcbf62182643112232c94f2700e4d6bfc37e1b1477354245aa702fbc4ead87476e09932a9b18447572dfb0c287fe857eadb28e815752f7599adb99133537feb89d415428b24ca7dbebb0061017d72ab0279eb4d82c6be6f8d613863a182b0acd129e4a960ea668c3b1f4fb17e601d70cb2e32093f7910240fe7cfbd638253febc18394b02e771393d35512e084a005fb26721b08ac1dca08e1c3cba361af44f3023ea7b4cddd10cb067b253ab756ca0f3ac384f61dea7dc438eba5ca127621a700c7d576d607e398cf762a98850fa17b170ac841526d1726fa0c6a4303025d4c06e6c3cc5b35557c4cb6e8d8757f81f2fdaa924346b9d6ec62942ccccf7d92236c33b62f8074c9e50505c922fa44e86154a82ba8680d9ce3ba1ade4f67bc5c526c567721d4a95f72947be4f6d9f7b50f76e760464a1e53adadb18c3bb3a1012726fdaca9d33d0b72ab577e45c408bfab4381c53d47d879d15a0d12c73a75153866712b1497ca9226eb887c62b953a705a3bdb3ba3c70b3f2cdbde23ac43b79d3eb3e2d691e7a9d6b539cfa23259187f9e25b5ff2169410951f8d855bd408e6d8f6ae71b365e67aefb891d238d02bb91490cdf32b5a7ba7366ae6fdc7192197d1c25ae1b1674072b425714420bfdd3a7707cdedbdd562f132e3e3fcfedcb39a4812d3822929463dc3a0b6a2bf96619d26a7f4482397d587e36d534c00c1c9f00130bb50fd09f38298839b563df4c007874dc61c8dce7802f1b25dc3e5ced68c62888cce94d2a863ef50b707503863f7bb32f5a9939e10b582d91fdb5514b025e1d3af4bea882a9f8d1ba7ed573509121dfe9328e584d91e361ac7329dc58630ac6ab5a9fb80590aac9aa92413ac1124d8a67195a249ea004c970b34bb1030ab051f36d85ed270f626c28e806a3949aa279679bf84cc05c42836eca02f5b245a253b3684023ece7ffc55159dad230ec90e67bb76ae2f4cdf40f33ecbfa63eaf8cbb2db63f1d1c34f593b65fee3c8e02e4ac4e2eed9526991613111578c55efb90bfaac7e1c34f906d48806d4819ee2aec0ba2dec2e36e35f1f976c6a046edb54af655fa90600a8909e5e928e03678bd93ac4b5a16ee787c7cb74396568a41677184f133ce295a200c277dcf658e57041936d50ce2101f9cf6dfbcb0a1a6295b00ea1f6c1f4c8f38d0239b1f850d496b3139c75e282a45f16f2113874acd4c73c7e41b4b2a96a4ebe133bd3fa3cd2bde78544965e01f91d3cb4b768e89bc00863912f2da36a5ba95ca4c88c020eb2c53021fc7f8d226d262e93e85eba341b3a70c115331392c1c7787f7fa52274380adf9db70073cbeab89fd9f967ecd81248472f7f92c01e78b173bad96fa1755e0af0ac796695907285c60d171d90c31f32c41988f24c0d53efd4e4fe3b448d1dede9ab574a9e94a0459e16520d52b89a85bb956f3be14204b1c307a179a53a3017fff57d588b0381a7ef0b855c5997250f6d9b85b67708bf5a4bfd3cb85a1545ee8d7ed63cc1125596e4f4b674cbc31c7fb86476ff89e7773fcd7014ae7a907c0fcc67f2ea2a59ca50d6ea5585c2ba1ad4a7e3ceed62fc7626e7aa9d6776696cec4e7a445e3271216d4060710fb9b9036f207002132b30ba6d0c9d7bcec9210fc7b39686d8b1418b012c25b493d116cee8b713c1386a054cfca33a4bc5b5ff4d3d486f544e18986bd00d8346b232f7fa78b74a43510bf424e5553a732d8b88e94720eda1053509f878fe0ab60e2ab1b5f9100fe351b5681168bc988b9787da1cb96a5a933877181318080bd1ae5aafa1680314d1eb5cdd632031e33befaa85c753841340e5ea009ed402c6467d64092528d3a2d0d15a5cd6c1011a6174302277534a227e749fd97240cb7d1e9444a0050eea882b5448f61b5c6b6cfb8af66aa5bb407292532db0dac65f54ec8ea2e97bd0af21b7abf02b026aef257ce3992a35f40f6ca9705c4a743de26bd3f2d02a8fd3f49d9d7130d823323fb84d6768af2955028dd0d0443d3a79cb086875e92bb6cfc6559d48cd8a35080365d7bcf4b5bd81fc5389b3cb0e6463feb472b0728ab679ab8a2416e772e729f3396730ef15b5e1fe0bd0a152f51161aa1ca36bc94b915cd8501b447f80b3452db686c81ced86e61b1c8f6074129e300ca4e735dba3048d7a7f9da6cb48df8b9787b1042292ba8105ba2555a7379602fa3b5b28b7bcde0e8303b600f452b2029edc35e7f2b20415d55d196661cce29cce183802474f653b7cd314ca71e3b94725c9a85311529deeaa41d2c9e8f94ba972cd7a5e4390e06150afbe73a53272adde00de81c8e2f16bd61c8a42af71d2e1666471d67abe29a38f852320790ba4c02b2f243e1816190d52cada6e93866f0826e62d193a752ee1b9798d5ac7bb7cf7e9efa6d306653b8327b94fc7a297db1bf268fb9a671f8a6575cb40ecb041355c1e8c2bf929df7704e3efd8569818e0279a644920f9f274d661f01f0bd20d522e0f15eb6c8cc90344f36f28cc95fa81df7ad25a67eeebd64e09ec54f975c11f417a487a9d2528d04cfcdebda64f2718dd1ede39f40c1d1b61cb590b2149dc1cfb3d7d68d6a1a0f3fefc2418eb1afcdbb01d44ea6099a8ab2415b8aecede7335af2559bfcfdc53f8cf96000b9bd2850bc14307780302b2ca91037c2d2fa74c298d9cbebd14e40af47474a195988444067564247e328aee0bd51ea6edd49f7642d40bd7e8b1f8f21173c5fe09b2f9fb5c603d39b368ee2d14f3957e2f1364aee2ca7522712383e0306f545bdcab1b9281dc5cc66e59cc8235daa4ef553fe2b4f2ca417f4c84c4ad0399d21f3b9d37347f17c7f28efc13a9b36b928161192ecb4b1fdfd7cba1c02357776432d063391c872d26679bc4984388d9aa90a7f646db029545429f5f2dac6dd29183901ff7ea350e05fd08ed27eb928bd710e5a52926511c16860f2909c20f096d9bfa6e266b3db707d0d92212430ddc4f0778987bce41f976a41cf74e109ec630a51922e17cb332441c9f9b62d0d1734f23b6d6d4b2109349041b9aa5bd43c04b38c1d4673d5f23c8e7d774d1b21977783ab299eb3646a551aa0c60f49ef3e132281d5fa1721310fc33da2ff15e3d8e46eab87b96a3328239e59cc4cb7c1bbf456848081ca0585597ef80c4c46441811f02cf81dd8e406fdd3b58373cbdee1bf73f2204a1c5a6693ec345c742ee40831ef53fb4a8dbf4aa46ec2097122cb706366ce0049f8dd371f60cf0f626ff0500e0e19d982eb604711cdd3aa229c3c6b092fa585a8e21e6f4fe30ecf66ea801e39dd27050513d36439a21e632cc9ef0867bbf778dce095deb706fa6f92b7e9861098c97dc7b88993cdcf34d65fb2587f13b67c40e830dadbcdbd10bfbe3145e98a2859e9ee3f0be3d8abeb9c4b4432dde520cda05fdfd9f3f71730817a7b12f0f19466a1ba084288c9121be8925d5a1059b8115cd86b6f663ea3c0aa619afb31999d0f6fbd2e711486abbf3a673fa2dd39e52869b00a2748589a1f89f87860d1f3b6297ef54362de504550464cfb8d8c622a4ab43c5e403a4845b6de31548930cb2e513c18af4a9a23117754eb95462168128a839aff54c31e3fa451eb437204c84558044b3725848a4772074e6575e695ccd9ca93ab08261478b2707246fae7baff82a4b1f80fc28743ac5a1936231d3f2d97fb784d0550e36192e09ec700a8307dcc8a64919293dc34c11772c72e60ca3d9ffd0e902a5bf9478b7d5a973ff3281e35e1ad99592f30f6b20299850f6f02c42959679190eb43a93abe1a056cf04ef37b2033c5f09a5b580ac01d9b6ca9cab13b48086de4b306d6a53d0cc23a1e00d0419819bd8a07d08073358b6a865f"}) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000d00), 0x1}, 0x0, 0x8, 0x40008, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) pipe(0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f}, 0x3c) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="8000000000010104110000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac14141f080002007f0000010c00028005000100000000000800074000000000080003400000100e14000f80080001"], 0x80}}, 0x4000) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x1000000, &(0x7f0000000cc0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1]) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xe) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r2, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1000000000000094, 0x1000, 0x4005, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(0xffffffffffffffff, 0x0) 533.818548ms ago: executing program 8 (id=3505): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@noblock_validity}, {@nouid32}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@acl}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x54080, 0x112) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x1, 0x100000001, 0x4b56}) 475.675562ms ago: executing program 4 (id=3506): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'L%', 0x3a, ')}\xdc\x8e\x18?', 0x3a, './file0', 0x3a, [0x46, 0x4f]}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x200000}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3410000052001b762dbd70000400000002"], 0x1034}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="a4fb2af3182c021f2063dfab5c787ecb652d115a9ef7684d30e5c679a81b514967e15e1b3d9d462896218ecccb006b43d94c83ba6151cdb6c745828f9fc4291f634af9f8ae25e2306177342b61a2ce01c416a99187852bbcdf137fff1797ca2ad468ec351eb36ae12577f3ee5dbb0d9b0e3db9d0798e22a475a8911538f200209947e8302f5abbb15a43fa9c6e62f537ab193970c23d8785447ac11a4f02ba50"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0xfffffffd, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) write(r7, &(0x7f0000000040)="9035d1a1facb75526d6b945626cb323969646b3b7fb576bd24722caa3253a2de0742df98bc2bd761a5c0c1075dbf00c808ccfc2dd61ca065bc47048658ffb80f03dc7758cacafcc22ddfd7963bd0c5e63085ae4c18071e298262090a0d", 0x5d) 312.230282ms ago: executing program 8 (id=3507): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000, 0x132}, &(0x7f0000000100)=0x0, &(0x7f0000002300)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x3}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x9, 0x8, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r6, &(0x7f0000001940)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x352eaefe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}, 0x1c, 0x0}}], 0x1, 0x20000010) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ec0)={'tunl0\x00', &(0x7f0000000e00)={'ip_vti0\x00', 0x0, 0x7, 0x40, 0x0, 0xefbe, {{0x25, 0x4, 0x2, 0xb, 0x94, 0x66, 0x0, 0xf, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0x6b, 0x0, 0x0, [0x8001, 0x6, 0x5, 0x1, 0x10000000]}, @timestamp={0x44, 0x1c, 0x4e, 0x0, 0x6, [0x1, 0xd965, 0x6, 0x7, 0x80000001, 0x10]}, @timestamp={0x44, 0x18, 0x6a, 0x0, 0x3, [0x7f, 0x3, 0xffffffff, 0x8, 0x8]}, @noop, @cipso={0x86, 0x32, 0x1, [{0x6, 0x8, "d67bff67ed61"}, {0x6, 0xb, "53932f4fbd8c289f0b"}, {0x1, 0x4, "56eb"}, {0x0, 0x12, "2b03e5d18371aac7646b7b7b015873e3"}, {0x6, 0x3, ':'}]}]}}}}}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008"], 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890c, &(0x7f0000000000)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r10, 0x25, 0x2, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002dc0)={'ip_vti0\x00', &(0x7f0000002cc0)={'gretap0\x00', 0x0, 0x8, 0x7800, 0x6, 0x9, {{0x2b, 0x4, 0x2, 0x6, 0xac, 0x65, 0x0, 0xf7, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp_prespec={0x44, 0x24, 0x66, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x6c76}, {@multicast2, 0xfffffff5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x8000}]}, @timestamp_prespec={0x44, 0x3c, 0xdd, 0x3, 0xf, [{@multicast1, 0x5}, {@multicast2, 0x8}, {@empty, 0xa941}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, {@remote, 0x9}, {@broadcast, 0x1ead64df}, {@loopback, 0x3c}]}, @timestamp_addr={0x44, 0x1c, 0x57, 0x1, 0xa, [{@local, 0x290a}, {@multicast1, 0x4}, {@multicast1, 0xfffffeec}]}, @noop, @ssrr={0x89, 0x1b, 0xb0, [@local, @broadcast, @empty, @local, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000003340)={'syztnl2\x00', &(0x7f00000032c0)={'ip6_vti0\x00', 0x0, 0x4, 0xe9, 0x4, 0x45, 0x4, @loopback, @local, 0xf02f, 0x8, 0x4, 0x2}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000003880), &(0x7f00000038c0)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24) 264.537194ms ago: executing program 9 (id=3508): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0xfbff) 38.074388ms ago: executing program 1 (id=3509): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000814, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000080)) r0 = msgget$private(0x0, 0x0) (fail_nth: 5) msgsnd(r0, &(0x7f0000000440)=ANY=[], 0x401, 0x0) 0s ago: executing program 2 (id=3510): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000b80)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) flistxattr(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000300)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000640)={0x0, 0x3}, 0x8) kernel console output (not intermixed with test programs): ntered promiscuous mode [ 225.902077][T13157] syzkaller0: entered allmulticast mode [ 225.926384][T13159] loop6: detected capacity change from 0 to 764 [ 226.036327][T13161] loop2: detected capacity change from 0 to 8192 [ 226.060742][T13161] syz.2.2773: attempt to access beyond end of device [ 226.060742][T13161] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 226.101802][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.122759][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.261083][ T29] audit: type=1326 audit(1803724260.758:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.295292][ T29] audit: type=1326 audit(1803724260.758:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.319496][ T29] audit: type=1326 audit(1803724260.767:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.343702][ T29] audit: type=1326 audit(1803724260.776:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.367399][ T29] audit: type=1326 audit(1803724260.776:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.390991][ T29] audit: type=1326 audit(1803724260.776:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.415155][ T29] audit: type=1326 audit(1803724260.776:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.439495][ T29] audit: type=1326 audit(1803724260.776:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13167 comm="syz.6.2776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 226.463066][T13170] loop4: detected capacity change from 0 to 512 [ 226.558352][T13174] loop4: detected capacity change from 0 to 764 [ 226.605127][T13174] FAULT_INJECTION: forcing a failure. [ 226.605127][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 226.618177][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.4.2780 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.618277][T13174] Tainted: [W]=WARN [ 226.618286][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.618303][T13174] Call Trace: [ 226.618312][T13174] [ 226.618323][T13174] __dump_stack+0x1d/0x30 [ 226.618390][T13174] dump_stack_lvl+0x95/0xd0 [ 226.618418][T13174] dump_stack+0x15/0x1b [ 226.618444][T13174] should_fail_ex+0x263/0x280 [ 226.618542][T13174] should_failslab+0x8c/0xb0 [ 226.618581][T13174] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 226.618619][T13174] ? __d_alloc+0x37/0x340 [ 226.618682][T13174] __d_alloc+0x37/0x340 [ 226.618813][T13174] d_alloc_parallel+0x54/0xce0 [ 226.618853][T13174] ? lockref_get_not_dead+0x120/0x1c0 [ 226.618906][T13174] ? __rcu_read_unlock+0x4e/0x70 [ 226.618989][T13174] ? try_to_unlazy+0x3c0/0x5b0 [ 226.619024][T13174] __lookup_slow+0x96/0x260 [ 226.619059][T13174] lookup_slow+0x3c/0x60 [ 226.619099][T13174] path_lookupat+0x2f7/0x500 [ 226.619133][T13174] filename_lookup+0x190/0x390 [ 226.619238][T13174] user_path_at+0x3e/0x130 [ 226.619277][T13174] user_statfs+0x4d/0x110 [ 226.619388][T13174] __x64_sys_statfs+0x65/0xf0 [ 226.619424][T13174] ? fput+0x8f/0xc0 [ 226.619451][T13174] ? ksys_write+0x194/0x1a0 [ 226.619492][T13174] x64_sys_call+0x283c/0x3000 [ 226.619521][T13174] do_syscall_64+0xc0/0x2a0 [ 226.619557][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.619640][T13174] RIP: 0033:0x7f4f6fecaeb9 [ 226.619660][T13174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.619740][T13174] RSP: 002b:00007f4f6e927028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 226.619764][T13174] RAX: ffffffffffffffda RBX: 00007f4f70145fa0 RCX: 00007f4f6fecaeb9 [ 226.619778][T13174] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 226.619792][T13174] RBP: 00007f4f6e927090 R08: 0000000000000000 R09: 0000000000000000 [ 226.619840][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.619852][T13174] R13: 00007f4f70146038 R14: 00007f4f70145fa0 R15: 00007ffd6b7ddc58 [ 226.619874][T13174] [ 226.937237][T13178] loop9: detected capacity change from 0 to 512 [ 227.073839][T13178] EXT4-fs (loop9): 1 orphan inode deleted [ 227.096280][ T37] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 227.139189][T13178] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.434070][T13210] netlink: 'syz.2.2792': attribute type 27 has an invalid length. [ 227.544721][T13197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.570384][T13197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.804296][T13222] loop2: detected capacity change from 0 to 512 [ 227.812595][T13222] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.824239][T13222] EXT4-fs (loop2): orphan cleanup on readonly fs [ 227.830778][T13222] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.2796: inode #15: comm syz.2.2796: iget: illegal inode # [ 227.850410][T13222] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2796: couldn't read orphan inode 15 (err -117) [ 227.919270][T13222] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 227.929378][T13222] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 228.277855][T13238] FAULT_INJECTION: forcing a failure. [ 228.277855][T13238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.291638][T13238] CPU: 1 UID: 0 PID: 13238 Comm: syz.2.2803 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 228.291687][T13238] Tainted: [W]=WARN [ 228.291698][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 228.291785][T13238] Call Trace: [ 228.291798][T13238] [ 228.291810][T13238] __dump_stack+0x1d/0x30 [ 228.291845][T13238] dump_stack_lvl+0x95/0xd0 [ 228.291878][T13238] dump_stack+0x15/0x1b [ 228.291929][T13238] should_fail_ex+0x263/0x280 [ 228.291968][T13238] should_fail+0xb/0x20 [ 228.292010][T13238] should_fail_usercopy+0x1a/0x20 [ 228.292075][T13238] _copy_to_user+0x20/0xa0 [ 228.292124][T13238] simple_read_from_buffer+0xb5/0x130 [ 228.292247][T13238] proc_fail_nth_read+0x10e/0x150 [ 228.292282][T13238] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 228.292322][T13238] vfs_read+0x1ab/0x7f0 [ 228.292381][T13238] ? __rcu_read_unlock+0x4e/0x70 [ 228.292424][T13238] ? __fget_files+0x184/0x1c0 [ 228.292451][T13238] ? mutex_lock+0x57/0x90 [ 228.292479][T13238] ksys_read+0xdc/0x1a0 [ 228.292537][T13238] __x64_sys_read+0x40/0x50 [ 228.292609][T13238] x64_sys_call+0x2889/0x3000 [ 228.292653][T13238] do_syscall_64+0xc0/0x2a0 [ 228.292753][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.292784][T13238] RIP: 0033:0x7f1d4079b78e [ 228.292808][T13238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 228.292834][T13238] RSP: 002b:00007f1d3f236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 228.292859][T13238] RAX: ffffffffffffffda RBX: 00007f1d3f2376c0 RCX: 00007f1d4079b78e [ 228.292875][T13238] RDX: 000000000000000f RSI: 00007f1d3f2370a0 RDI: 0000000000000003 [ 228.292946][T13238] RBP: 00007f1d3f237090 R08: 0000000000000000 R09: 0000000000000000 [ 228.292966][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.292980][T13238] R13: 00007f1d40a56038 R14: 00007f1d40a55fa0 R15: 00007ffc2d817978 [ 228.293003][T13238] [ 228.728736][T13251] loop9: detected capacity change from 0 to 1024 [ 229.055158][T13264] option changes via remount are deprecated (pid=13263 comm=syz.9.2814) [ 229.202382][T13276] loop9: detected capacity change from 0 to 512 [ 229.290995][T13285] __nla_validate_parse: 13 callbacks suppressed [ 229.291012][T13285] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2822'. [ 229.306903][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2822'. [ 229.404474][T13286] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2819'. [ 229.541835][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2826'. [ 229.883317][ T6425] EXT4-fs unmount: 15 callbacks suppressed [ 229.883336][ T6425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.954607][T13302] sd 0:0:1:0: device reset [ 229.969436][T13302] EXT4-fs: Ignoring removed orlov option [ 229.998424][T13302] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.029993][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 230.030008][ T29] audit: type=1326 audit(1803724264.284:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030078][ T29] audit: type=1326 audit(1803724264.284:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030264][ T29] audit: type=1326 audit(1803724264.284:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030395][ T29] audit: type=1326 audit(1803724264.284:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030642][ T29] audit: type=1326 audit(1803724264.284:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030674][ T29] audit: type=1326 audit(1803724264.284:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030701][ T29] audit: type=1326 audit(1803724264.284:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030782][ T29] audit: type=1326 audit(1803724264.284:5369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fded767aeb9 code=0x7ffc0000 [ 230.030929][ T29] audit: type=1326 audit(1803724264.284:5370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fded767ac22 code=0x7ffc0000 [ 230.031504][ T29] audit: type=1326 audit(1803724264.284:5371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13301 comm="syz.6.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fded763b78e code=0x7ffc0000 [ 230.118009][T13307] option changes via remount are deprecated (pid=13305 comm=syz.8.2829) [ 230.362581][ T6425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.619808][T13320] set_capacity_and_notify: 2 callbacks suppressed [ 230.619984][T13320] loop8: detected capacity change from 0 to 512 [ 230.811026][T13333] loop4: detected capacity change from 0 to 512 [ 230.814856][T13320] EXT4-fs (loop8): 1 orphan inode deleted [ 230.849112][ T37] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 230.883335][T13320] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.904339][T13320] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.941683][T13333] EXT4-fs (loop4): 1 orphan inode deleted [ 230.964043][T13333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.978029][ T6012] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 1 [ 230.992891][T13333] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.018924][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.077637][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.196830][T13352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2845'. [ 231.290175][T13353] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2842'. [ 231.291540][T13355] option changes via remount are deprecated (pid=13354 comm=syz.9.2846) [ 231.357424][T13361] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2849'. [ 231.424947][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2850'. [ 231.462025][T13359] netlink: 'syz.4.2848': attribute type 16 has an invalid length. [ 231.639658][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 231.702945][T13383] batadv1: entered promiscuous mode [ 231.915013][T13390] loop6: detected capacity change from 0 to 8192 [ 232.057278][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2862'. [ 232.350493][T13408] loop8: detected capacity change from 0 to 512 [ 232.600992][T13408] EXT4-fs (loop8): 1 orphan inode deleted [ 232.624953][ T37] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 232.673851][T13408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.689916][T13408] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.881370][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.331164][T13451] netlink: 'syz.4.2879': attribute type 10 has an invalid length. [ 233.400838][T13454] loop6: detected capacity change from 0 to 512 [ 233.503745][T13454] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 233.526076][T13454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 233.534073][T13454] System zones: 1-12 [ 233.547260][T13454] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.2881: corrupted in-inode xattr: e_value size too large [ 233.581667][T13454] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2881: couldn't read orphan inode 15 (err -117) [ 233.625960][T13454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.671413][T13461] loop9: detected capacity change from 0 to 1024 [ 233.690110][T13461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.791512][T13465] bridge0: entered allmulticast mode [ 233.797549][T13466] bridge_slave_1: left allmulticast mode [ 233.804112][T13466] bridge_slave_1: left promiscuous mode [ 233.809867][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.931650][T13454] sd 0:0:1:0: device reset [ 233.936928][T13466] bridge_slave_0: left allmulticast mode [ 233.942639][T13466] bridge_slave_0: left promiscuous mode [ 233.948608][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.060175][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.221426][T13472] option changes via remount are deprecated (pid=13471 comm=syz.4.2886) [ 234.562091][T13510] wireguard0: entered promiscuous mode [ 234.567646][T13510] wireguard0: entered allmulticast mode [ 234.758947][T13516] __nla_validate_parse: 6 callbacks suppressed [ 234.758964][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 234.850128][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 234.867036][T13522] loop4: detected capacity change from 0 to 1024 [ 234.884627][T13522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.124736][T13527] loop9: detected capacity change from 0 to 1024 [ 235.139707][T13527] EXT4-fs: Ignoring removed nobh option [ 235.145365][T13527] ext2: Unknown parameter 'nouser_xattr' [ 235.208294][T13519] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 235.216663][T13519] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2894'. [ 235.240176][T13519] loop2: detected capacity change from 0 to 1024 [ 235.253320][T13519] EXT4-fs: inline encryption not supported [ 235.301099][T13519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.448525][ T6425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.565203][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.632593][T13534] loop6: detected capacity change from 0 to 512 [ 235.713305][T13536] option changes via remount are deprecated (pid=13535 comm=syz.4.2898) [ 235.735221][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.759022][T13534] EXT4-fs (loop6): 1 orphan inode deleted [ 235.777898][T13534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.794570][T13534] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.802826][ T6005] __quota_error: 78 callbacks suppressed [ 235.802887][ T6005] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 235.822185][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2897'. [ 235.824536][ T6005] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 235.864263][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 235.913813][ T6425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.935632][ T29] audit: type=1326 audit(1803724269.794:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 235.959490][ T29] audit: type=1326 audit(1803724269.794:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 235.984153][ T29] audit: type=1326 audit(1803724269.794:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 236.007836][ T29] audit: type=1326 audit(1803724269.794:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 236.033217][ T29] audit: type=1326 audit(1803724269.794:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 236.057850][ T29] audit: type=1326 audit(1803724269.794:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 236.082697][ T29] audit: type=1326 audit(1803724269.794:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 236.106248][ T29] audit: type=1326 audit(1803724269.794:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 236.130780][ T29] audit: type=1326 audit(1803724269.794:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13541 comm="syz.2.2902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 236.362866][T13558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.465451][T13565] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2908'. [ 236.489061][T13565] loop9: detected capacity change from 0 to 1024 [ 236.514257][T13565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.546203][T13567] option changes via remount are deprecated (pid=13566 comm=syz.6.2910) [ 236.863705][T13573] loop8: detected capacity change from 0 to 512 [ 237.132869][T13585] ip6_vti0 speed is unknown, defaulting to 1000 [ 237.162049][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.175534][T13573] EXT4-fs (loop8): 1 orphan inode deleted [ 237.210481][T13573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.274857][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2919'. [ 237.351884][ T6005] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 237.356268][T13573] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.421759][T13596] tipc: Started in network mode [ 237.427686][T13596] tipc: Node identity 56eb233e8823, cluster identity 4711 [ 237.435065][T13596] tipc: Enabled bearer , priority 0 [ 237.467649][T13573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2912'. [ 237.484291][T13593] tipc: Disabling bearer [ 237.543846][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.559692][T13599] option changes via remount are deprecated (pid=13597 comm=syz.9.2922) [ 237.742820][T13586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13586 comm=syz.2.2917 [ 237.768155][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2927'. [ 237.784179][T13614] loop4: detected capacity change from 0 to 1024 [ 237.803061][T13614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.015947][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.088484][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2932'. [ 238.131114][T13633] loop9: detected capacity change from 0 to 512 [ 238.255449][T13649] tipc: Enabled bearer , priority 0 [ 238.293540][T13648] tipc: Disabling bearer [ 238.376205][T13633] EXT4-fs (loop9): 1 orphan inode deleted [ 238.437340][T13633] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.493165][ T415] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 238.512314][T13633] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.607897][T13643] Set syz1 is full, maxelem 65536 reached [ 238.616704][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.705637][T13669] option changes via remount are deprecated (pid=13668 comm=syz.9.2939) [ 238.887761][T13678] loop9: detected capacity change from 0 to 1024 [ 238.912685][T13678] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.108615][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.120359][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.170573][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.236163][T13691] loop9: detected capacity change from 0 to 512 [ 239.305827][T13691] EXT4-fs (loop9): 1 orphan inode deleted [ 239.320194][ T6005] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 239.321565][T13691] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.349059][T13691] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.406656][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.433127][T13701] netlink: 'syz.8.2952': attribute type 1 has an invalid length. [ 239.477941][T13703] option changes via remount are deprecated (pid=13702 comm=syz.9.2951) [ 239.691597][T13715] loop4: detected capacity change from 0 to 1024 [ 239.708405][T13719] FAULT_INJECTION: forcing a failure. [ 239.708405][T13719] name failslab, interval 1, probability 0, space 0, times 0 [ 239.718797][T13715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.723897][T13719] CPU: 0 UID: 0 PID: 13719 Comm: syz.8.2959 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 239.724037][T13719] Tainted: [W]=WARN [ 239.724046][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.724105][T13719] Call Trace: [ 239.724137][T13719] [ 239.724165][T13719] __dump_stack+0x1d/0x30 [ 239.724324][T13719] dump_stack_lvl+0x95/0xd0 [ 239.724393][T13719] dump_stack+0x15/0x1b [ 239.724459][T13719] should_fail_ex+0x263/0x280 [ 239.724563][T13719] should_failslab+0x8c/0xb0 [ 239.724692][T13719] __kvmalloc_node_noprof+0x148/0x680 [ 239.724786][T13719] ? alloc_fdtable+0x115/0x1d0 [ 239.724865][T13719] alloc_fdtable+0x115/0x1d0 [ 239.724930][T13719] dup_fd+0x492/0x510 [ 239.725016][T13719] ? _raw_spin_unlock+0x9/0x30 [ 239.725237][T13719] ksys_unshare+0x343/0x6d0 [ 239.725311][T13719] ? ksys_write+0x194/0x1a0 [ 239.725379][T13719] __x64_sys_unshare+0x1f/0x30 [ 239.725485][T13719] x64_sys_call+0x2ae6/0x3000 [ 239.725569][T13719] do_syscall_64+0xc0/0x2a0 [ 239.725677][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.725820][T13719] RIP: 0033:0x7fe42eabaeb9 [ 239.725875][T13719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.725983][T13719] RSP: 002b:00007fe42d517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 239.726048][T13719] RAX: ffffffffffffffda RBX: 00007fe42ed35fa0 RCX: 00007fe42eabaeb9 [ 239.726103][T13719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060680 [ 239.726149][T13719] RBP: 00007fe42d517090 R08: 0000000000000000 R09: 0000000000000000 [ 239.726162][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.726174][T13719] R13: 00007fe42ed36038 R14: 00007fe42ed35fa0 R15: 00007fff2123ac08 [ 239.726294][T13719] [ 240.083955][T13726] loop8: detected capacity change from 0 to 512 [ 240.124070][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.180952][T13726] EXT4-fs (loop8): 1 orphan inode deleted [ 240.197490][ T6005] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 240.221526][T13726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.224255][T13726] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.253226][T13736] option changes via remount are deprecated (pid=13734 comm=syz.4.2964) [ 240.271657][T13726] __nla_validate_parse: 6 callbacks suppressed [ 240.271734][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2961'. [ 240.301758][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.354343][T13741] ip6_vti0 speed is unknown, defaulting to 1000 [ 240.449070][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2969'. [ 240.500189][T13750] loop8: detected capacity change from 0 to 1024 [ 240.544797][T13750] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.619529][T13762] loop9: detected capacity change from 0 to 1024 [ 240.641434][T13762] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 240.661773][T13765] FAULT_INJECTION: forcing a failure. [ 240.661773][T13765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.675284][T13765] CPU: 0 UID: 0 PID: 13765 Comm: syz.2.2975 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.675326][T13765] Tainted: [W]=WARN [ 240.675333][T13765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.675346][T13765] Call Trace: [ 240.675353][T13765] [ 240.675362][T13765] __dump_stack+0x1d/0x30 [ 240.675391][T13765] dump_stack_lvl+0x95/0xd0 [ 240.675434][T13765] dump_stack+0x15/0x1b [ 240.675460][T13765] should_fail_ex+0x263/0x280 [ 240.675503][T13765] should_fail+0xb/0x20 [ 240.675538][T13765] should_fail_usercopy+0x1a/0x20 [ 240.675659][T13765] _copy_from_user+0x1c/0xb0 [ 240.675687][T13765] kstrtouint_from_user+0x69/0xf0 [ 240.675791][T13765] proc_fail_nth_write+0x50/0x160 [ 240.675838][T13765] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 240.675875][T13765] vfs_write+0x269/0x9f0 [ 240.675937][T13765] ? __rcu_read_unlock+0x4e/0x70 [ 240.675972][T13765] ? __fget_files+0x184/0x1c0 [ 240.676034][T13765] ? mutex_lock+0x57/0x90 [ 240.676066][T13765] ksys_write+0xdc/0x1a0 [ 240.676093][T13765] __x64_sys_write+0x40/0x50 [ 240.676124][T13765] x64_sys_call+0x2847/0x3000 [ 240.676194][T13765] do_syscall_64+0xc0/0x2a0 [ 240.676235][T13765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.676437][T13765] RIP: 0033:0x7f1d4079b78e [ 240.676460][T13765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.676485][T13765] RSP: 002b:00007f1d3f236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.676509][T13765] RAX: ffffffffffffffda RBX: 00007f1d3f2376c0 RCX: 00007f1d4079b78e [ 240.676523][T13765] RDX: 0000000000000001 RSI: 00007f1d3f2370a0 RDI: 0000000000000005 [ 240.676602][T13765] RBP: 00007f1d3f237090 R08: 0000000000000000 R09: 0000000000000000 [ 240.676619][T13765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.676632][T13765] R13: 00007f1d40a56038 R14: 00007f1d40a55fa0 R15: 00007ffc2d817978 [ 240.676658][T13765] [ 240.931922][T13741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.932105][T13741] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.986315][T13770] option changes via remount are deprecated (pid=13769 comm=syz.2.2977) [ 241.008162][T13768] EXT4-fs (loop9): 1 orphan inode deleted [ 241.019311][ T6005] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 241.022280][T13768] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.047395][T13768] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.081193][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2976'. [ 241.119381][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.248171][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 241.248191][ T29] audit: type=1326 audit(1803724274.779:5784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.299508][T13801] syzkaller0: entered promiscuous mode [ 241.305059][T13801] syzkaller0: entered allmulticast mode [ 241.316128][ T29] audit: type=1326 audit(1803724274.779:5785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.340174][ T29] audit: type=1326 audit(1803724274.779:5786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.363711][ T29] audit: type=1326 audit(1803724274.779:5787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.387295][ T29] audit: type=1326 audit(1803724274.779:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.411260][ T29] audit: type=1326 audit(1803724274.779:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.435029][ T29] audit: type=1326 audit(1803724274.779:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.458784][ T29] audit: type=1326 audit(1803724274.779:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.483484][ T29] audit: type=1326 audit(1803724274.779:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.507163][ T29] audit: type=1326 audit(1803724274.779:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13800 comm="syz.9.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9181b3aeb9 code=0x7ffc0000 [ 241.549371][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.549561][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.737797][T13811] EXT4-fs (loop8): 1 orphan inode deleted [ 241.759126][T13496] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:42: Failed to release dquot type 1 [ 241.802960][T13811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.808058][T13811] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.831820][T13822] option changes via remount are deprecated (pid=13821 comm=syz.4.2990) [ 241.846568][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2986'. [ 241.873236][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.908705][T13826] syzkaller0: entered promiscuous mode [ 241.914355][T13826] syzkaller0: entered allmulticast mode [ 241.964327][T13824] set_capacity_and_notify: 3 callbacks suppressed [ 241.964374][T13824] loop9: detected capacity change from 0 to 512 [ 242.017259][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2994'. [ 242.037161][T13824] EXT4-fs (loop9): 1 orphan inode deleted [ 242.050092][T13824] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.089036][ T6005] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 242.115445][T13824] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.186417][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2991'. [ 242.229780][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.323497][T13843] FAULT_INJECTION: forcing a failure. [ 242.323497][T13843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.337994][T13843] CPU: 0 UID: 0 PID: 13843 Comm: syz.8.2999 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.338121][T13843] Tainted: [W]=WARN [ 242.338137][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.338206][T13843] Call Trace: [ 242.338216][T13843] [ 242.338226][T13843] __dump_stack+0x1d/0x30 [ 242.338259][T13843] dump_stack_lvl+0x95/0xd0 [ 242.338288][T13843] dump_stack+0x15/0x1b [ 242.338310][T13843] should_fail_ex+0x263/0x280 [ 242.338417][T13843] should_fail+0xb/0x20 [ 242.338523][T13843] should_fail_usercopy+0x1a/0x20 [ 242.338627][T13843] _copy_from_user+0x1c/0xb0 [ 242.338714][T13843] ___sys_sendmsg+0xc1/0x1e0 [ 242.338769][T13843] __x64_sys_sendmsg+0xd4/0x160 [ 242.338800][T13843] x64_sys_call+0x17ba/0x3000 [ 242.338828][T13843] do_syscall_64+0xc0/0x2a0 [ 242.338864][T13843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.339047][T13843] RIP: 0033:0x7fe42eabaeb9 [ 242.339069][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.339088][T13843] RSP: 002b:00007fe42d517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.339108][T13843] RAX: ffffffffffffffda RBX: 00007fe42ed35fa0 RCX: 00007fe42eabaeb9 [ 242.339166][T13843] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 242.339183][T13843] RBP: 00007fe42d517090 R08: 0000000000000000 R09: 0000000000000000 [ 242.339249][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.339262][T13843] R13: 00007fe42ed36038 R14: 00007fe42ed35fa0 R15: 00007fff2123ac08 [ 242.339284][T13843] [ 242.512600][T13845] loop4: detected capacity change from 0 to 512 [ 242.535796][T13845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.567550][T13845] EXT4-fs (loop4): 1 truncate cleaned up [ 242.576828][T13845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.605836][T13845] FAULT_INJECTION: forcing a failure. [ 242.605836][T13845] name failslab, interval 1, probability 0, space 0, times 0 [ 242.617737][T13862] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3005'. [ 242.618902][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.4.3001 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.619019][T13845] Tainted: [W]=WARN [ 242.619042][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.619087][T13845] Call Trace: [ 242.619109][T13845] [ 242.619148][T13845] __dump_stack+0x1d/0x30 [ 242.619272][T13845] dump_stack_lvl+0x95/0xd0 [ 242.619347][T13845] dump_stack+0x15/0x1b [ 242.619461][T13845] should_fail_ex+0x263/0x280 [ 242.619565][T13845] should_failslab+0x8c/0xb0 [ 242.619641][T13845] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 242.619728][T13845] ? __alloc_skb+0x2f0/0x4b0 [ 242.619873][T13845] __alloc_skb+0x2f0/0x4b0 [ 242.619962][T13845] ? __alloc_skb+0x219/0x4b0 [ 242.620070][T13845] netlink_alloc_large_skb+0xbf/0xf0 [ 242.620226][T13845] netlink_sendmsg+0x40c/0x6f0 [ 242.620308][T13845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.620373][T13845] ____sys_sendmsg+0x5af/0x600 [ 242.620448][T13845] ___sys_sendmsg+0x195/0x1e0 [ 242.620563][T13845] __x64_sys_sendmsg+0xd4/0x160 [ 242.620648][T13845] x64_sys_call+0x17ba/0x3000 [ 242.620732][T13845] do_syscall_64+0xc0/0x2a0 [ 242.620839][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.620919][T13845] RIP: 0033:0x7f4f6fecaeb9 [ 242.620973][T13845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.621088][T13845] RSP: 002b:00007f4f6e927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.621162][T13845] RAX: ffffffffffffffda RBX: 00007f4f70145fa0 RCX: 00007f4f6fecaeb9 [ 242.621214][T13845] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000004 [ 242.621258][T13845] RBP: 00007f4f6e927090 R08: 0000000000000000 R09: 0000000000000000 [ 242.621301][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.621344][T13845] R13: 00007f4f70146038 R14: 00007f4f70145fa0 R15: 00007ffd6b7ddc58 [ 242.621432][T13845] [ 242.660871][T13861] xt_hashlimit: size too large, truncated to 1048576 [ 242.833755][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.893280][T13869] loop6: detected capacity change from 0 to 512 [ 242.927446][T13876] loop2: detected capacity change from 0 to 512 [ 242.959151][T13869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.984585][T13876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.004089][T13876] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.026215][T13869] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 243.046307][T13876] FAULT_INJECTION: forcing a failure. [ 243.046307][T13876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.059911][T13876] CPU: 0 UID: 0 PID: 13876 Comm: syz.2.3010 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 243.059957][T13876] Tainted: [W]=WARN [ 243.060001][T13876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.060018][T13876] Call Trace: [ 243.060028][T13876] [ 243.060039][T13876] __dump_stack+0x1d/0x30 [ 243.060073][T13876] dump_stack_lvl+0x95/0xd0 [ 243.060103][T13876] dump_stack+0x15/0x1b [ 243.060130][T13876] should_fail_ex+0x263/0x280 [ 243.060180][T13876] should_fail+0xb/0x20 [ 243.060217][T13876] should_fail_usercopy+0x1a/0x20 [ 243.060261][T13876] _copy_from_user+0x1c/0xb0 [ 243.060319][T13876] quota_setquota+0x89/0x400 [ 243.060358][T13876] do_quotactl+0x5ba/0x670 [ 243.060388][T13876] __se_sys_quotactl_fd+0x21f/0x3a0 [ 243.060418][T13876] __x64_sys_quotactl_fd+0x55/0x70 [ 243.060449][T13876] x64_sys_call+0x1b0b/0x3000 [ 243.060483][T13876] do_syscall_64+0xc0/0x2a0 [ 243.060566][T13876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.060595][T13876] RIP: 0033:0x7f1d407daeb9 [ 243.060617][T13876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.060658][T13876] RSP: 002b:00007f1d3f237028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 243.060755][T13876] RAX: ffffffffffffffda RBX: 00007f1d40a55fa0 RCX: 00007f1d407daeb9 [ 243.060785][T13876] RDX: 0000000000000000 RSI: ffffffff80000800 RDI: 0000000000000004 [ 243.060809][T13876] RBP: 00007f1d3f237090 R08: 0000000000000000 R09: 0000000000000000 [ 243.060827][T13876] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 243.060843][T13876] R13: 00007f1d40a56038 R14: 00007f1d40a55fa0 R15: 00007ffc2d817978 [ 243.060912][T13876] [ 243.269284][T13865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.286461][T13865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.316281][ T6425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.332399][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.377100][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3011'. [ 243.481855][T13896] option changes via remount are deprecated (pid=13892 comm=syz.2.3013) [ 243.566549][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 243.634529][T13908] binfmt_misc: register: failed to install interpreter file ./file0 [ 243.732874][T13910] loop6: detected capacity change from 0 to 512 [ 243.892248][T13910] EXT4-fs (loop6): 1 orphan inode deleted [ 243.906439][ T6005] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 243.971953][T13910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.024635][T13910] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.043060][T13910] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3019'. [ 244.089356][ T6425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.244654][T13922] xt_hashlimit: size too large, truncated to 1048576 [ 244.471343][T13933] loop4: detected capacity change from 0 to 1024 [ 244.484885][T13933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.593554][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.669272][T13945] loop6: detected capacity change from 0 to 128 [ 244.702423][T13945] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 244.740508][T13947] loop2: detected capacity change from 0 to 512 [ 244.758858][T13947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.770211][T13945] loop6: detected capacity change from 0 to 512 [ 244.779895][T13945] vfat: Unknown parameter './mnt' [ 244.796554][T13949] loop4: detected capacity change from 0 to 512 [ 244.818159][T13947] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 244.826376][T13947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 244.854438][T13947] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 244.864056][T13947] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 244.873326][T13947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 244.901996][T13949] EXT4-fs (loop4): 1 orphan inode deleted [ 244.926254][T13497] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:43: Failed to release dquot type 1 [ 244.957465][T13949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.986636][T13949] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.021909][T12463] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.040246][T13959] IPVS: Error connecting to the multicast addr [ 245.059154][T13496] Bluetooth: hci0: Frame reassembly failed (-84) [ 245.069532][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.654582][T13974] __nla_validate_parse: 4 callbacks suppressed [ 245.654604][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3039'. [ 245.725646][T13980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.740337][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3042'. [ 245.789316][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.833852][T13985] option changes via remount are deprecated (pid=13984 comm=syz.9.3044) [ 246.199702][T14001] EXT4-fs (loop8): 1 orphan inode deleted [ 246.223719][T13496] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:42: Failed to release dquot type 1 [ 246.262264][T14001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.277329][T14001] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.302238][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3047'. [ 246.334174][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.345438][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3053'. [ 246.451919][T14011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 246.469377][T14011] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.475101][T14018] option changes via remount are deprecated (pid=14017 comm=syz.8.3056) [ 246.494230][T14011] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.3054: lblock 3 mapped to illegal pblock 3 (length 3) [ 246.511695][T14011] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 246.524309][T14011] EXT4-fs (loop9): This should not happen!! Data will be lost [ 246.524309][T14011] [ 246.546329][ T415] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 246.566143][ T415] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 246.579273][ T415] EXT4-fs (loop9): This should not happen!! Data will be lost [ 246.579273][ T415] [ 246.668943][T14034] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.689669][T14036] netlink: 'syz.2.3063': attribute type 21 has an invalid length. [ 246.692430][T14034] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3062: bad orphan inode 131083 [ 246.710302][T14034] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.3062: path /82/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 246.733331][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 246.733393][ T29] audit: type=1326 audit(1803724280.882:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 246.734654][T14036] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3063'. [ 246.739959][ T29] audit: type=1326 audit(1803724280.882:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 246.802133][ T29] audit: type=1326 audit(1803724280.967:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 246.804144][T14039] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 246.834948][T14039] audit: out of memory in audit_log_start [ 246.842063][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 246.851667][ T29] audit: type=1326 audit(1803724280.967:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 246.875642][ T29] audit: type=1326 audit(1803724280.967:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 246.899106][ T29] audit: type=1326 audit(1803724280.967:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 246.923393][ T29] audit: type=1326 audit(1803724280.967:5809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe42ea7b78e code=0x7ffc0000 [ 246.947269][ T29] audit: type=1326 audit(1803724280.967:5810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14037 comm="syz.8.3064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe42ea7b78e code=0x7ffc0000 [ 247.005569][T14045] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 247.021703][T14045] EXT4-fs (loop8): 1 truncate cleaned up [ 247.208819][T13963] Bluetooth: hci0: command 0x1003 tx timeout [ 247.214989][ T3527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.250897][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3071'. [ 247.358932][T14071] batman_adv: batadv0: Adding interface: dummy0 [ 247.365389][T14071] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.391647][T14071] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 247.483452][T14074] set_capacity_and_notify: 6 callbacks suppressed [ 247.483580][T14074] loop2: detected capacity change from 0 to 512 [ 247.580305][T14074] EXT4-fs (loop2): 1 orphan inode deleted [ 247.594942][ T6005] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 247.621484][T14074] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.661490][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 247.662994][T14087] loop6: detected capacity change from 0 to 128 [ 247.716290][T14092] option changes via remount are deprecated (pid=14091 comm=syz.9.3081) [ 247.861646][T14107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3088'. [ 247.876494][T14107] loop6: detected capacity change from 0 to 1024 [ 247.885433][T14108] loop2: detected capacity change from 0 to 512 [ 247.903798][T14108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 247.932472][T14108] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3089: bad orphan inode 131083 [ 247.948879][T14108] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.3089: path /98/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 248.034704][T14120] binfmt_misc: register: failed to install interpreter file ./file0 [ 248.089969][T14116] loop4: detected capacity change from 0 to 512 [ 248.143321][T14122] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3094'. [ 248.208934][T14126] bridge0: port 3(macsec1) entered blocking state [ 248.215914][T14126] bridge0: port 3(macsec1) entered disabled state [ 248.252772][T14116] EXT4-fs (loop4): 1 orphan inode deleted [ 248.260663][T14126] macsec1: entered allmulticast mode [ 248.266023][T14126] bridge0: entered allmulticast mode [ 248.272400][T13496] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:42: Failed to release dquot type 1 [ 248.303357][T14116] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.334335][T14126] macsec1: left allmulticast mode [ 248.339513][T14126] bridge0: left allmulticast mode [ 248.416435][T14133] option changes via remount are deprecated (pid=14132 comm=syz.6.3096) [ 248.648229][T14159] batman_adv: batadv0: Adding interface: dummy0 [ 248.655027][T14159] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.680935][T14159] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 248.719417][T14162] loop2: detected capacity change from 0 to 1024 [ 248.807445][T14164] loop9: detected capacity change from 0 to 512 [ 248.981407][T14164] EXT4-fs (loop9): 1 orphan inode deleted [ 249.011306][ T52] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 249.070510][T14164] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.091973][T14173] loop4: detected capacity change from 0 to 4096 [ 249.213153][T14180] loop2: detected capacity change from 0 to 512 [ 249.213949][T14180] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 249.214671][T14180] EXT4-fs (loop2): orphan cleanup on readonly fs [ 249.214877][T14180] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.3111: bad orphan inode 15 [ 249.215054][T14180] ext4_test_bit(bit=14, block=18) = 1 [ 249.215072][T14180] is_bad_inode(inode)=0 [ 249.215083][T14180] NEXT_ORPHAN(inode)=1023 [ 249.215094][T14180] max_ino=32 [ 249.215103][T14180] i_nlink=0 [ 249.215261][T14180] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.3111: corrupted xattr block 19: e_value size too large [ 249.215404][T14180] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 249.311170][T14187] option changes via remount are deprecated (pid=14181 comm=syz.9.3112) [ 249.457332][T14199] loop6: detected capacity change from 0 to 8192 [ 249.500880][T14199] 9pnet_fd: Insufficient options for proto=fd [ 249.528111][ T6425] VFS: Lookup of '.. ' in vfat loop6 would have caused loop [ 249.528192][ T6425] VFS: Lookup of '.. ' in vfat loop6 would have caused loop [ 250.039616][T14226] random: crng reseeded on system resumption [ 250.045785][T14229] binfmt_misc: register: failed to install interpreter file ./file0 [ 250.112102][T14224] EXT4-fs (loop2): 1 orphan inode deleted [ 250.128507][ T52] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 250.186828][T14224] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.455888][T13496] vlan2: left allmulticast mode [ 250.461226][T13496] bridge_slave_0: left allmulticast mode [ 250.466966][T13496] vlan2: left promiscuous mode [ 250.471821][T13496] bridge_slave_0: left promiscuous mode [ 250.477983][T13496] bridge0: port 1(vlan2) entered disabled state [ 250.581715][T14243] option changes via remount are deprecated (pid=14241 comm=syz.2.3132) [ 250.717782][T13496] bond0 (unregistering): Released all slaves [ 250.738297][T14251] 9p: Bad value for 'rfdno' [ 250.782938][T13496] tipc: Left network mode [ 250.910342][T13496] hsr_slave_0: left promiscuous mode [ 250.921131][T13496] hsr_slave_1: left promiscuous mode [ 251.104897][T14245] ip6_vti0 speed is unknown, defaulting to 1000 [ 251.296211][T14282] EXT4-fs (loop9): 1 orphan inode deleted [ 251.314493][ T415] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 251.370948][T14282] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.421262][T14245] chnl_net:caif_netlink_parms(): no params data found [ 251.462650][T14282] __nla_validate_parse: 7 callbacks suppressed [ 251.462694][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3138'. [ 251.596515][T14309] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3141'. [ 251.613902][T14245] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.621589][T14245] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.645804][T14309] EXT4-fs: Ignoring removed oldalloc option [ 251.683491][T14245] bridge_slave_0: entered allmulticast mode [ 251.691253][T14309] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 251.717502][T14245] bridge_slave_0: entered promiscuous mode [ 251.727456][T14309] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #11: comm syz.9.3141: corrupted in-inode xattr: invalid ea_ino [ 251.736526][T14245] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.748155][T14245] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.764512][T14309] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3141: couldn't read orphan inode 11 (err -117) [ 251.788544][T14245] bridge_slave_1: entered allmulticast mode [ 251.795547][T14245] bridge_slave_1: entered promiscuous mode [ 251.843162][T14245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.856061][T14245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.960124][T14245] team0: Port device team_slave_0 added [ 251.965910][T14327] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3145'. [ 252.003121][T14245] team0: Port device team_slave_1 added [ 252.032513][T14245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.039505][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.066958][T14245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.087318][T14245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.094491][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.120625][T14245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.171688][T14245] hsr_slave_0: entered promiscuous mode [ 252.178418][T14245] hsr_slave_1: entered promiscuous mode [ 252.562220][T14245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 252.584790][T14245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 252.605628][T14245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 252.627073][T14245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 252.753464][T14245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.774805][T14404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'. [ 252.798585][T14245] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.849157][ T6005] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.856744][ T6005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.929191][ T6005] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.937166][ T6005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.970891][T14412] set_capacity_and_notify: 8 callbacks suppressed [ 252.970972][T14412] loop9: detected capacity change from 0 to 512 [ 253.017560][T14245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.090733][T14412] EXT4-fs (loop9): 1 orphan inode deleted [ 253.114885][T13484] __quota_error: 83 callbacks suppressed [ 253.114903][T13484] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 253.130499][T13484] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:31: Failed to release dquot type 1 [ 253.169543][T14412] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.245760][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3151'. [ 253.256190][T14245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.388518][ T29] audit: type=1400 audit(1803724287.131:5889): avc: denied { search } for pid=14445 comm="syz.9.3156" name="/" dev="configfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.419641][T14446] bridge3: entered allmulticast mode [ 253.455209][ T29] audit: type=1400 audit(1803724287.159:5890): avc: denied { watch } for pid=14445 comm="syz.9.3156" path="/" dev="configfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.481060][ T29] audit: type=1400 audit(1803724287.159:5891): avc: denied { read open } for pid=14445 comm="syz.9.3156" path="/" dev="configfs" ino=357 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 253.533197][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3157'. [ 253.599808][T14245] veth0_vlan: entered promiscuous mode [ 253.615096][T14245] veth1_vlan: entered promiscuous mode [ 253.666979][T14245] veth0_macvtap: entered promiscuous mode [ 253.686890][T14245] veth1_macvtap: entered promiscuous mode [ 253.718600][T14245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.747783][T14245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.772651][T13484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.790738][T13484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.816404][ T6005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.833726][ T6005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.048705][T14488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3162'. [ 254.204666][ T29] audit: type=1326 audit(1803724287.898:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14500 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 254.229613][ T29] audit: type=1326 audit(1803724287.898:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14500 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 254.332500][ T29] audit: type=1326 audit(1803724287.954:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14500 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 254.357376][ T29] audit: type=1326 audit(1803724287.954:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14500 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 254.381140][ T29] audit: type=1326 audit(1803724287.954:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14500 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 254.405738][ T29] audit: type=1326 audit(1803724287.954:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14500 comm="syz.8.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 254.601315][T14536] loop2: detected capacity change from 0 to 1024 [ 254.670732][T14536] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.3167: inode #778331508: comm syz.2.3167: iget: illegal inode # [ 254.707738][T14536] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3167: error while reading EA inode 778331508 err=-117 [ 254.724200][T14555] FAULT_INJECTION: forcing a failure. [ 254.724200][T14555] name failslab, interval 1, probability 0, space 0, times 0 [ 254.737092][T14555] CPU: 0 UID: 0 PID: 14555 Comm: syz.2.3167 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 254.737127][T14555] Tainted: [W]=WARN [ 254.737137][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.737154][T14555] Call Trace: [ 254.737177][T14555] [ 254.737185][T14555] __dump_stack+0x1d/0x30 [ 254.737215][T14555] dump_stack_lvl+0x95/0xd0 [ 254.737244][T14555] dump_stack+0x15/0x1b [ 254.737270][T14555] should_fail_ex+0x263/0x280 [ 254.737426][T14555] should_failslab+0x8c/0xb0 [ 254.737451][T14555] __kvmalloc_node_noprof+0x148/0x680 [ 254.737480][T14555] ? vmemdup_user+0x2b/0xd0 [ 254.737503][T14555] ? should_fail_usercopy+0x1a/0x20 [ 254.737600][T14555] vmemdup_user+0x2b/0xd0 [ 254.737627][T14555] path_setxattrat+0x1b6/0x310 [ 254.737742][T14555] __x64_sys_setxattr+0x6e/0x90 [ 254.737766][T14555] x64_sys_call+0xf1e/0x3000 [ 254.737791][T14555] do_syscall_64+0xc0/0x2a0 [ 254.737832][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.737882][T14555] RIP: 0033:0x7f1d407daeb9 [ 254.737902][T14555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.737923][T14555] RSP: 002b:00007f1d3f216028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 254.737943][T14555] RAX: ffffffffffffffda RBX: 00007f1d40a56090 RCX: 00007f1d407daeb9 [ 254.737958][T14555] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000080 [ 254.738009][T14555] RBP: 00007f1d3f216090 R08: 0000000000000003 R09: 0000000000000000 [ 254.738023][T14555] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 254.738035][T14555] R13: 00007f1d40a56128 R14: 00007f1d40a56090 R15: 00007ffc2d817978 [ 254.738060][T14555] [ 255.013258][T14567] option changes via remount are deprecated (pid=14566 comm=syz.1.3173) [ 255.053380][T14573] loop2: detected capacity change from 0 to 128 [ 255.093675][T14573] FAT-fs (loop2): error, invalid access to FAT (entry 0x00080007) [ 255.101626][T14573] FAT-fs (loop2): Filesystem has been set read-only [ 255.219824][T14591] loop7: detected capacity change from 256 to 0 [ 255.374071][T14595] loop9: detected capacity change from 0 to 512 [ 255.432056][T14616] option changes via remount are deprecated (pid=14613 comm=syz.8.3187) [ 255.535721][T14595] EXT4-fs (loop9): 1 orphan inode deleted [ 255.556444][T14631] loop4: detected capacity change from 0 to 512 [ 255.556837][T14631] EXT4-fs: Ignoring removed bh option [ 255.563365][T14631] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 255.581322][ T6005] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 255.617841][T14631] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3192: bad orphan inode 131083 [ 255.631869][T14595] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.663845][T14631] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.3192: path /103/file1: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 255.691668][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3178'. [ 255.804468][T14650] binfmt_misc: register: failed to install interpreter file ./file0 [ 255.894374][T14665] loop4: detected capacity change from 0 to 1024 [ 255.962405][T14665] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.3201: inode #778331508: comm syz.4.3201: iget: illegal inode # [ 255.964474][T14665] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.3201: error while reading EA inode 778331508 err=-117 [ 256.029596][T14665] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #15: comm syz.4.3201: corrupted xattr block 113: invalid header [ 256.087782][T14677] option changes via remount are deprecated (pid=14668 comm=syz.8.3204) [ 256.229799][T14687] loop2: detected capacity change from 0 to 512 [ 256.280344][T14687] EXT4-fs: Ignoring removed oldalloc option [ 256.302622][T14685] loop4: detected capacity change from 0 to 512 [ 256.332389][T14687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 256.382849][T14687] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #11: comm syz.2.3207: corrupted in-inode xattr: invalid ea_ino [ 256.426632][T14687] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3207: couldn't read orphan inode 11 (err -117) [ 256.485136][T14685] EXT4-fs (loop4): 1 orphan inode deleted [ 256.498104][T14685] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.509978][T13484] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:31: Failed to release dquot type 1 [ 256.530277][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3206'. [ 256.673754][T14696] loop4: detected capacity change from 0 to 512 [ 256.701324][T14696] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3209: inode has both inline data and extents flags [ 256.744667][T14696] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3209: couldn't read orphan inode 15 (err -117) [ 256.909008][T14706] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.993690][T14713] ip6_vti0 speed is unknown, defaulting to 1000 [ 257.044997][T14715] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 257.230728][T14724] binfmt_misc: register: failed to install interpreter file ./file0 [ 257.298754][T14727] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3222'. [ 257.388642][T14720] EXT4-fs (loop4): 1 orphan inode deleted [ 257.407837][ T52] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 257.454172][T14720] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.498411][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3219'. [ 257.800242][T14747] option changes via remount are deprecated (pid=14746 comm=syz.4.3227) [ 257.886709][T14741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.895395][T14741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.030773][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3229'. [ 258.688951][T14778] set_capacity_and_notify: 4 callbacks suppressed [ 258.689026][T14778] loop4: detected capacity change from 0 to 512 [ 258.821542][T14780] option changes via remount are deprecated (pid=14779 comm=syz.8.3238) [ 258.851549][T14778] EXT4-fs (loop4): 1 orphan inode deleted [ 258.861765][T14762] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.869264][T14762] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.877290][T14778] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.912863][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 258.961165][ T6005] __quota_error: 55 callbacks suppressed [ 258.961185][ T6005] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 258.977467][ T6005] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 259.331491][T14762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.345159][T14762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.482947][T13496] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.532493][T13496] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.541916][T14797] binfmt_misc: register: failed to install interpreter file ./file0 [ 259.591400][T13496] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.613683][T13496] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.706283][T14801] loop8: detected capacity change from 0 to 1024 [ 259.993090][ T29] audit: type=1326 audit(1803724293.305:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.019940][ T29] audit: type=1326 audit(1803724293.305:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.053549][ T29] audit: type=1326 audit(1803724293.351:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.077316][ T29] audit: type=1326 audit(1803724293.351:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.101738][ T29] audit: type=1326 audit(1803724293.351:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.125281][ T29] audit: type=1326 audit(1803724293.351:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.149587][ T29] audit: type=1326 audit(1803724293.351:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.173124][ T29] audit: type=1326 audit(1803724293.351:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.197365][ T29] audit: type=1326 audit(1803724293.351:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="syz.8.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe42eabaeb9 code=0x7ffc0000 [ 260.379065][T14823] loop8: detected capacity change from 0 to 512 [ 260.481326][T14829] loop1: detected capacity change from 0 to 1024 [ 260.508954][T14829] EXT4-fs: Ignoring removed i_version option [ 260.529708][T14829] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 260.541436][T14823] EXT4-fs (loop8): 1 orphan inode deleted [ 260.561761][ T6005] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 260.598276][T14823] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.696096][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3250'. [ 260.719402][T14839] loop4: detected capacity change from 0 to 512 [ 260.732798][T14839] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3254: inode has both inline data and extents flags [ 260.733324][T14839] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3254: couldn't read orphan inode 15 (err -117) [ 260.749310][T14840] option changes via remount are deprecated (pid=14831 comm=syz.1.3252) [ 260.852569][T14843] loop8: detected capacity change from 0 to 1024 [ 261.060805][T14848] loop4: detected capacity change from 0 to 8192 [ 261.437563][T14869] loop4: detected capacity change from 0 to 512 [ 261.575324][T14869] EXT4-fs (loop4): 1 orphan inode deleted [ 261.604424][T13496] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:42: Failed to release dquot type 1 [ 261.661122][T14869] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.710402][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3265'. [ 261.845746][T14872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.870617][T14872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.040927][T14889] netlink: 'syz.1.3270': attribute type 13 has an invalid length. [ 262.107843][T14890] wireguard0: left promiscuous mode [ 262.113210][T14890] wireguard0: left allmulticast mode [ 262.196681][T14900] xt_bpf: check failed: parse error [ 262.206075][T14900] loop1: detected capacity change from 0 to 512 [ 262.216937][T14900] EXT4-fs: inline encryption not supported [ 262.223008][T14900] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.231742][T14900] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.3275: inode #13: comm syz.1.3275: iget: illegal inode # [ 262.260920][T14900] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3275: couldn't read orphan inode 13 (err -117) [ 262.274822][T14900] EXT4-fs mount: 73 callbacks suppressed [ 262.274847][T14900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.492402][T14245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.618166][T14930] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3282'. [ 262.629132][T14930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=14930 comm=syz.8.3282 [ 262.642046][T14930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=14930 comm=syz.8.3282 [ 262.655186][T14930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=14930 comm=syz.8.3282 [ 262.669226][T14930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=14930 comm=syz.8.3282 [ 262.685446][T14930] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3282'. [ 262.694408][T14930] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3282'. [ 262.706674][T14930] geneve2: entered promiscuous mode [ 262.711991][T14930] geneve2: entered allmulticast mode [ 262.718502][T13496] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.727660][T13496] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.737265][T13496] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.750407][T14930] loop8: detected capacity change from 0 to 1024 [ 262.750786][T13496] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.762598][T14930] EXT4-fs: Ignoring removed bh option [ 262.788065][T14930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.816670][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.848865][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3283'. [ 262.865199][T14936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 262.941823][T14941] binfmt_misc: register: failed to install interpreter file ./file0 [ 263.097775][T14953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.111125][T14953] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.129366][T14953] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 18: comm syz.8.3290: lblock 23 mapped to illegal pblock 18 (length 1) [ 263.144214][T14953] EXT4-fs (loop8): Remounting filesystem read-only [ 263.182306][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.321264][T14961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.431054][T14968] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3293: bg 0: block 392: padding at end of block bitmap is not set [ 263.445923][T14968] EXT4-fs (loop2): Remounting filesystem read-only [ 263.460866][T14970] geneve2: left promiscuous mode [ 263.466165][T14970] geneve2: left allmulticast mode [ 263.473356][T13496] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.486736][T13496] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.506857][T13496] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.529753][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.533398][T13496] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.775263][T14972] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.776818][T14976] iso9660: Bad value for 'sbsector' [ 263.976945][T14984] option changes via remount are deprecated (pid=14983 comm=syz.4.3302) [ 264.059223][T14988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14988 comm=syz.2.3303 [ 264.107842][T14991] netlink: 'syz.4.3304': attribute type 13 has an invalid length. [ 264.279081][T14997] netlink: 6 bytes leftover after parsing attributes in process `syz.8.3306'. [ 264.322301][T14999] set_capacity_and_notify: 4 callbacks suppressed [ 264.322319][T14999] loop8: detected capacity change from 0 to 1024 [ 264.359740][T14999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.361094][T15003] loop2: detected capacity change from 0 to 1024 [ 264.390869][T15003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.559258][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.600399][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 264.600470][ T29] audit: type=1400 audit(1803724297.617:6136): avc: denied { ioctl } for pid=15011 comm="syz.8.3310" path="socket:[43968]" dev="sockfs" ino=43968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.666878][ T29] audit: type=1400 audit(1803724297.645:6137): avc: denied { bind } for pid=15011 comm="syz.8.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.686397][ T29] audit: type=1400 audit(1803724297.645:6138): avc: denied { write } for pid=15011 comm="syz.8.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.785293][ T29] audit: type=1400 audit(1803724297.785:6139): avc: denied { ioctl } for pid=15011 comm="syz.8.3310" path="socket:[43977]" dev="sockfs" ino=43977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 264.837805][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.851984][ T29] audit: type=1400 audit(1803724297.851:6140): avc: denied { sys_module } for pid=15011 comm="syz.8.3310" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 264.880588][ T29] audit: type=1400 audit(1803724297.888:6141): avc: denied { create } for pid=15011 comm="syz.8.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 264.926953][ T29] audit: type=1400 audit(1803724297.925:6142): avc: denied { create } for pid=15022 comm="syz.2.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 264.947136][T15018] loop7: detected capacity change from 0 to 256 [ 265.012239][ T29] audit: type=1400 audit(1803724297.991:6143): avc: denied { search } for pid=15025 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.034883][ T29] audit: type=1400 audit(1803724297.991:6144): avc: denied { search } for pid=15025 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.034922][ T29] audit: type=1400 audit(1803724297.991:6145): avc: denied { search } for pid=15025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.113021][T15036] binfmt_misc: register: failed to install interpreter file ./file0 [ 265.139173][T15039] option changes via remount are deprecated (pid=15027 comm=syz.8.3315) [ 266.037922][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'. [ 266.049615][T15085] bridge_slave_1: left allmulticast mode [ 266.055900][T15085] bridge_slave_1: left promiscuous mode [ 266.062696][T15085] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.074349][T15084] netlink: 281 bytes leftover after parsing attributes in process `syz.4.3325'. [ 266.086854][T15085] bridge_slave_0: left allmulticast mode [ 266.093214][T15085] bridge_slave_0: left promiscuous mode [ 266.099325][T15085] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.203236][T15087] ip6_vti0 speed is unknown, defaulting to 1000 [ 266.283560][T15104] sd 0:0:1:0: device reset [ 266.306386][T15104] loop2: detected capacity change from 0 to 1024 [ 266.323971][T15104] EXT4-fs: Ignoring removed orlov option [ 266.384491][T15104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.597446][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.704057][T15124] FAULT_INJECTION: forcing a failure. [ 266.704057][T15124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.717885][T15124] CPU: 0 UID: 0 PID: 15124 Comm: syz.2.3338 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 266.717920][T15124] Tainted: [W]=WARN [ 266.717927][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.717942][T15124] Call Trace: [ 266.717952][T15124] [ 266.717962][T15124] __dump_stack+0x1d/0x30 [ 266.718064][T15124] dump_stack_lvl+0x95/0xd0 [ 266.718093][T15124] dump_stack+0x15/0x1b [ 266.718117][T15124] should_fail_ex+0x263/0x280 [ 266.718161][T15124] should_fail+0xb/0x20 [ 266.718249][T15124] should_fail_usercopy+0x1a/0x20 [ 266.718291][T15124] _copy_from_user+0x1c/0xb0 [ 266.718398][T15124] ___sys_sendmsg+0xc1/0x1e0 [ 266.718443][T15124] __x64_sys_sendmsg+0xd4/0x160 [ 266.718468][T15124] x64_sys_call+0x17ba/0x3000 [ 266.718494][T15124] do_syscall_64+0xc0/0x2a0 [ 266.718608][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.718642][T15124] RIP: 0033:0x7f1d407daeb9 [ 266.718667][T15124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.718692][T15124] RSP: 002b:00007f1d3f237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.718718][T15124] RAX: ffffffffffffffda RBX: 00007f1d40a55fa0 RCX: 00007f1d407daeb9 [ 266.718765][T15124] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 000000000000000c [ 266.718779][T15124] RBP: 00007f1d3f237090 R08: 0000000000000000 R09: 0000000000000000 [ 266.718792][T15124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.718805][T15124] R13: 00007f1d40a56038 R14: 00007f1d40a55fa0 R15: 00007ffc2d817978 [ 266.718835][T15124] [ 268.914616][T15150] loop2: detected capacity change from 0 to 512 [ 268.924581][T15150] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 268.925968][T15153] netlink: 'syz.4.3349': attribute type 29 has an invalid length. [ 268.955291][T15150] EXT4-fs (loop2): orphan cleanup on readonly fs [ 268.961907][T15150] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.3348: inode #15: comm syz.2.3348: iget: illegal inode # [ 268.976100][T15150] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3348: couldn't read orphan inode 15 (err -117) [ 268.996458][T15150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 270.611165][T15168] IPVS: sed: FWM 3 0x00000003 - no destination available [ 270.621314][ T36] IPVS: starting estimator thread 0... [ 270.627429][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.630343][T15158] netlink: 'syz.8.3350': attribute type 13 has an invalid length. [ 270.717516][T15170] IPVS: using max 2256 ests per chain, 112800 per kthread [ 270.767394][T15179] ip6_vti0 speed is unknown, defaulting to 1000 [ 270.785552][T15189] program syz.1.3355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.799445][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 270.799466][ T29] audit: type=1400 audit(1803724303.407:6263): avc: denied { read } for pid=15180 comm="syz.1.3355" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.829244][ T29] audit: type=1400 audit(1803724303.407:6264): avc: denied { open } for pid=15180 comm="syz.1.3355" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.853699][ T29] audit: type=1400 audit(1803724303.407:6265): avc: denied { ioctl } for pid=15180 comm="syz.1.3355" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.879053][ T29] audit: type=1400 audit(1803724303.407:6266): avc: denied { write } for pid=15180 comm="syz.1.3355" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 270.934339][T15181] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3355'. [ 270.953180][T15198] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3358'. [ 270.966058][ T29] audit: type=1400 audit(1803724303.575:6267): avc: denied { create } for pid=15194 comm="syz.4.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.000690][ T29] audit: type=1400 audit(1803724303.594:6268): avc: denied { write } for pid=15194 comm="syz.4.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.008679][ T36] hid_parser_main: 1 callbacks suppressed [ 271.008746][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.020613][ T29] audit: type=1400 audit(1803724303.594:6269): avc: denied { execmem } for pid=15194 comm="syz.4.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 271.054113][ T29] audit: type=1400 audit(1803724303.603:6270): avc: denied { read write } for pid=15180 comm="syz.1.3355" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 271.063918][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.079654][ T29] audit: type=1400 audit(1803724303.603:6271): avc: denied { open } for pid=15180 comm="syz.1.3355" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 271.114259][T15198] bond2 (unregistering): Released all slaves [ 271.232624][ T29] audit: type=1400 audit(1803724303.659:6272): avc: denied { lock } for pid=15196 comm="syz.8.3358" path="socket:[44268]" dev="sockfs" ino=44268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 271.673285][T15219] loop8: detected capacity change from 0 to 512 [ 271.825155][T15233] loop1: detected capacity change from 0 to 512 [ 271.916046][T15233] EXT4-fs (loop1): 1 orphan inode deleted [ 271.928036][T15233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.944774][T13484] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:31: Failed to release dquot type 1 [ 271.945145][T15233] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.972763][T15219] EXT4-fs (loop8): 1 orphan inode deleted [ 271.989817][T13484] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:31: Failed to release dquot type 1 [ 272.023665][T15219] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.057537][T15219] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.080471][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3366'. [ 272.136571][T14245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.139838][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3361'. [ 272.213945][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.258737][T15259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3369'. [ 272.269875][T15259] loop1: detected capacity change from 0 to 128 [ 272.276817][T15259] vfat: Unknown parameter '' [ 272.310688][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 272.354430][T15263] loop1: detected capacity change from 0 to 2048 [ 272.355654][T15265] netlink: 'syz.8.3372': attribute type 4 has an invalid length. [ 272.474823][T15270] option changes via remount are deprecated (pid=15269 comm=syz.8.3373) [ 272.491399][T15276] loop9: detected capacity change from 0 to 1024 [ 272.519990][ T3300] loop1: unable to read partition table [ 272.529761][ T3300] loop1: partition table beyond EOD, truncated [ 272.607750][T15276] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.650391][T15276] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.748445][T15276] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3376: bg 0: block 112: padding at end of block bitmap is not set [ 272.771113][T15288] loop8: detected capacity change from 0 to 512 [ 272.824101][T15263] loop1: unable to read partition table [ 272.825199][T15275] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.3376: lblock 0 mapped to illegal pblock 0 (length 1) [ 272.830102][T15263] loop1: partition table beyond EOD, truncated [ 272.850380][T15263] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 272.894237][T15288] EXT4-fs (loop8): 1 orphan inode deleted [ 272.900641][T15288] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.914682][T13484] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:31: Failed to release dquot type 1 [ 272.960910][T15288] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.983544][ T3001] loop1: unable to read partition table [ 273.015804][ T3001] loop1: partition table beyond EOD, truncated [ 273.078768][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.099684][T15283] loop2: detected capacity change from 0 to 512 [ 273.124364][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 273.308939][T15283] EXT4-fs (loop2): 1 orphan inode deleted [ 273.333312][T15310] loop9: detected capacity change from 0 to 8192 [ 273.341423][T13488] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:35: Failed to release dquot type 1 [ 273.364513][T15283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.409441][T11213] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 273.417396][T11213] FAT-fs (loop9): Filesystem has been set read-only [ 273.438856][T15283] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.491760][T15322] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3392'. [ 273.566478][T15328] netlink: 'syz.8.3396': attribute type 29 has an invalid length. [ 273.572780][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'. [ 273.583469][T15329] ip6_vti0 speed is unknown, defaulting to 1000 [ 273.639375][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.718280][T15351] netlink: 'syz.4.3406': attribute type 21 has an invalid length. [ 273.741485][T15354] binfmt_misc: register: failed to install interpreter file ./file0 [ 274.010602][T15368] loop1: detected capacity change from 0 to 1024 [ 274.185966][T15368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.237562][T14245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.600279][T15378] netlink: 'syz.8.3415': attribute type 13 has an invalid length. [ 274.609511][T15378] netlink: 'syz.8.3415': attribute type 12 has an invalid length. [ 274.838390][T15390] FAULT_INJECTION: forcing a failure. [ 274.838390][T15390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.852060][T15390] CPU: 1 UID: 0 PID: 15390 Comm: syz.9.3420 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.852123][T15390] Tainted: [W]=WARN [ 274.852132][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.852147][T15390] Call Trace: [ 274.852157][T15390] [ 274.852168][T15390] __dump_stack+0x1d/0x30 [ 274.852260][T15390] dump_stack_lvl+0x95/0xd0 [ 274.852288][T15390] dump_stack+0x15/0x1b [ 274.852314][T15390] should_fail_ex+0x263/0x280 [ 274.852350][T15390] should_fail+0xb/0x20 [ 274.852383][T15390] should_fail_usercopy+0x1a/0x20 [ 274.852425][T15390] _copy_from_user+0x1c/0xb0 [ 274.852507][T15390] do_replace+0x8a/0x360 [ 274.852539][T15390] do_ebt_set_ctl+0x12e/0xcd0 [ 274.852644][T15390] ? _parse_integer_limit+0x170/0x190 [ 274.852681][T15390] ? __rcu_read_unlock+0x4e/0x70 [ 274.852722][T15390] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 274.852836][T15390] ? ip4_datagram_release_cb+0x3ee/0x420 [ 274.852940][T15390] ? _raw_spin_unlock_bh+0x18/0x20 [ 274.852964][T15390] ? release_sock+0x116/0x150 [ 274.853049][T15390] ? sockopt_release_sock+0x41/0x50 [ 274.853082][T15390] ? do_ip_setsockopt+0x1af1/0x2290 [ 274.853120][T15390] nf_setsockopt+0x199/0x1b0 [ 274.853184][T15390] ip_setsockopt+0x102/0x110 [ 274.853218][T15390] udp_setsockopt+0x99/0xb0 [ 274.853256][T15390] sock_common_setsockopt+0x69/0x80 [ 274.853320][T15390] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 274.853411][T15390] __sys_setsockopt+0x184/0x200 [ 274.853449][T15390] __x64_sys_setsockopt+0x64/0x80 [ 274.853499][T15390] x64_sys_call+0x21d5/0x3000 [ 274.853580][T15390] do_syscall_64+0xc0/0x2a0 [ 274.853617][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.853669][T15390] RIP: 0033:0x7f9181b3aeb9 [ 274.853754][T15390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.853779][T15390] RSP: 002b:00007f9180597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 274.853842][T15390] RAX: ffffffffffffffda RBX: 00007f9181db5fa0 RCX: 00007f9181b3aeb9 [ 274.853870][T15390] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 274.853884][T15390] RBP: 00007f9180597090 R08: 0000000000000108 R09: 0000000000000000 [ 274.853903][T15390] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 274.853921][T15390] R13: 00007f9181db6038 R14: 00007f9181db5fa0 R15: 00007ffd10ea7af8 [ 274.853994][T15390] [ 275.222795][T15396] binfmt_misc: register: failed to install interpreter file ./file0 [ 275.508917][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3426'. [ 275.524458][T15414] loop8: detected capacity change from 0 to 1024 [ 275.536737][T15419] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.542660][T15416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.551628][T15416] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.562969][T15419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 275.575866][T15414] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.588696][T15416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000010 r/w without journal. Quota mode: none. [ 275.605346][T15416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3427'. [ 275.615975][T15419] EXT4-fs (loop2): 1 truncate cleaned up [ 275.622503][T15419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.762662][T14245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000010. [ 275.852112][T15431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.969452][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.998518][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.115412][T15442] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 276.169747][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 276.169769][ T29] audit: type=1400 audit(1803724308.411:6425): avc: denied { create } for pid=15444 comm="syz.8.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 276.214408][ T29] audit: type=1400 audit(1803724308.486:6426): avc: denied { create } for pid=15444 comm="syz.8.3434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.267400][ T29] audit: type=1400 audit(1803724308.533:6427): avc: denied { sys_module } for pid=15450 comm="syz.4.3436" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 276.360752][ T29] audit: type=1400 audit(1803724308.617:6428): avc: denied { create } for pid=15450 comm="syz.4.3436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.399624][ T29] audit: type=1400 audit(1803724308.654:6429): avc: denied { connect } for pid=15460 comm="syz.8.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.423651][T15461] __nla_validate_parse: 1 callbacks suppressed [ 276.423682][T15461] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3438'. [ 276.464224][ T29] audit: type=1400 audit(1803724308.711:6430): avc: denied { listen } for pid=15460 comm="syz.8.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 276.484837][ T29] audit: type=1400 audit(1803724308.711:6431): avc: denied { create } for pid=15460 comm="syz.8.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.516822][ T29] audit: type=1400 audit(1803724308.767:6432): avc: denied { bind } for pid=15460 comm="syz.8.3438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.536622][ T29] audit: type=1400 audit(1803724308.767:6433): avc: denied { name_bind } for pid=15460 comm="syz.8.3438" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 276.559111][ T29] audit: type=1400 audit(1803724308.767:6434): avc: denied { node_bind } for pid=15460 comm="syz.8.3438" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 276.589877][T15467] binfmt_misc: register: failed to install interpreter file ./file0 [ 276.658522][ T3300] loop8: unable to read partition table [ 276.665462][ T3300] loop8: partition table beyond EOD, truncated [ 276.711419][T15461] loop8: unable to read partition table [ 276.725602][T15461] loop8: partition table beyond EOD, truncated [ 276.731898][T15461] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 276.809430][ T3001] loop8: unable to read partition table [ 276.816400][ T3001] loop8: partition table beyond EOD, truncated [ 276.891376][T14245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.927870][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3442'. [ 276.973074][T15473] netlink: 'syz.1.3443': attribute type 29 has an invalid length. [ 276.979301][T15475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 277.005590][T15471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.035771][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 277.088672][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3444'. [ 277.121876][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3446'. [ 277.130932][T15483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3446'. [ 277.381956][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.474445][T15490] set_capacity_and_notify: 5 callbacks suppressed [ 277.474467][T15490] loop8: detected capacity change from 0 to 512 [ 277.501110][T15490] EXT4-fs (loop8): #blocks per group too big: 131071 [ 277.583755][T15498] loop8: detected capacity change from 0 to 1024 [ 277.600311][T15500] loop9: detected capacity change from 0 to 2048 [ 277.609869][T15498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 277.628859][T15496] loop2: detected capacity change from 0 to 512 [ 277.639463][T15498] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.726573][T11226] loop9: unable to read partition table [ 277.732970][T11226] loop9: partition table beyond EOD, truncated [ 277.779082][T15500] loop9: unable to read partition table [ 277.789098][T15500] loop9: partition table beyond EOD, truncated [ 277.796114][T15500] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 277.809031][T15496] EXT4-fs (loop2): 1 orphan inode deleted [ 277.827810][ T6005] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 277.871940][T15496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.888322][T15498] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.3452: lblock 3 mapped to illegal pblock 3 (length 2) [ 277.904907][T15496] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.920242][T15498] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.3452: lblock 0 mapped to illegal pblock 0 (length 1) [ 277.935120][T15498] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 277.947651][T15498] EXT4-fs (loop8): This should not happen!! Data will be lost [ 277.947651][T15498] [ 277.947656][ T3001] loop9: unable to read partition table [ 277.967597][ T3001] loop9: partition table beyond EOD, truncated [ 277.982242][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3451'. [ 278.006946][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.017154][T15498] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 1: comm syz.8.3452: lblock 1 mapped to illegal pblock 1 (length 2) [ 278.054073][T15498] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117 [ 278.066643][T15498] EXT4-fs (loop8): This should not happen!! Data will be lost [ 278.066643][T15498] [ 278.221791][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3460'. [ 278.301061][T15525] loop2: detected capacity change from 0 to 1024 [ 278.307666][T15506] loop1: detected capacity change from 0 to 128 [ 278.391624][T15525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.405073][ T6005] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 4: comm kworker/u8:11: lblock 4 mapped to illegal pblock 4 (length 1) [ 278.437388][T15525] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.448652][ T6005] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 278.461202][ T6005] EXT4-fs (loop8): This should not happen!! Data will be lost [ 278.461202][ T6005] [ 278.513590][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 278.567886][T15535] binfmt_misc: register: failed to install interpreter file ./file0 [ 278.593404][T15538] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm syz.2.3459: lblock 8 mapped to illegal pblock 8 (length 8) [ 278.608808][T15538] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.3459: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 278.654824][T15540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3464'. [ 278.664445][T15543] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.3459: lblock 0 mapped to illegal pblock 0 (length 1) [ 278.689168][T15543] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 278.702680][T15543] EXT4-fs (loop2): This should not happen!! Data will be lost [ 278.702680][T15543] [ 278.761766][T15538] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 1: comm syz.2.3459: lblock 1 mapped to illegal pblock 1 (length 4) [ 278.789606][T15538] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117 [ 278.802134][T15538] EXT4-fs (loop2): This should not happen!! Data will be lost [ 278.802134][T15538] [ 278.853837][T15550] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.938423][T15554] ip6_vti0 speed is unknown, defaulting to 1000 [ 278.962270][T15557] netlink: 'syz.4.3469': attribute type 4 has an invalid length. [ 278.971876][T15557] netlink: 'syz.4.3469': attribute type 4 has an invalid length. [ 279.197500][T12536] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 279.381963][T15569] loop9: detected capacity change from 0 to 1024 [ 279.495362][T15569] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.514369][T15579] tipc: Enabling of bearer rejected, failed to enable media [ 279.894930][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.972632][T15593] tipc: Started in network mode [ 279.977779][T15593] tipc: Node identity 8a7a6a6adc2c, cluster identity 4711 [ 279.985147][T15593] tipc: Enabled bearer , priority 0 [ 280.056249][T15592] tipc: Disabling bearer [ 280.236633][T15598] loop9: detected capacity change from 0 to 512 [ 280.365509][T15598] EXT4-fs (loop9): 1 orphan inode deleted [ 280.417002][T13484] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:31: Failed to release dquot type 1 [ 280.439985][T15598] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.490089][T15598] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.547856][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.619216][T15609] binfmt_misc: register: failed to install interpreter file ./file0 [ 280.647998][T15612] loop2: detected capacity change from 0 to 128 [ 280.715971][T15615] loop9: detected capacity change from 0 to 512 [ 280.746493][T15615] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.782729][T15615] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 280.823990][T15615] EXT4-fs (loop9): Remounting filesystem read-only [ 280.840673][T15615] EXT4-fs (loop9): 1 truncate cleaned up [ 280.854443][T15621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.879216][T15615] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.957749][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.102747][T15628] FAULT_INJECTION: forcing a failure. [ 281.102747][T15628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.115959][T15628] CPU: 1 UID: 0 PID: 15628 Comm: syz.9.3493 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.116014][T15628] Tainted: [W]=WARN [ 281.116023][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.116041][T15628] Call Trace: [ 281.116051][T15628] [ 281.116062][T15628] __dump_stack+0x1d/0x30 [ 281.116089][T15628] dump_stack_lvl+0x95/0xd0 [ 281.116124][T15628] dump_stack+0x15/0x1b [ 281.116145][T15628] should_fail_ex+0x263/0x280 [ 281.116186][T15628] should_fail+0xb/0x20 [ 281.116227][T15628] should_fail_usercopy+0x1a/0x20 [ 281.116288][T15628] _copy_from_user+0x1c/0xb0 [ 281.116313][T15628] ucma_write+0xd8/0x260 [ 281.116414][T15628] ? __pfx_ucma_write+0x10/0x10 [ 281.116462][T15628] vfs_write+0x269/0x9f0 [ 281.116546][T15628] ? __rcu_read_unlock+0x4e/0x70 [ 281.116662][T15628] ? __fget_files+0x184/0x1c0 [ 281.116695][T15628] ksys_write+0xdc/0x1a0 [ 281.116776][T15628] __x64_sys_write+0x40/0x50 [ 281.116803][T15628] x64_sys_call+0x2847/0x3000 [ 281.116834][T15628] do_syscall_64+0xc0/0x2a0 [ 281.116874][T15628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.116898][T15628] RIP: 0033:0x7f9181b3aeb9 [ 281.116919][T15628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.116945][T15628] RSP: 002b:00007f9180597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.116972][T15628] RAX: ffffffffffffffda RBX: 00007f9181db5fa0 RCX: 00007f9181b3aeb9 [ 281.117058][T15628] RDX: 0000000000000118 RSI: 0000200000000340 RDI: 0000000000000003 [ 281.117076][T15628] RBP: 00007f9180597090 R08: 0000000000000000 R09: 0000000000000000 [ 281.117095][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.117129][T15628] R13: 00007f9181db6038 R14: 00007f9181db5fa0 R15: 00007ffd10ea7af8 [ 281.117166][T15628] [ 281.355870][T14245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.537309][T11226] loop1: p2 p3 p4 [ 281.541167][T11226] loop1: p2 size 64053 extends beyond EOD, truncated [ 281.557596][T11226] loop1: p3 start 65280 is beyond EOD, truncated [ 281.564126][T11226] loop1: p4 size 50331904 extends beyond EOD, truncated [ 281.577868][T15630] loop1: p2 p3 p4 [ 281.582940][T15630] loop1: p2 size 64053 extends beyond EOD, truncated [ 281.592699][ T3300] loop9: unable to read partition table [ 281.598851][T15630] loop1: p3 start 65280 is beyond EOD, truncated [ 281.600850][ T3300] loop9: partition table beyond EOD, [ 281.605283][T15630] loop1: p4 size 50331904 extends beyond EOD, [ 281.605251][ T3300] truncated [ 281.620902][T15630] truncated [ 281.657704][T15634] loop8: unable to read partition table [ 281.663427][T15634] loop8: partition table beyond EOD, truncated [ 281.669706][T15634] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 281.694264][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 281.694284][ T29] audit: type=1400 audit(1803724313.593:6535): avc: denied { create } for pid=15629 comm="syz.1.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 281.782516][T15632] loop9: unable to read partition table [ 281.795087][T15632] loop9: partition table beyond EOD, truncated [ 281.802436][T15632] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 281.896822][ T29] audit: type=1326 audit(1803724313.799:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 281.920741][ T29] audit: type=1326 audit(1803724313.799:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 281.944354][ T29] audit: type=1326 audit(1803724313.799:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 281.968239][ T29] audit: type=1326 audit(1803724313.799:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 281.991825][ T29] audit: type=1326 audit(1803724313.799:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 282.015678][ T29] audit: type=1326 audit(1803724313.799:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 282.039373][ T29] audit: type=1326 audit(1803724313.799:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 282.063698][ T29] audit: type=1326 audit(1803724313.799:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 282.087602][ T29] audit: type=1326 audit(1803724313.799:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15644 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d407daeb9 code=0x7ffc0000 [ 282.127746][ T3001] loop8: unable to read partition table [ 282.133539][ T3001] loop8: partition table beyond EOD, truncated [ 282.155808][T11226] udevd[11226]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 282.159733][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 282.201630][T15652] __nla_validate_parse: 7 callbacks suppressed [ 282.201650][T15652] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3499'. [ 282.234712][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 282.246228][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 282.292152][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 282.355274][T15658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.359097][T15656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.409493][T15653] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 282.419534][T15653] EXT4-fs (loop9): inodes count not valid: 1 vs 32 [ 282.432673][T15658] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.496349][T10540] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.570097][T15666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.579271][T15666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.637394][T15672] EXT4-fs: Ignoring removed orlov option [ 282.701437][T15672] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 282.736407][T15672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.826714][T14245] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.863237][ T3300] ================================================================== [ 282.872193][ T3300] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 282.879568][ T3300] [ 282.881521][T15682] FAULT_INJECTION: forcing a failure. [ 282.881521][T15682] name failslab, interval 1, probability 0, space 0, times 0 [ 282.882006][ T3300] write to 0xffff8881074ab25c of 4 bytes by task 11226 on cpu 1: [ 282.896280][T15682] CPU: 1 UID: 0 PID: 15682 Comm: syz.1.3509 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.896400][T15682] Tainted: [W]=WARN [ 282.896429][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.896474][T15682] Call Trace: [ 282.896496][T15682] [ 282.896529][T15682] __dump_stack+0x1d/0x30 [ 282.896616][T15682] dump_stack_lvl+0x95/0xd0 [ 282.896696][T15682] dump_stack+0x15/0x1b [ 282.896804][T15682] should_fail_ex+0x263/0x280 [ 282.896902][T15682] should_failslab+0x8c/0xb0 [ 282.896983][T15682] __kmalloc_cache_noprof+0x64/0x4a0 [ 282.897135][T15682] ? audit_log_d_path+0x8d/0x150 [ 282.897256][T15682] audit_log_d_path+0x8d/0x150 [ 282.897363][T15682] audit_log_d_path_exe+0x42/0x70 [ 282.897546][T15682] audit_log_task+0x1e8/0x250 [ 282.897667][T15682] ? kstrtouint+0x76/0xc0 [ 282.897803][T15682] audit_seccomp+0x60/0x100 [ 282.897897][T15682] ? __seccomp_filter+0x8db/0x1350 [ 282.897971][T15682] __seccomp_filter+0x8ec/0x1350 [ 282.898046][T15682] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 282.898169][T15682] ? vfs_write+0x86e/0x9f0 [ 282.898302][T15682] __secure_computing+0x81/0x150 [ 282.898421][T15682] syscall_trace_enter+0xce/0x1e0 [ 282.898639][T15682] do_syscall_64+0x9a/0x2a0 [ 282.898772][T15682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.898965][T15682] RIP: 0033:0x7f5fd8a4aeb9 [ 282.899024][T15682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.899087][T15682] RSP: 002b:00007f5fd74a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 282.899166][T15682] RAX: ffffffffffffffda RBX: 00007f5fd8cc5fa0 RCX: 00007f5fd8a4aeb9 [ 282.899268][T15682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.899339][T15682] RBP: 00007f5fd74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.899410][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.899506][T15682] R13: 00007f5fd8cc6038 R14: 00007f5fd8cc5fa0 R15: 00007ffc3e7af748 [ 282.899607][T15682] [ 283.119740][ T3300] simple_unlink+0x54/0x80 [ 283.124287][ T3300] shmem_unlink+0x12d/0x140 [ 283.128815][ T3300] vfs_unlink+0x28b/0x440 [ 283.133185][ T3300] do_unlinkat+0x1e2/0x4b0 [ 283.137659][ T3300] __x64_sys_unlink+0x2e/0x40 [ 283.142815][ T3300] x64_sys_call+0x2f48/0x3000 [ 283.147726][ T3300] do_syscall_64+0xc0/0x2a0 [ 283.152507][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.158538][ T3300] [ 283.160887][ T3300] read to 0xffff8881074ab25c of 4 bytes by task 3300 on cpu 0: [ 283.168655][ T3300] fill_mg_cmtime+0x5b/0x260 [ 283.173436][ T3300] generic_fillattr+0x24a/0x340 [ 283.178475][ T3300] shmem_getattr+0x181/0x200 [ 283.183129][ T3300] vfs_getattr_nosec+0x146/0x1e0 [ 283.188120][ T3300] vfs_getattr+0x48/0x60 [ 283.192443][ T3300] vfs_statx_path+0x28/0x140 [ 283.197632][ T3300] vfs_statx+0xc4/0x170 [ 283.202010][ T3300] vfs_fstatat+0x115/0x170 [ 283.206738][ T3300] __se_sys_newfstatat+0x55/0x3e0 [ 283.212499][ T3300] __x64_sys_newfstatat+0x55/0x70 [ 283.218122][ T3300] x64_sys_call+0x111f/0x3000 [ 283.222943][ T3300] do_syscall_64+0xc0/0x2a0 [ 283.227497][ T3300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.233788][ T3300] [ 283.236243][ T3300] value changed: 0x29f5669e -> 0x2a2418dc [ 283.241996][ T3300] [ 283.244354][ T3300] Reported by Kernel Concurrency Sanitizer on: [ 283.251711][ T3300] CPU: 0 UID: 0 PID: 3300 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 283.262612][ T3300] Tainted: [W]=WARN [ 283.266538][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.276708][ T3300] ================================================================== [ 283.315063][T11213] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.