last executing test programs: 4m49.303973368s ago: executing program 32 (id=66): inotify_init() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x13) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000300)) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20f", 0x86}, {&(0x7f0000002700)="d6f4de", 0x3}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getgid() setresgid(0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000140)={0x2}, 0x8) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r6, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000004c0)=0x80, 0x4) 2m37.574324853s ago: executing program 33 (id=1358): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x800) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000, 0x8}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) timer_create(0x3, 0x0, &(0x7f00000001c0)) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x400, 0x10, 0x2, 0x7}, &(0x7f0000000240)=0x18) syz_io_uring_setup(0x4aa, 0x0, &(0x7f0000000000), &(0x7f0000000200)) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2m32.915971546s ago: executing program 34 (id=1417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='\\{\\$@\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0xe7fc, 0x1000]}, {0x1, 0x1000, 0x2, 0x1400000000000000}}, 0xe, &(0x7f0000000100), &(0x7f0000000140)=0x3613}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0xe5ac, 0x100, 0x1, 0x20e, 0x0, r1}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x686) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000001600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000340)={0x125c, 0x13, 0x1, 0x70bd25, 0x25dfdbfb, {0x27, 0x9, 0xc, 0x9, {0x4e20, 0x4e20, [0x7ff, 0x7b, 0xfff, 0x1], [0xd, 0x6, 0x1, 0x7fff], r6, [0x7, 0x95]}, 0xd1}, [@INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "d5f4701f49aa39325a27702909c06a79e89cdacecf8137122bba402750258406ba52387308dd3a43677cc316b69a2c6182472f699c54f0b6fe41431af3ceef07b016cc561e4b1da36f497e80a2085cd547bb2061b7dc83179fbb4053b8d7e16944830f6973fbb67bb12d49740c172373b5646246a3967211a0c7ca9f9b5b186caed49a3ae6be"}, @INET_DIAG_REQ_BYTECODE={0x58, 0x1, "ddd52bc0f31cf6fcd9fb54bfda430d2a6129f0f1c0910bb5042380108ecf395634398a5055ad88298605b6710439261a4fe2fe9a758b59a2807a3b10270d8082eacdc555b18e40775c2dc47760e4d191dc8ceb67"}, @INET_DIAG_REQ_BYTECODE={0x38, 0x1, "7ba467e71f0dc0985ec4414146674ab9667db86c379edbe2a6a9b54ef6e96980d41acc42efc4018f0de75cc8fd8c6db750550a59"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "fe4024922b91e6439b7a7944c7d537be0099a534b708feea05eb43f251bbd8e0b761c5b797b88252e72783e7831503ae9e7feed82811a324cd55c227ac6750ce56b5c56fdd0e498f4607fd239d888c44d72bbd881c36a3575ba27d"}, @INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "122c0e63e4de3eed54135595c9a1ee63e605072aa1a7cc4c8770727a05ec2f703fda7bb4e4e6203e6015b8a3d9cf8d9022ab33974f53e5bfe48e4523ec9877d9bece410603fd383dc0688849b77ceb51e5e6a97916aea6e35faa05df845166a433e5455f052edd89421bb46c54bd37af3b176ed69884ae4dbadee733b548434b5e99ec60bd9d22f38c"}]}, 0x125c}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) 2m32.741269109s ago: executing program 35 (id=1419): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m27.74654011s ago: executing program 36 (id=1451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x57a, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x194) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x10001, 0x20000, 0x0, 0x1b}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000019140)={&(0x7f00000190c0)=""/102, 0x66, 0x3, 0x5}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') pread64(r4, &(0x7f00000000c0)=""/102379, 0x18feb, 0x94d) 2m11.585691304s ago: executing program 37 (id=1609): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4605fc0040ff7f00000000000002003e00edfffbff94020000002000004000000000000000dd010000000000000f000000000038000100000002000000030000000300000004000000000000000d0000000000c801288b000000008e45aae300000000041000000000000003000000000000000000"], 0x78) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x930, &(0x7f0000000800)) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2d, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72b7, 0x0, @perf_config_ext={0x2, 0xfe6}, 0x2000, 0x37, 0xd, 0x8, 0x0, 0x0, 0xf003}, 0x0, 0xe, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') ptrace$poke(0x21, r1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x77359400}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x3, 0x93}, 0xe) r4 = syz_io_uring_setup(0x4897, &(0x7f0000000140)={0x0, 0x4356, 0x400, 0x3, 0x8069}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0xc0, &(0x7f0000000580)=0x2c13, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x2}, 0x1}) io_uring_enter(r4, 0x20047f6, 0xa511, 0xa, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) syz_socket_connect_nvme_tcp() socket$inet6(0xa, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") 1m34.084148725s ago: executing program 38 (id=2118): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x82}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x10}, 0x1b}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r4, {0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$unix(r5, &(0x7f0000001740)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000240)="14ccbfbdfac9a8d4ff8e909553b251bf33d048fd9c954ea877d3bb18668bc41121487c5bd5826cbe7beb2d96aee1dfa5a7bd5d5230e09c80daf421648c2010536e0cd39bb0daa46dbc28d988a849bda2bcf09f5027def1457cb5ea1f81b3dc214125acf8643a5f3d8dd7ed4b41f213ab42bdf8868845", 0x76}, {&(0x7f00000002c0)="dfdce306f64ecfabecc96cedadcc28f28beed5ce9ad34796ac73abd3ac95fd6dc4ec732cbdb94b8f364598dd2ef226e4dc5ade3b109528c7b48b1c76828977ff9289f5cb5d21d897faa6480e5c2f065f24c4d236454feda32cc324a4d5f4818db602ea070ecceb5de881d89f7e66add051c808769c5f97d8b169f7278c11eadec255451d7cdcda195f6dcbf4b34ad525ae0f757be65f24b73f4fff7dd17a09", 0x9f}, {&(0x7f0000000380)="93eaf5b52bad7098a50d19db47f6ddcac79dd160ebac3b1a6fc338e88a675d4bee2cb979e7c2522f29deaba0fad140ac21f78bf1f7dfc57c50206ad7f8bb00a8aeaeadc38667510c8d02767a21c5a9b0", 0x50}, {&(0x7f0000000740)="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", 0x1000}], 0x4, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x78, 0x4000}, 0x1) close(r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1m19.140018937s ago: executing program 9 (id=2261): r0 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) getdents(r2, &(0x7f0000000680)=""/160, 0xa0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) clock_adjtime(0x0, &(0x7f0000000580)={0x3ff, 0x1000000, 0x4100, 0xd, 0x0, 0x3, 0xfffffffffffffffe, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x80, 0x0, 0x9f, 0x2, 0x4000000000014, 0x9, 0x2ffffffffffd, 0xd, 0x8001, 0x1, 0x2, 0x6, 0xc5e3, 0xe}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xff, 0x563, 0x1, 0x5000, r6, 0x100, '\x00', 0x0, r1, 0x0, 0x3, 0x2, 0xa}, 0x50) write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0xfffffeff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_deladdr={0x60, 0x15, 0x2, 0x70bd27, 0x25dfdbfc, {0x2, 0x1, 0x1, 0xfe, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'netpci0\x00'}, @IFA_BROADCAST={0x8, 0x4, @private=0xa010100}, @IFA_LABEL={0x14, 0x3, 'vlan1\x00'}, @IFA_TARGET_NETNSID={0x8}, @IFA_TARGET_NETNSID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0xc041) r9 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r9, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 1m18.835917622s ago: executing program 9 (id=2266): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="c65e79643ba90d5bb8601d2223181270aaeefd2325", @ANYRES64=0x0], 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB="010026bd7000fcdbdf251b00000010002e800c003f426ad39b34683caaaa0c00060001"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008050) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000002c0)={[{@nombcache}, {@inlinecrypt}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@jqfmt_vfsv0}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}, {@minixdf}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") r3 = syz_pidfd_open(0x0, 0x0) pread64(r3, &(0x7f00000021c0)=""/4096, 0x1000, 0x62) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x1, &(0x7f0000000240)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) epoll_create(0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060108000000000000000000001000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000140)=0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)='./file1\x00') 1m18.695819873s ago: executing program 9 (id=2267): socket$kcm(0x29, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0xc, 0x3}, {0x2, 0x2}, {0x6}, {0xa}]}, @ptr={0xa}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x1}, {0x9, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x10, 0x1}, {0xf, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x2}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/46, 0x127, 0x2e, 0x0, 0x200}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x81, 0x2c9, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x6, 0xabd9, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0xfffffffc, 0x3, 0x20, 0x1, 0x7ff, '\x00', r1, r0, 0x0, 0x2, 0x4, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r6, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) listen(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1m17.773250487s ago: executing program 9 (id=2282): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x10004000) 1m17.720328486s ago: executing program 9 (id=2284): pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0), &(0x7f0000000480)={0x0, 0xfb, 0x1015, 0x3, 0x1, "05000000934518f42f26003500", "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"}, 0x41e, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m17.64581814s ago: executing program 9 (id=2285): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x200}, [@IFLA_LINKMODE={0x5, 0x11, 0x5d}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x30}, 0x1, 0xd, 0x0, 0x4000000}, 0x4044050) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000001940), &(0x7f0000001980), 0x2, 0x2) (async) tkill(r6, 0x13) (async) tkill(r6, 0x12) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r8, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 1m11.450782366s ago: executing program 6 (id=2366): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791a480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8b0, 0x4d, 0x800020, 0x6, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) r1 = timerfd_create(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(r1, 0x3, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r2, &(0x7f0000002340)=[{{0x0, 0x5, 0x0}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockname$packet(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380)) io_pgetevents(0x0, 0xb, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 1m11.336000893s ago: executing program 6 (id=2369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f3100"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = syz_io_uring_complete(0x0) recvmmsg(r2, &(0x7f0000005100)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/205, 0xcd}], 0x8, &(0x7f00000006c0)=""/89, 0x59}, 0x96}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/214, 0xd6}], 0x3, &(0x7f0000000b00)=""/101, 0x65}, 0xef95}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/251, 0xfb}], 0x2, &(0x7f0000000e00)=""/80, 0x50}, 0x9}, {{0x0, 0x0, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004f00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f80)=""/55, 0x37}, {&(0x7f0000004fc0)=""/120, 0x78}], 0x2, &(0x7f0000005080)=""/124, 0x7c}, 0x7}], 0x6, 0x40000100, &(0x7f00000052c0)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x6f5f, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685", 0x25, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 1m11.301383955s ago: executing program 6 (id=2371): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x240000c0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0xffd4, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x48) 1m10.375351548s ago: executing program 6 (id=2378): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000414, &(0x7f00000007c0)=ANY=[], 0x1, 0x2cf, &(0x7f0000000180)="$eJzs3UFrE2sUxvFzk94mTWmTCxehgnrQjW5CGz+ABmlBDCi1EXUhTO1EQ8akzIRKRGw20q2fo7h0J6hfIBtx495dEQQ3XYgjmUzaSZOmaZs2sf3/oM07c+bJ+zaTlpNAphv33zwr5JxkzihLKKoSEqnKpkiiPvL949+GvPGoBFXlyvjPr+fuPnh4K53JzM6rzqUXrqZUdfLCh+cv3178VB6/927yfURqiUcbP1LfaqO1qY3fC0/zjuYdLZbKauhiqVQ2Fi1Tl/JOIal6xzINx9R80THtlnrOKi0vV9QoLk3Elm3TcdQoVrRgVrRc0rJdUeOJkS9qMpnUiZicbiM9HJNdn5830ruW3XBfV4QjN9Zpp22nq52L2fVjWBMAABgy3fv/Rq+/W/+/3R3up/8/U5uq32G3/l8k2P9H/Uno//ug2rK1R/+PE8G200bM//1tRf8PAAAAAAAAAAAAAAAAAAAAAMDfYNN1467rxuu3/i5vOyIi0cZHwL3tAS8TRyR4/t3A19b597d3xK4NaLnos8AH9+qne20lu5IVsdbq3+vSOcmLJaZMS1x+ec8HX2M8dzMzO62ehHy0Vv386ko2LJFmvinRKX/+v5lGXlvz/0osOH9K4vJ/5/lTHfOjcvlSIJ+UuHx+LCWxZMl7Xm/nX82o3rid2ZEf844DAAAAAOAkSOqWttfvXt07ICrt9UY+8P6A67qr3d4f2PH6ekTO9nKJSgAAAAAAcGhO5UXBsCzTPsAgIiKHiPd/4Loig19GWIbj0WgdXBeRIVjGcQ2iItLYoweJf9+Kt5VCHVJuD/c84v8HjuF4fPYeDPovEwAAAIB+22769xH68voIVwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOnT6/XAmse3lZqFLvHAdOFj/wEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAIfInAAD//z7HEe8=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000000102010800000000000000090200000a2c00018014000180080001006401010008000200ac1414aa0c000280"], 0x40}, 0x1, 0x0, 0x0, 0x8000840}, 0xc090) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140001, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x10000, 0x3, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8004) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000005140)=[{&(0x7f0000000280)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="14", 0x1}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="20000000000000008400000002000000ff03040001000000e5330000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005000000200000000800000018000000000000008400000007000000ac1e00010000000020000000000000008400000002"], 0x70, 0x24040000}], 0x1, 0x240000c0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0xe, 0x0, &(0x7f0000000040)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.079474106s ago: executing program 6 (id=2384): socket$kcm(0x29, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0xc, 0x3}, {0x2, 0x2}, {0x6}, {0xa}]}, @ptr={0xa}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x1}, {0x9, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x10, 0x1}, {0xf, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x2}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/46, 0x127, 0x2e, 0x0, 0x200}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x81, 0x2c9, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x6, 0xabd9, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0xfffffffc, 0x3, 0x20, 0x1, 0x7ff, '\x00', r1, r0, 0x0, 0x2, 0x4, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r6, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) listen(r5, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1m9.875350033s ago: executing program 6 (id=2387): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000014c0)={0x0, &(0x7f0000001480)}) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000)=[{0x2, 0x6, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0xfd, 0x76}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000052a000/0x1000)=nil, 0x1000, &(0x7f00000013c0)='pagemap\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_complete(0x0) ppoll(&(0x7f0000001300)=[{r2}, {r2}, {r3, 0x4280}, {r2, 0x4400}, {r2, 0x1000}, {r2, 0x1}, {r2, 0x220}, {r2, 0x1}], 0x8, &(0x7f0000001340), &(0x7f0000001380)={[0x1]}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000001400)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000001440)={'wg0\x00'}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x2e, 0x2e, 0x61, 0x30, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000240)=""/4096, 0x2f, 0x1000, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x7, 0x7, 0x3, 0x4001, r4, 0x3, '\x00', 0x0, r5, 0x4, 0x5, 0x1, 0xa}, 0x50) 1m9.869941892s ago: executing program 39 (id=2387): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000014c0)={0x0, &(0x7f0000001480)}) r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000012b000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f0000000000)=[{0x2, 0x6, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0xfd, 0x76}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000052a000/0x1000)=nil, 0x1000, &(0x7f00000013c0)='pagemap\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_io_uring_complete(0x0) ppoll(&(0x7f0000001300)=[{r2}, {r2}, {r3, 0x4280}, {r2, 0x4400}, {r2, 0x1000}, {r2, 0x1}, {r2, 0x220}, {r2, 0x1}], 0x8, &(0x7f0000001340), &(0x7f0000001380)={[0x1]}, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000001400)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000001440)={'wg0\x00'}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x30, 0x2e, 0x2e, 0x61, 0x30, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000240)=""/4096, 0x2f, 0x1000, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x7, 0x7, 0x3, 0x4001, r4, 0x3, '\x00', 0x0, r5, 0x4, 0x5, 0x1, 0xa}, 0x50) 1m2.688337979s ago: executing program 40 (id=2285): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x30, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x200}, [@IFLA_LINKMODE={0x5, 0x11, 0x5d}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x30}, 0x1, 0xd, 0x0, 0x4000000}, 0x4044050) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) r6 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000001940), &(0x7f0000001980), 0x2, 0x2) (async) tkill(r6, 0x13) (async) tkill(r6, 0x12) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r8, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 58.236360945s ago: executing program 0 (id=2503): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x2}, 0x8) 58.179881964s ago: executing program 0 (id=2505): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dax}, {@commit={'commit', 0x3d, 0x2}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@inlinecrypt}, {@grpquota}, {@auto_da_alloc}, {@resgid}, {@bh}, {@nouid32}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'data_err=ignore'}}, {@uid_eq}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise}, {@uid_eq}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") syz_io_uring_setup(0x10882, &(0x7f0000000480)={0x0, 0x7736, 0x200, 0x2000000, 0xe5}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_', 0x1}], 0x1}, 0x448e4) r3 = syz_io_uring_setup(0x4ed, &(0x7f0000000140)={0x0, 0xfec9, 0x0, 0xfffffffc, 0x274}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0xd070, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x21, {0x4, 0x1}, 0x6}, 0x1) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x7ffffffe, r1, &(0x7f0000000000)={0x30000008}) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='vlan0\x00', 0x10) listen(r0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001015ccfb1408c1e096fc738f641cd", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) 57.882642991s ago: executing program 0 (id=2507): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x401, @empty}, 0x1c) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000080)={0x0, 0x374e, 0x400, 0x0, 0x30a}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0x7fffffff, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1f, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x22d2, 0x20, 0xfffffdef, 0x0, 0x0) 57.759458924s ago: executing program 0 (id=2508): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x6348d7507ea637a8, 0x80, 0x2a, 0x1, 0x80, 0x0, 0x0, 0x5, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xac2ba39a9f6a6a01, @perf_bp={0x0}, 0x0, 0x10000, 0xda, 0x5, 0x9, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, r0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@nobh}, {@nodiscard}, {@data_err_ignore}, {@noauto_da_alloc}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x8b, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 57.411962481s ago: executing program 0 (id=2510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000400000001000000090000003c0003800800030004000000140002006272696467655f736c6176655f3100"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r2 = syz_io_uring_complete(0x0) recvmmsg(r2, &(0x7f0000005100)=[{{&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/221, 0xdd}, {&(0x7f0000000180)=""/7, 0x7}, {&(0x7f0000000480)=""/99, 0x63}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/205, 0xcd}], 0x8, &(0x7f00000006c0)=""/89, 0x59}, 0x96}, {{&(0x7f0000000740)=@x25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/214, 0xd6}], 0x3, &(0x7f0000000b00)=""/101, 0x65}, 0xef95}, {{&(0x7f0000000b80)=@phonet, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/251, 0xfb}], 0x2, &(0x7f0000000e00)=""/80, 0x50}, 0x9}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/153, 0x99}, {&(0x7f0000001f40)=""/183, 0xb7}, {&(0x7f0000002000)=""/246, 0xf6}, {&(0x7f0000002100)=""/198, 0xc6}, {&(0x7f0000002200)=""/90, 0x5a}, {0x0}], 0x7, &(0x7f0000002400)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000004f00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005040)=[{&(0x7f0000004f80)=""/55, 0x37}, {&(0x7f0000004fc0)=""/120, 0x78}], 0x2, &(0x7f0000005080)=""/124, 0x7c}, 0x7}], 0x6, 0x40000100, &(0x7f00000052c0)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x6f5f, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685", 0x25, 0x40000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 56.886019539s ago: executing program 0 (id=2513): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5410999498d2c8ce, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x1, 0x44a}) 56.836148059s ago: executing program 41 (id=2513): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5410999498d2c8ce, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x1, 0x44a}) 19.129684466s ago: executing program 3 (id=2857): inotify_init1(0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r0, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/229, 0xe5}], 0x1, 0x3, 0xf5) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 19.072443993s ago: executing program 3 (id=2859): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110b80000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e001c"], 0x74}}, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x100c0}, 0x20000000) 18.940446715s ago: executing program 3 (id=2862): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") keyctl$restrict_keyring(0xa, 0x0, 0x0, &(0x7f0000000000)='id:cb2e') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r1, 0xfffffe4d}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x401}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="4b1b7330c19b797df5a3157e5a7eac2d67b52f82fa9020954c11ffdb8415d5978f3efacbc126cab77060165e6c"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x84) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200abf4c00000000000000000200000009000200739e7a30000000000900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x6, 0xc0000) mmap$binder(&(0x7f0000304000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000003300010700000000fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x24044094) 18.809212798s ago: executing program 3 (id=2867): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="00474000b0055d36b275f59ae8e38dd829116cfcb64832f2f69416d389fc095ed99f2d29d6646a1e864fbade87860f77dbaaec2c06c4ee54595b7bb354492d1e32a56e786576568840b227b43480b7163e3c47bec20d11572a1a661146a5666e141546234de25046862981a458a3b5b94cf3f95790e90e6a899b480f1faedc756b00ab913667d7f93bf1a5"], 0x1, 0x245, &(0x7f0000001200)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], &(0x7f0000001b00)=""/4122, 0x1a, 0x101a, 0x1, 0xffffffff}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cbfc404fe10166e9c616587defe2aea629e65669117e589c04e8039c3d34ece08ec1707b69ba76e6cc7cab9d4a59c6d6b220c4291aa9fb8331ddd5545c47b9c741402a22e6cb5a62"], 0x48) setreuid(0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xff2e) r4 = creat(0x0, 0x0) write$cgroup_int(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1fc}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x10, 0xffffffffffffffff, 0x6fa1000) getrandom(&(0x7f0000000080)=""/22, 0x16, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCXONC(r3, 0x540a, 0x1) 18.668360088s ago: executing program 3 (id=2870): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xf, 0x0, 0x0, 0x4, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x8100, 0x1, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) dup(0xffffffffffffffff) io_setup(0xbf3, &(0x7f0000000000)=0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) io_submit(r0, 0x1, &(0x7f00000015c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r1, &(0x7f0000000300)="78a811ff4eaab67d4879c107ecd712ccb8e471e285c98f4241151f3a6185a19997", 0x21, 0x5}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x0, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r1, @ANYBLOB="04000d8008"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r3, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) io_submit(0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000700000006"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x80003ff8, 0x4, 0x0, 0xb4}, 0xffffffffffffffbe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0x25) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="9800000010001ffffcffffff8000400000000000", @ANYRES32=0x0, @ANYBLOB="00030000003f000008000a00", @ANYRES32, @ANYBLOB="700012800b00010062726964676500006000028008001c40090000000c00220008280000000000000c0021007b"], 0x98}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r2) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r9, @ANYBLOB="020023bd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b0006000000080001007063690011000200303030303a30303a31302e300000000008000b00550000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00300900000e0001006e657464657673696d0000000f0002006e657464657673696d30000008005d0d4e000000"], 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x800) r10 = socket$kcm(0x29, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xc, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) shutdown(r10, 0x1) 18.667837318s ago: executing program 4 (id=2871): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x810000, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x2a, 0x2c2, &(0x7f00000008c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107204, 0x1000, 0x20da, 0xf, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket(0x28, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r5 = socket(0x28, 0x5, 0x0) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x650000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x3000}, [@RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_OIF={0x8, 0x4, r9}]}, 0x38}, 0x1, 0x11}, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r10 = accept4$unix(r5, 0x0, 0x0, 0x800) recvfrom(r10, &(0x7f0000000240)=""/105, 0x69, 0x40000000, 0x0, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000001140)=ANY=[@ANYBLOB="cee7d5a6cced1fe54048eddb2da50d732cbe7e2a19b1611d868a7e6d386cf0cfeb3ff6a4d363984da8d58e3ebf3243d29541ba02e2828f826579888728d028f9c4ba9d59b7443e9dffda9f9de818dc110f98078e99342a19ebd34429332229efb2e015750ec1739b72def7878258bf22612016a5c7af2916", @ANYRES16=r11, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x4044012) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 18.506076003s ago: executing program 4 (id=2874): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x5c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200c800}, 0x24080005) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 17.536422848s ago: executing program 4 (id=2879): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x103af4, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000012c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB="000000000000000000e7a6373f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) memfd_secret(0x80000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) syz_open_dev$vcsn(&(0x7f0000000400), 0x7, 0x20800) semtimedop(0x0, &(0x7f0000000100)=[{0x2, 0x81, 0x1400}, {0x3, 0x86ac, 0x1000}, {0x2, 0xe2, 0xc00}], 0x3, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) 17.468342773s ago: executing program 3 (id=2881): setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='&\x9a-^.*\x00', 0x7, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0) r2 = accept4$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x800) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000200)={0x9, 0xeb0b, 0x8000, 0x1000, 0x1, 0x5, 0x5, 0x9}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{r3, r4/1000+10000}}) nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x30000001) write$UHID_CREATE2(r1, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xb3, 0x4, 0x5, 0x5, 0x3, 0x2, "236c31b3ef8c5507e1fc1b629da3158f71518ca25cd0d30072471780d12c2fa1386f317089430fe252d8415e0f93d1dbaf09f89553bf00d50307558b6e7a4802ad632f550ccd34c2760cea09837bee10f3b08d1001adc777f2121ac222149b4efec47f6a97d74e81d57148bec412ec0430e19ba6bc0fe59d7fda404335e41e22c86707765b3e461b0bb4aeb75b712c738366ee2638d3243a4a8cdd88d6d319a40ae18a907f8c17bc0f7880ab8b9fe392180693"}}, 0x1cb) lsetxattr$security_ima(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)=@sha1={0x1, "fadbcd46441b6e803c0c8574b9ef1bf6c58d7067"}, 0x15, 0x3) fcntl$setstatus(r2, 0x4, 0x0) recvfrom(r2, &(0x7f00000006c0)=""/183, 0xb7, 0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000780)='./file0\x00', 0x42) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/disk', 0x301400, 0xb7) vmsplice(r6, &(0x7f0000000cc0)=[{&(0x7f0000000840)="c7c13cdf076b4d6e23f2cc1bec2ab26d1c40cec4c03703ddb7aabd", 0x1b}, {&(0x7f0000000880)="fce117cdc236ccc66df0fcb355174170bee7f62926c2b865f26777df996e8e54be9b39d0925df77efbe7d26ff05e17ac40f71bed0aa5e9e78091d0cfbc6fc8eadc5e34ecf623e86569ce2f8278c79f2b7e69ca93359896bfa1e78a7b18f5cce1d41d4ff9dcbf4c4a0513ac8608e939d867fb2eec80c382f78ebdb35973c58f12a83abc77874bbc2f209edc36de9018a8e141a0819399be79922041d38bd8eba615f6944045963b4f0fe1895f94826ae2975f659df24e", 0xb6}, {&(0x7f0000000940)="aed6a7a8f8ffaa3ef85bb6203c553b8f", 0x10}, {&(0x7f0000000980)="a9b2b113df7f5f43cffd7a4039d2d6a428bbd87a5928f05d", 0x18}, {&(0x7f00000009c0)="d168a3263efe35b39335554b69faab1078f4907e0645a55c4a3a463ef7efd7bd568ac3de8caec5b3b02576291a7a256622d33a25bf2a62014bf33ad6061dd74fc9669f2eeed1ab895076d23788ce56dc6216d335544561a7d67052e3201deb408fa48f766d4f97b00c1fc17d57b55e2b5ec1a7144a8e2d765686f0953d169c87bcf7750bc5c6a5d354b8a836f304be4addc9922b69968169e46306dec1048657e1c9254d65a057e74963d68340e28226897664ba4ab61a9d9e1d9a30bc7759262fe14478315ee9d117", 0xc9}, {&(0x7f0000000ac0)="7e36727ad644837c4cddc573302ae30f06aacd8f3ae0fd5d15126910b67cda41547f31173ae269bec5467d", 0x2b}, {&(0x7f0000000b00)="b74189a580a38048cda36f01ac7038b6c7e8699640d81a6a298ad5c02f26e115431d02bdabdc453931dd7f1c1fc0d45fe3e5842873ac832e3ecc6c90372a1a82b522b964076faba37081e47b411d8625c14367444ce3231ba42b1b89e50fb26c3e947368d6c229d03ac5", 0x6a}, {&(0x7f0000000b80)="8c59438d93b2e4de23446d5b3a34cb734daced378f3f8d8125984ebe5b6a61d09e353e7d19bcffcf0179236e54a43454fa", 0x31}, {&(0x7f0000000bc0)="78c850fb3d45c49c021bc7ad2daadb7ff4e866ee6ed77299f409d46941c4a897c37963cae79057a5e7331255461b07e72e66540e19c8166cc090272bcaa63498da073d83bc80eaf1098535169edb2c58cf90c92cc41ef79357d1daa27bb8f13852c9a03b6138d9be9f9c565f25062e0b38d52364f936a089a12e47ed53862f4b072effd290e7fbf3881f572b12be407be00f51f4dcedf30fd886781ccafeccbb9a05c07daf3c9c9756751e414b0a9ae2f8f1b6df47a87d7915aaa053bc76af161fbe490d1d4bc742e329503d794408b7a88e1e794eb7ba4e400aa7cc7cc69f82858289a234ae074be8e8fa7f2373231652", 0xf1}], 0x9, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r6, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)=r6}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e80)=@generic={&(0x7f0000000d80)='./file1\x00', r7}, 0x18) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000ec0)=0x8) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000f00)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000f40)=0x14) r9 = dup2(r0, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xc7, '\x00', r8, r9, 0x5}, 0x50) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r10, 0x8008f512, &(0x7f0000001000)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r11 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001180)={0x48, 0x0, &(0x7f0000001040)=[@clear_death, @free_buffer={0x40086303, r11}, @exit_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @register_looper], 0xaf, 0x0, &(0x7f00000010c0)="f79be11ee2572e8edefb60790ac8c72c907184f0f7ebeb6ea11ed2b7ee32639916667cf9fd27776794d6514600bdea4a255924140455ef7f93c665db308b7073c634dcda03cd25231431224d344ad681d6f380c285f78027384ecd616a87957652eedcfe33571d7d84c71cabfd0f052acfc51cbe4812aa463aa9e22ce2bf3934426208c15dfa92c575fd767c83a6889571e04bb6a1ff26504222fe8e6b41c47e2bd7af559910915045f7b3fc184a5c"}) unshare(0x20000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001300)={r5, &(0x7f00000011c0)="cf6a365e0968360b5916e8b296c11d4679f4666d97448bc72ba672c2fa4349d7b96b2f338820368695597d1dc07efff94d846199587372c5d5a0c239f6f06dbe2485a478c95786b95b6c99117dcee9a32cf5d1684ab113fb2624a5f23756891951da62557aeb1fcc709df5fbebe5", &(0x7f0000001240)=""/180}, 0x20) 17.247538726s ago: executing program 42 (id=2881): setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000080)='&\x9a-^.*\x00', 0x7, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0) r2 = accept4$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x60, 0x800) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f0000000200)={0x9, 0xeb0b, 0x8000, 0x1000, 0x1, 0x5, 0x5, 0x9}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)={{r3, r4/1000+10000}}) nanosleep(&(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)) inotify_add_watch(r1, &(0x7f00000003c0)='./file0\x00', 0x30000001) write$UHID_CREATE2(r1, &(0x7f0000000400)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xb3, 0x4, 0x5, 0x5, 0x3, 0x2, "236c31b3ef8c5507e1fc1b629da3158f71518ca25cd0d30072471780d12c2fa1386f317089430fe252d8415e0f93d1dbaf09f89553bf00d50307558b6e7a4802ad632f550ccd34c2760cea09837bee10f3b08d1001adc777f2121ac222149b4efec47f6a97d74e81d57148bec412ec0430e19ba6bc0fe59d7fda404335e41e22c86707765b3e461b0bb4aeb75b712c738366ee2638d3243a4a8cdd88d6d319a40ae18a907f8c17bc0f7880ab8b9fe392180693"}}, 0x1cb) lsetxattr$security_ima(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680)=@sha1={0x1, "fadbcd46441b6e803c0c8574b9ef1bf6c58d7067"}, 0x15, 0x3) fcntl$setstatus(r2, 0x4, 0x0) recvfrom(r2, &(0x7f00000006c0)=""/183, 0xb7, 0x1, 0x0, 0x0) r5 = creat(&(0x7f0000000780)='./file0\x00', 0x42) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/disk', 0x301400, 0xb7) vmsplice(r6, &(0x7f0000000cc0)=[{&(0x7f0000000840)="c7c13cdf076b4d6e23f2cc1bec2ab26d1c40cec4c03703ddb7aabd", 0x1b}, {&(0x7f0000000880)="fce117cdc236ccc66df0fcb355174170bee7f62926c2b865f26777df996e8e54be9b39d0925df77efbe7d26ff05e17ac40f71bed0aa5e9e78091d0cfbc6fc8eadc5e34ecf623e86569ce2f8278c79f2b7e69ca93359896bfa1e78a7b18f5cce1d41d4ff9dcbf4c4a0513ac8608e939d867fb2eec80c382f78ebdb35973c58f12a83abc77874bbc2f209edc36de9018a8e141a0819399be79922041d38bd8eba615f6944045963b4f0fe1895f94826ae2975f659df24e", 0xb6}, {&(0x7f0000000940)="aed6a7a8f8ffaa3ef85bb6203c553b8f", 0x10}, {&(0x7f0000000980)="a9b2b113df7f5f43cffd7a4039d2d6a428bbd87a5928f05d", 0x18}, {&(0x7f00000009c0)="d168a3263efe35b39335554b69faab1078f4907e0645a55c4a3a463ef7efd7bd568ac3de8caec5b3b02576291a7a256622d33a25bf2a62014bf33ad6061dd74fc9669f2eeed1ab895076d23788ce56dc6216d335544561a7d67052e3201deb408fa48f766d4f97b00c1fc17d57b55e2b5ec1a7144a8e2d765686f0953d169c87bcf7750bc5c6a5d354b8a836f304be4addc9922b69968169e46306dec1048657e1c9254d65a057e74963d68340e28226897664ba4ab61a9d9e1d9a30bc7759262fe14478315ee9d117", 0xc9}, {&(0x7f0000000ac0)="7e36727ad644837c4cddc573302ae30f06aacd8f3ae0fd5d15126910b67cda41547f31173ae269bec5467d", 0x2b}, {&(0x7f0000000b00)="b74189a580a38048cda36f01ac7038b6c7e8699640d81a6a298ad5c02f26e115431d02bdabdc453931dd7f1c1fc0d45fe3e5842873ac832e3ecc6c90372a1a82b522b964076faba37081e47b411d8625c14367444ce3231ba42b1b89e50fb26c3e947368d6c229d03ac5", 0x6a}, {&(0x7f0000000b80)="8c59438d93b2e4de23446d5b3a34cb734daced378f3f8d8125984ebe5b6a61d09e353e7d19bcffcf0179236e54a43454fa", 0x31}, {&(0x7f0000000bc0)="78c850fb3d45c49c021bc7ad2daadb7ff4e866ee6ed77299f409d46941c4a897c37963cae79057a5e7331255461b07e72e66540e19c8166cc090272bcaa63498da073d83bc80eaf1098535169edb2c58cf90c92cc41ef79357d1daa27bb8f13852c9a03b6138d9be9f9c565f25062e0b38d52364f936a089a12e47ed53862f4b072effd290e7fbf3881f572b12be407be00f51f4dcedf30fd886781ccafeccbb9a05c07daf3c9c9756751e414b0a9ae2f8f1b6df47a87d7915aaa053bc76af161fbe490d1d4bc742e329503d794408b7a88e1e794eb7ba4e400aa7cc7cc69f82858289a234ae074be8e8fa7f2373231652", 0xf1}], 0x9, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r6, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)=r6}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e80)=@generic={&(0x7f0000000d80)='./file1\x00', r7}, 0x18) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000ec0)=0x8) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000f00)={@ipv4={""/10, ""/2, @loopback}, 0x0}, &(0x7f0000000f40)=0x14) r9 = dup2(r0, r2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xc7, '\x00', r8, r9, 0x5}, 0x50) r10 = socket$l2tp(0x2, 0x2, 0x73) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r10, 0x8008f512, &(0x7f0000001000)) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r11 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001180)={0x48, 0x0, &(0x7f0000001040)=[@clear_death, @free_buffer={0x40086303, r11}, @exit_looper, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x2}, @register_looper], 0xaf, 0x0, &(0x7f00000010c0)="f79be11ee2572e8edefb60790ac8c72c907184f0f7ebeb6ea11ed2b7ee32639916667cf9fd27776794d6514600bdea4a255924140455ef7f93c665db308b7073c634dcda03cd25231431224d344ad681d6f380c285f78027384ecd616a87957652eedcfe33571d7d84c71cabfd0f052acfc51cbe4812aa463aa9e22ce2bf3934426208c15dfa92c575fd767c83a6889571e04bb6a1ff26504222fe8e6b41c47e2bd7af559910915045f7b3fc184a5c"}) unshare(0x20000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001300)={r5, &(0x7f00000011c0)="cf6a365e0968360b5916e8b296c11d4679f4666d97448bc72ba672c2fa4349d7b96b2f338820368695597d1dc07efff94d846199587372c5d5a0c239f6f06dbe2485a478c95786b95b6c99117dcee9a32cf5d1684ab113fb2624a5f23756891951da62557aeb1fcc709df5fbebe5", &(0x7f0000001240)=""/180}, 0x20) 17.046958484s ago: executing program 4 (id=2885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0xf}]}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x18, 0x140f, 0x1, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}}, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@sb={'sb', 0x3d, 0x1}}, {@lazytime}]}, 0x2, 0x467, &(0x7f0000000fc0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x9, 0xfffffffc, 0xa0) iopl(0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x26d99000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f00000000c0)=0x4, 0x4) read(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) acct(0x0) acct(0x0) 16.193059323s ago: executing program 4 (id=2893): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x480001, 0xe8) getdents(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x0, 0x2}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f00000004c0)=""/63, 0x3f}], 0x3}}], 0x1, 0x40, &(0x7f00000005c0)={0x0, 0x989680}) r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 15.823446515s ago: executing program 4 (id=2896): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000400)=0xc) getpriority(0x2, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x0, 0xfff3}, {0x1, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="43cff5f28fbf5c024e0f"]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000e000000000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000200012800b0001006d61637365630000100002800c000400feffffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20030004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r7, &(0x7f0000000140)=0x2000000000006, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000004000000000000810080000000000073c1bcc35c", @ANYRES16=r8, @ANYBLOB="030f00000000000000000700000030000280080002000000000004000400f6ff04001c000380080001000000000000000100000000000800010000000000"], 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010035000000000000000200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) 15.771611203s ago: executing program 43 (id=2896): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000400)=0xc) getpriority(0x2, r2) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {0x0, 0xfff3}, {0x1, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0xa, 0x2, [@TCF_META_TYPE_VAR="43cff5f28fbf5c024e0f"]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000000e000000000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000200012800b0001006d61637365630000100002800c000400feffffffffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20030004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r7, &(0x7f0000000140)=0x2000000000006, 0x12) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000004000000000000810080000000000073c1bcc35c", @ANYRES16=r8, @ANYBLOB="030f00000000000000000700000030000280080002000000000004000400f6ff04001c000380080001000000000000000100000000000800010000000000"], 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010035000000000000000200000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) 7.870889249s ago: executing program 7 (id=2945): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x0, 0x101d0}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) 7.102667596s ago: executing program 7 (id=2952): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x10004000) 6.812907144s ago: executing program 7 (id=2956): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0xfffe, 0x10, 0x8, 0x0, 0x0}}, 0x10) 6.681184916s ago: executing program 7 (id=2959): socket$kcm(0x29, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0xc, 0x3}, {0x2, 0x2}, {0x6}, {0xa}]}, @ptr={0xa}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x1}, {0x9, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x10, 0x1}, {0xf, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x2}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/46, 0x127, 0x2e, 0x0, 0x200}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x81, 0x2c9, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x6, 0xabd9, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0xfffffffc, 0x3, 0x20, 0x1, 0x7ff, '\x00', r1, r0, 0x0, 0x2, 0x4, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) close(0xffffffffffffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 6.548704248s ago: executing program 7 (id=2961): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004210000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e85bdb02dfd02e1022c7cccef5d4d0114cd7e208443377f0e7326577e29ef20ce9b5ce922ab63ac40b8d40548fe49ab1904f50b627b9e15cbf7c7b55be02958a87b72b5256e31bb50c2bf6418206e94ea78e2e4912f67276e81b51f11098a8df51e951a1ead7dc3993bae715d785b2ebf402b3177c32c83a10a8867369d47f423e18"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x6606, 0x40, 0x7, 0x4, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x2d) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000180)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000001340)="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", 0xbf, 0x0, &(0x7f00000000c0)="b0126df6f7dc2a160bc2c6ed28db14444c030ee371240fd86e2f322c651e0335e282642b3857c09e04214b669fef8e95229cd6abdb2901845f526fb7d4be6e83246262d90695b8dad221aedbf2ebc284f82aaebe1ca41f798e5cdbe6fbb8498ee885c1aa7defd2cd6fd2e2cb1ee4015ccb3bf841eacedcec8efdfba438b58c150d5d1bbd85e18fdf9b7768e59ffab135948ddbc339bcdfb32b1ab4913ced2207f8f1eb822147f02fc1706c9c39f7e54c94665e247aba37b1f3d22be9bb11b3"}) r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x10, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) ppoll(0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)={[0x8]}, 0x8) 3.798361406s ago: executing program 5 (id=2992): bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffd05) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.296232939s ago: executing program 1 (id=2995): socket$kcm(0x29, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0xc, 0x3}, {0x2, 0x2}, {0x6}, {0xa}]}, @ptr={0xa}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x1}, {0x9, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x10, 0x1}, {0xf, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x2}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/46, 0x127, 0x2e, 0x0, 0x200}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x81, 0x2c9, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x6, 0xabd9, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0xfffffffc, 0x3, 0x20, 0x1, 0x7ff, '\x00', r1, r0, 0x0, 0x2, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 2.376589684s ago: executing program 8 (id=2998): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r0, &(0x7f0000000200)={0x1a, 0x18, 0xf7, 0x0, 0x10, 0x7, @broadcast}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000380)=0xc00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x10, 0x0, 0xfffffffc, 0x14, "2af01c3d0040fbffffffffffffff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0xd) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fef1000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r8 = epoll_create1(0x0) epoll_wait(r8, &(0x7f0000000180)=[{}], 0x1, 0x2f55) r9 = syz_io_uring_setup(0x70fd, &(0x7f0000000080)={0x0, 0x617d, 0x10000, 0x0, 0x184}, &(0x7f0000000100), &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000000)={0x9000000d}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0ae7cf4f1ddba6a2d6976ce970164271243d8fd80000000000000000", @ANYRES16=r10, @ANYBLOB="07000000000000000000020000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r11 = accept4$tipc(r3, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x800) close_range(r1, r11, 0x2) dup2(r0, r0) 2.251966117s ago: executing program 8 (id=3000): socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setuid(0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc0000001d0000082cbd7000fedbdf252c001300ac1414bb0000000000000000000000007f00000100000000000000561c2b8421630032000a00000014000e0000000000000000000000000000000001706129000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000400100005facf38d11cee75790d3658cd21378250632630133b1590ede96d7db3b3ebc7606bc3d6274cddf061c000400ffff4e244e2400007f00000100"/206], 0xdc}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x3, 0x5}}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x1ff, 0x7, 0xccc, 0x80, 0x7, 0x3}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, &(0x7f0000000200)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0xa, 0x5, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000005b00)=[{&(0x7f0000000280)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000180)="d0", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="30000000000000008400004027007f000100000003f3000000000000000000000600000007000000", @ANYRES16=r6, @ANYBLOB="1800000000000000840000000000000000000000ff01000018000000000000008463ab88e7469949d1bf00000007"], 0x60, 0x4000000}], 0x1, 0x20040099) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7ff, @private1, 0x2}]}, &(0x7f0000000180)=0x10) 2.16489852s ago: executing program 5 (id=3002): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0xfff) setuid(0xee01) listen(r3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000140)="c2", 0x1, 0x4004012, &(0x7f00000000c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x6, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r8, 0x0, 0x2f, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x3, @remote}}}, 0x108) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, r7, 0x1) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x2) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd022}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0xff73) getsockopt$inet_sctp_SCTP_STATUS(r10, 0x84, 0xe, &(0x7f0000000080)={r12, 0x4, 0xe, 0x8, 0x7, 0x7d78, 0x7, 0xfff, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x6, 0xfff, 0x0, 0x3, 0x2000}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f00000001c0)={0x80}) 2.080246771s ago: executing program 7 (id=3004): syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffe, 0xa9) syz_clone3(&(0x7f00000008c0)={0x224002200, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x58) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000400)=[{r0, 0x8c}, {r1, 0x1003}], 0x2, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000090a0104000000004f000000000a000004600011800e000100636f6e6e6c696d69740000004c000280080001400000000108000240000000000800020e5f8301ac881d55400000000008000240000000010800024065dd338f080001400000061908000140000000040800014000000004080002400000000108000540000000350900040073797a3100000a000900020073797a3200000000080003400000013014000000110001c2e2000000000000000100000a"], 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a0103000000000000a4000a0000010900020073797e31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r5, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x12}, 0x9}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=ANY=[], 0x28}, 0xc000) prlimit64(r2, 0xa, 0x0, 0x0) syz_emit_ethernet(0x106, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000f80000000000119078ac1e0001e0000001890bd3ac1e0101e0000002864b00000003020e8d0c7df9f362124e7453e6af020507bb1305037b05047174010793b90ee3270112ba4e9b6ef5b91506978c62c31d3ae0d70503ca010f4d357f677feab821eda7a22c04832714ac1e0101ac1414bbac14141d0a010102ffffffffac14143a7f000001ffffffffac1414bb0100004e2317c100649078020000000000000000000000eeaf94564bb2497bdafc728d1327f450b18434db9b00230000000000000000007fbb957d8a96ab06a1b12474a23e576bcd90e2854bd01d2391929d6f9339495673b31957ba61cc787babf2d32fd6349001c1e2f302d34087a947eeef6833"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000005) syz_emit_ethernet(0x100e, &(0x7f0000001000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @void, {@generic={0x4305, "21f6238bdb843ef9b63b884e2fcf373f0b2a5edabcc55f5f9e113af5091ae272d44b4b8a30e9ecd74f55af29e4bbccdcf7412b942555d73c0ccda61b59e929e6d65bf6b1e785934f02fad78d035dc9f9afd9188f5e67987ab17f4014d5d2105c0dc2f6cb53ae4aed105c46f0be54f14a9067f8e286a38e173d11ebb58118099f0a94fa14516fcf02f2147f6f77653b44bb925ea8f02a18db5f34cdca1c4ab20a2074a17c9a19f46b4add284d30f6caf03ad3b83a001fb6bda77cbeb1e73d1d315c46669169635b6e26d6f3d1568a10a0d974861fd7b61fbb84ab00c409befe84b97225a5d3b039735f991834c2831ddf2d14edbf0b63661d54cc7636578d171e704fd424fefc21759763208dd185da744b182203e15050fb0dd5d5fcff83a9d391f5f9788c47cb2f765b6f5797c119d5a5a7703396af58419d832651af924a888392ad94621d4354b8e0e2d90290b5824789749afb9be55b234b4f8a8ab87499ffff5b147aeddef401f11aea5db0bdae678eddc4b8a2690fd93dda7e2f080796d0c185fb7a6c2d8f731090827851ed28eed2f581e9b9a2ed823db61e65508886d4b7b24ef43c247429d74e250dfb78af3e19f38d6f5658aaedab4c9d738b34106a6d51dd119b104af34a28233df81f96a0845fbe85dd9b4bacc031171d0773fb84fbb3dd7d81318d056ce62d138e55cfdd04abca005de42306e1cba7b144fac021ae8f60a08adf2ce5bc6bb6978dc6d23a8a3ef2f240d7119704b9a61f66aef06b8a4c18c76541df6dd2babca52f3e02589c01b63ae1fed59b614992d0c926c134abe09d61a8d86ff12ef3171ba7a1c04571da328ad28232c7e20c8f131d5fd7796b144f1f3a959b97ac9a7f59c1f87fc35ed917d9da4d7d053be624053f2291f9b2180daea57ab9658866bf39fbe5ffd7fc56aa5152a93a5d1a2bea6ca237c483e484dd067c08a4e859caba7b2e49375fed4710b68db6d5f469eb24f71e57867134e5473bb9446806349b0af265d6c477624fd781a0b24d5bde00aa3b46972a2a9a98b02d55df8d602c2fa97d584c2e8ee2a4a307965c90c2d2360378c69975437e8145e3f4c82f012e2efc9d7c343494dae88f7f574887a9a36d52f3b5be2219a11ca8554eaffee78bd510312f068865f1aa23cee620c58a6e96c47aa4b3f7757d41d56674555d6eb3950b15eda953d6226bec01c7c52c3c68644ba533c6110f1996d92eac471a95e76fdd15ee91aaef9b6ef5a06f35a3706ca8990203948975bdd6665ea509c3d875937ee51f14c8396ae5aebc07e6173c8cd91651848468918590b8c794a7611b3ff42e7b21257f4df87e7f79ebd82bf038e35472efc84936bb01c1fe9581b8c60f5449d5b5cdbf144ff99ee9a5c91da6e0b2cb12fafba786fd5eca44af2f255dec6179fb296f85fd201b8169d04361ca164a95f905de21e6403198e02c0b866811f844fef075d88f370bf09c3b9eb6da4dcca288d28c9fa2e5b8fa2a8fa13bd2d1c6ab4a134b5fa77860a185f1995cbe18a2f218a42b8a8318cf28a500742631709caa52cf7491fc204741324a985c3e3a5b474f10aeca0265820b77e0f4abe9a81efcd86b05019b4e0c881a06bddf1f4e8e8e44c4dffc353bb3365ae14ea3762b294ec84005ed26777311485d7aa424220763470ce14973190847569576d84530a3f5bdf244cad96cb71b8a4ac76e4327cf074bdaf99eeb61479eba0e876fd88ab73d166b6f8ba710d3db9c4b1286f4ad335989f847c6712d5ca743645e2fa50d9febc7f7f9d3a3dda7af1dede98c3f89d7cd1c33edf36a81fd22fe72752bbb95d0c6c3433d3e0e2d51e7259602ffef5435f0625677e70d747e47aae1a4a5ea7658bf075f970401f2bd399adddcfc1ad27c02f2e23e76f93f298ef7647efa88eec1204b64d3b96d27bcd7be029036f968731470ec45b70f7d662b36fb7a998b6d36f8c3844442a5ebf40162bf679d4e56fa12b1978e1fa3b8f662d7c904a46af55ebfbe4b4c44eedf5f821c7ba7d8120cefa4f37c387b6a684cd9859dbae958ba2d1d51f060b76bde06090f1cc1b341aa7b4829840353e37045e6c7d2655c55b305e5f5dc85e8395a57e80df0b2f8dc8024ba40abf4e4497e763280a50eeafc882b19799dc0803157db19af2a7b9bbc7f23f16f4c608b5933956f44c44e04cc34b752ef42b23aebe901760ed69e65649eea43b68c8c73fa0fef4f7ca74fc90f449d0aa530158b36061268ed74fe4b869c416ab903061e0160bc01e8ca023ae97c4c772b61683b9715c1935e3ac54911d383bb252a86baf99ec09c03ca88f947f1ac7204e6c5d4ef1b6d0367d5b154e7580fbecb5023e7285de51f9104fa396f15014525fdf6359803597b537125c3bd0de77764e9d5d05dbd07048291a2d949aeb74274670d349cb2aa7f241efaf823b3017d2dffbb621ceeea7de904c7aa5b5fa754b42f869fa2f0f860ed85b184abe44149a9d5d9ba23ed90b1c95b93282305cfecfa46981b5bbc8fbe8ffb4a330d03eb72265ae73499399f31ae2603c1cb6075e1e3b3163af8114f20ba0b32922b9c3b032de8e19e9b3387bb85954676f01bdc00af25183484cdeb8b9a8e2e4476439e2602ecf787b893ae56cc4ca4a45826880962b3d6a9fba90fd9eed25742c3c04969ab1854d2bd9538bf05d46680dee19947ff626994e74b85e63306ca784d7de10fc97ccdd2486d6317e40b7a9bca3f17171e635525d9e59780fc6e01150cec17f3286473f075c19150dfd16baeb17f2d33db37a343f71a94c60613c89b41bcc3272eb91f1cb203dde07a9eb885655aacc5027242614e11f04d3c51a21601567158eb424e29579852d029f2291b790aa30094f519c7998270ac2d7134a63512aac26833c20383a796155c49e4a3ed3a213c6387115212a043ae4e70d9446b46a89e66e607faaa3df716f220688845308131dfb2d01bf8f31b94ab388d22f714d51daca30961b2faff6b31a9792acca15c17c4c36c28df94ad5e8147e760237c17f755c33e30dd9119539e3dd623767b1239ab5d5340bcbe0c4696a43aca1fc92550d38bd663a4d79a028d83cfd9bceb87863fdf0804d95bd5508be35600380caad11a2481568596e7804affa8ea9159634355919f0a063655f08ba41a7c81343a525e61f29de1b8b698918f0c108dee2fc80df38d0e381f0644b52cf39fdd7519781525596bbe33308151378a112c039c9755e277e62cb114a5414fb5e729618108ea6ac57784a187f33ecf4a7d55ec551e2976685eb52d27bb3356420857eeb84e3c1fea2e41fd1d2cb2151b35a3129b5ccdec86aaeaa39ee59ba4a5136c877a2a06b96cf40888a4e5f03f60b128c601d06345bf651d41b98f667bdc862eb8148371abf706627ec65c848408b2c0995efaab6bfd36412cb2d45ed0d001c0b27e40218dfcef74437a91dbdc1a2be6fbcad475ebc05a318f623591bbc8461c5a118a733666c09787b1a19c3087af26c0160d84f1ce7c00946fd652a1416caadbc20e5caa645d9f3ef65ac4f125f95e1b7c39b5c8f6dae8679eea9f5b075a8d6efdf944dbc6d67b9b37eb502fc8bedef58c37db6a4b325156b42def524d97fe44f6c4fbc9d3eda8be02f377acfd676656955d408dadbd9119688e06066a8c3a181483d849931a61930ea25aebdba86204b3bac07f803840314a5a7e542c1d8b156b869f1c16dd423c73c7d7c5bf1e1e10870e20208006777835d25724e695c4d2896a042648430db45716d94a1fcac14ff4780a83fe0aa6a52c14cd5dc974f96938c4e1b365a7743943a5f4c658153241e45ef2f2a8f4e290d826c969ff113fbc1976787f4c725531fb94df0be694e77972d64de05f455544e632e98390ab2b3db86bd0c321ab0e19e80d1429c5b8e8bd146e6cafeb201bab848cfefebb44c3836c4fc58b2b9ab1836a2c6e6e34c34515f53cd84cdf9f3151ecc3cea62f00cb88c6a75b5cc1d0c838d6ff2c983ddef061874c559bd4da23fdae8d9892287f9ba1a9f4bf322b8f7548b2f91d1316f77a69e122776557cb3968d8c3ce4d8bb91d7c7cc9e01aea3f6b70b29c910966582027adc1691702428f57e1b4168cace980a0187179e69705a8fe6b73a1a2a23c8219f1b3e06c84fe70346f8a6c1b5376b97a9e3198f4b13f07c4d2df2ae8936d8694c506b1675d4f4a121ede4999dac49dac6cea175ee7b17c8775c8662a1a27d8418c7dbc38e46ab40ec06110bc92144cfcfce48145e6c1c41ba16ab7f23651448a3763d6cdfa63d8c0ed46dee42b856a66fd36fb699e5f63963d6068192aa1408d58e13a85e65c2a14b8fbe836b4511e57a069733f0d7727e3f288f3555655c1e1954b982ad9c165380e29a16d04e8bab370e3f6b9f874181958737fbd8b869b18db5fbcb50c13f714325154246ea466776325fd3d3bd267715428f3960b69aeaab358342b4d3b96209ea2efdea0649c16eba88a3d04ab01914a596014f3123f16fe58ff27a4291f108c727a0c2edd55969dc9fc7386e6927fd7c97648c4b57b6d355eb0192cf170521e503456051e82f21b6522c745a08cbddaf5a409b8f9d524bb8d0b98645e29b259cced4cc0dffa62ab91a3057bf21e0b2499ac2f86536341750767804f8d66f02f6ec8806630ba7d4e18173c746f9c1b65e20d36fa5dc74fc5ef28a45d81ef3bbc07c9682b695d5904d16186f83b8e25a89706ceca9ccb912eed49d28562bc0d16dc0c84018293794c660fbad6e8db4d4622526626eca5ce21dd93e1d9141f9da657723a024f0a0767a0eae750bd966141a0c089e8b4b95cb43b71dcdd6c23533423cf2297d6f275520fb5f5fc15736c1fca3a2cbd91c6246341445f1727a9af1fe3eb89938fb4e90abd8b2ab61971d10aaa869104a84736b9142f533fc04f6b42a5160102e231f73615799a59986223eeb05a9aae264530b3857c2509d4f76e71f18250f23899ed963473a39d0d5d9526fb6e908943f8ec158cfd2803ec278d9591b5ffa63fce01730dfc19bf565239cf59575beeedc48083ff80748cbf82bafaaf7be7fb970a343add4e0f55da0865042331e48f04abead7c00946f0ac4a4e86b85398e31799c775af322f93497d5d77cdce42d5450ccadd23330a1daea9c99424077dec9153a3041d4632403daa5dfd0e719cdc43dc63e9a126d1447bd24f5c29d675db070b59c5277b7f53045016db2878267858b888c1eb398fb7624e8296c0383e147844370759fb3cd32f4101239ea1770f2fa78f48c673973ead2ea4235fcef4356b20aa5bb6526a26a631a394353c226bb18ce5506a41c6d6efb900c5dd8ffaff4b3d31d83ec280d00b6542c7d2057663314e9746965b17ccbc1eea08a0079d6dded996b61200840e966bfe560cd979b521ac03602326280b30a8718903af5d7971dfe0e5a5c7c515187c5cb09eb834e1d0bcc5c14575b36e7e8c6131f16ff2c38a66577b7ac584380fb86ee833e7daec46580ecfdc2f82bdfa3aadcb404e35728fc35be3f460a87ab9ca0faba15b01dab4e018932dc1a4b330796764c6779c063a9de1344a281f0cd2a07ae763f8a111a6983a470efa00e10f1266f3e7ac79a80bd204eed1a50f7792af94a5e8275e2bba4766159b3ad450f3cde75995d8a3c61a360f3033aec455d50e6f44e4e9b7a8eec7d5e5cd932fd749f966c76458d4f95d26dff505603edc4a5cd8ca00094c8cc66fa0731c9ddaa879ba8425b25b9906171a5955d1c112313d8e28948e310c46b41493aae5653f455e01ada46d0ddb5ce619e319dabe7fc16d"}}}, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110b2000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x149183a, &(0x7f0000000940)=ANY=[@ANYBLOB="646d6f64653d3078303030303030303030303030383030322c686964652c68696465936561cbd1990c86ee4e33953ec47e576630a3643d12c0cb14b25da082f835bc777ce379a2c9715f9c4e009d328e1abb48cb1bcbf6efd80f330906239b3d23370f465b6469ec68fc74", @ANYRESHEX=0x0, @ANYBLOB=',unhide,mode=0x0000000000000009,dmode=0x0000000000000002,check=relaxed,map=normal,\x00'], 0x5, 0x56b, &(0x7f0000000a80)="$eJzs3E1v3MYZAOChbSWyWqgFgsaO4gPj5OAeonBXtQwhl24pSmKyu1yQVCCfiqCWA6NSWjQp0PhS+OK2QPsjgt76C3rKof8n6L0XFVzuyh/6sOoo3rh5HsCeWfJdzjvEYga7wssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIQoXU+SThT6+XB7J37aYgih7aXrZTE4PH5w8HTk9Hr/fKI5ZdwQouZfmJ8PV9tDV197dPonzX/Xw5X21ZUw3zTz4f4PXn81vHbpwvT9RxL+Zn5+ON0z+uyL+7/+eG9v93fnnMhsvXLmyM1smFdFPuhtZnFeFfHa6mry3tZGFW/k/ay6XdXZIE7LrFcXZXwj/WncWVtbibPl28X2cHO918+mB2+9202S1fiD5VHWK6ti+N4Hy1W6lff7+XBzHNOcbmJuNR/ED/M6rrPeII7v3tvbXXlWkk1Q5+jhi5OP2qOg7rOu1E263U6n2+2s3ly7eStJLh05kDwlHIk49w8tL5lzXL3hmzmY7P8AAADA/69o/Bt78/1/bvw7fBQ28n6WzDotAAAA4ByN//J/pWnmwlwIV0PUfv//46wTAwAAAM7Nnx/V2I0LosY1dj9+/7DG7nKoRq9GX/07lOVc9GC0806032vievuT+qmLT1+x3liKFicXGTerlyav0uxa9EYb9MY0+utJc/e4Wr/H8oiic0gg/DUstTFLd9r2zvRMO8rCRt7PltOi/34n9HqLF+psp/79p/f+EMbT/8twsBiFu/f2dpd/9Zu9O6Ody5MRH+xPCiiO1FGcksvnh3WPR2f8rx+1p7KkHfdyaMdNHp//hTbmwv8w5sPwZhvz5kLbLjw5//lm/p3lk2a/0GbRGe28s7j/4Lln/jBca2Ou3Xi7ad6+cUwW3Wdl0R3fi0kWz3UvzpDFymlZvBJCWDkxix+eKQuAWbl7yi7U1tgf2XfPtNZOz7ar3IvZ3R+Gt9qYt5bGC+ulpWNW9ORZ+0ry+Ir+HLvbP8L1Nub6NPikPbYZ929P7KrR/pfNG748cdyq342aW3jx8/3fhtc/++L+u/f2P/5k95PdT7vdldXkZ0lysxvmxtOYNPYeAI6RlV9HC/WforLMR7/srK11evVWFpdF+mFc5uubWZwP66xMt3rDzSwelUVdpEW/6XyUr2dVXG2PRkVZxxtFGY+KKt8ZP/nlPwfto1+qbNAb1nlajfpZr8ritBjWvbSO1/MqjUfbv+jn1VZWjt9cjbI038jTXp0Xw7gqtss0W47jKsseC8zXs2Gdb+RNdxiPynzQK2/HHxX97UEWr2dVWuajumgvOB0rH24U5WB82eXxjL+a9S0HgJk7fILdt9iZ9RwBgCfZpQEAAAAAAAAAAAAA4LvvpLq9v3+rFYGndaaZzWb0l7gz/91I43vWObj4YopoX3hntusSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABznvwEAAP//Uf6fCw==") r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x30, r6, 0x100000000) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000007a3e8e4a5f6d8a34812a81bfb5d6af2822dbc3be0c5b44b9ad6613ef7e5d4c835ccd7b12fb50caf6ca31b5e7a37d1fb15604f33f28256b991b59c4bfb448", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf250400000005002200000000000500060009000000050007000300000006001a004e240000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 1.972277928s ago: executing program 1 (id=3005): syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000002040000000000000000000000000000000000000000002000400000f135b92f1ab7600effffffffff02000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000900"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="ed", 0x1}, {0x0}], 0x2) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000002840)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}], 0x1, 0x54) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r7 = getpid() r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008900000008000000020400ff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000108500000086000000bf0900000000000055090100f9000000950000000000000085100000f5ffffffbf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) sched_setscheduler(r7, 0x2, &(0x7f0000000480)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280), &(0x7f0000048000)=0x1, 0x0) 1.672439655s ago: executing program 2 (id=3008): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, 0x0, 0x80) 1.539305547s ago: executing program 2 (id=3009): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd26, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1100}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = fsmount(r1, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x52000775) open(0x0, 0x60840, 0x0) lseek(r3, 0x100, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.381065413s ago: executing program 8 (id=3010): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0xeffdffff, 0x0, 0x0) 1.336265733s ago: executing program 2 (id=3011): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) shmget$private(0x0, 0x400000, 0x4, &(0x7f0000c00000/0x400000)=nil) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x348, 0x200000ffc000) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r4, &(0x7f0000000780)=@known='security.selinux\x00', &(0x7f0000000880)=""/138, 0xffffffffffffff98) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0xffbf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 1.290351654s ago: executing program 5 (id=3012): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000800)='./file1\x00', 0x1000080, &(0x7f0000000ec0)=ANY=[@ANYRESDEC=0x0], 0x12, 0x33d, &(0x7f0000000080)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x60) 1.201158615s ago: executing program 8 (id=3013): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x810000, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x2a, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2nnAwMpOZndk1xkQ2K7f7+TT72+d5vjPPMxmys0WefPjy7OhuHvcfffFLZFkSvXGM40kSo+hF46s4ZfxNAADPsidFEb8XC5vkkojItjctAGCL1vv732/Lny5kWgDAFt1597239w8Obr2TRRa3Z18fT8r/7Mufi/79+/FxTONevBbDeBpRPSjsRvW0UJa3i6KY9/PSKK7P5seTMjn74HF9/P3fIqr8XgxjVDWdPG1U+bcObu3lC538vJzH8/X5x2X+ZgzjxZPwqfzNJfmYpPHqK53534hh/PxRfBLTuFtNos1/uZfnbxbf/vH5++X0ynwyP54MqnGtYueCXxoAAAAAAAAAAAAAAAAAAAAAAC6xG/XeOYPIr8X1WdlU77+z8zTS8te8MWpTZf+iSpqm7v5ARVHMi/i+s6VgXtQD2/19+vFSv7uxIAAAAAAAAAAAAAAAAAAAAFxdDz/97OhwOr334FyKZjeAfkT8eSfivx5n3Gm5FqsHD+pzHk6nvbo8NeZx2m2JnWZMErFyGuUizumy/Fvx3Nk5N8UPP5YL3OSAWafl9eUL3N3+upq76+gwWX6uQTQtWX2TfJdGtGPSWPNc6T91FbHJ7Zcu7RpuvPb0haqYrxgTyaqJvfHr4srVLcnZVaTVVV0a362LTvzMvbHW6x7ZIv7394qk2q1jsL03IwAAAAAAAAAAAAAAAAAAuOLaT/8u6Xy0MtorfBQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEui/f7/DYp5HV5jcBoPHv7PSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//hipWFQ==") syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107204, 0x1000, 0x20da, 0xf, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x28, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) r4 = socket(0x28, 0x5, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x650000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1, 0x3000}, [@RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_OIF={0x8, 0x4, r8}]}, 0x38}, 0x1, 0x11}, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 1.076515138s ago: executing program 5 (id=3014): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) 1.076094548s ago: executing program 1 (id=3015): socket$kcm(0x29, 0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x3}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @fwd={0x6}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0x6, 0x5}, {0xc, 0x3}, {0x2, 0x2}, {0x6}, {0xa}]}, @ptr={0xa}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9}, {0x2, 0x1}, {0x9, 0x3}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x4}, {0x10, 0x1}, {0xf, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x2}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/46, 0x127, 0x2e, 0x0, 0x200}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x81, 0x2c9, 0x14, @private1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10, 0x6, 0xabd9, 0x9}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x6, 0xfffffffc, 0x3, 0x20, 0x1, 0x7ff, '\x00', r1, r0, 0x0, 0x2, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) listen(r4, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 1.03594998s ago: executing program 8 (id=3016): r0 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="3f0729bd7000fbdbdf250100a1ff0400028023015773c05905960a61adefad2d0bb66a9fdb758753a4a5fbbeffd20688593eb0c1"], 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)={0x24c, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x15c, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf5, 0x2, "16b2e7a21e4321ed4c3d44d65173b51db25f07c5e88509493fc39c15bccb04c8948e4f137e54ffe806d6a97659a5f81951b1da71e52ea99446d8b2eeeca4f67aabbf491d421d3cce005059f389e545f3b2fdda7e7680a35610823494bc6f2956b85e3c9c65d6af4c9c373ae8b93dd3a34bee42d995911bd611f62d96bceeaa02dac8d72b9bb42111ef052e7a6c0ef23b847fa825b00869dbfcbec1178fb3b632088dcca2b073f848668b2435ec48b0e4fd4e8e9ab7a1c35c6f372f18695101a9b805f994948bdd7c4b436d6cac6ec02d13b8f50fc58605d252217d4b2bff5b2995b8e7e3d2bc435339ff5637b62fce1ce5"}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x57, 0x1, "2f698f7b6902817df4382181f9d0de6b267600884a7805b702cafeca4b67ce60f88f74d97c80055c34ba1edc61496ab5e1e8409ba21ea368c42bc97cd38a198ca5b9466efa629294d2a4f0582e17b82b171aba"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa8, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x86, 0x1, "076a345cd016c540f056f4d383494bd74a368f405e60664c18d3d25afb5769291baa2274e604180fbb77ab34b3fcc91136483561ad5cf9ac89dc749bfed4c9ad2d237d3beebf5638ada21acb6c0e6a36671527ee51714f0ed696cee14ad8a5c5e30015dc51725dec7f86c2e6e0df1eed1ffbae8ea4c8657c25cedcae9582d20e828f"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x24c}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x4, 0x0, 0x7}, 0x76e0}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0x11, r8, 0x0, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0xfe}, {}, @result}], 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048055) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fddbd725020000000900010073797a320000000014"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) 932.004808ms ago: executing program 5 (id=3017): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r4, &(0x7f0000000300)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x8, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000040)='\f', 0x1}], 0x1}}], 0x1, 0x240400c5) gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) geteuid() sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@xdp={0x2c, 0x8, r6, 0x33}, 0x80, &(0x7f0000000400)=[{&(0x7f00000004c0)="000302000b00000000002d3922ff65b4355e953d23d254f0", 0x18}, {&(0x7f00000003c0)="60a75dc565ef116aa412580445034943beea59cdd8a174caf38d7adc18f6b256e8be0000", 0x24}, {&(0x7f0000000240)="66ff67f9", 0x4}], 0x3}, 0x40011) 272.193968ms ago: executing program 2 (id=3018): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e779a888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5, @ANYBLOB="a9d1bb4d842c8a5f63e2375e9447e68d5a4847824a6eb0481b960b7aa4c2615bda259bc7ce9745b25e6bb2b1"], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x48880}, 0x0) 232.5455ms ago: executing program 8 (id=3019): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, 0x0, 0x80) 221.500487ms ago: executing program 2 (id=3020): socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000000)=ANY=[], 0x5, 0x25d, &(0x7f0000000f40)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x1000003, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20004000, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x9}, {0x7, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0x6, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}}, 0x20000010) 156.382043ms ago: executing program 1 (id=3021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x402}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xb, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) 101.866632ms ago: executing program 1 (id=3022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000180)=0x6, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="07527f755c468a33892f5785d7ae", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 52.391762ms ago: executing program 2 (id=3023): sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() sched_setscheduler(r0, 0x3, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) r1 = perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x47, 0x1, 0x8, 0x6, 0x0, 0x6, 0x1440, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0xd4, 0x3, 0x2, 0x5, 0x3, 0x5144, 0x2, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0xfffffffffffffff7}, 0x204, 0x2000000, 0x4, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, r1, 0xa) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x20000000000000ce, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$binfmt_aout(r4, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r6 = syz_open_pts(r4, 0x0) poll(&(0x7f0000000140)=[{r6, 0x212e}], 0x1, 0x9e) r7 = dup3(r6, r4, 0x0) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xd808, 0x8, 0xfffffff7, 0x2, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) r8 = fsopen(&(0x7f00000014c0)='gadgetfs\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x6, 0x202, 0xef, 0x401, 0x844e, 0x6, 0xeb, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000240)={r9, 0x6}, 0x8) getpid() fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r10 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYRES64=r10, @ANYBLOB="c319b14b8e9d5242556d499413828e8c956f32831044ed33035493a768675120b66a987cdaa5d499cc68067854839dc5c317106bd9da1d2fa9bba489049d2c5519b44ab538c7b0b6ce300b69025596bd4ddb80693343ee919a85bb4eb0b284cbbc1f9b0ccf5a9b9862f4776a56ae44b4bef171aeb07508708d6acc0e57e5450d4a36d5dc42833dc91ed83d8296b8a9b400490774b9053844b9a0cae772821d50b7d2cd533ff36f3c821e3e98f2bc94ee2325dff5165210796948ca4aa6a4aebaf3a2cbaae2ef7f9a2bb7453bb7d787d8cf11f0b8fe0b774126eec3d52c3343b1957cfeac3ca1bd6b", @ANYBLOB='<', @ANYRESOCT, @ANYRESHEX=r5, @ANYRESOCT=r3, @ANYRES16=r11], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x29}, 0x94) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x5, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffffb, 0xc0200, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x9, 0x2}, 0xa95670d582f2ae82, 0x3, 0xb, 0x0, 0xffffffffffffd23d, 0x6, 0x9, 0x0, 0x2, 0x0, 0xf}, 0xffffffffffffffff, 0x3, r7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 0s ago: executing program 5 (id=3025): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="4c0000006d00673c2bbd7000ffdadf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000001600)="78d6f05028e8f734003a7a95ffa5092f0fd2056a8bdc58796d5374072b99014860c51f555d3f8ffe3220a865bc78ea7c7d39fa2d51f1816f1add000000a5a56285be87ba78e05b56000000000000000000000000fab760f9c474c7bcd00ffd7d156a4571f9cc0c95b4089857543c400c087ff7ebc34581892953812d6094e92559e5f7625a80c2785ed11974e2ce79a8d4d38931cf614a541ffa5de2eb0f8f1b702fa67f14c969de85ce10c32c4041f4718670005ed250d2b85460500b3bc3d32dcfba548cf73f88b1d4f00c1023", 0xff07, 0x804, &(0x7f0000000140)={0xa, 0x0, 0x200, @mcast1, 0xfffffffe}, 0x1c) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3008011, &(0x7f0000000000), 0x0, 0x520, &(0x7f0000001880)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000140)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) ptrace(0x6315, r2) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7}, 0xe) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000010401040000000000000000010000010a000200000000750200000005000100000000000500010004000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000804) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) setreuid(0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x7) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_cache\x00') recvmmsg(r7, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)=""/4092, 0xffc}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}, 0x73a0}, {{&(0x7f00000014c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/125, 0x7d}], 0x1}, 0x1}], 0x3, 0x42, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/6, 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/215, 0xd7}], 0x1}, 0x4}], 0x2, 0x42, 0x0) kernel console output (not intermixed with test programs): no=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 281.913008][T12684] chnl_net:caif_netlink_parms(): no params data found [ 281.992398][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.050253][ T5934] bridge_slave_1: left allmulticast mode [ 282.066181][ T5934] bridge_slave_1: left promiscuous mode [ 282.072235][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.090438][ T5934] bridge_slave_0: left allmulticast mode [ 282.096382][ T5934] bridge_slave_0: left promiscuous mode [ 282.096692][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 282.096725][ T28] audit: type=1400 audit(1772268122.526:3282): avc: denied { write } for pid=12757 comm="syz.1.2520" path="socket:[39357]" dev="sockfs" ino=39357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.102363][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.227574][ T5934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.237554][ T5934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.249060][ T5934] bond0 (unregistering): Released all slaves [ 282.264581][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.271868][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.279163][T12684] bridge_slave_0: entered allmulticast mode [ 282.285817][T12684] bridge_slave_0: entered promiscuous mode [ 282.308860][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.317322][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.329610][T12684] bridge_slave_1: entered allmulticast mode [ 282.336453][T12684] bridge_slave_1: entered promiscuous mode [ 282.359034][ T5934] hsr_slave_0: left promiscuous mode [ 282.365907][ T5934] hsr_slave_1: left promiscuous mode [ 282.371695][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.379499][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.387976][ T5934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.395780][ T5934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.407686][ T5934] veth1_macvtap: left promiscuous mode [ 282.413447][ T5934] veth0_macvtap: left promiscuous mode [ 282.419374][ T5934] veth1_vlan: left promiscuous mode [ 282.424761][ T5934] veth0_vlan: left promiscuous mode [ 282.523479][T12767] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2522'. [ 282.578903][ T5934] team0 (unregistering): Port device team_slave_1 removed [ 282.594906][ T5934] team0 (unregistering): Port device team_slave_0 removed [ 282.610210][T12770] EXT4-fs (loop2): 1 truncate cleaned up [ 282.617046][T12770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.710664][T12684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.725914][T12774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.755255][T12684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.773601][T12572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.791398][T12572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.812753][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.852721][T12572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.883096][T12684] team0: Port device team_slave_0 added [ 282.889068][T12572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.896183][T12785] FAULT_INJECTION: forcing a failure. [ 282.896183][T12785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.911184][T12785] CPU: 0 UID: 0 PID: 12785 Comm: syz.3.2525 Tainted: G W syzkaller #0 PREEMPT(full) [ 282.911335][T12785] Tainted: [W]=WARN [ 282.911341][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.911352][T12785] Call Trace: [ 282.911357][T12785] [ 282.911364][T12785] __dump_stack+0x1d/0x30 [ 282.911390][T12785] dump_stack_lvl+0x95/0xd0 [ 282.911414][T12785] dump_stack+0x15/0x1b [ 282.911478][T12785] should_fail_ex+0x263/0x280 [ 282.911506][T12785] should_fail+0xb/0x20 [ 282.911526][T12785] should_fail_usercopy+0x1a/0x20 [ 282.911592][T12785] _copy_from_user+0x1c/0xb0 [ 282.911623][T12785] kstrtouint_from_user+0x69/0xf0 [ 282.911647][T12785] proc_fail_nth_write+0x50/0x160 [ 282.911745][T12785] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 282.911779][T12785] vfs_write+0x269/0x9f0 [ 282.911881][T12785] ? __rcu_read_unlock+0x4e/0x70 [ 282.911900][T12785] ? __fget_files+0x184/0x1c0 [ 282.911930][T12785] ? mutex_lock+0x57/0x90 [ 282.911957][T12785] ksys_write+0xdc/0x1a0 [ 282.912006][T12785] __x64_sys_write+0x40/0x50 [ 282.912035][T12785] x64_sys_call+0x27e1/0x3020 [ 282.912068][T12785] do_syscall_64+0x12c/0x370 [ 282.912095][T12785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.912122][T12785] RIP: 0033:0x7f711a3acfce [ 282.912140][T12785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.912228][T12785] RSP: 002b:00007f7118e46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 282.912248][T12785] RAX: ffffffffffffffda RBX: 00007f7118e476c0 RCX: 00007f711a3acfce [ 282.912266][T12785] RDX: 0000000000000001 RSI: 00007f7118e470a0 RDI: 0000000000000005 [ 282.912281][T12785] RBP: 00007f7118e47090 R08: 0000000000000000 R09: 0000000000000000 [ 282.912297][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.912389][T12785] R13: 00007f711a666038 R14: 00007f711a665fa0 R15: 00007ffd63980b68 [ 282.912413][T12785] [ 282.916155][T12684] team0: Port device team_slave_1 added [ 283.176168][T12684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.203913][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.231479][T12684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.251249][T12684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.262825][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.289187][T12684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.362921][T12684] hsr_slave_0: entered promiscuous mode [ 283.381568][T12684] hsr_slave_1: entered promiscuous mode [ 283.400807][T12684] debugfs: 'hsr0' already exists in 'hsr' [ 283.440382][T12684] Cannot create hsr debugfs directory [ 283.546256][ T9254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.629990][T12572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.649395][T12684] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.669058][T12572] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.679348][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.686589][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.695770][T12836] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2532'. [ 283.708188][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.715285][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.728443][T12684] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.760469][T12684] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.819215][T12684] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.838992][T12572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.915520][T12684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.926177][T12684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.936831][T12684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.947057][T12684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.017710][T12684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.035163][T12684] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.047861][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.054943][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.069915][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.077022][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.135511][T12572] veth0_vlan: entered promiscuous mode [ 284.155361][T12572] veth1_vlan: entered promiscuous mode [ 284.259258][ T5934] team0: Port device gtp5 removed [ 284.266206][ T5934] team0: Port device gtp4 removed [ 284.273918][ T5934] team0: Port device gtp3 removed [ 284.280894][ T5934] team0: Port device gtp2 removed [ 284.288954][ T5934] team0: Port device gtp1 removed [ 284.316002][ T28] audit: type=1326 audit(1772268124.750:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.1.2535" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4131bc799 code=0x0 [ 284.424821][ T5934] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 284.436144][ T5934] bond0 (unregistering): Released all slaves [ 284.444580][ T5934] bond1 (unregistering): Released all slaves [ 284.454235][ T5934] bond2 (unregistering): Released all slaves [ 284.475393][ T28] audit: type=1400 audit(1772268124.901:3284): avc: denied { create } for pid=12904 comm="syz.1.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 284.526466][ T5934] IPVS: stopping master sync thread 5095 ... [ 284.552079][ T5934] hsr_slave_0: left promiscuous mode [ 284.582301][ T5934] hsr_slave_1: left promiscuous mode [ 284.603553][T12925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.614793][ T5934] veth1_macvtap: left promiscuous mode [ 284.615461][T12925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.628216][ T5934] veth0_macvtap: left promiscuous mode [ 284.633977][ T5934] veth1_vlan: left promiscuous mode [ 284.639393][ T5934] veth0_vlan: left promiscuous mode [ 284.744787][T12572] veth0_macvtap: entered promiscuous mode [ 284.760815][T12572] veth1_macvtap: entered promiscuous mode [ 284.781249][T12684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.795144][T12572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.820275][T12572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.835757][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.864755][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.882712][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.914239][ T6704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.993272][T12950] set_capacity_and_notify: 2 callbacks suppressed [ 284.993284][T12950] loop4: detected capacity change from 0 to 512 [ 285.026784][T12950] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 285.144021][T12684] veth0_vlan: entered promiscuous mode [ 285.153074][T12684] veth1_vlan: entered promiscuous mode [ 285.188134][T12684] veth0_macvtap: entered promiscuous mode [ 285.220137][T12684] veth1_macvtap: entered promiscuous mode [ 285.228127][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 285.240473][T12684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.244355][T12980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2542'. [ 285.259569][T12684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.288577][ T30] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.305700][ T30] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.321501][ T30] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.343324][ T30] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.467054][T13003] veth1_macvtap: mtu greater than device maximum [ 285.575837][T13014] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2546'. [ 285.588453][T13014] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.752736][T13021] loop3: detected capacity change from 0 to 1024 [ 285.759663][T13021] EXT4-fs: inline encryption not supported [ 285.765579][T13021] EXT4-fs: Ignoring removed nobh option [ 285.771180][T13021] EXT4-fs: Ignoring removed nobh option [ 285.776789][T13021] EXT4-fs: Ignoring removed bh option [ 285.787054][ T28] audit: type=1326 audit(1772268126.239:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd32bc799 code=0x7ffc0000 [ 285.835448][T13021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.917948][T13023] lo speed is unknown, defaulting to 1000 [ 285.924343][ T28] audit: type=1326 audit(1772268126.259:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efdd32bc799 code=0x7ffc0000 [ 285.951888][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.997422][ T28] audit: type=1326 audit(1772268126.259:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd32bc799 code=0x7ffc0000 [ 286.130002][ T28] audit: type=1326 audit(1772268126.259:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd32bc799 code=0x7ffc0000 [ 286.432085][T13062] loop5: detected capacity change from 0 to 128 [ 286.613707][T13073] netlink: 'syz.1.2552': attribute type 10 has an invalid length. [ 286.625384][T13073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.634190][T13073] team0: Port device bond0 added [ 286.764314][T13081] loop1: detected capacity change from 0 to 128 [ 286.776930][T13081] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.789241][T13081] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.870375][T13083] loop5: detected capacity change from 0 to 512 [ 286.877474][T13083] EXT4-fs: Ignoring removed nobh option [ 286.883893][T13083] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 286.953335][T13083] EXT4-fs (loop5): 1 truncate cleaned up [ 286.960416][T13083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.212868][T13092] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 287.226933][T13092] netlink: 'syz.3.2558': attribute type 4 has an invalid length. [ 287.552237][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.593951][T13099] loop5: detected capacity change from 0 to 1024 [ 287.600783][T13099] EXT4-fs: Ignoring removed orlov option [ 287.607339][T13099] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 287.626738][T13099] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.644424][T13099] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2561'. [ 287.654770][T13099] 8021q: VLANs not supported on ip_vti0 [ 287.677075][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.703476][T13103] loop5: detected capacity change from 0 to 512 [ 287.712226][T13103] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 287.722179][T13103] EXT4-fs (loop5): group descriptors corrupted! [ 289.058383][T13039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 289.122275][T11030] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 289.137754][ T28] audit: type=1400 audit(1772268129.609:3289): avc: denied { watch watch_reads } for pid=13108 comm="syz.4.2564" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 289.163289][T13109] FAULT_INJECTION: forcing a failure. [ 289.163289][T13109] name failslab, interval 1, probability 0, space 0, times 0 [ 289.190789][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.4.2564 Tainted: G W syzkaller #0 PREEMPT(full) [ 289.190831][T13109] Tainted: [W]=WARN [ 289.190839][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.190854][T13109] Call Trace: [ 289.190859][T13109] [ 289.190881][T13109] __dump_stack+0x1d/0x30 [ 289.190912][T13109] dump_stack_lvl+0x95/0xd0 [ 289.190942][T13109] dump_stack+0x15/0x1b [ 289.190970][T13109] should_fail_ex+0x263/0x280 [ 289.191075][T13109] should_failslab+0x8c/0xb0 [ 289.191099][T13109] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 289.191129][T13109] ? simple_xattr_set+0xcc/0x2f0 [ 289.191164][T13109] kstrdup+0x3e/0xd0 [ 289.191213][T13109] simple_xattr_set+0xcc/0x2f0 [ 289.191247][T13109] shmem_xattr_handler_set+0x12b/0x220 [ 289.191284][T13109] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 289.191345][T13109] __vfs_setxattr+0x2e6/0x310 [ 289.191395][T13109] __vfs_setxattr_noperm+0xe8/0x410 [ 289.191476][T13109] __vfs_setxattr_locked+0x105/0x220 [ 289.191505][T13109] vfs_setxattr+0x12c/0x2a0 [ 289.191533][T13109] filename_setxattr+0x1c4/0x410 [ 289.191567][T13109] path_setxattrat+0x2be/0x310 [ 289.191614][T13109] __x64_sys_setxattr+0x6e/0x90 [ 289.191642][T13109] x64_sys_call+0x2ee2/0x3020 [ 289.191759][T13109] do_syscall_64+0x12c/0x370 [ 289.191784][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.191810][T13109] RIP: 0033:0x7f1d08f9c799 [ 289.191829][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.191851][T13109] RSP: 002b:00007f1d079f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 289.191905][T13109] RAX: ffffffffffffffda RBX: 00007f1d09215fa0 RCX: 00007f1d08f9c799 [ 289.191935][T13109] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000080 [ 289.191950][T13109] RBP: 00007f1d079f7090 R08: 0000000000000000 R09: 0000000000000000 [ 289.191966][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.191981][T13109] R13: 00007f1d09216038 R14: 00007f1d09215fa0 R15: 00007ffdce70f4c8 [ 289.192005][T13109] [ 289.412711][T13115] loop2: detected capacity change from 0 to 512 [ 289.476146][T13114] loop5: detected capacity change from 0 to 1756 [ 289.485833][T13115] EXT4-fs (loop2): failed to initialize system zone (-117) [ 289.504628][T13115] EXT4-fs (loop2): mount failed [ 289.522251][ T28] audit: type=1400 audit(1772268129.991:3290): avc: denied { ioctl } for pid=13123 comm="syz.1.2570" path="socket:[40923]" dev="sockfs" ino=40923 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 289.589611][T13107] loop2: detected capacity change from 0 to 128 [ 289.665249][T13130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.800401][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.892040][T13160] bridge1: entered promiscuous mode [ 289.907574][T13160] bridge1: entered allmulticast mode [ 289.937130][T13150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.981884][T13150] EXT4-fs error (device loop1): ext4_ext_precache:631: inode #2: comm syz.1.2575: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 290.028533][T13168] FAULT_INJECTION: forcing a failure. [ 290.028533][T13168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.082697][T13168] CPU: 1 UID: 0 PID: 13168 Comm: syz.4.2577 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.082724][T13168] Tainted: [W]=WARN [ 290.082730][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.082827][T13168] Call Trace: [ 290.082833][T13168] [ 290.082841][T13168] __dump_stack+0x1d/0x30 [ 290.082872][T13168] dump_stack_lvl+0x95/0xd0 [ 290.082970][T13168] dump_stack+0x15/0x1b [ 290.082996][T13168] should_fail_ex+0x263/0x280 [ 290.083022][T13168] should_fail+0xb/0x20 [ 290.083093][T13168] should_fail_usercopy+0x1a/0x20 [ 290.083114][T13168] strncpy_from_user+0x27/0x250 [ 290.083161][T13168] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 290.083216][T13168] do_getname+0x59/0x1c0 [ 290.083242][T13168] __se_sys_link+0x2f/0x1c0 [ 290.083267][T13168] __x64_sys_link+0x31/0x40 [ 290.083286][T13168] x64_sys_call+0x12d1/0x3020 [ 290.083341][T13168] do_syscall_64+0x12c/0x370 [ 290.083365][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.083464][T13168] RIP: 0033:0x7f1d08f9c799 [ 290.083478][T13168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.083537][T13168] RSP: 002b:00007f1d079f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 290.083555][T13168] RAX: ffffffffffffffda RBX: 00007f1d09215fa0 RCX: 00007f1d08f9c799 [ 290.083568][T13168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.083621][T13168] RBP: 00007f1d079f7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.083636][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.083651][T13168] R13: 00007f1d09216038 R14: 00007f1d09215fa0 R15: 00007ffdce70f4c8 [ 290.083681][T13168] [ 290.303985][T13182] FAULT_INJECTION: forcing a failure. [ 290.303985][T13182] name failslab, interval 1, probability 0, space 0, times 0 [ 290.318259][T13182] CPU: 1 UID: 0 PID: 13182 Comm: syz.4.2579 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.318351][T13182] Tainted: [W]=WARN [ 290.318359][T13182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.318373][T13182] Call Trace: [ 290.318379][T13182] [ 290.318448][T13182] __dump_stack+0x1d/0x30 [ 290.318471][T13182] dump_stack_lvl+0x95/0xd0 [ 290.318545][T13182] dump_stack+0x15/0x1b [ 290.318567][T13182] should_fail_ex+0x263/0x280 [ 290.318605][T13182] ? __pfx_cond_bools_destroy+0x10/0x10 [ 290.318664][T13182] should_failslab+0x8c/0xb0 [ 290.318684][T13182] kmem_cache_alloc_noprof+0x66/0x400 [ 290.318703][T13182] ? hashtab_duplicate+0xfe/0x360 [ 290.318760][T13182] ? __pfx_cond_bools_destroy+0x10/0x10 [ 290.318788][T13182] hashtab_duplicate+0xfe/0x360 [ 290.318872][T13182] ? __pfx_cond_bools_copy+0x10/0x10 [ 290.318897][T13182] cond_policydb_dup+0xd2/0x4e0 [ 290.319046][T13182] security_set_bools+0xa0/0x340 [ 290.319070][T13182] sel_commit_bools_write+0x1e9/0x270 [ 290.319096][T13182] vfs_writev+0x42b/0x900 [ 290.319164][T13182] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 290.319203][T13182] do_writev+0xe9/0x210 [ 290.319224][T13182] __x64_sys_writev+0x45/0x50 [ 290.319266][T13182] x64_sys_call+0x1c0c/0x3020 [ 290.319298][T13182] do_syscall_64+0x12c/0x370 [ 290.319323][T13182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.319420][T13182] RIP: 0033:0x7f1d08f9c799 [ 290.319438][T13182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.319511][T13182] RSP: 002b:00007f1d079f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 290.319530][T13182] RAX: ffffffffffffffda RBX: 00007f1d09215fa0 RCX: 00007f1d08f9c799 [ 290.319547][T13182] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 290.319562][T13182] RBP: 00007f1d079f7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.319577][T13182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.319592][T13182] R13: 00007f1d09216038 R14: 00007f1d09215fa0 R15: 00007ffdce70f4c8 [ 290.319663][T13182] [ 290.562113][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.669538][T13198] set_capacity_and_notify: 2 callbacks suppressed [ 290.669555][T13198] loop1: detected capacity change from 0 to 512 [ 290.752134][T13198] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 290.806663][T13206] netlink: 'syz.2.2585': attribute type 4 has an invalid length. [ 290.846412][ T3402] lo speed is unknown, defaulting to 1000 [ 290.852205][ T3402] syz2: Port: 1 Link DOWN [ 291.076217][T13229] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2590'. [ 291.192307][ T28] audit: type=1400 audit(1772268131.661:3291): avc: denied { listen } for pid=13241 comm="syz.2.2592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.221644][T13242] netlink: 'syz.2.2592': attribute type 10 has an invalid length. [ 291.260560][T13242] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 291.291098][T13242] team0: Failed to send options change via netlink (err -105) [ 291.318924][T13242] team0: Port device dummy0 added [ 291.319189][T13254] xt_CT: No such helper "netbios-ns" [ 291.658578][ T28] audit: type=1400 audit(1772268132.133:3292): avc: denied { write } for pid=13265 comm="syz.5.2595" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 292.036906][T13326] loop3: detected capacity change from 0 to 512 [ 292.151313][T13339] netlink: 'syz.3.2605': attribute type 21 has an invalid length. [ 292.167294][T13339] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2605'. [ 292.186172][T13339] netlink: 'syz.3.2605': attribute type 4 has an invalid length. [ 292.201768][T13339] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2605'. [ 292.434771][T13370] netlink: 'syz.3.2609': attribute type 21 has an invalid length. [ 292.453518][T13372] loop2: detected capacity change from 0 to 128 [ 292.462444][ T28] audit: type=1400 audit(1772268132.938:3293): avc: denied { mount } for pid=13373 comm="syz.4.2610" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 292.485747][T13370] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2609'. [ 292.508210][T13370] netlink: 'syz.3.2609': attribute type 4 has an invalid length. [ 292.531677][T13370] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2609'. [ 292.666303][T13388] loop4: detected capacity change from 0 to 512 [ 292.708558][T13388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.771930][T13388] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.815911][ T28] audit: type=1400 audit(1772268133.310:3294): avc: denied { remount } for pid=13387 comm="syz.4.2612" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 292.917529][T12572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.003693][T13418] syzkaller0: entered promiscuous mode [ 293.009242][T13418] syzkaller0: entered allmulticast mode [ 293.042639][ T28] audit: type=1400 audit(1772268133.531:3295): avc: denied { create } for pid=13420 comm="syz.1.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 293.073417][T13421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.081964][T13421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.091999][T13421] loop1: detected capacity change from 0 to 256 [ 293.098685][T13421] vfat: Bad value for 'nfs' [ 293.461921][T13434] loop5: detected capacity change from 0 to 512 [ 293.484180][T13434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.496907][T13434] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.518962][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.617892][T13447] loop1: detected capacity change from 0 to 512 [ 293.625127][T13447] EXT4-fs: Invalid want_extra_isize 33554524 [ 293.632640][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2629'. [ 293.650516][T13448] loop5: detected capacity change from 0 to 128 [ 293.667221][ T28] audit: type=1400 audit(1772268134.154:3296): avc: denied { connect } for pid=13444 comm="syz.5.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 293.688888][ T28] audit: type=1400 audit(1772268134.184:3297): avc: denied { read } for pid=13444 comm="syz.5.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 293.791242][ T28] audit: type=1400 audit(1772268134.285:3298): avc: denied { append } for pid=13453 comm="syz.1.2631" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 293.818861][T13457] loop3: detected capacity change from 0 to 128 [ 294.010535][T13479] loop4: detected capacity change from 0 to 128 [ 294.033470][T13479] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.047780][T13479] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 294.077058][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.086943][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.249110][T13492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.279818][ T9254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.608315][T12572] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.644912][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 294.644992][ T28] audit: type=1400 audit(1772268135.150:3300): avc: denied { map } for pid=13508 comm="syz.4.2647" path="/proc/65/mounts" dev="proc" ino=42400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 294.683758][ T28] audit: type=1400 audit(1772268135.150:3301): avc: denied { execute } for pid=13508 comm="syz.4.2647" path="/proc/65/mounts" dev="proc" ino=42400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 294.735955][T13511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.768360][T13511] EXT4-fs (loop3): 1 truncate cleaned up [ 294.782293][T13511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.794938][ T28] audit: type=1400 audit(1772268135.300:3302): avc: denied { accept } for pid=13512 comm="syz.4.2649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 294.899808][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.977190][T13523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.053481][T12572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.065798][T13530] lo speed is unknown, defaulting to 1000 [ 295.126568][T13538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.160432][ T3409] IPVS: starting estimator thread 0... [ 295.192172][T13538] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.249225][T13544] FAULT_INJECTION: forcing a failure. [ 295.249225][T13544] name failslab, interval 1, probability 0, space 0, times 0 [ 295.250237][T13542] IPVS: using max 1824 ests per chain, 91200 per kthread [ 295.281495][T13544] CPU: 1 UID: 0 PID: 13544 Comm: syz.1.2657 Tainted: G W syzkaller #0 PREEMPT(full) [ 295.281536][T13544] Tainted: [W]=WARN [ 295.281544][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.281560][T13544] Call Trace: [ 295.281567][T13544] [ 295.281576][T13544] __dump_stack+0x1d/0x30 [ 295.281607][T13544] dump_stack_lvl+0x95/0xd0 [ 295.281719][T13544] dump_stack+0x15/0x1b [ 295.281748][T13544] should_fail_ex+0x263/0x280 [ 295.281848][T13544] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 295.281874][T13544] should_failslab+0x8c/0xb0 [ 295.281899][T13544] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 295.281927][T13544] ? isofs_alloc_inode+0x34/0x50 [ 295.282015][T13544] ? __pfx_isofs_iget5_test+0x10/0x10 [ 295.282062][T13544] ? __pfx_isofs_iget5_test+0x10/0x10 [ 295.282123][T13544] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 295.282146][T13544] isofs_alloc_inode+0x34/0x50 [ 295.282170][T13544] alloc_inode+0x40/0x170 [ 295.282196][T13544] ? __pfx_isofs_iget5_set+0x10/0x10 [ 295.282219][T13544] iget5_locked+0x4a/0xa0 [ 295.282289][T13544] __isofs_iget+0xe9/0x1110 [ 295.282334][T13544] ? __rcu_read_unlock+0x4e/0x70 [ 295.282362][T13544] ? terminate_walk+0x1e6/0x210 [ 295.282391][T13544] ? path_openat+0x1ab2/0x2050 [ 295.282503][T13544] ? path_openat+0x1b01/0x2050 [ 295.282539][T13544] ? _parse_integer_limit+0x170/0x190 [ 295.282584][T13544] isofs_fh_to_dentry+0x94/0x120 [ 295.282614][T13544] exportfs_decode_fh_raw+0xbc/0x4e0 [ 295.282725][T13544] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 295.282805][T13544] ? kstrtouint+0x76/0xc0 [ 295.282855][T13544] do_handle_to_path+0x6c/0xe0 [ 295.282891][T13544] do_handle_open+0x577/0x790 [ 295.282971][T13544] __x64_sys_open_by_handle_at+0x44/0x50 [ 295.283009][T13544] x64_sys_call+0x153d/0x3020 [ 295.283044][T13544] do_syscall_64+0x12c/0x370 [ 295.283071][T13544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.283122][T13544] RIP: 0033:0x7ff4131bc799 [ 295.283138][T13544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.283161][T13544] RSP: 002b:00007ff411c0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 295.283241][T13544] RAX: ffffffffffffffda RBX: 00007ff413435fa0 RCX: 00007ff4131bc799 [ 295.283263][T13544] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 295.283281][T13544] RBP: 00007ff411c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.283297][T13544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.283319][T13544] R13: 00007ff413436038 R14: 00007ff413435fa0 R15: 00007ffed99f8658 [ 295.283344][T13544] [ 295.584181][T13547] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 295.587854][ T28] audit: type=1400 audit(1772268136.085:3303): avc: denied { append } for pid=13537 comm="syz.4.2656" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 295.618088][T13547] Quota error (device loop4): write_blk: dquota write failed [ 295.630197][T13547] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 295.642471][T13547] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2656: Failed to acquire dquot type 1 [ 295.660469][ T28] audit: type=1400 audit(1772268136.085:3304): avc: denied { setattr } for pid=13537 comm="syz.4.2656" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.683030][ T28] audit: type=1400 audit(1772268136.175:3305): avc: denied { getopt } for pid=13537 comm="syz.4.2656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 295.722983][T13553] netlink: 'syz.5.2659': attribute type 1 has an invalid length. [ 295.753719][T13503] set_capacity_and_notify: 5 callbacks suppressed [ 295.753747][T13503] loop2: detected capacity change from 0 to 8192 [ 295.950444][T12572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.012593][T13566] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 296.041277][T13566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.069636][T13566] bond1: (slave ip6erspan0): making interface the new active one [ 296.078901][T13566] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 296.135091][T13559] FAULT_INJECTION: forcing a failure. [ 296.135091][T13559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.148646][T13559] CPU: 0 UID: 0 PID: 13559 Comm: syz.3.2662 Tainted: G W syzkaller #0 PREEMPT(full) [ 296.148681][T13559] Tainted: [W]=WARN [ 296.148690][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.148705][T13559] Call Trace: [ 296.148734][T13559] [ 296.148741][T13559] __dump_stack+0x1d/0x30 [ 296.148848][T13559] dump_stack_lvl+0x95/0xd0 [ 296.148879][T13559] dump_stack+0x15/0x1b [ 296.148909][T13559] should_fail_ex+0x263/0x280 [ 296.148984][T13559] should_fail+0xb/0x20 [ 296.149001][T13559] should_fail_usercopy+0x1a/0x20 [ 296.149026][T13559] _copy_to_user+0x20/0xa0 [ 296.149085][T13559] aio_read_events+0x213/0x400 [ 296.149130][T13559] do_io_getevents+0x11b/0x450 [ 296.149207][T13559] ? __fget_files+0x184/0x1c0 [ 296.149240][T13559] __x64_sys_io_getevents+0xca/0x190 [ 296.149314][T13559] x64_sys_call+0x2cfe/0x3020 [ 296.149350][T13559] do_syscall_64+0x12c/0x370 [ 296.149415][T13559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.149436][T13559] RIP: 0033:0x7f711a3ec799 [ 296.149456][T13559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.149480][T13559] RSP: 002b:00007f7118e47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 296.149518][T13559] RAX: ffffffffffffffda RBX: 00007f711a665fa0 RCX: 00007f711a3ec799 [ 296.149535][T13559] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 00007f711b1a2000 [ 296.149551][T13559] RBP: 00007f7118e47090 R08: 0000000000000000 R09: 0000000000000000 [ 296.149563][T13559] R10: 0000200000001340 R11: 0000000000000246 R12: 0000000000000001 [ 296.149575][T13559] R13: 00007f711a666038 R14: 00007f711a665fa0 R15: 00007ffd63980b68 [ 296.149648][T13559] [ 296.538694][T13594] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 296.671272][T13600] loop2: detected capacity change from 0 to 256 [ 296.700084][T13600] FAT-fs (loop2): Directory bread(block 64) failed [ 296.714452][T13600] FAT-fs (loop2): Directory bread(block 65) failed [ 296.748332][T13600] FAT-fs (loop2): Directory bread(block 66) failed [ 296.777793][T13600] FAT-fs (loop2): Directory bread(block 67) failed [ 296.786808][T13607] FAULT_INJECTION: forcing a failure. [ 296.786808][T13607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.799273][T13600] FAT-fs (loop2): Directory bread(block 68) failed [ 296.826866][T13600] FAT-fs (loop2): Directory bread(block 69) failed [ 296.837924][T13610] loop1: detected capacity change from 0 to 512 [ 296.848952][T13600] FAT-fs (loop2): Directory bread(block 70) failed [ 296.851607][T13607] CPU: 0 UID: 0 PID: 13607 Comm: syz.5.2676 Tainted: G W syzkaller #0 PREEMPT(full) [ 296.851691][T13607] Tainted: [W]=WARN [ 296.851711][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.851748][T13607] Call Trace: [ 296.851774][T13607] [ 296.851868][T13607] __dump_stack+0x1d/0x30 [ 296.851971][T13607] dump_stack_lvl+0x95/0xd0 [ 296.852041][T13607] dump_stack+0x15/0x1b [ 296.852105][T13607] should_fail_ex+0x263/0x280 [ 296.852170][T13607] should_fail+0xb/0x20 [ 296.852231][T13607] should_fail_usercopy+0x1a/0x20 [ 296.852295][T13607] _copy_to_user+0x20/0xa0 [ 296.852404][T13607] simple_read_from_buffer+0xb5/0x130 [ 296.852469][T13607] proc_fail_nth_read+0x10e/0x150 [ 296.852553][T13607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.852662][T13607] vfs_read+0x1ab/0x7f0 [ 296.852745][T13607] ? __rcu_read_unlock+0x4e/0x70 [ 296.852835][T13607] ? __fget_files+0x184/0x1c0 [ 296.852900][T13607] ? mutex_lock+0x57/0x90 [ 296.852931][T13607] ksys_read+0xdc/0x1a0 [ 296.852958][T13607] __x64_sys_read+0x40/0x50 [ 296.853088][T13607] x64_sys_call+0x2886/0x3020 [ 296.853223][T13607] do_syscall_64+0x12c/0x370 [ 296.853311][T13607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.853423][T13607] RIP: 0033:0x7efdd327cfce [ 296.853482][T13607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.853565][T13607] RSP: 002b:00007efdd1d0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.853679][T13607] RAX: ffffffffffffffda RBX: 00007efdd1d0f6c0 RCX: 00007efdd327cfce [ 296.853717][T13607] RDX: 000000000000000f RSI: 00007efdd1d0f0a0 RDI: 0000000000000004 [ 296.853754][T13607] RBP: 00007efdd1d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 296.853791][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.853828][T13607] R13: 00007efdd3536038 R14: 00007efdd3535fa0 R15: 00007ffcd8306a28 [ 296.853882][T13607] [ 296.925464][T13610] EXT4-fs: Ignoring removed bh option [ 296.929939][T13600] FAT-fs (loop2): Directory bread(block 71) failed [ 297.070064][T13610] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.077894][T13600] FAT-fs (loop2): Directory bread(block 72) failed [ 297.085133][T13610] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 297.085704][T13600] FAT-fs (loop2): Directory bread(block 73) failed [ 297.119884][T13610] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 297.182438][T13610] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.226077][T13610] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 297.263876][T13610] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 297.287268][T13600] team0: Port device dummy0 removed [ 297.301639][T13610] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2678: Failed to acquire dquot type 1 [ 297.313224][T13619] loop5: detected capacity change from 0 to 8192 [ 297.335752][T13610] loop1: lost filesystem error report for type 5 error -5 [ 297.338695][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 297.352290][ C1] EXT4-fs (loop1): last error at time 1772268137: ext4_acquire_dquot:7001 [ 297.371786][T13610] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2678: Invalid block bitmap block 0 in block_group 0 [ 297.418966][T13610] loop1: lost filesystem error report for type 5 error -117 [ 297.428268][T13610] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2678: Invalid block bitmap block 0 in block_group 0 [ 297.469750][T13610] loop1: lost filesystem error report for type 5 error -117 [ 297.469972][T13610] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2678: Invalid block bitmap block 0 in block_group 0 [ 297.512967][T13610] loop1: lost filesystem error report for type 5 error -117 [ 297.513318][T13610] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2678: Failed to acquire dquot type 1 [ 297.562090][T13610] loop1: lost filesystem error report for type 5 error -28 [ 297.562523][T13610] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2678: Failed to acquire dquot type 1 [ 297.593679][T13600] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 297.617443][T13610] loop1: lost filesystem error report for type 5 error -28 [ 297.618923][T13610] EXT4-fs (loop1): 1 orphan inode deleted [ 297.642815][T13610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.682208][T13610] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 297.714462][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.837304][T13644] loop1: detected capacity change from 0 to 764 [ 297.847702][T13644] iso9660: Bad value for 'block' [ 297.853642][T13646] loop3: detected capacity change from 0 to 764 [ 297.871745][T13644] sg_write: data in/out 49116/126 bytes for SCSI command 0x0-- guessing data in; [ 297.871745][T13644] program syz.1.2686 not setting count and/or reply_len properly [ 298.678338][T13658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13658 comm=syz.4.2689 [ 298.734124][T13658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2689'. [ 298.845492][T13662] FAULT_INJECTION: forcing a failure. [ 298.845492][T13662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.887379][T13662] CPU: 0 UID: 0 PID: 13662 Comm: syz.1.2692 Tainted: G W syzkaller #0 PREEMPT(full) [ 298.887417][T13662] Tainted: [W]=WARN [ 298.887427][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 298.887442][T13662] Call Trace: [ 298.887450][T13662] [ 298.887501][T13662] __dump_stack+0x1d/0x30 [ 298.887534][T13662] dump_stack_lvl+0x95/0xd0 [ 298.887562][T13662] dump_stack+0x15/0x1b [ 298.887617][T13662] should_fail_ex+0x263/0x280 [ 298.887646][T13662] should_fail+0xb/0x20 [ 298.887669][T13662] should_fail_usercopy+0x1a/0x20 [ 298.887768][T13662] _copy_from_user+0x1c/0xb0 [ 298.887803][T13662] __se_sys_mount+0x10d/0x2e0 [ 298.887829][T13662] ? fput+0x8f/0xc0 [ 298.887859][T13662] ? ksys_write+0x194/0x1a0 [ 298.887927][T13662] __x64_sys_mount+0x67/0x80 [ 298.887954][T13662] x64_sys_call+0x2d61/0x3020 [ 298.888051][T13662] do_syscall_64+0x12c/0x370 [ 298.888071][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.888091][T13662] RIP: 0033:0x7ff4131bc799 [ 298.888116][T13662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.888178][T13662] RSP: 002b:00007ff411c0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.888203][T13662] RAX: ffffffffffffffda RBX: 00007ff413435fa0 RCX: 00007ff4131bc799 [ 298.888333][T13662] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 298.888347][T13662] RBP: 00007ff411c0f090 R08: 0000200000000340 R09: 0000000000000000 [ 298.888359][T13662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.888370][T13662] R13: 00007ff413436038 R14: 00007ff413435fa0 R15: 00007ffed99f8658 [ 298.888395][T13662] [ 299.294383][T13671] kernel profiling enabled (shift: 9) [ 299.364536][T13674] FAULT_INJECTION: forcing a failure. [ 299.364536][T13674] name failslab, interval 1, probability 0, space 0, times 0 [ 299.397663][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.5.2696 Tainted: G W syzkaller #0 PREEMPT(full) [ 299.397692][T13674] Tainted: [W]=WARN [ 299.397698][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.397710][T13674] Call Trace: [ 299.397716][T13674] [ 299.397723][T13674] __dump_stack+0x1d/0x30 [ 299.397784][T13674] dump_stack_lvl+0x95/0xd0 [ 299.397887][T13674] dump_stack+0x15/0x1b [ 299.397914][T13674] should_fail_ex+0x263/0x280 [ 299.397940][T13674] should_failslab+0x8c/0xb0 [ 299.398024][T13674] kmem_cache_alloc_noprof+0x66/0x400 [ 299.398054][T13674] ? skb_clone+0x151/0x1f0 [ 299.398220][T13674] skb_clone+0x151/0x1f0 [ 299.398249][T13674] __netlink_deliver_tap+0x2c9/0x500 [ 299.398284][T13674] __netlink_sendskb+0xc3/0xd0 [ 299.398348][T13674] netlink_dump+0x72b/0x8a0 [ 299.398384][T13674] __netlink_dump_start+0x43e/0x520 [ 299.398422][T13674] ? __pfx_ipmr_rtm_dumproute+0x10/0x10 [ 299.398449][T13674] rtnetlink_rcv_msg+0x59f/0x720 [ 299.398531][T13674] ? __pfx_ipmr_rtm_dumproute+0x10/0x10 [ 299.398555][T13674] ? __pfx_rtnl_dumpit+0x10/0x10 [ 299.398654][T13674] ? __pfx_ipmr_rtm_dumproute+0x10/0x10 [ 299.398686][T13674] netlink_rcv_skb+0x123/0x220 [ 299.398711][T13674] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.398805][T13674] rtnetlink_rcv+0x1c/0x30 [ 299.398908][T13674] netlink_unicast+0x5c0/0x690 [ 299.398942][T13674] netlink_sendmsg+0x5c8/0x6f0 [ 299.398981][T13674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.399061][T13674] ____sys_sendmsg+0x5af/0x600 [ 299.399155][T13674] ___sys_sendmsg+0x195/0x1e0 [ 299.399206][T13674] __x64_sys_sendmsg+0xd4/0x160 [ 299.399246][T13674] x64_sys_call+0x194c/0x3020 [ 299.399282][T13674] do_syscall_64+0x12c/0x370 [ 299.399309][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.399331][T13674] RIP: 0033:0x7efdd32bc799 [ 299.399346][T13674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.399366][T13674] RSP: 002b:00007efdd1d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.399445][T13674] RAX: ffffffffffffffda RBX: 00007efdd3535fa0 RCX: 00007efdd32bc799 [ 299.399464][T13674] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 299.399480][T13674] RBP: 00007efdd1d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 299.399497][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.399542][T13674] R13: 00007efdd3536038 R14: 00007efdd3535fa0 R15: 00007ffcd8306a28 [ 299.399618][T13674] [ 299.704689][T13678] loop5: detected capacity change from 0 to 1024 [ 299.758576][T13678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.773299][T13677] loop4: detected capacity change from 0 to 4096 [ 299.815980][T13677] EXT4-fs: Ignoring removed bh option [ 299.852807][T13677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.882155][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.901031][T13677] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.930336][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 299.930351][ T28] audit: type=1400 audit(1772268140.457:3309): avc: denied { remount } for pid=13645 comm="syz.3.2687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 299.998761][T13677] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.068354][T13677] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.128074][T13677] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.147721][ T28] audit: type=1400 audit(1772268140.678:3310): avc: denied { connect } for pid=13688 comm="syz.1.2700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 300.234007][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 300.253169][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2701'. [ 300.260112][ T30] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.325399][T13692] netlink: 'syz.1.2701': attribute type 3 has an invalid length. [ 300.350582][ T30] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.393582][ T30] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.431423][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.564630][ T28] audit: type=1326 audit(1772268141.100:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 300.589303][T12572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.617034][ T28] audit: type=1326 audit(1772268141.100:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 300.697552][ T28] audit: type=1326 audit(1772268141.100:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 300.753238][ T28] audit: type=1326 audit(1772268141.100:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 300.831116][ T28] audit: type=1326 audit(1772268141.120:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 300.912318][T13707] loop5: detected capacity change from 0 to 8192 [ 300.935266][ T28] audit: type=1326 audit(1772268141.120:3316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 301.018340][ T28] audit: type=1326 audit(1772268141.120:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 301.074163][ T28] audit: type=1326 audit(1772268141.120:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13697 comm="syz.1.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4131bc799 code=0x7ffc0000 [ 301.666999][T13714] loop4: detected capacity change from 0 to 1024 [ 301.907212][T13714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.136297][T12572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.157401][T13718] loop3: detected capacity change from 0 to 512 [ 302.197316][T13718] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 302.916141][T13771] loop2: detected capacity change from 0 to 164 [ 302.994954][T13779] loop3: detected capacity change from 0 to 128 [ 303.266032][T13777] loop5: detected capacity change from 0 to 1024 [ 303.313410][T13777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.498127][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.564301][T13841] loop2: detected capacity change from 0 to 4096 [ 304.703739][T13841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.776555][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2735'. [ 305.155965][T13858] loop4: detected capacity change from 0 to 164 [ 305.558298][T13869] lo speed is unknown, defaulting to 1000 [ 305.598323][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 305.598344][ T28] audit: type=1400 audit(1772268146.144:3326): avc: denied { ioctl } for pid=13868 comm="syz.3.2744" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 305.729157][ T9254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.843915][T13883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13883 comm=syz.4.2747 [ 305.882859][T13873] loop3: detected capacity change from 0 to 128 [ 306.120792][T13908] netlink: 'syz.5.2751': attribute type 10 has an invalid length. [ 306.153530][T13908] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 306.209541][T13914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.787479][T13926] syzkaller0: entered promiscuous mode [ 306.843881][T13926] syzkaller0: entered allmulticast mode [ 306.873073][T13926] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 306.908518][T13924] loop5: detected capacity change from 0 to 8192 [ 307.029399][T13929] loop1: detected capacity change from 0 to 128 [ 307.500930][T13937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.948141][T13950] loop3: detected capacity change from 0 to 512 [ 308.039616][T13950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.147845][T13955] syzkaller0: entered promiscuous mode [ 308.166701][T13955] syzkaller0: entered allmulticast mode [ 308.190451][ T28] audit: type=1400 audit(1772268148.745:3327): avc: denied { relabelfrom } for pid=13949 comm="syz.4.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 308.253120][T13950] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2762: iget: bad extended attribute block 262144 [ 308.286526][ T28] audit: type=1400 audit(1772268148.745:3328): avc: denied { relabelto } for pid=13949 comm="syz.4.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 308.326655][T13950] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 308.326990][T13950] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2762: couldn't read orphan inode 15 (err -117) [ 308.348079][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 308.348093][ C1] EXT4-fs (loop3): initial error at time 1772268148: ext4_orphan_get:1391: inode 15 [ 308.348114][ C1] EXT4-fs (loop3): last error at time 1772268148: ext4_orphan_get:1391: inode 15 [ 308.436205][T13950] loop3: lost filesystem error report for type 5 error -117 [ 308.437876][T13950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.505472][ T28] audit: type=1400 audit(1772268149.067:3329): avc: denied { unmount } for pid=12291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 308.527606][T12291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.614962][T13963] FAULT_INJECTION: forcing a failure. [ 308.614962][T13963] name failslab, interval 1, probability 0, space 0, times 0 [ 308.645344][T13963] CPU: 1 UID: 0 PID: 13963 Comm: syz.4.2766 Tainted: G W syzkaller #0 PREEMPT(full) [ 308.645380][T13963] Tainted: [W]=WARN [ 308.645389][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 308.645404][T13963] Call Trace: [ 308.645411][T13963] [ 308.645419][T13963] __dump_stack+0x1d/0x30 [ 308.645533][T13963] dump_stack_lvl+0x95/0xd0 [ 308.645605][T13963] dump_stack+0x15/0x1b [ 308.645628][T13963] should_fail_ex+0x263/0x280 [ 308.645654][T13963] should_failslab+0x8c/0xb0 [ 308.645678][T13963] kmem_cache_alloc_noprof+0x66/0x400 [ 308.645712][T13963] ? dst_alloc+0xbd/0x100 [ 308.645739][T13963] dst_alloc+0xbd/0x100 [ 308.645761][T13963] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 308.645839][T13963] ip_route_output_flow+0x65/0x110 [ 308.645878][T13963] udp_sendmsg+0x1383/0x1590 [ 308.645915][T13963] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 308.646019][T13963] ? avc_has_perm+0x101/0x190 [ 308.646057][T13963] ? __pfx_udp_sendmsg+0x10/0x10 [ 308.646084][T13963] inet_sendmsg+0xac/0xd0 [ 308.646152][T13963] ____sys_sendmsg+0x53a/0x600 [ 308.646264][T13963] ___sys_sendmsg+0x195/0x1e0 [ 308.646288][T13963] ? path_openat+0x1b01/0x2050 [ 308.646451][T13963] __sys_sendmmsg+0x185/0x320 [ 308.646545][T13963] __x64_sys_sendmmsg+0x57/0x70 [ 308.646576][T13963] x64_sys_call+0x27aa/0x3020 [ 308.646628][T13963] do_syscall_64+0x12c/0x370 [ 308.646653][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.646680][T13963] RIP: 0033:0x7f1d08f9c799 [ 308.646699][T13963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.646736][T13963] RSP: 002b:00007f1d079f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.646754][T13963] RAX: ffffffffffffffda RBX: 00007f1d09215fa0 RCX: 00007f1d08f9c799 [ 308.646804][T13963] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 308.646819][T13963] RBP: 00007f1d079f7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.646836][T13963] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 308.646851][T13963] R13: 00007f1d09216038 R14: 00007f1d09215fa0 R15: 00007ffdce70f4c8 [ 308.646874][T13963] [ 309.097988][T13972] lo speed is unknown, defaulting to 1000 [ 309.146000][T13976] loop1: detected capacity change from 0 to 512 [ 309.170902][T13976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.197196][T13976] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.276484][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.316645][T13986] loop1: detected capacity change from 0 to 128 [ 309.381803][T13988] loop4: detected capacity change from 0 to 512 [ 309.393282][T13988] EXT4-fs: dax option not supported [ 309.460127][T13972] loop3: detected capacity change from 0 to 128 [ 309.474606][T13972] syz.3.2765: attempt to access beyond end of device [ 309.474606][T13972] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 309.494802][T13972] Invalid ELF header len 9 [ 309.500637][ T28] audit: type=1400 audit(1772268150.061:3330): avc: denied { module_load } for pid=13967 comm="syz.3.2765" path="/70/file2/file2" dev="loop3" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 309.540496][T13992] loop1: detected capacity change from 0 to 1024 [ 309.597972][T13992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 309.635107][T13992] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.674509][T13998] netlink: 'syz.3.2777': attribute type 27 has an invalid length. [ 309.697588][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 309.783718][ T28] audit: type=1326 audit(1772268150.342:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14004 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d08f9c799 code=0x7ffc0000 [ 309.819364][T14005] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 309.827690][T14003] netlink: 'syz.1.2778': attribute type 39 has an invalid length. [ 309.840440][T14005] audit: out of memory in audit_log_start [ 309.846691][ T28] audit: type=1326 audit(1772268150.342:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14004 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d08f9c799 code=0x7ffc0000 [ 309.898641][ T28] audit: type=1326 audit(1772268150.372:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14004 comm="syz.4.2780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d08f9c799 code=0x7ffc0000 [ 310.173624][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 310.309207][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.316538][T13998] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.710470][T14041] loop4: detected capacity change from 0 to 1756 [ 311.174676][T13998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.213209][T13998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.601740][T14055] loop2: detected capacity change from 0 to 1024 [ 311.616668][T14055] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 311.626592][T14055] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 311.637175][T14055] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.2792: iget: special inode unallocated [ 311.650151][T14055] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 311.650249][T14055] EXT4-fs (loop2): Remounting filesystem read-only [ 311.659440][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 311.659467][ C0] EXT4-fs (loop2): initial error at time 1772268408: ext4_get_journal_inode:5863: inode 32 [ 311.659507][ C0] EXT4-fs (loop2): last error at time 1772268408: ext4_get_journal_inode:5863: inode 32 [ 311.712006][T14055] EXT4-fs (loop2): no journal found [ 311.722516][T14055] EXT4-fs (loop2): can't get journal size [ 311.733297][T14055] EXT4-fs (loop2): filesystem is read-only [ 311.743206][T14055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 311.799405][T14000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.810652][T14000] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.820362][T14000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.841241][T14010] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2781'. [ 311.870009][ T5934] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.879071][ T5934] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.924740][ T5934] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.951857][ T9254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.953150][ T5934] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.027842][T14071] lo speed is unknown, defaulting to 1000 [ 312.104694][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 312.104709][ T28] audit: type=1400 audit(1772268408.684:3402): avc: denied { accept } for pid=14077 comm="syz.4.2798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 312.143165][T14084] loop2: detected capacity change from 0 to 128 [ 312.191318][T14080] loop1: detected capacity change from 0 to 4096 [ 312.211212][T14080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.252826][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.274738][ T28] audit: type=1326 audit(1772268408.854:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd32bc799 code=0x7ffc0000 [ 312.274769][ T28] audit: type=1326 audit(1772268408.854:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdd32bc799 code=0x7ffc0000 [ 312.319096][ T28] audit: type=1326 audit(1772268408.884:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14094 comm="syz.5.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efdd32bc799 code=0x7ffc0000 [ 312.367988][T14095] netlink: 'syz.5.2804': attribute type 29 has an invalid length. [ 312.429359][T14108] netlink: 'syz.5.2805': attribute type 8 has an invalid length. [ 312.505185][T14117] tipc: Started in network mode [ 312.510705][T14117] tipc: Node identity 01000080000000002e0000002e4, cluster identity 4711 [ 312.559024][T14122] netlink: 'syz.2.2811': attribute type 5 has an invalid length. [ 312.579650][T14120] lo speed is unknown, defaulting to 1000 [ 312.644909][T14131] loop4: detected capacity change from 0 to 164 [ 312.671862][T14131] FAULT_INJECTION: forcing a failure. [ 312.671862][T14131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.697812][T14131] CPU: 1 UID: 0 PID: 14131 Comm: syz.4.2813 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.697848][T14131] Tainted: [W]=WARN [ 312.697856][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.697871][T14131] Call Trace: [ 312.697921][T14131] [ 312.697929][T14131] __dump_stack+0x1d/0x30 [ 312.697960][T14131] dump_stack_lvl+0x95/0xd0 [ 312.697986][T14131] dump_stack+0x15/0x1b [ 312.698011][T14131] should_fail_ex+0x263/0x280 [ 312.698038][T14131] should_fail+0xb/0x20 [ 312.698115][T14131] should_fail_usercopy+0x1a/0x20 [ 312.698213][T14131] strncpy_from_user+0x27/0x250 [ 312.698273][T14131] path_setxattrat+0xeb/0x310 [ 312.698341][T14131] __x64_sys_fsetxattr+0x6b/0x80 [ 312.698363][T14131] x64_sys_call+0x2f0e/0x3020 [ 312.698397][T14131] do_syscall_64+0x12c/0x370 [ 312.698421][T14131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.698447][T14131] RIP: 0033:0x7f1d08f9c799 [ 312.698478][T14131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.698495][T14131] RSP: 002b:00007f1d079f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 312.698514][T14131] RAX: ffffffffffffffda RBX: 00007f1d09215fa0 RCX: 00007f1d08f9c799 [ 312.698529][T14131] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 312.698545][T14131] RBP: 00007f1d079f7090 R08: 0000000000000001 R09: 0000000000000000 [ 312.698629][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.698641][T14131] R13: 00007f1d09216038 R14: 00007f1d09215fa0 R15: 00007ffdce70f4c8 [ 312.698661][T14131] [ 312.701877][T14127] lo speed is unknown, defaulting to 1000 [ 312.915468][T14135] loop4: detected capacity change from 0 to 164 [ 313.089746][T14138] loop1: detected capacity change from 0 to 2048 [ 313.262674][T14147] loop2: detected capacity change from 0 to 164 [ 313.390079][T14153] loop5: detected capacity change from 0 to 128 [ 313.430560][T14153] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 313.471059][T14163] netem: change failed [ 313.485536][T14153] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.572147][T14174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2826'. [ 313.595601][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'. [ 313.604873][T14165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.668082][ T3513] lo speed is unknown, defaulting to 1000 [ 313.685690][ T3513] syz2: Port: 1 Link ACTIVE [ 313.720994][T14189] FAULT_INJECTION: forcing a failure. [ 313.720994][T14189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.791327][T14189] CPU: 1 UID: 0 PID: 14189 Comm: syz.1.2829 Tainted: G W syzkaller #0 PREEMPT(full) [ 313.791460][T14189] Tainted: [W]=WARN [ 313.791466][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.791536][T14189] Call Trace: [ 313.791542][T14189] [ 313.791549][T14189] __dump_stack+0x1d/0x30 [ 313.791594][T14189] dump_stack_lvl+0x95/0xd0 [ 313.791622][T14189] dump_stack+0x15/0x1b [ 313.791650][T14189] should_fail_ex+0x263/0x280 [ 313.791696][T14189] should_fail+0xb/0x20 [ 313.791716][T14189] should_fail_usercopy+0x1a/0x20 [ 313.791740][T14189] _copy_from_user+0x1c/0xb0 [ 313.791773][T14189] vt_resizex+0x4a/0x3d0 [ 313.791798][T14189] vt_ioctl+0x10a3/0x18d0 [ 313.791852][T14189] ? tty_jobctrl_ioctl+0x29c/0x810 [ 313.791912][T14189] tty_ioctl+0x7d7/0xb80 [ 313.791936][T14189] ? __pfx_tty_ioctl+0x10/0x10 [ 313.791962][T14189] __se_sys_ioctl+0xce/0x140 [ 313.792028][T14189] __x64_sys_ioctl+0x43/0x50 [ 313.792086][T14189] x64_sys_call+0x1563/0x3020 [ 313.792157][T14189] do_syscall_64+0x12c/0x370 [ 313.792176][T14189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.792198][T14189] RIP: 0033:0x7ff4131bc799 [ 313.792211][T14189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.792282][T14189] RSP: 002b:00007ff411c0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.792305][T14189] RAX: ffffffffffffffda RBX: 00007ff413435fa0 RCX: 00007ff4131bc799 [ 313.792321][T14189] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000003 [ 313.792332][T14189] RBP: 00007ff411c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.792343][T14189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.792358][T14189] R13: 00007ff413436038 R14: 00007ff413435fa0 R15: 00007ffed99f8658 [ 313.792375][T14189] [ 314.117557][T14201] loop2: detected capacity change from 0 to 256 [ 314.175914][T14201] FAT-fs (loop2): Directory bread(block 64) failed [ 314.182731][T14201] FAT-fs (loop2): Directory bread(block 65) failed [ 314.189496][T14201] FAT-fs (loop2): Directory bread(block 66) failed [ 314.196057][T14201] FAT-fs (loop2): Directory bread(block 67) failed [ 314.202778][T14201] FAT-fs (loop2): Directory bread(block 68) failed [ 314.209415][T14201] FAT-fs (loop2): Directory bread(block 69) failed [ 314.216023][T14201] FAT-fs (loop2): Directory bread(block 70) failed [ 314.222730][T14201] FAT-fs (loop2): Directory bread(block 71) failed [ 314.229349][T14201] FAT-fs (loop2): Directory bread(block 72) failed [ 314.236029][T14201] FAT-fs (loop2): Directory bread(block 73) failed [ 314.531948][T14228] FAULT_INJECTION: forcing a failure. [ 314.531948][T14228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.545198][T14228] CPU: 1 UID: 0 PID: 14228 Comm: syz.3.2837 Tainted: G W syzkaller #0 PREEMPT(full) [ 314.545228][T14228] Tainted: [W]=WARN [ 314.545236][T14228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.545250][T14228] Call Trace: [ 314.545258][T14228] [ 314.545282][T14228] __dump_stack+0x1d/0x30 [ 314.545309][T14228] dump_stack_lvl+0x95/0xd0 [ 314.545406][T14228] dump_stack+0x15/0x1b [ 314.545433][T14228] should_fail_ex+0x263/0x280 [ 314.545532][T14228] should_fail+0xb/0x20 [ 314.545551][T14228] should_fail_usercopy+0x1a/0x20 [ 314.545579][T14228] _copy_from_user+0x1c/0xb0 [ 314.545612][T14228] ___sys_recvmsg+0xaa/0x3b0 [ 314.545687][T14228] do_recvmmsg+0x1ef/0x560 [ 314.545804][T14228] ? fput+0x8f/0xc0 [ 314.545891][T14228] __x64_sys_recvmmsg+0xe5/0x170 [ 314.545930][T14228] x64_sys_call+0x80f/0x3020 [ 314.545983][T14228] do_syscall_64+0x12c/0x370 [ 314.546009][T14228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.546036][T14228] RIP: 0033:0x7f711a3ec799 [ 314.546066][T14228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.546089][T14228] RSP: 002b:00007f7118e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 314.546115][T14228] RAX: ffffffffffffffda RBX: 00007f711a665fa0 RCX: 00007f711a3ec799 [ 314.546132][T14228] RDX: f905db2d12e721d0 RSI: 0000200000002340 RDI: 0000000000000003 [ 314.546153][T14228] RBP: 00007f7118e47090 R08: 0000000000000000 R09: 0000000000000000 [ 314.546169][T14228] R10: 0000000000010100 R11: 0000000000000246 R12: 0000000000000002 [ 314.546215][T14228] R13: 00007f711a666038 R14: 00007f711a665fa0 R15: 00007ffd63980b68 [ 314.546239][T14228] [ 314.799348][T14232] loop1: detected capacity change from 0 to 128 [ 314.806242][T14232] msdos: Bad value for 'gid' [ 314.810862][T14232] msdos: Bad value for 'gid' [ 315.190807][T14153] can0: slcan on ttyS3. [ 315.259957][T14246] loop3: detected capacity change from 0 to 128 [ 315.272591][T14153] can0 (unregistered): slcan off ttyS3. [ 315.374213][T14250] lo speed is unknown, defaulting to 1000 [ 315.383558][T12684] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.557921][T14269] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 315.571855][T14250] IPv6: NLM_F_CREATE should be specified when creating new route [ 315.581111][T14269] SELinux: failed to load policy [ 315.587379][T14250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.595076][T14250] IPv6: NLM_F_CREATE should be set when creating new route [ 315.775077][ T28] audit: type=1400 audit(1772268412.324:3406): avc: denied { write } for pid=14255 comm="syz.1.2841" name="file0" dev="tmpfs" ino=755 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 315.877903][ T28] audit: type=1400 audit(1772268412.334:3407): avc: denied { ioctl } for pid=14255 comm="syz.1.2841" path="/138/file0" dev="tmpfs" ino=755 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.484355][T14277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.728899][T14302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.227324][T12572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.242250][T14316] set_capacity_and_notify: 2 callbacks suppressed [ 317.242305][T14316] loop1: detected capacity change from 0 to 512 [ 317.255594][T14316] EXT4-fs: test_dummy_encryption option not supported [ 317.330091][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.349122][ T3513] IPVS: starting estimator thread 0... [ 317.357226][T14322] loop4: detected capacity change from 0 to 128 [ 317.359653][T14326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2853'. [ 317.367552][T14318] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.406791][T14318] syz.4.2850: attempt to access beyond end of device [ 317.406791][T14318] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 317.532713][T14324] IPVS: using max 2496 ests per chain, 124800 per kthread [ 317.634300][T14330] loop3: detected capacity change from 0 to 128 [ 317.673128][T14318] syz.4.2850: attempt to access beyond end of device [ 317.673128][T14318] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 318.317575][T14333] loop5: detected capacity change from 0 to 128 [ 318.407083][T14326] lo speed is unknown, defaulting to 1000 [ 318.428939][T14331] loop1: detected capacity change from 0 to 2048 [ 318.469750][T14318] buffer_io_error: 27 callbacks suppressed [ 318.469765][T14318] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 318.497298][T14335] loop2: detected capacity change from 0 to 1024 [ 318.516140][T14318] syz.4.2850: attempt to access beyond end of device [ 318.516140][T14318] loop4: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 318.541338][T14318] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 318.550327][T14318] syz.4.2850: attempt to access beyond end of device [ 318.550327][T14318] loop4: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 318.564427][T14318] Buffer I/O error on dev loop4, logical block 78, lost async page write [ 318.573142][T14318] syz.4.2850: attempt to access beyond end of device [ 318.573142][T14318] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 318.587035][T14318] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 318.596212][T14335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.628883][T14331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.629274][T14318] syz.4.2850: attempt to access beyond end of device [ 318.629274][T14318] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 318.670829][T14318] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 318.679843][T14318] syz.4.2850: attempt to access beyond end of device [ 318.679843][T14318] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 318.721675][ T9254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.883261][T14357] loop3: detected capacity change from 0 to 256 [ 318.910549][T14357] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.975532][T14357] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 319.026753][T14366] program syz.4.2865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.066961][T14368] loop3: detected capacity change from 0 to 512 [ 319.189264][T14378] loop4: detected capacity change from 0 to 256 [ 319.235082][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.322716][T14385] loop5: detected capacity change from 0 to 512 [ 319.352314][T14385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 319.370975][T14388] EXT4-fs: Ignoring removed nobh option [ 319.381358][T14388] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 319.402624][T14385] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2873: bg 0: block 393: padding at end of block bitmap is not set [ 319.452183][T14388] EXT4-fs (loop4): 1 truncate cleaned up [ 319.454190][T14385] loop5: lost filesystem error report for type 5 error -117 [ 319.462491][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 319.465045][T14388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.469820][ C0] EXT4-fs (loop5): initial error at time 1772268416: ext4_validate_block_bitmap:441 [ 319.492980][T14385] EXT4-fs (loop5): Remounting filesystem read-only [ 319.497783][ C0] EXT4-fs (loop5): last error at time 1772268416: ext4_validate_block_bitmap:441 [ 319.533494][T14385] EXT4-fs (loop5): 2 truncates cleaned up [ 319.555275][T14385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.654363][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 319.869258][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.000624][T14410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.026613][T14410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.041753][T14406] lo speed is unknown, defaulting to 1000 [ 320.079202][ T28] audit: type=1400 audit(1772268416.654:3408): avc: denied { listen } for pid=14404 comm="syz.5.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 320.124372][ T28] audit: type=1400 audit(1772268416.654:3409): avc: denied { read } for pid=14404 comm="syz.5.2875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 320.254195][T14419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'. [ 320.280016][T12572] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.707925][T14435] netlink: 'syz.5.2884': attribute type 10 has an invalid length. [ 320.766120][T14435] team0: Device vxcan1 is of different type [ 320.897838][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.964837][ T28] audit: type=1326 audit(1772268417.544:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14439 comm="syz.4.2885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d08f9c799 code=0x0 [ 321.002583][ T30] bridge_slave_1: left allmulticast mode [ 321.012845][ T30] bridge_slave_1: left promiscuous mode [ 321.020925][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.029434][ T30] bridge_slave_0: left allmulticast mode [ 321.042347][ T30] bridge_slave_0: left promiscuous mode [ 321.058690][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.077313][T14441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 321.109688][T14441] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2885: bad orphan inode 16 [ 321.124642][T14441] loop4: lost filesystem error report for type 5 error -117 [ 321.124775][T14441] ext4_test_bit(bit=15, block=4) = 0 [ 321.137509][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 321.137524][ C0] EXT4-fs (loop4): initial error at time 1772268417: ext4_orphan_get:1417 [ 321.137543][ C0] EXT4-fs (loop4): last error at time 1772268417: ext4_orphan_get:1417 [ 321.161131][T14441] EXT4-fs (loop4): 1 orphan inode deleted [ 321.172085][T14441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.254491][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.269373][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.278699][ T30] bond0 (unregistering): Released all slaves [ 321.307800][T14477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2889'. [ 321.330257][ T30] hsr_slave_0: left promiscuous mode [ 321.350177][ T30] hsr_slave_1: left promiscuous mode [ 321.371817][T14483] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.374211][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.412817][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.418649][T14485] 9pnet_fd: Insufficient options for proto=fd [ 321.565372][ T30] team0 (unregistering): Port device team_slave_1 removed [ 321.586846][ T30] team0 (unregistering): Port device team_slave_0 removed [ 321.654102][T12572] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 524051: comm syz-executor: invalid block [ 321.687217][T12572] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 524051: comm syz-executor: invalid block [ 321.741003][T14443] lo speed is unknown, defaulting to 1000 [ 321.827462][T14514] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2892'. [ 321.917009][T14443] chnl_net:caif_netlink_parms(): no params data found [ 321.972327][T14467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.974589][ T30] IPVS: stop unused estimator thread 0... [ 322.010402][T14525] team_slave_0: entered promiscuous mode [ 322.016098][T14525] team_slave_1: entered promiscuous mode [ 322.031122][T14525] macvtap1: entered promiscuous mode [ 322.053671][T14525] team0: entered promiscuous mode [ 322.072285][T14485] EXT4-fs: Ignoring removed orlov option [ 322.081882][T14525] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 322.093863][T14525] team0: Device macvtap1 is already an upper device of the team interface [ 322.113787][T14525] team0: left promiscuous mode [ 322.126646][T14525] team_slave_0: left promiscuous mode [ 322.132148][T14525] team_slave_1: left promiscuous mode [ 322.139936][T14485] EXT4-fs (loop1): 1 truncate cleaned up [ 322.195029][T14485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.238222][T14443] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.284981][ T28] audit: type=1400 audit(1772268418.864:3411): avc: denied { link } for pid=14484 comm="syz.1.2891" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 322.285220][T14485] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.2891: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 322.327690][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.339066][T14443] bridge_slave_0: entered allmulticast mode [ 322.345706][T14443] bridge_slave_0: entered promiscuous mode [ 322.352443][T14443] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.360714][T14443] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.368895][T14443] bridge_slave_1: entered allmulticast mode [ 322.375614][T14443] bridge_slave_1: entered promiscuous mode [ 322.414151][T14540] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2898'. [ 322.423303][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2898'. [ 322.449270][T14443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.470327][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.477060][T14443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.549792][T14443] team0: Port device team_slave_0 added [ 322.564848][T14443] team0: Port device team_slave_1 added [ 322.573568][T14531] lo speed is unknown, defaulting to 1000 [ 322.602616][T14443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.609750][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.635758][T14443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.655316][T14563] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2899'. [ 322.662653][T14443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.672020][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.684968][T14563] netlink: 'syz.1.2899': attribute type 21 has an invalid length. [ 322.698638][T14443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.751847][T14563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2899'. [ 322.760991][T14563] netlink: 'syz.1.2899': attribute type 1 has an invalid length. [ 322.769068][T14566] tipc: Started in network mode [ 322.774041][T14566] tipc: Node identity fe800000000000000000000000000018, cluster identity 4711 [ 322.783279][T14566] tipc: Enabled bearer , priority 10 [ 322.817853][T14531] chnl_net:caif_netlink_parms(): no params data found [ 322.844657][T14443] hsr_slave_0: entered promiscuous mode [ 322.856856][T14443] hsr_slave_1: entered promiscuous mode [ 322.867105][T14443] debugfs: 'hsr0' already exists in 'hsr' [ 322.874352][T14443] Cannot create hsr debugfs directory [ 322.954176][T14531] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.961566][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.968981][T14531] bridge_slave_0: entered allmulticast mode [ 322.975612][T14531] bridge_slave_0: entered promiscuous mode [ 322.996814][T14531] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.004276][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.011467][T14531] bridge_slave_1: entered allmulticast mode [ 323.018417][T14531] bridge_slave_1: entered promiscuous mode [ 323.060279][T14531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.071062][T14531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.106104][T14531] team0: Port device team_slave_0 added [ 323.138387][T14531] team0: Port device team_slave_1 added [ 323.167149][T14531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.181846][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.231979][T14531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.256741][ T28] audit: type=1400 audit(1772268419.834:3412): avc: denied { mount } for pid=14587 comm="syz.5.2901" name="/" dev="rpc_pipefs" ino=45817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 323.292019][T14531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.300411][T14531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.326588][T14531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.378879][ T28] audit: type=1400 audit(1772268419.954:3413): avc: denied { bind } for pid=14587 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 323.416443][T14443] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.435467][T14531] hsr_slave_0: entered promiscuous mode [ 323.447393][T14531] hsr_slave_1: entered promiscuous mode [ 323.455221][T14531] debugfs: 'hsr0' already exists in 'hsr' [ 323.460989][T14531] Cannot create hsr debugfs directory [ 323.466971][T14443] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.476345][T14443] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.495143][T14443] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 323.599498][T14443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.648391][T14443] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.677146][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.684359][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.705284][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.712383][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.848910][T14443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.900264][T14531] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 323.914621][T10988] tipc: Node number set to 4269801496 [ 323.921369][T14531] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 323.938992][T14531] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 323.955771][T14531] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.064039][T14531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.096202][T14531] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.130702][T14443] veth0_vlan: entered promiscuous mode [ 324.140886][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.147994][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.162119][T14443] veth1_vlan: entered promiscuous mode [ 324.178482][T14443] veth0_macvtap: entered promiscuous mode [ 324.197214][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.204393][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.227024][T14443] veth1_macvtap: entered promiscuous mode [ 324.241462][T14443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.271355][T14443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.297073][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.338533][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.371955][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.405325][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.483685][T14531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.543598][T14712] set_capacity_and_notify: 7 callbacks suppressed [ 324.543616][T14712] loop7: detected capacity change from 0 to 512 [ 324.588886][T14712] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.610065][T14712] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 324.630377][T14712] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.2905: attempt to clear invalid blocks 2 len 1 [ 324.643634][T14712] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 324.652496][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 324.668085][ C1] EXT4-fs (loop7): initial error at time 1772268421: ext4_clear_blocks:876: inode 13 [ 324.677623][ C1] EXT4-fs (loop7): last error at time 1772268421: ext4_clear_blocks:876: inode 13 [ 324.687388][T14712] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 324.701851][T14712] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2905: invalid indirect mapped block 1819239214 (level 0) [ 324.727122][T14712] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 324.732536][T14712] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2905: invalid indirect mapped block 1819239214 (level 1) [ 324.790492][T14712] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 324.790973][T14712] EXT4-fs (loop7): 1 truncate cleaned up [ 324.835977][T14712] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.869863][T14712] EXT4-fs (loop7): Quota file not on filesystem root. Journaled quota will not work [ 324.900155][ T28] audit: type=1400 audit(1772268421.474:3414): avc: denied { quotaon } for pid=14711 comm="syz.7.2905" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 324.950497][T14443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.958993][T14531] veth0_vlan: entered promiscuous mode [ 324.983576][T14531] veth1_vlan: entered promiscuous mode [ 325.031184][T14531] veth0_macvtap: entered promiscuous mode [ 325.064122][T14531] veth1_macvtap: entered promiscuous mode [ 325.098161][T14531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.115596][T14744] loop7: detected capacity change from 0 to 8192 [ 325.129089][T14531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.307810][T14762] loop5: detected capacity change from 0 to 512 [ 325.456917][T14762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.471247][T14762] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.488010][T14762] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 325.497423][ T30] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.508250][ T30] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.575787][ T30] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.658281][ T30] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.706595][ T28] audit: type=1400 audit(1772268422.274:3415): avc: denied { nlmsg_read } for pid=14775 comm="syz.1.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 326.085139][T14782] loop1: detected capacity change from 0 to 512 [ 326.174172][T14782] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 326.238099][T14782] EXT4-fs (loop1): 1 truncate cleaned up [ 326.262039][T14782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.889958][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.168411][T14873] loop1: detected capacity change from 0 to 128 [ 327.251179][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.380441][T14900] loop7: detected capacity change from 0 to 512 [ 327.399157][T14900] EXT4-fs (loop7): 1 truncate cleaned up [ 327.407371][T14900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.433090][T14900] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.2921: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 327.648094][T14897] tipc: Started in network mode [ 327.657593][T14897] tipc: Node identity de3865a32e2a, cluster identity 4711 [ 327.681092][T14897] tipc: Enabled bearer , priority 0 [ 327.703187][T14913] syzkaller0: entered promiscuous mode [ 327.716906][T14913] syzkaller0: entered allmulticast mode [ 327.932293][T14912] loop5: detected capacity change from 0 to 4096 [ 327.985731][T14912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.113887][T14920] SELinux: policydb magic number 0x297a7973 does not match expected magic number 0xf97cff8c [ 328.305625][T14880] tipc: Resetting bearer [ 328.318065][T14880] tipc: Disabling bearer [ 328.324421][T14920] SELinux: failed to load policy [ 328.463829][T14932] bond1: option min_links: invalid value (18446744073709530014) [ 328.471630][T14932] bond1: option min_links: allowed values 0 - 2147483647 [ 328.481078][T14932] bond1 (unregistering): Released all slaves [ 328.488783][T14443] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.713734][T14956] loop7: detected capacity change from 0 to 256 [ 329.317171][T15002] FAULT_INJECTION: forcing a failure. [ 329.317171][T15002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.357510][T15002] CPU: 1 UID: 0 PID: 15002 Comm: syz.2.2936 Tainted: G W syzkaller #0 PREEMPT(full) [ 329.357546][T15002] Tainted: [W]=WARN [ 329.357552][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 329.357565][T15002] Call Trace: [ 329.357570][T15002] [ 329.357577][T15002] __dump_stack+0x1d/0x30 [ 329.357673][T15002] dump_stack_lvl+0x95/0xd0 [ 329.357698][T15002] dump_stack+0x15/0x1b [ 329.357724][T15002] should_fail_ex+0x263/0x280 [ 329.357753][T15002] should_fail+0xb/0x20 [ 329.357771][T15002] should_fail_usercopy+0x1a/0x20 [ 329.357800][T15002] _copy_to_user+0x20/0xa0 [ 329.357833][T15002] simple_read_from_buffer+0xb5/0x130 [ 329.357857][T15002] proc_fail_nth_read+0x10e/0x150 [ 329.357919][T15002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.357964][T15002] vfs_read+0x1ab/0x7f0 [ 329.357995][T15002] ? __rcu_read_unlock+0x4e/0x70 [ 329.358015][T15002] ? __fget_files+0x184/0x1c0 [ 329.358111][T15002] ? mutex_lock+0x57/0x90 [ 329.358145][T15002] ksys_read+0xdc/0x1a0 [ 329.358186][T15002] __x64_sys_read+0x40/0x50 [ 329.358257][T15002] x64_sys_call+0x2886/0x3020 [ 329.358285][T15002] do_syscall_64+0x12c/0x370 [ 329.358307][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.358411][T15002] RIP: 0033:0x7f5118e8cfce [ 329.358426][T15002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 329.358485][T15002] RSP: 002b:00007f511791efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.358504][T15002] RAX: ffffffffffffffda RBX: 00007f511791f6c0 RCX: 00007f5118e8cfce [ 329.358520][T15002] RDX: 000000000000000f RSI: 00007f511791f0a0 RDI: 0000000000000006 [ 329.358536][T15002] RBP: 00007f511791f090 R08: 0000000000000000 R09: 0000000000000000 [ 329.358549][T15002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.358560][T15002] R13: 00007f5119146038 R14: 00007f5119145fa0 R15: 00007fffdf86ed68 [ 329.358657][T15002] [ 329.637366][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.700069][T15014] loop2: detected capacity change from 0 to 764 [ 329.711129][ T28] audit: type=1400 audit(1772268426.294:3416): avc: denied { bind } for pid=15011 comm="syz.7.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 329.751263][ T28] audit: type=1400 audit(1772268426.314:3417): avc: denied { remount } for pid=15010 comm="syz.2.2939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 329.819016][T15026] loop1: detected capacity change from 0 to 164 [ 329.889318][T15035] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15035 comm=syz.7.2943 [ 329.941336][T15026] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 330.006568][T15020] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2938'. [ 330.084888][T15020] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2938'. [ 330.120368][T15055] loop1: detected capacity change from 0 to 1024 [ 330.150670][T15055] EXT4-fs: Ignoring removed mblk_io_submit option [ 330.180657][T15061] loop2: detected capacity change from 0 to 164 [ 330.186732][T15055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 330.272150][T15055] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 330.324050][T15055] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #11: comm syz.1.2948: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 330.345632][T15055] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 330.345760][T15055] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2948: couldn't read orphan inode 11 (err -117) [ 330.355107][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 330.355121][ C0] EXT4-fs (loop1): initial error at time 1772268426: ext4_ext_check_inode:521: inode 11 [ 330.355143][ C0] EXT4-fs (loop1): last error at time 1772268426: ext4_ext_check_inode:521: inode 11 [ 330.449950][T15074] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 330.475200][T15075] IPVS: length: 101 != 8 [ 330.722217][T15078] netlink: 'syz.8.2951': attribute type 6 has an invalid length. [ 330.794158][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2951'. [ 330.858406][T15055] loop1: lost filesystem error report for type 5 error -117 [ 330.862738][T15055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.894591][T15055] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2948: Invalid block bitmap block 0 in block_group 0 [ 330.908341][T15055] Quota error (device loop1): write_blk: dquota write failed [ 330.915992][T15055] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 330.927297][T15055] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2948: Failed to acquire dquot type 0 [ 330.949888][T15091] loop8: detected capacity change from 0 to 512 [ 330.962682][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.012099][T15098] loop1: detected capacity change from 0 to 512 [ 331.024649][T15098] EXT4-fs: Ignoring removed mblk_io_submit option [ 331.031106][T15098] EXT4-fs: Ignoring removed i_version option [ 331.049106][T15091] EXT4-fs (loop8): too many log groups per flexible block group [ 331.057325][T15091] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 331.064691][T15091] EXT4-fs (loop8): mount failed [ 331.096567][T15098] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.135766][T15098] EXT4-fs (loop1): 1 truncate cleaned up [ 331.189080][T15110] loop5: detected capacity change from 0 to 512 [ 331.210394][T15116] loop8: detected capacity change from 0 to 512 [ 331.218228][T15116] EXT4-fs: Ignoring removed i_version option [ 331.225407][T15116] EXT4-fs: Ignoring removed bh option [ 331.240895][T15098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.253517][T15110] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.276621][T15110] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.324386][T15116] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.339113][T15098] syz.1.2954 (15098): /proc/15097/oom_adj is deprecated, please use /proc/15097/oom_score_adj instead. [ 331.360669][T15116] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.426963][ T28] audit: type=1400 audit(1772268428.004:3418): avc: denied { read } for pid=15115 comm="syz.8.2960" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.455961][ T28] audit: type=1400 audit(1772268428.004:3419): avc: denied { open } for pid=15115 comm="syz.8.2960" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 331.512974][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.536794][T12684] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.546530][T14531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.563057][ T28] audit: type=1400 audit(1772268428.134:3420): avc: denied { mounton } for pid=15125 comm="syz.7.2961" path="/14/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 331.638659][T15146] ip6gre1: entered allmulticast mode [ 331.684959][ T28] audit: type=1400 audit(1772268428.204:3421): avc: denied { accept } for pid=15145 comm="syz.1.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 331.735382][T15155] loop1: detected capacity change from 0 to 1024 [ 331.759255][T15155] EXT4-fs: Ignoring removed orlov option [ 331.795464][T15155] EXT4-fs: Ignoring removed nobh option [ 331.820455][T15162] loop8: detected capacity change from 0 to 1024 [ 331.829742][T15162] EXT4-fs: Ignoring removed orlov option [ 331.836480][T15155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.868743][T15162] EXT4-fs: Ignoring removed nobh option [ 331.895896][T15162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.986811][T15162] FAULT_INJECTION: forcing a failure. [ 331.986811][T15162] name failslab, interval 1, probability 0, space 0, times 0 [ 332.000101][T15162] CPU: 0 UID: 0 PID: 15162 Comm: syz.8.2968 Tainted: G W syzkaller #0 PREEMPT(full) [ 332.000217][T15162] Tainted: [W]=WARN [ 332.000227][T15162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 332.000242][T15162] Call Trace: [ 332.000248][T15162] [ 332.000255][T15162] __dump_stack+0x1d/0x30 [ 332.000355][T15162] dump_stack_lvl+0x95/0xd0 [ 332.000377][T15162] dump_stack+0x15/0x1b [ 332.000404][T15162] should_fail_ex+0x263/0x280 [ 332.000501][T15162] ? __iomap_dio_rw+0x194/0x14c0 [ 332.000553][T15162] should_failslab+0x8c/0xb0 [ 332.000578][T15162] __kmalloc_cache_noprof+0x5f/0x410 [ 332.000715][T15162] __iomap_dio_rw+0x194/0x14c0 [ 332.000746][T15162] ? avc_has_perm_noaudit+0xab/0x130 [ 332.000859][T15162] ? avc_has_perm+0x101/0x190 [ 332.000900][T15162] iomap_dio_rw+0x40/0x90 [ 332.000922][T15162] ext4_file_write_iter+0xcaa/0xfa0 [ 332.000967][T15162] do_iter_readv_writev+0x4fd/0x5a0 [ 332.001070][T15162] vfs_writev+0x2e1/0x900 [ 332.001111][T15162] __se_sys_pwritev2+0xfc/0x1c0 [ 332.001140][T15162] __x64_sys_pwritev2+0x67/0x80 [ 332.001208][T15162] x64_sys_call+0xe07/0x3020 [ 332.001315][T15162] do_syscall_64+0x12c/0x370 [ 332.001338][T15162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.001405][T15162] RIP: 0033:0x7f7e5dedc799 [ 332.001425][T15162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.001444][T15162] RSP: 002b:00007f7e5c937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 332.001536][T15162] RAX: ffffffffffffffda RBX: 00007f7e5e155fa0 RCX: 00007f7e5dedc799 [ 332.001554][T15162] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 332.001570][T15162] RBP: 00007f7e5c937090 R08: 0000000000000000 R09: 0000000000000003 [ 332.001592][T15162] R10: 0000000000001600 R11: 0000000000000246 R12: 0000000000000001 [ 332.001608][T15162] R13: 00007f7e5e156038 R14: 00007f7e5e155fa0 R15: 00007fff3d0b3898 [ 332.001750][T15162] [ 332.297920][T15180] iso9660: Unknown parameter '0x0000000000000000' [ 332.320004][T14531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.370029][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.461803][T15197] netlink: 'syz.8.2973': attribute type 10 has an invalid length. [ 332.478119][T15197] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.485401][T15197] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.510439][T15197] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.517563][T15197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.525018][T15197] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.532111][T15197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.575828][T15197] team0: Port device bridge0 added [ 332.669887][T15211] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 332.808843][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2980'. [ 332.945580][T15222] EXT4-fs: Ignoring removed nobh option [ 332.954049][T15222] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 332.965914][T15222] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2981: iget: bad i_size value: 38620345925642 [ 332.978892][T15222] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 332.979112][T15222] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2981: couldn't read orphan inode 15 (err -117) [ 332.988303][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 332.988320][ C0] EXT4-fs (loop8): initial error at time 1772268429: ext4_orphan_get:1391: inode 15 [ 332.988343][ C0] EXT4-fs (loop8): last error at time 1772268429: ext4_orphan_get:1391: inode 15 [ 333.028480][T15222] loop8: lost filesystem error report for type 5 error -117 [ 333.029008][T15222] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.052759][T15222] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.2981: iget: bad i_size value: 38620345925642 [ 333.075792][T14531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.200333][ T28] audit: type=1400 audit(1772268429.774:3422): avc: denied { mount } for pid=15237 comm="syz.8.2987" name="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 333.236241][ T28] audit: type=1400 audit(1772268429.814:3423): avc: denied { search } for pid=15237 comm="syz.8.2987" name="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.260283][ T28] audit: type=1400 audit(1772268429.814:3424): avc: denied { search } for pid=15237 comm="syz.8.2987" name="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.284153][ T28] audit: type=1400 audit(1772268429.814:3425): avc: denied { read open } for pid=15237 comm="syz.8.2987" path="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 333.357353][T15241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 333.371105][T15241] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.404133][T15244] EXT4-fs: Ignoring removed bh option [ 333.432921][T15244] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.463348][T15244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 333.527214][T15248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.540656][T15244] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 2: comm syz.1.2990: lblock 2 mapped to illegal pblock 2 (length 1) [ 333.554955][T15248] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.565486][T15244] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 333.565653][T15244] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 48: comm syz.1.2990: lblock 0 mapped to illegal pblock 48 (length 1) [ 333.574761][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 333.574783][ C1] EXT4-fs (loop1): initial error at time 1772268430: ext4_map_blocks:776: inode 3: block 2 [ 333.574823][ C1] EXT4-fs (loop1): last error at time 1772268430: ext4_map_blocks:776: inode 3: block 2 [ 333.668822][T15252] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2988: bg 0: block 112: padding at end of block bitmap is not set [ 333.695378][T15252] EXT4-fs (loop8): Remounting filesystem read-only [ 333.702858][T15252] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2988'. [ 333.712087][T15252] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.719224][T15252] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.726414][T15252] bridge0: entered allmulticast mode [ 333.775876][T15244] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 333.790656][T15244] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2990: Failed to acquire dquot type 0 [ 334.025304][T15244] loop1: lost filesystem error report for type 5 error -117 [ 334.046697][T15244] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 334.056249][T15244] loop1: lost filesystem error report for type 5 error -117 [ 334.056375][T15244] EXT4-fs error (device loop1): ext4_evict_inode:255: inode #11: comm syz.1.2990: mark_inode_dirty error [ 334.075166][T15244] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 334.079471][T15244] EXT4-fs warning (device loop1): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 334.115018][T15244] EXT4-fs (loop1): 1 orphan inode deleted [ 334.121552][T15244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.145000][ T12] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 334.204636][T15244] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 16: comm syz.1.2990: lblock 0 mapped to illegal pblock 16 (length 1) [ 334.227049][T15244] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 16: comm syz.1.2990: lblock 0 mapped to illegal pblock 16 (length 1) [ 334.241583][T14531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 334.242310][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 334.438900][ T9254] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.526458][T15263] ext4: Unknown parameter 'measure' [ 334.542722][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2993'. [ 334.551746][T15263] netlink: 'syz.8.2993': attribute type 5 has an invalid length. [ 334.559636][T15263] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2993'. [ 334.574661][T15263] geneve2: entered promiscuous mode [ 334.580021][T15263] geneve2: entered allmulticast mode [ 334.605401][ T12] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 334.637462][ T12] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 334.648947][ T12] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 334.659309][T11030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.702740][T11030] EXT4-fs error (device loop1): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 334.754355][ T12] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 334.781451][T11030] loop1: lost filesystem error report for type 5 error -117 [ 334.781661][T11030] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 334.800325][T11030] loop1: lost filesystem error report for type 5 error -117 [ 334.800465][T11030] EXT4-fs error (device loop1): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 334.820168][T11030] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 335.235363][T15285] set_capacity_and_notify: 7 callbacks suppressed [ 335.235382][T15285] loop8: detected capacity change from 0 to 512 [ 335.282753][T15285] EXT4-fs: Ignoring removed i_version option [ 335.289009][T15285] EXT4-fs: Ignoring removed bh option [ 335.334951][T15285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.357883][T15285] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 335.404529][T14531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.613710][T15300] loop2: detected capacity change from 0 to 256 [ 335.706453][T15305] netlink: 'syz.2.3003': attribute type 29 has an invalid length. [ 335.722318][T15303] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15303 comm=syz.5.3002 [ 335.736131][T15305] netlink: 'syz.2.3003': attribute type 29 has an invalid length. [ 335.746519][T15305] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3003'. [ 335.755995][T15305] unsupported nla_type 58 [ 335.810548][T15306] loop2: detected capacity change from 0 to 512 [ 335.850792][T15306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.874892][T15306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.960255][T15316] loop2: detected capacity change from 0 to 128 [ 336.009373][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 336.009389][ T28] audit: type=1400 audit(1772268432.584:3427): avc: denied { ioctl } for pid=15315 comm="syz.2.3006" path="socket:[48273]" dev="sockfs" ino=48273 ioctlcmd=0x5826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.322123][ T28] audit: type=1400 audit(1772268432.894:3428): avc: denied { watch watch_reads } for pid=15325 comm="syz.2.3009" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 336.574236][T15330] loop8: detected capacity change from 0 to 8192 [ 336.600426][T15338] loop5: detected capacity change from 0 to 512 [ 336.625524][T15338] vfat: Unknown parameter '00000000000000000000' [ 336.703382][T15344] loop8: detected capacity change from 0 to 256 [ 336.995472][ T28] audit: type=1400 audit(1772268433.564:3429): avc: denied { wake_alarm } for pid=15359 comm="syz.5.3017" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 337.046091][T15360] batman_adv: batadv0: Adding interface: dummy0 [ 337.066375][T15360] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.130596][T15360] batman_adv: batadv0: Interface activated: dummy0 [ 337.465015][T15354] loop8: detected capacity change from 0 to 2048 [ 337.542234][T15354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.614232][T14531] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.631099][T15398] loop2: detected capacity change from 0 to 128 [ 337.831967][T15410] loop7: detected capacity change from 0 to 16384 [ 337.848907][T15412] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3025'. [ 337.872242][T15410] ================================================================== [ 337.880418][T15410] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 337.889329][T15410] [ 337.891675][T15410] read-write to 0xffff888100489838 of 8 bytes by task 3304 on cpu 0: [ 337.899764][T15410] __filemap_add_folio+0x671/0x8b0 [ 337.904933][T15410] filemap_add_folio+0x1d3/0x350 [ 337.909954][T15410] page_cache_ra_unbounded+0x20e/0x450 [ 337.915428][T15410] force_page_cache_ra+0x18d/0x1d0 [ 337.920563][T15410] page_cache_sync_ra+0x110/0x560 [ 337.925617][T15410] filemap_get_pages+0x30a/0x1280 [ 337.930663][T15410] filemap_read+0x231/0xa10 [ 337.935191][T15410] blkdev_read_iter+0x22d/0x2e0 [ 337.940065][T15410] vfs_read+0x6c0/0x7f0 [ 337.944248][T15410] ksys_read+0xdc/0x1a0 [ 337.948426][T15410] __x64_sys_read+0x40/0x50 [ 337.952961][T15410] x64_sys_call+0x2886/0x3020 [ 337.957661][T15410] do_syscall_64+0x12c/0x370 [ 337.962327][T15410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.968254][T15410] [ 337.970594][T15410] read to 0xffff888100489838 of 8 bytes by task 15410 on cpu 1: [ 337.978232][T15410] filemap_write_and_wait_range+0x59/0x370 [ 337.984077][T15410] sync_blockdev+0x35/0x50 [ 337.988539][T15410] loop_set_status+0x122/0x6a0 [ 337.993334][T15410] lo_ioctl+0x799/0x13a0 [ 337.997599][T15410] blkdev_ioctl+0x387/0x460 [ 338.002128][T15410] __se_sys_ioctl+0xce/0x140 [ 338.006747][T15410] __x64_sys_ioctl+0x43/0x50 [ 338.011363][T15410] x64_sys_call+0x1563/0x3020 [ 338.016073][T15410] do_syscall_64+0x12c/0x370 [ 338.020703][T15410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.026623][T15410] [ 338.028959][T15410] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 338.036071][T15410] [ 338.038400][T15410] Reported by Kernel Concurrency Sanitizer on: [ 338.044562][T15410] CPU: 1 UID: 0 PID: 15410 Comm: syz.2.3023 Tainted: G W syzkaller #0 PREEMPT(full) [ 338.055516][T15410] Tainted: [W]=WARN [ 338.059325][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.069400][T15410] ================================================================== [ 338.198075][T15413] EXT4-fs (loop5): Invalid log cluster size: 4294934528 [ 338.262911][T15416] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.288298][T15416] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.402837][ T9254] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.